860kB [ 1661.446731] TCPv6 33KB 42KB [ 1661.458699] Node 0 DMA32: 577*4kB (UME) 454*8kB (ME) 233*16kB (UME) 96*32kB (UME) 19*64kB (UM) 6*128kB (M) 5*256kB (M) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1661.458768] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1661.458822] Node 1 Normal: 409*4kB (ME) 331*8kB (UME) 239*16kB (ME) 94*32kB (UME) 31*64kB (ME) 12*128kB (UME) 4*256kB (UME) 2*512kB (M) 0*1024kB 1*2048kB (M) 2*4096kB (U) = 26924kB [ 1661.478639] nf_conntrack 10KB 15KB [ 1661.486099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.505665] t10_alua_lu_gp_cache 0KB 3KB [ 1661.515169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.537909] sd_ext_cdb 0KB 7KB [ 1661.548624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.550442] scsi_sense_cache 1056KB 1060KB [ 1661.557556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.557563] 74842 total pagecache pages [ 1661.557574] 0 pages in swap cache [ 1661.557581] Swap cache stats: add 0, delete 0, find 0/0 [ 1661.557585] Free swap = 0kB [ 1661.557589] Total swap = 0kB [ 1661.557598] 2097051 pages RAM [ 1661.557603] 0 pages HighMem/MovableOnly [ 1661.557607] 369649 pages reserved [ 1661.557612] 0 pages cma reserved [ 1661.615358] virtio_scsi_cmd 16KB 16KB [ 1661.620751] sgpool-128 8KB 8KB [ 1661.646367] sgpool-64 4KB 12KB [ 1661.659257] sgpool-32 2KB 15KB [ 1661.680565] sgpool-16 1KB 7KB [ 1661.690666] sgpool-8 0KB 7KB [ 1661.707357] mqueue_inode_cache 13KB 22KB [ 1661.713014] bio_post_read_ctx 14KB 15KB [ 1661.718444] bio-2 14KB 15KB [ 1661.734320] jfs_mp 7KB 7KB [ 1661.739740] cifs_small_rq 15KB 16KB [ 1661.748682] cifs_request 67KB 67KB [ 1661.761142] cifs_mpx_ids 0KB 7KB [ 1661.769992] nfs_commit_data 3KB 14KB [ 1661.786167] nfs_write_data 34KB 44KB [ 1661.791627] ext4_system_zone 1KB 7KB [ 1661.797007] bio-1 1KB 7KB [ 1661.812964] pid_namespace 3KB 7KB [ 1661.818357] rpc_buffers 17KB 25KB [ 1661.827395] rpc_tasks 2KB 7KB [ 1661.840066] UNIX 1203KB 1245KB [ 1661.848902] tcp_bind_bucket 2KB 4KB [ 1661.861269] ip_fib_trie 31KB 47KB [ 1661.870080] ip_fib_alias 150KB 205KB [ 1661.886037] ip_dst_cache 10KB 24KB [ 1661.891459] RAW 55KB 67KB [ 1661.896818] UDP 65KB 67KB [ 1661.912835] TCP 30KB 33KB [ 1661.918224] hugetlbfs_inode_cache 3KB 15KB [ 1661.927581] fscache_cookie_jar 1KB 7KB [ 1661.940463] eventpoll_pwq 32KB 55KB [ 1661.949325] eventpoll_epi 59KB 66KB [ 1661.965389] inotify_inode_mark 15KB 27KB [ 1661.970902] request_queue 199KB 199KB [ 1661.979932] blkdev_requests 1KB 3KB [ 1661.995888] blkdev_ioc 33KB 38KB [ 1662.001275] bio-0 1167KB 1237KB [ 1662.010142] biovec-max 1617KB 1658KB [ 1662.026285] biovec-64 1192KB 1338KB [ 1662.031802] biovec-16 143KB 161KB [ 1662.037173] bio_integrity_payload 1KB 8KB [ 1662.053553] khugepaged_mm_slot 7KB 23KB [ 1662.059024] uid_cache 0KB 4KB [ 1662.067973] dmaengine-unmap-2 0KB 3KB [ 1662.080503] skbuff_fclone_cache 73KB 90KB [ 1662.089487] skbuff_head_cache 8740KB 9000KB [ 1662.105953] configfs_dir_cache 3KB 7KB [ 1662.111520] file_lock_cache 47KB 63KB [ 1662.116884] file_lock_ctx 9KB 15KB [ 1662.140958] fsnotify_mark_connector 7KB 15KB [ 1662.166410] net_namespace 70KB 70KB [ 1662.171855] shmem_inode_cache 8130KB 8146KB [ 1662.177215] task_delay_info 209KB 359KB [ 1662.198052] taskstats 58KB 65KB [ 1662.208168] proc_dir_entry 822KB 911KB [ 1662.224413] pde_opener 15KB 46KB [ 1662.229799] seq_file 291KB 413KB [ 1662.238914] sigqueue 60KB 70KB [ 1662.251071] kernfs_node_cache 18239KB 18246KB [ 1662.260024] mnt_cache 205KB 212KB [ 1662.276219] filp 7227KB 8970KB [ 1662.281653] names_cache 126624KB 126684KB [ 1662.287015] iint_cache 36KB 51KB [ 1662.303651] key_jar 4KB 11KB [ 1662.309037] uts_namespace 5KB 7KB [ 1662.314577] nsproxy 2KB 11KB [ 1662.319944] vm_area_struct 3245KB 3437KB [ 1662.340477] mm_struct 477KB 565KB [ 1662.350665] fs_cache 191KB 340KB [ 1662.371319] files_cache 710KB 716KB [ 1662.376804] signal_cache 1378KB 1753KB [ 1662.397232] sighand_cache 605KB 624KB [ 1662.407583] task_struct 6009KB 6066KB [ 1662.428594] cred_jar 2098KB 2820KB [ 1662.437530] anon_vma_chain 1036KB 1590KB [ 1662.459913] anon_vma 151KB 292KB [ 1662.468914] pid 115KB 240KB [ 1662.489814] Acpi-Operand 156KB 198KB [ 1662.495248] Acpi-ParseExt 8KB 11KB [ 1662.500751] Acpi-Parse 41KB 47KB [ 1662.520712] Acpi-State 52KB 63KB [ 1662.526193] Acpi-Namespace 20KB 27KB [ 1662.532366] numa_policy 0KB 3KB [ 1662.539715] debug_objects_cache 1659KB 1883KB [ 1662.548478] trace_event_file 297KB 298KB [ 1662.554416] ftrace_event_field 398KB 401KB [ 1662.559870] pool_workqueue 143KB 152KB [ 1662.565282] page->ptl 505KB 972KB [ 1662.571265] kmalloc-2097152 2050KB 2050KB [ 1662.577609] kmalloc-524288 2056KB 2056KB [ 1662.585921] kmalloc-262144 1290KB 1290KB [ 1662.593005] kmalloc-131072 650KB 650KB [ 1662.599697] kmalloc-65536 2376KB 2442KB [ 1662.606041] kmalloc-32768 1980KB 1980KB [ 1662.613163] kmalloc-16384 1270KB 1303KB [ 1662.620265] kmalloc-8192 4958KB 5032KB [ 1662.626403] kmalloc-4096 22894KB 22933KB [ 1662.632287] kmalloc-2048 14297KB 14343KB [ 1662.638399] kmalloc-1024 11691KB 14159KB [ 1662.645801] kmalloc-512 17202KB 17516KB [ 1662.651570] kmalloc-256 5006KB 6273KB [ 1662.657817] kmalloc-128 1118KB 1602KB [ 1662.666745] kmalloc-96 3735KB 4368KB [ 1662.676907] kmalloc-64 2629KB 3828KB [ 1662.683575] kmalloc-32 1963KB 2512KB [ 1662.689010] kmalloc-192 1963KB 2928KB [ 1662.698532] kmem_cache 177KB 183KB [ 1662.705105] Out of memory (oom_kill_allocating_task): Kill process 8117 (syz-fuzzer) score 0 or sacrifice child [ 1662.722296] Killed process 21332 (syz-executor.3) total-vm:48512kB, anon-rss:2472kB, file-rss:0kB, shmem-rss:0kB [ 1666.575582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.594249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.612571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.619303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.634534] device bridge_slave_1 left promiscuous mode [ 1666.640075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.654462] device bridge_slave_0 left promiscuous mode [ 1666.659991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.677462] device veth1_macvtap left promiscuous mode [ 1666.685382] device veth0_macvtap left promiscuous mode [ 1666.690730] device veth1_vlan left promiscuous mode [ 1666.700317] device veth0_vlan left promiscuous mode 14:51:52 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000540)="6d418d2a26f47700ecf3c15dfbfd9f8af4e5baa5702a29979d92f00f1344a833f28eb24559033e35fb9fc1bdb4ef202217c9ebd1785a7f5958034fc04d3b862b", 0x40}) 14:51:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, 0x0, 0x0) 14:51:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}]}}, 0x3}) 14:51:52 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x2}}, 0x18) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x2}}, 0x18) (async) 14:51:52 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x100000000, 0x50801) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1e, 0x6, 0xffff0001, 0x5, 0x2, r0, 0x8001, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) (async) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x1, 0x8042) r5 = syz_open_dev$audion(&(0x7f0000000380), 0x2, 0x80) r6 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) (async) r7 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) (async) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f00000004c0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x1, 0x3, 0x2, 0x4, 0xcd2, 0x3, {0x6, 0x2, 0x7e5, 0x8, 0x10001, 0xfffffffffffffff8, 0x3, 0x3, 0x8, 0x2000, 0x1, 0x0, 0xffffffffffffffff, 0x8, 0x100}}}}, 0xa0) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @generic={0x0, 0x6, 0x5, 0x8, 0x20200}, @jmp={0x5, 0x0, 0xc, 0xe, 0x5, 0xc, 0x1}, @generic={0x1f, 0x1, 0x5, 0x3, 0x8}, @ldst={0x3, 0x0, 0x1, 0x7, 0x8, 0xfffffffffffffffe, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x33, &(0x7f00000001c0)=""/51, 0x41000, 0xc, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0xb7e, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, r4, r5, r6, r7, r0, r8, r10]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r11 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, 0x0, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000000)={0x10}, 0x10) 14:51:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, 0x0, 0x0) 14:51:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, 0x0, 0x0) 14:51:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:51:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) [ 1670.063627] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.069244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.570988] Bluetooth: hci3: command 0x0409 tx timeout [ 1673.650879] Bluetooth: hci3: command 0x041b tx timeout [ 1674.803201] device hsr_slave_1 left promiscuous mode [ 1674.813319] device hsr_slave_0 left promiscuous mode [ 1674.832769] team0 (unregistering): Port device team_slave_1 removed [ 1674.846948] team0 (unregistering): Port device team_slave_0 removed [ 1674.857467] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1674.872568] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1674.912159] bond0 (unregistering): Released all slaves [ 1674.932672] IPVS: ftp: loaded support on port[0] = 21 [ 1675.227517] chnl_net:caif_netlink_parms(): no params data found [ 1675.395415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.410965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.419961] device bridge_slave_0 entered promiscuous mode [ 1675.442601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.449050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.470963] device bridge_slave_1 entered promiscuous mode [ 1675.532916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1675.567916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1675.597871] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1675.612125] team0: Port device team_slave_0 added [ 1675.617957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1675.632798] team0: Port device team_slave_1 added [ 1675.670623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.677395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.708549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.726834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.731074] Bluetooth: hci3: command 0x040f tx timeout [ 1675.750930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.782050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.803024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1675.822643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1675.878576] device hsr_slave_0 entered promiscuous mode [ 1675.892310] device hsr_slave_1 entered promiscuous mode [ 1675.911919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1675.919168] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1676.709111] syz-executor.3 invoked oom-killer: gfp_mask=0x6142c0(GFP_KERNEL|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 1676.751169] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1676.756797] CPU: 1 PID: 21656 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 1676.764676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1676.774024] Call Trace: [ 1676.776615] dump_stack+0x1fc/0x2ef [ 1676.780330] dump_header+0x15d/0xc3f [ 1676.784045] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1676.789142] ? ___ratelimit+0x319/0x590 [ 1676.793206] oom_kill_process.cold+0x10/0x692 [ 1676.797737] ? check_preemption_disabled+0x41/0x280 [ 1676.802768] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1676.808044] out_of_memory+0x1072/0x1390 [ 1676.812110] ? oom_killer_disable+0x270/0x270 [ 1676.816602] ? mutex_trylock+0x15f/0x1a0 [ 1676.820684] __alloc_pages_nodemask+0x23a2/0x2890 [ 1676.825541] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.830378] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.835217] ? __netdev_upper_dev_link+0x2fb/0x770 [ 1676.840143] ? register_vlan_dev+0x31b/0x7d0 [ 1676.844546] ? vlan_newlink+0x477/0x6d0 [ 1676.848534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1676.853907] ? mark_held_locks+0xa6/0xf0 [ 1676.857964] ? ____cache_alloc_node+0x156/0x1d0 [ 1676.862643] ? cache_grow_begin+0x64/0x8a0 [ 1676.867014] cache_grow_begin+0xa4/0x8a0 [ 1676.871083] fallback_alloc+0x213/0x2e0 [ 1676.875067] kmem_cache_alloc_node_trace+0xec/0x3b0 [ 1676.880117] __kmalloc_node_track_caller+0x38/0x70 [ 1676.885059] __alloc_skb+0xae/0x560 [ 1676.888690] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 1676.893290] rtnetlink_event+0x123/0x1d0 [ 1676.897355] notifier_call_chain+0xc0/0x230 [ 1676.901685] __netdev_upper_dev_link+0x2fb/0x770 [ 1676.906444] ? __netdev_adjacent_dev_remove+0x670/0x670 [ 1676.911810] ? rtnl_is_locked+0x2c/0x40 [ 1676.915786] register_vlan_dev+0x31b/0x7d0 [ 1676.920047] vlan_newlink+0x477/0x6d0 [ 1676.923855] ? vlan_changelink+0x4b0/0x4b0 [ 1676.928103] rtnl_newlink+0x1030/0x15c0 [ 1676.932091] ? rtnl_getlink+0x620/0x620 [ 1676.936080] ? __lock_acquire+0x6de/0x3ff0 [ 1676.940318] ? get_reg+0x1f0/0x1f0 [ 1676.943858] ? unwind_next_frame+0xeee/0x1400 [ 1676.948357] ? mark_held_locks+0xf0/0xf0 [ 1676.952422] ? unwind_next_frame+0xeee/0x1400 [ 1676.956921] ? __save_stack_trace+0x72/0x190 [ 1676.961339] ? deref_stack_reg+0x134/0x1d0 [ 1676.965571] ? get_reg+0x176/0x1f0 [ 1676.969110] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1676.974992] ? deref_stack_reg+0x1d0/0x1d0 [ 1676.979220] ? is_bpf_text_address+0xd5/0x1b0 [ 1676.983719] ? __lock_acquire+0x6de/0x3ff0 [ 1676.987966] ? __lock_acquire+0x6de/0x3ff0 [ 1676.992205] ? __lock_acquire+0x6de/0x3ff0 [ 1676.996438] ? mark_held_locks+0xf0/0xf0 [ 1677.000581] ? get_reg+0x1f0/0x1f0 [ 1677.004120] ? unwind_next_frame+0xeee/0x1400 [ 1677.008647] ? mutex_trylock+0x1a0/0x1a0 [ 1677.012745] ? rtnl_getlink+0x620/0x620 [ 1677.016728] rtnetlink_rcv_msg+0x453/0xb80 [ 1677.020961] ? rtnl_calcit.isra.0+0x430/0x430 [ 1677.025453] ? __netlink_lookup+0x3fc/0x730 [ 1677.029776] ? lock_downgrade+0x720/0x720 [ 1677.033920] ? check_preemption_disabled+0x41/0x280 [ 1677.039027] netlink_rcv_skb+0x160/0x440 [ 1677.043102] ? rtnl_calcit.isra.0+0x430/0x430 [ 1677.047592] ? netlink_ack+0xae0/0xae0 [ 1677.051488] netlink_unicast+0x4d5/0x690 [ 1677.055635] ? netlink_sendskb+0x110/0x110 [ 1677.059879] ? _copy_from_iter_full+0x229/0x7c0 [ 1677.064556] ? __phys_addr_symbol+0x2c/0x70 [ 1677.068884] ? __check_object_size+0x17b/0x3e0 [ 1677.073478] netlink_sendmsg+0x6c3/0xc50 [ 1677.077556] ? aa_af_perm+0x230/0x230 [ 1677.081361] ? nlmsg_notify+0x1f0/0x1f0 [ 1677.085345] ? nlmsg_notify+0x1f0/0x1f0 [ 1677.089320] sock_sendmsg+0xc3/0x120 [ 1677.093039] __sys_sendto+0x21a/0x320 [ 1677.096844] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1677.101529] ? debug_object_active_state+0x254/0x330 [ 1677.106740] ? lock_acquire+0x170/0x3c0 [ 1677.110711] ? task_work_run+0x64/0x1c0 [ 1677.114689] ? blkcg_schedule_throttle+0x1f0/0x1f0 [ 1677.119617] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1677.124200] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1677.128692] ? task_work_run+0x126/0x1c0 [ 1677.132759] __x64_sys_sendto+0xdd/0x1b0 [ 1677.136821] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1677.141398] do_syscall_64+0xf9/0x620 [ 1677.145199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1677.150383] RIP: 0033:0x7f1b9eeba0dc [ 1677.154106] Code: Bad RIP value. [ 1677.157465] RSP: 002b:00007ffc21e14640 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1677.165171] RAX: ffffffffffffffda RBX: 00007f1b9fb50620 RCX: 00007f1b9eeba0dc [ 1677.172441] RDX: 0000000000000054 RSI: 00007f1b9fb50670 RDI: 0000000000000003 [ 1677.179705] RBP: 0000000000000000 R08: 00007ffc21e14694 R09: 000000000000000c [ 1677.186972] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1677.194234] R13: 00007f1b9fb50670 R14: 0000000000000003 R15: 0000000000000000 [ 1677.338838] Mem-Info: [ 1677.341384] active_anon:15424 inactive_anon:73845 isolated_anon:0 [ 1677.341384] active_file:15 inactive_file:14 isolated_file:0 [ 1677.341384] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1677.341384] slab_reclaimable:13658 slab_unreclaimable:118359 [ 1677.341384] mapped:22211 shmem:74802 pagetables:556 bounce:0 [ 1677.341384] free:25108 free_pcp:62 free_cma:0 [ 1677.406323] Node 0 active_anon:57176kB inactive_anon:26344kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72424kB dirty:0kB writeback:0kB shmem:28160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1677.488757] Node 1 active_anon:4520kB inactive_anon:269036kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16420kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1677.616690] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.654625] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1677.659676] Node 0 DMA32 free:35804kB min:35996kB low:44992kB high:53988kB active_anon:57176kB inactive_anon:26344kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.810681] Bluetooth: hci3: command 0x0419 tx timeout [ 1677.837302] lowmem_reserve[]: 0 0 1 1 1 [ 1677.845556] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1677.891076] lowmem_reserve[]: 0 0 0 0 0 [ 1677.895095] Node 1 Normal free:53648kB min:53876kB low:67344kB high:80812kB active_anon:4520kB inactive_anon:269036kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:284kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1677.989192] lowmem_reserve[]: 0 0 0 0 0 [ 1677.993250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1678.046060] Node 0 DMA32: 650*4kB (UME) 457*8kB (ME) 244*16kB (UME) 101*32kB (ME) 24*64kB (M) 15*128kB (UM) 10*256kB (UM) 1*512kB (U) 14*1024kB (U) 1*2048kB (M) 0*4096kB = 36304kB [ 1678.090143] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1678.131279] Node 1 Normal: 458*4kB (ME) 359*8kB (UME) 262*16kB (UME) 98*32kB (ME) 25*64kB (UM) 11*128kB (UME) 7*256kB (UME) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 8*4096kB (U) = 53696kB [ 1678.148060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1678.156910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1678.165495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1678.174367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1678.182976] 74831 total pagecache pages [ 1678.186933] 0 pages in swap cache [ 1678.190386] Swap cache stats: add 0, delete 0, find 0/0 [ 1678.195758] Free swap = 0kB [ 1678.198756] Total swap = 0kB [ 1678.201980] 2097051 pages RAM [ 1678.205074] 0 pages HighMem/MovableOnly [ 1678.209029] 369649 pages reserved [ 1678.212529] 0 pages cma reserved [ 1678.216012] Unreclaimable slab info: [ 1678.220064] Name Used Total [ 1678.225716] pid_2 24KB 48KB [ 1678.231170] batadv_tt_change_cache 2KB 3KB [ 1678.237093] batadv_tl_cache 8KB 16KB [ 1678.242480] TIPC 16KB 30KB [ 1678.247833] SCTPv6 20KB 30KB [ 1678.257431] DCCPv6 20KB 30KB [ 1678.263202] DCCP 19KB 28KB [ 1678.277783] RXRPC 17KB 26KB [ 1678.287593] rxrpc_call_jar 102KB 110KB [ 1678.333405] bridge_fdb_cache 15KB 23KB [ 1678.338807] fib6_nodes 184KB 288KB [ 1678.415632] ip6_dst_cache 336KB 678KB [ 1678.438944] RAWv6 91KB 94KB [ 1678.447218] UDPv6 35KB 41KB [ 1678.452635] TCPv6 33KB 42KB [ 1678.458002] nf_conntrack 8KB 15KB [ 1678.476155] t10_alua_lu_gp_cache 0KB 3KB [ 1678.498573] sd_ext_cdb 0KB 7KB [ 1678.526615] scsi_sense_cache 1056KB 1060KB [ 1678.547719] virtio_scsi_cmd 16KB 16KB [ 1678.569057] sgpool-128 8KB 8KB [ 1678.596095] sgpool-64 4KB 12KB [ 1678.614654] sgpool-32 2KB 15KB [ 1678.620048] sgpool-16 1KB 7KB [ 1678.658059] sgpool-8 0KB 7KB [ 1678.679508] mqueue_inode_cache 13KB 22KB [ 1678.695599] bio_post_read_ctx 14KB 15KB [ 1678.705830] bio-2 14KB 15KB [ 1678.711238] jfs_mp 7KB 7KB [ 1678.716605] cifs_small_rq 15KB 16KB [ 1678.724515] cifs_request 67KB 67KB [ 1678.730127] cifs_mpx_ids 0KB 7KB [ 1678.735542] nfs_commit_data 3KB 14KB [ 1678.743540] nfs_write_data 34KB 44KB [ 1678.748916] ext4_system_zone 1KB 7KB [ 1678.754376] bio-1 1KB 7KB [ 1678.759739] pid_namespace 2KB 7KB [ 1678.767729] rpc_buffers 17KB 25KB [ 1678.773364] rpc_tasks 2KB 7KB [ 1678.778718] UNIX 918KB 1027KB [ 1678.784178] tcp_bind_bucket 2KB 4KB [ 1678.789537] ip_fib_trie 27KB 47KB [ 1678.794996] ip_fib_alias 130KB 205KB [ 1678.802681] ip_dst_cache 6KB 24KB [ 1678.808047] RAW 55KB 67KB [ 1678.825703] UDP 57KB 67KB [ 1678.831234] TCP 25KB 28KB [ 1678.836594] hugetlbfs_inode_cache 3KB 15KB [ 1678.844911] fscache_cookie_jar 1KB 7KB [ 1678.850359] eventpoll_pwq 25KB 55KB [ 1678.856314] eventpoll_epi 46KB 66KB [ 1678.861781] inotify_inode_mark 14KB 27KB [ 1678.867577] request_queue 199KB 199KB [ 1678.872969] blkdev_requests 1KB 3KB [ 1678.878311] blkdev_ioc 27KB 38KB [ 1678.883693] bio-0 1256KB 1327KB [ 1678.889036] biovec-max 1658KB 1658KB [ 1678.894437] biovec-64 1257KB 1346KB [ 1678.899791] biovec-16 143KB 161KB [ 1678.905182] bio_integrity_payload 1KB 8KB [ 1678.910932] khugepaged_mm_slot 6KB 23KB [ 1678.916382] uid_cache 0KB 4KB [ 1678.921763] dmaengine-unmap-2 0KB 3KB [ 1678.927106] skbuff_fclone_cache 67KB 90KB [ 1678.933973] skbuff_head_cache 8340KB 8790KB [ 1678.939343] configfs_dir_cache 3KB 7KB [ 1678.944958] file_lock_cache 45KB 63KB [ 1678.950317] file_lock_ctx 9KB 15KB [ 1678.955727] fsnotify_mark_connector 7KB 15KB [ 1678.961660] net_namespace 70KB 70KB [ 1678.967022] shmem_inode_cache 8105KB 8143KB [ 1678.972413] task_delay_info 192KB 359KB [ 1678.977758] taskstats 40KB 65KB [ 1678.983133] proc_dir_entry 822KB 896KB [ 1678.988473] pde_opener 9KB 46KB [ 1678.993874] seq_file 274KB 413KB [ 1678.999222] sigqueue 43KB 70KB [ 1679.005641] kernfs_node_cache 17949KB 17955KB [ 1679.011608] mnt_cache 207KB 216KB [ 1679.016956] filp 7129KB 8936KB [ 1679.022375] names_cache 127844KB 127865KB [ 1679.027724] iint_cache 42KB 51KB [ 1679.033102] key_jar 4KB 11KB [ 1679.038441] uts_namespace 4KB 7KB [ 1679.043886] nsproxy 2KB 11KB [ 1679.049249] vm_area_struct 2962KB 3437KB [ 1679.055496] mm_struct 425KB 552KB [ 1679.061058] fs_cache 187KB 332KB [ 1679.066419] files_cache 634KB 697KB [ 1679.071852] signal_cache 1283KB 1703KB [ 1679.077212] sighand_cache 603KB 631KB [ 1679.082869] task_struct 6211KB 6236KB [ 1679.088234] cred_jar 2152KB 2820KB [ 1679.093727] anon_vma_chain 989KB 1582KB [ 1679.099073] anon_vma 130KB 292KB [ 1679.106238] pid 101KB 240KB [ 1679.111635] Acpi-Operand 156KB 198KB [ 1679.116979] Acpi-ParseExt 8KB 11KB [ 1679.122453] Acpi-Parse 41KB 47KB [ 1679.127817] Acpi-State 52KB 63KB [ 1679.133200] Acpi-Namespace 20KB 27KB [ 1679.138552] numa_policy 0KB 3KB [ 1679.143953] debug_objects_cache 1642KB 1883KB [ 1679.149477] trace_event_file 297KB 298KB [ 1679.154862] ftrace_event_field 398KB 401KB [ 1679.160305] pool_workqueue 135KB 152KB [ 1679.165682] page->ptl 470KB 972KB [ 1679.173587] kmalloc-2097152 2050KB 2050KB [ 1679.182768] kmalloc-524288 2056KB 2056KB [ 1679.200218] kmalloc-262144 1290KB 1290KB [ 1679.238053] kmalloc-131072 650KB 650KB [ 1679.280590] kmalloc-65536 2376KB 2442KB [ 1679.286008] kmalloc-32768 1980KB 1980KB [ 1679.306365] kmalloc-16384 1204KB 1270KB [ 1679.324846] kmalloc-8192 4917KB 4925KB [ 1679.330232] kmalloc-4096 23060KB 23060KB [ 1679.378547] kmalloc-2048 13417KB 14069KB [ 1679.400469] kmalloc-1024 11340KB 14088KB [ 1679.423341] kmalloc-512 16614KB 17081KB [ 1679.428738] kmalloc-256 4888KB 6255KB [ 1679.467530] kmalloc-128 1039KB 1602KB [ 1679.487838] kmalloc-96 3690KB 4368KB [ 1679.499603] kmalloc-64 2532KB 3828KB [ 1679.535129] kmalloc-32 1910KB 2512KB [ 1679.549586] kmalloc-192 1895KB 2928KB [ 1679.572262] kmem_cache 177KB 183KB [ 1679.579290] Out of memory (oom_kill_allocating_task): Kill process 21656 (syz-executor.3) score 0 or sacrifice child [ 1679.612713] Killed process 21656 (syz-executor.3) total-vm:56708kB, anon-rss:444kB, file-rss:13744kB, shmem-rss:0kB [ 1679.655661] oom_reaper: reaped process 21656 (syz-executor.3), now anon-rss:0kB, file-rss:13744kB, shmem-rss:0kB [ 1679.911244] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1680.030568] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1680.035375] CPU: 1 PID: 8088 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1680.042814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1680.052159] Call Trace: [ 1680.054750] dump_stack+0x1fc/0x2ef [ 1680.058378] dump_header+0x15d/0xc3f [ 1680.062095] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1680.067195] ? ___ratelimit+0x319/0x590 [ 1680.071169] oom_kill_process.cold+0x10/0x692 [ 1680.075664] ? check_preemption_disabled+0x41/0x280 [ 1680.080686] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1680.085973] out_of_memory+0x1072/0x1390 [ 1680.090059] ? oom_killer_disable+0x270/0x270 [ 1680.094560] ? mutex_trylock+0x15f/0x1a0 [ 1680.098629] __alloc_pages_nodemask+0x23a2/0x2890 [ 1680.103483] ? find_get_entry+0x4cd/0x8a0 [ 1680.107657] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1680.112528] alloc_pages_current+0x193/0x2a0 [ 1680.116940] filemap_fault+0x146e/0x2180 [ 1680.121015] ext4_filemap_fault+0x84/0xb0 [ 1680.125165] __do_fault+0x10b/0x4b0 [ 1680.128793] __handle_mm_fault+0x273b/0x41c0 [ 1680.133210] ? vm_insert_page+0x9c0/0x9c0 [ 1680.137358] ? __fget+0x356/0x510 [ 1680.140855] ? check_preemption_disabled+0x41/0x280 [ 1680.145870] handle_mm_fault+0x436/0xb10 [ 1680.149917] __do_page_fault+0x68e/0xd60 [ 1680.153972] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1680.158977] ? spurious_fault+0x840/0x840 [ 1680.163103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1680.167927] ? page_fault+0x8/0x30 [ 1680.171544] page_fault+0x1e/0x30 [ 1680.174993] RIP: 0033:0x467ee0 [ 1680.178169] Code: Bad RIP value. [ 1680.181511] RSP: 002b:000000c00005dd28 EFLAGS: 00010206 [ 1680.186850] RAX: 0000000000977000 RBX: 000000c00010b500 RCX: 0000000000000000 [ 1680.194102] RDX: 0000000000977000 RSI: 00000000004b6e80 RDI: 000000c0003e4080 [ 1680.201358] RBP: 000000c00005dd30 R08: 0000000000000000 R09: 0000000000000001 [ 1680.208616] R10: 00000192ad33204a R11: 0000000000000001 R12: 00000192ad33204a [ 1680.215950] R13: 0000000000000000 R14: 000000c000496680 R15: 0000000000000000 [ 1680.225189] Mem-Info: [ 1680.227642] active_anon:15410 inactive_anon:73845 isolated_anon:0 [ 1680.227642] active_file:15 inactive_file:13 isolated_file:1 [ 1680.227642] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1680.227642] slab_reclaimable:13633 slab_unreclaimable:118370 [ 1680.227642] mapped:22211 shmem:74802 pagetables:543 bounce:0 [ 1680.227642] free:25297 free_pcp:50 free_cma:0 [ 1680.262179] Node 0 active_anon:57124kB inactive_anon:26344kB active_file:20kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72424kB dirty:0kB writeback:0kB shmem:28160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1680.290320] Node 1 active_anon:4516kB inactive_anon:269036kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:16420kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1680.331489] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.549531] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1680.572005] Node 0 DMA32 free:35772kB min:35996kB low:44992kB high:53988kB active_anon:57124kB inactive_anon:26344kB active_file:20kB inactive_file:100kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1888kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1680.680150] lowmem_reserve[]: 0 0 1 1 1 [ 1680.689335] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.720412] lowmem_reserve[]: 0 0 0 0 0 [ 1680.724566] Node 1 Normal free:53680kB min:53876kB low:67344kB high:80812kB active_anon:4516kB inactive_anon:269036kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:284kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.755154] lowmem_reserve[]: 0 0 0 0 0 [ 1680.759146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1680.772164] Node 0 DMA32: 682*4kB (UME) 462*8kB (UME) 247*16kB (UME) 101*32kB (UME) 28*64kB (UM) 15*128kB (UM) 9*256kB (M) 1*512kB (U) 14*1024kB (U) 1*2048kB (M) 0*4096kB = 36520kB [ 1680.788532] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1680.806206] Node 1 Normal: 458*4kB (UME) 358*8kB (UME) 261*16kB (UME) 98*32kB (UME) 25*64kB (M) 11*128kB (UME) 6*256kB (ME) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 8*4096kB (U) = 53928kB [ 1680.823171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.832095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.840748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.853711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.862371] 74843 total pagecache pages [ 1680.866335] 0 pages in swap cache [ 1680.869766] Swap cache stats: add 0, delete 0, find 0/0 [ 1680.877810] Free swap = 0kB [ 1680.880917] Total swap = 0kB [ 1680.883928] 2097051 pages RAM [ 1680.887024] 0 pages HighMem/MovableOnly [ 1680.891174] 369649 pages reserved [ 1680.894630] 0 pages cma reserved [ 1680.898127] Unreclaimable slab info: [ 1680.901951] Name Used Total [ 1680.907605] pid_2 24KB 48KB [ 1680.913146] batadv_tt_change_cache 2KB 3KB [ 1680.918951] batadv_tl_cache 7KB 16KB [ 1680.930345] TIPC 16KB 30KB [ 1680.938640] SCTPv6 20KB 30KB [ 1680.946877] DCCPv6 20KB 30KB [ 1680.952310] DCCP 19KB 28KB [ 1680.957683] RXRPC 17KB 26KB [ 1680.963283] rxrpc_call_jar 102KB 110KB [ 1680.968669] bridge_fdb_cache 14KB 23KB [ 1680.974116] fib6_nodes 183KB 288KB [ 1680.979473] ip6_dst_cache 323KB 667KB [ 1680.984896] RAWv6 91KB 94KB [ 1680.990242] UDPv6 35KB 41KB [ 1680.995657] TCPv6 33KB 42KB [ 1681.001126] nf_conntrack 8KB 15KB [ 1681.006559] t10_alua_lu_gp_cache 0KB 3KB [ 1681.012262] sd_ext_cdb 0KB 7KB [ 1681.017622] scsi_sense_cache 1056KB 1060KB [ 1681.023003] virtio_scsi_cmd 16KB 16KB [ 1681.028351] sgpool-128 8KB 8KB [ 1681.034518] sgpool-64 4KB 12KB [ 1681.039877] sgpool-32 2KB 15KB [ 1681.046156] sgpool-16 1KB 7KB [ 1681.058266] sgpool-8 0KB 7KB [ 1681.065686] mqueue_inode_cache 13KB 22KB [ 1681.073682] bio_post_read_ctx 14KB 15KB [ 1681.079078] bio-2 14KB 15KB [ 1681.084537] jfs_mp 7KB 7KB [ 1681.089904] cifs_small_rq 15KB 16KB [ 1681.098475] cifs_request 67KB 67KB [ 1681.105408] cifs_mpx_ids 0KB 7KB [ 1681.110880] nfs_commit_data 3KB 14KB [ 1681.116242] nfs_write_data 34KB 44KB [ 1681.121709] ext4_system_zone 1KB 7KB [ 1681.127086] bio-1 1KB 7KB [ 1681.132612] pid_namespace 2KB 7KB [ 1681.138033] rpc_buffers 17KB 25KB [ 1681.143496] rpc_tasks 2KB 7KB [ 1681.148856] UNIX 918KB 1012KB [ 1681.155798] tcp_bind_bucket 2KB 4KB [ 1681.161745] ip_fib_trie 27KB 47KB [ 1681.167209] ip_fib_alias 130KB 205KB [ 1681.173102] ip_dst_cache 6KB 24KB [ 1681.178467] RAW 55KB 67KB [ 1681.184286] UDP 57KB 67KB [ 1681.189656] TCP 25KB 28KB [ 1681.195089] hugetlbfs_inode_cache 3KB 15KB [ 1681.200849] fscache_cookie_jar 1KB 7KB [ 1681.206293] eventpoll_pwq 25KB 55KB [ 1681.212598] eventpoll_epi 46KB 66KB [ 1681.217964] inotify_inode_mark 13KB 27KB [ 1681.257461] request_queue 199KB 199KB [ 1681.294905] blkdev_requests 1KB 3KB [ 1681.300314] blkdev_ioc 35KB 38KB [ 1681.349334] bio-0 1256KB 1327KB [ 1681.384998] biovec-max 1658KB 1658KB [ 1681.390385] biovec-64 1257KB 1346KB [ 1681.446734] biovec-16 148KB 161KB [ 1681.471651] bio_integrity_payload 1KB 8KB [ 1681.477386] khugepaged_mm_slot 6KB 23KB [ 1681.535454] uid_cache 0KB 4KB [ 1681.581955] dmaengine-unmap-2 0KB 3KB [ 1681.587358] skbuff_fclone_cache 66KB 86KB [ 1681.646144] skbuff_head_cache 8265KB 8790KB [ 1681.690469] configfs_dir_cache 3KB 7KB [ 1681.696007] file_lock_cache 44KB 63KB [ 1681.727896] file_lock_ctx 9KB 15KB [ 1681.773063] fsnotify_mark_connector 6KB 15KB [ 1681.781414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.804338] net_namespace 70KB 70KB [ 1681.809736] shmem_inode_cache 8102KB 8143KB [ 1681.880500] task_delay_info 192KB 359KB [ 1681.885894] taskstats 39KB 65KB [ 1681.939240] proc_dir_entry 821KB 896KB [ 1681.944713] pde_opener 9KB 46KB [ 1681.950193] seq_file 268KB 413KB [ 1682.036415] sigqueue 42KB 70KB [ 1682.052108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.067089] kernfs_node_cache 17857KB 17943KB [ 1682.076625] mnt_cache 207KB 216KB [ 1682.092207] device bridge_slave_1 left promiscuous mode [ 1682.097746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.110485] filp 7122KB 8932KB [ 1682.115886] names_cache 126637KB 126696KB [ 1682.130501] iint_cache 42KB 51KB [ 1682.135917] key_jar 4KB 11KB [ 1682.146950] device bridge_slave_0 left promiscuous mode [ 1682.160726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.167437] uts_namespace 4KB 7KB [ 1682.173417] nsproxy 2KB 11KB [ 1682.178794] vm_area_struct 2959KB 3437KB [ 1682.279063] mm_struct 407KB 552KB [ 1682.338486] fs_cache 187KB 332KB [ 1682.380526] files_cache 634KB 697KB [ 1682.385926] signal_cache 1283KB 1703KB [ 1682.448442] sighand_cache 603KB 631KB [ 1682.478076] task_struct 6211KB 6236KB [ 1682.511985] cred_jar 2152KB 2820KB [ 1682.517378] anon_vma_chain 976KB 1578KB [ 1682.579915] anon_vma 124KB 292KB [ 1682.622735] pid 109KB 240KB [ 1682.628131] Acpi-Operand 156KB 198KB [ 1682.678982] Acpi-ParseExt 8KB 11KB [ 1682.714080] Acpi-Parse 41KB 47KB [ 1682.719474] Acpi-State 52KB 63KB [ 1682.783225] Acpi-Namespace 20KB 27KB [ 1682.788629] numa_policy 0KB 3KB [ 1682.863963] debug_objects_cache 1642KB 1883KB [ 1682.869600] trace_event_file 297KB 298KB [ 1682.929230] ftrace_event_field 398KB 401KB [ 1682.976495] pool_workqueue 135KB 152KB [ 1683.002302] page->ptl 459KB 972KB [ 1683.037234] kmalloc-2097152 2050KB 2050KB [ 1683.065872] kmalloc-524288 2056KB 2056KB [ 1683.098470] kmalloc-262144 1290KB 1290KB [ 1683.157049] kmalloc-131072 650KB 650KB [ 1683.190745] kmalloc-65536 2376KB 2442KB [ 1683.196160] kmalloc-32768 1980KB 1980KB [ 1683.269346] kmalloc-16384 1204KB 1270KB [ 1683.297819] kmalloc-8192 4917KB 4917KB [ 1683.336173] kmalloc-4096 23149KB 23149KB [ 1683.369856] kmalloc-2048 13468KB 14069KB [ 1683.394039] kmalloc-1024 11286KB 14088KB [ 1683.399425] kmalloc-512 16580KB 17081KB [ 1683.473064] kmalloc-256 4888KB 6255KB [ 1683.483407] kmalloc-128 1034KB 1602KB [ 1683.488785] kmalloc-96 3645KB 4368KB [ 1683.526720] kmalloc-64 2532KB 3828KB [ 1683.548880] kmalloc-32 1910KB 2512KB [ 1683.573339] kmalloc-192 1904KB 2928KB [ 1683.578741] kmem_cache 177KB 183KB [ 1683.618165] Out of memory (oom_kill_allocating_task): Kill process 8088 (syz-fuzzer) score 0 or sacrifice child [ 1683.676212] Killed process 19997 (syz-executor.4) total-vm:48512kB, anon-rss:432kB, file-rss:0kB, shmem-rss:0kB [ 1683.816133] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1683.866203] in:imklog cpuset=/ mems_allowed=0-1 [ 1683.899657] CPU: 0 PID: 21603 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1683.907145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1683.916595] Call Trace: [ 1683.919197] dump_stack+0x1fc/0x2ef [ 1683.922860] dump_header+0x15d/0xc3f [ 1683.926585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1683.931699] ? ___ratelimit+0x319/0x590 [ 1683.935677] oom_kill_process.cold+0x10/0x692 [ 1683.940180] ? check_preemption_disabled+0x41/0x280 [ 1683.945209] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1683.950498] out_of_memory+0x1072/0x1390 [ 1683.954583] ? oom_killer_disable+0x270/0x270 [ 1683.959094] ? mutex_trylock+0x15f/0x1a0 [ 1683.963169] __alloc_pages_nodemask+0x23a2/0x2890 [ 1683.968024] ? find_get_entry+0x4cd/0x8a0 [ 1683.972191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1683.977061] alloc_pages_current+0x193/0x2a0 [ 1683.981472] filemap_fault+0x146e/0x2180 [ 1683.985544] ext4_filemap_fault+0x84/0xb0 [ 1683.989691] __do_fault+0x10b/0x4b0 [ 1683.993320] ? do_raw_spin_unlock+0x171/0x230 [ 1683.997816] __handle_mm_fault+0x273b/0x41c0 [ 1684.002230] ? vm_insert_page+0x9c0/0x9c0 [ 1684.006378] ? lock_downgrade+0x720/0x720 [ 1684.010537] ? check_preemption_disabled+0x41/0x280 [ 1684.015561] handle_mm_fault+0x436/0xb10 [ 1684.019632] __do_page_fault+0x68e/0xd60 [ 1684.023698] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1684.028716] ? spurious_fault+0x840/0x840 [ 1684.032862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1684.037712] ? page_fault+0x8/0x30 [ 1684.041253] page_fault+0x1e/0x30 [ 1684.044876] RIP: 0033:0x7f8eb5fe4f59 [ 1684.048586] Code: Bad RIP value. [ 1684.051951] RSP: 002b:00007f8eb48d9440 EFLAGS: 00010246 [ 1684.057307] RAX: 0000000000000000 RBX: 00007f8ea8000020 RCX: 0000000000000004 [ 1684.064569] RDX: 000000000000003e RSI: 0000000000000001 RDI: 0000000000000260 [ 1684.071855] RBP: 0000000000000260 R08: 00007f8eb60b6940 R09: 0000000000000000 [ 1684.079105] R10: 2ce33e6c02ce33e7 R11: 0000000000000000 R12: 00007f8eb48d9da0 [ 1684.086354] R13: 00007f8eb48d9da3 R14: 0000000000001f9f R15: 00007f8eb48d9e47 [ 1684.093722] device hsr_slave_1 left promiscuous mode [ 1684.102864] Mem-Info: [ 1684.107251] active_anon:15311 inactive_anon:73845 isolated_anon:0 [ 1684.107251] active_file:37 inactive_file:287 isolated_file:0 [ 1684.107251] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1684.107251] slab_reclaimable:13606 slab_unreclaimable:117833 [ 1684.107251] mapped:18711 shmem:74802 pagetables:543 bounce:0 [ 1684.107251] free:25450 free_pcp:40 free_cma:0 [ 1684.174323] Node 0 active_anon:56612kB inactive_anon:26344kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28160kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1684.202023] device hsr_slave_0 left promiscuous mode [ 1684.213874] Node 1 active_anon:4500kB inactive_anon:269036kB active_file:132kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:14164kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1684.269218] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.302621] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1684.307666] Node 0 DMA32 free:35776kB min:35996kB low:44992kB high:53988kB active_anon:56612kB inactive_anon:26344kB active_file:24kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.350392] lowmem_reserve[]: 0 0 1 1 1 [ 1684.354413] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.381968] lowmem_reserve[]: 0 0 0 0 0 [ 1684.385966] Node 1 Normal free:53408kB min:53876kB low:67344kB high:80812kB active_anon:4500kB inactive_anon:269036kB active_file:364kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.414617] lowmem_reserve[]: 0 0 0 0 0 [ 1684.418584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1684.450388] Node 0 DMA32: 851*4kB (UME) 490*8kB (UME) 244*16kB (ME) 98*32kB (ME) 28*64kB (UM) 13*128kB (M) 9*256kB (M) 0*512kB 14*1024kB (U) 1*2048kB (M) 0*4096kB = 36508kB [ 1684.474666] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1684.485777] Node 1 Normal: 451*4kB (UME) 352*8kB (ME) 257*16kB (UME) 102*32kB (UME) 26*64kB (M) 11*128kB (UME) 8*256kB (UME) 2*512kB (UM) 1*1024kB (M) 1*2048kB (M) 8*4096kB (U) = 53980kB [ 1684.503117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.511986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.520585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.529421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.538200] 74862 total pagecache pages [ 1684.545506] 0 pages in swap cache [ 1684.548966] Swap cache stats: add 0, delete 0, find 0/0 [ 1684.556902] Free swap = 0kB [ 1684.559916] Total swap = 0kB [ 1684.585459] 2097051 pages RAM [ 1684.588590] 0 pages HighMem/MovableOnly [ 1684.592588] 369649 pages reserved [ 1684.596031] 0 pages cma reserved [ 1684.599383] Unreclaimable slab info: [ 1684.608035] Name Used Total [ 1684.615534] pid_2 24KB 48KB [ 1684.626343] batadv_tt_change_cache 2KB 3KB [ 1684.632190] batadv_tl_cache 7KB 16KB [ 1684.637885] TIPC 16KB 30KB [ 1684.643408] SCTPv6 20KB 30KB [ 1684.648778] DCCPv6 20KB 30KB [ 1684.654180] DCCP 19KB 28KB [ 1684.659639] RXRPC 17KB 26KB [ 1684.665072] rxrpc_call_jar 102KB 110KB [ 1684.680885] bridge_fdb_cache 14KB 23KB [ 1684.686276] fib6_nodes 183KB 288KB [ 1684.691693] ip6_dst_cache 323KB 667KB [ 1684.697106] RAWv6 91KB 94KB [ 1684.720366] UDPv6 35KB 41KB [ 1684.720378] TCPv6 30KB 42KB [ 1684.720394] nf_conntrack 8KB 15KB [ 1684.720458] t10_alua_lu_gp_cache 0KB 3KB [ 1684.720472] sd_ext_cdb 0KB 7KB [ 1684.720486] scsi_sense_cache 1056KB 1060KB [ 1684.761984] virtio_scsi_cmd 16KB 16KB [ 1684.767371] sgpool-128 8KB 8KB [ 1684.775182] sgpool-64 4KB 12KB [ 1684.780597] sgpool-32 2KB 15KB [ 1684.785957] sgpool-16 1KB 7KB [ 1684.794086] sgpool-8 0KB 7KB [ 1684.799453] mqueue_inode_cache 13KB 22KB [ 1684.805438] bio_post_read_ctx 14KB 15KB [ 1684.810933] bio-2 14KB 15KB [ 1684.816295] jfs_mp 7KB 7KB [ 1684.821753] cifs_small_rq 15KB 16KB [ 1684.827124] cifs_request 67KB 67KB [ 1684.855398] cifs_mpx_ids 0KB 7KB [ 1684.860902] nfs_commit_data 3KB 14KB [ 1684.866264] nfs_write_data 34KB 44KB [ 1684.876709] ext4_system_zone 1KB 7KB [ 1684.882199] bio-1 1KB 7KB [ 1684.887557] pid_namespace 2KB 7KB [ 1684.906184] rpc_buffers 17KB 25KB [ 1684.912256] rpc_tasks 2KB 7KB [ 1684.917623] UNIX 918KB 1012KB [ 1684.926073] tcp_bind_bucket 2KB 4KB [ 1684.931467] ip_fib_trie 27KB 47KB [ 1684.936808] ip_fib_alias 130KB 205KB [ 1684.942262] ip_dst_cache 6KB 24KB [ 1684.947624] RAW 55KB 67KB [ 1684.965381] UDP 57KB 67KB [ 1684.970872] TCP 25KB 28KB [ 1684.976323] hugetlbfs_inode_cache 3KB 15KB [ 1684.984787] fscache_cookie_jar 1KB 7KB [ 1684.990367] eventpoll_pwq 24KB 55KB [ 1684.995711] eventpoll_epi 46KB 66KB [ 1685.003599] inotify_inode_mark 13KB 27KB [ 1685.009034] request_queue 199KB 199KB [ 1685.014414] blkdev_requests 1KB 3KB [ 1685.019759] blkdev_ioc 35KB 38KB [ 1685.028911] bio-0 1264KB 1327KB [ 1685.034873] biovec-max 1650KB 1658KB [ 1685.040338] biovec-64 1298KB 1346KB [ 1685.045725] biovec-16 156KB 161KB [ 1685.051132] bio_integrity_payload 1KB 8KB [ 1685.056824] khugepaged_mm_slot 6KB 23KB [ 1685.062311] uid_cache 0KB 4KB [ 1685.067662] dmaengine-unmap-2 0KB 3KB [ 1685.073128] skbuff_fclone_cache 66KB 86KB [ 1685.078666] skbuff_head_cache 8484KB 8790KB [ 1685.084130] configfs_dir_cache 3KB 7KB [ 1685.089580] file_lock_cache 44KB 63KB [ 1685.095111] file_lock_ctx 9KB 15KB [ 1685.100517] fsnotify_mark_connector 6KB 15KB [ 1685.106397] net_namespace 70KB 70KB [ 1685.111831] shmem_inode_cache 8101KB 8143KB [ 1685.117187] task_delay_info 190KB 359KB [ 1685.122563] taskstats 39KB 65KB [ 1685.127909] proc_dir_entry 821KB 896KB [ 1685.133319] pde_opener 9KB 46KB [ 1685.138670] seq_file 267KB 413KB [ 1685.144249] sigqueue 42KB 70KB [ 1685.149709] kernfs_node_cache 17574KB 17710KB [ 1685.152531] team0 (unregistering): Port device team_slave_1 removed [ 1685.180424] mnt_cache 207KB 216KB [ 1685.186050] filp 7105KB 8925KB [ 1685.222609] names_cache 125766KB 125825KB [ 1685.229028] team0 (unregistering): Port device team_slave_0 removed [ 1685.240290] iint_cache 41KB 51KB [ 1685.254108] key_jar 4KB 11KB [ 1685.261744] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1685.268205] uts_namespace 4KB 7KB [ 1685.278937] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1685.300184] nsproxy 2KB 11KB [ 1685.307120] vm_area_struct 2956KB 3437KB [ 1685.351155] mm_struct 406KB 552KB [ 1685.378460] fs_cache 181KB 332KB [ 1685.389168] files_cache 630KB 697KB [ 1685.412452] signal_cache 1276KB 1696KB [ 1685.420068] bond0 (unregistering): Released all slaves [ 1685.426498] sighand_cache 592KB 631KB [ 1685.437713] task_struct 6236KB 6236KB [ 1685.469496] cred_jar 2152KB 2820KB [ 1685.501490] anon_vma_chain 973KB 1575KB [ 1685.507046] anon_vma 123KB 292KB [ 1685.530285] pid 107KB 240KB [ 1685.535781] Acpi-Operand 156KB 198KB [ 1685.550457] Acpi-ParseExt 8KB 11KB [ 1685.560432] Acpi-Parse 41KB 47KB [ 1685.565960] Acpi-State 52KB 63KB [ 1685.580276] Acpi-Namespace 20KB 27KB [ 1685.611367] numa_policy 0KB 3KB [ 1685.618944] debug_objects_cache 1642KB 1883KB [ 1685.632234] trace_event_file 297KB 298KB [ 1685.637614] ftrace_event_field 398KB 401KB [ 1685.678616] pool_workqueue 135KB 152KB [ 1685.724024] page->ptl 457KB 972KB [ 1685.741771] kmalloc-2097152 2050KB 2050KB [ 1685.760096] kmalloc-524288 2056KB 2056KB [ 1685.814709] kmalloc-262144 1290KB 1290KB [ 1685.830699] kmalloc-131072 650KB 650KB [ 1685.849466] kmalloc-65536 2376KB 2442KB [ 1685.872529] kmalloc-32768 1980KB 1980KB [ 1685.897632] kmalloc-16384 1204KB 1270KB [ 1685.930298] kmalloc-8192 4917KB 4917KB [ 1685.950293] kmalloc-4096 23200KB 23200KB [ 1685.955693] kmalloc-2048 13570KB 14069KB [ 1686.030252] kmalloc-1024 11340KB 14088KB [ 1686.045837] kmalloc-512 17002KB 17081KB [ 1686.081457] kmalloc-256 4896KB 6255KB [ 1686.107183] kmalloc-128 1034KB 1602KB [ 1686.134514] kmalloc-96 3645KB 4368KB [ 1686.170312] kmalloc-64 2532KB 3828KB [ 1686.175706] kmalloc-32 1914KB 2512KB [ 1686.215674] kmalloc-192 1919KB 2928KB [ 1686.260356] kmem_cache 177KB 183KB [ 1686.265921] Out of memory (oom_kill_allocating_task): Kill process 21603 (in:imklog) score 0 or sacrifice child [ 1686.310369] Killed process 21598 (rsyslogd) total-vm:254332kB, anon-rss:792kB, file-rss:0kB, shmem-rss:0kB [ 1686.322314] oom_reaper: reaped process 21598 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1687.070110] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1687.124788] systemd-journal cpuset=/ mems_allowed=0-1 [ 1687.130039] CPU: 1 PID: 21273 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1687.138106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1687.147470] Call Trace: [ 1687.150075] dump_stack+0x1fc/0x2ef [ 1687.153711] dump_header+0x15d/0xc3f [ 1687.157433] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1687.162549] ? ___ratelimit+0x319/0x590 [ 1687.166536] oom_kill_process.cold+0x10/0x692 [ 1687.171217] ? check_preemption_disabled+0x41/0x280 [ 1687.176245] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1687.181544] out_of_memory+0x1072/0x1390 [ 1687.185885] ? oom_killer_disable+0x270/0x270 [ 1687.195520] ? mutex_trylock+0x15f/0x1a0 [ 1687.199590] __alloc_pages_nodemask+0x23a2/0x2890 [ 1687.204451] ? find_get_entry+0x4cd/0x8a0 [ 1687.208611] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1687.213485] alloc_pages_current+0x193/0x2a0 [ 1687.217988] filemap_fault+0x146e/0x2180 [ 1687.222066] ext4_filemap_fault+0x84/0xb0 [ 1687.226226] __do_fault+0x10b/0x4b0 [ 1687.229862] __handle_mm_fault+0x273b/0x41c0 [ 1687.234277] ? vm_insert_page+0x9c0/0x9c0 [ 1687.238437] ? do_raw_spin_lock+0xcb/0x220 [ 1687.242788] ? check_preemption_disabled+0x41/0x280 [ 1687.247821] handle_mm_fault+0x436/0xb10 [ 1687.251900] __do_page_fault+0x68e/0xd60 [ 1687.255991] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1687.261194] ? spurious_fault+0x840/0x840 [ 1687.265350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1687.270288] ? page_fault+0x8/0x30 [ 1687.273841] page_fault+0x1e/0x30 [ 1687.277315] RIP: 0033:0x7f7769deea80 [ 1687.281036] Code: Bad RIP value. [ 1687.284405] RSP: 002b:00007ffc569e3898 EFLAGS: 00010202 [ 1687.289773] RAX: 000055abca9da258 RBX: 000055abca9da250 RCX: 00007f7769761b00 [ 1687.297046] RDX: 0000000000000001 RSI: 00000000ffffffff RDI: 000055abca9da270 [ 1687.304325] RBP: 0000000000000001 R08: 00000000000001c0 R09: 0000000000000050 [ 1687.311595] R10: 0000000000000069 R11: 00007f7769532060 R12: 00007f7769fcd3a0 [ 1687.318954] R13: 0000000000000040 R14: 00007ffc569e3b90 R15: 000055abca9de360 [ 1687.886442] Mem-Info: [ 1687.888913] active_anon:15128 inactive_anon:73844 isolated_anon:0 [ 1687.888913] active_file:34 inactive_file:12 isolated_file:0 [ 1687.888913] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1687.888913] slab_reclaimable:13622 slab_unreclaimable:115552 [ 1687.888913] mapped:15060 shmem:74801 pagetables:570 bounce:0 [ 1687.888913] free:25116 free_pcp:113 free_cma:0 [ 1688.118255] Node 0 active_anon:56904kB inactive_anon:26340kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45916kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.181102] Node 1 active_anon:3640kB inactive_anon:269036kB active_file:52kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:14216kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1688.213341] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.243809] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1688.250159] Node 0 DMA32 free:35696kB min:35996kB low:44992kB high:53988kB active_anon:56904kB inactive_anon:26340kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.315011] lowmem_reserve[]: 0 0 1 1 1 [ 1688.319541] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.345563] lowmem_reserve[]: 0 0 0 0 0 [ 1688.349552] Node 1 Normal free:53764kB min:53876kB low:67344kB high:80812kB active_anon:3640kB inactive_anon:269036kB active_file:52kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.378408] lowmem_reserve[]: 0 0 0 0 0 [ 1688.382453] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1688.395400] Node 0 DMA32: 710*4kB (UME) 443*8kB (ME) 218*16kB (UME) 89*32kB (ME) 30*64kB (M) 11*128kB (UM) 9*256kB (M) 2*512kB (M) 14*1024kB (U) 1*2048kB (M) 0*4096kB = 35760kB [ 1688.411489] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1688.423297] Node 1 Normal: 405*4kB (ME) 333*8kB (UME) 236*16kB (ME) 92*32kB (UME) 34*64kB (UM) 17*128kB (ME) 6*256kB (UME) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 8*4096kB (U) = 54268kB [ 1688.441585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1688.450685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1688.459442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1688.468375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1688.477032] 74846 total pagecache pages [ 1688.481049] 0 pages in swap cache [ 1688.484494] Swap cache stats: add 0, delete 0, find 0/0 [ 1688.489850] Free swap = 0kB [ 1688.492925] Total swap = 0kB [ 1688.495938] 2097051 pages RAM [ 1688.499046] 0 pages HighMem/MovableOnly [ 1688.503197] 369649 pages reserved [ 1688.506641] 0 pages cma reserved [ 1688.509995] Unreclaimable slab info: [ 1688.513760] Name Used Total [ 1688.519293] pid_2 23KB 48KB [ 1688.525452] batadv_tt_change_cache 2KB 3KB [ 1688.533889] batadv_tl_cache 6KB 16KB [ 1688.539281] TIPC 15KB 30KB [ 1688.547062] SCTPv6 18KB 30KB [ 1688.555000] DCCPv6 17KB 30KB [ 1688.565737] DCCP 16KB 28KB [ 1688.573720] RXRPC 16KB 26KB [ 1688.579085] rxrpc_call_jar 101KB 110KB [ 1688.586267] bridge_fdb_cache 12KB 23KB [ 1688.594185] fib6_nodes 183KB 288KB [ 1688.599560] ip6_dst_cache 309KB 667KB [ 1688.606640] RAWv6 91KB 94KB [ 1688.614577] UDPv6 33KB 41KB [ 1688.619948] TCPv6 27KB 42KB [ 1688.633525] nf_conntrack 7KB 15KB [ 1688.638984] t10_alua_lu_gp_cache 0KB 3KB [ 1688.645505] sd_ext_cdb 0KB 7KB [ 1688.654220] scsi_sense_cache 1056KB 1060KB [ 1688.659585] virtio_scsi_cmd 16KB 16KB [ 1688.665885] sgpool-128 8KB 8KB [ 1688.674741] sgpool-64 4KB 12KB [ 1688.682751] sgpool-32 2KB 15KB [ 1688.688119] sgpool-16 1KB 7KB [ 1688.696840] sgpool-8 0KB 7KB [ 1688.703095] mqueue_inode_cache 13KB 22KB [ 1688.708552] bio_post_read_ctx 14KB 15KB [ 1688.717531] bio-2 14KB 15KB [ 1688.723867] jfs_mp 7KB 7KB [ 1688.730040] cifs_small_rq 15KB 16KB [ 1688.735532] cifs_request 67KB 67KB [ 1688.740977] cifs_mpx_ids 0KB 7KB [ 1688.746355] nfs_commit_data 3KB 14KB [ 1688.751787] nfs_write_data 34KB 44KB [ 1688.757198] ext4_system_zone 1KB 7KB [ 1688.762714] bio-1 1KB 7KB [ 1688.768087] pid_namespace 2KB 7KB [ 1688.773597] rpc_buffers 17KB 25KB [ 1688.778959] rpc_tasks 2KB 7KB [ 1688.784398] UNIX 918KB 1005KB [ 1688.789765] tcp_bind_bucket 1KB 4KB [ 1688.795189] ip_fib_trie 27KB 47KB [ 1688.810381] ip_fib_alias 130KB 205KB [ 1688.815859] ip_dst_cache 10KB 24KB [ 1688.821703] RAW 54KB 67KB [ 1688.827061] UDP 54KB 67KB [ 1688.832942] TCP 25KB 28KB [ 1688.838307] hugetlbfs_inode_cache 3KB 15KB [ 1688.844161] fscache_cookie_jar 1KB 7KB [ 1688.849719] eventpoll_pwq 30KB 55KB [ 1688.855303] eventpoll_epi 57KB 66KB [ 1688.860731] inotify_inode_mark 12KB 27KB [ 1688.866279] request_queue 199KB 199KB [ 1688.871918] blkdev_requests 1KB 3KB [ 1688.877295] blkdev_ioc 38KB 38KB [ 1688.890128] bio-0 1700KB 1702KB [ 1688.895514] biovec-max 1633KB 1658KB [ 1688.904700] biovec-64 1837KB 1842KB [ 1688.910149] biovec-16 218KB 221KB [ 1688.915508] bio_integrity_payload 1KB 8KB [ 1688.922384] khugepaged_mm_slot 5KB 23KB [ 1688.927842] uid_cache 0KB 4KB [ 1688.934489] dmaengine-unmap-2 0KB 3KB [ 1688.939887] skbuff_fclone_cache 66KB 86KB [ 1688.945513] skbuff_head_cache 8797KB 8805KB [ 1688.950944] configfs_dir_cache 3KB 7KB [ 1688.956393] file_lock_cache 43KB 63KB [ 1688.961791] file_lock_ctx 9KB 15KB [ 1688.967160] fsnotify_mark_connector 6KB 15KB [ 1688.973115] net_namespace 70KB 70KB [ 1688.978473] shmem_inode_cache 8100KB 8143KB [ 1688.983883] task_delay_info 190KB 359KB [ 1688.989239] taskstats 43KB 65KB [ 1689.010290] proc_dir_entry 820KB 896KB [ 1689.015685] pde_opener 9KB 46KB [ 1689.030120] seq_file 264KB 413KB [ 1689.037010] sigqueue 68KB 70KB [ 1689.047150] kernfs_node_cache 16983KB 17317KB [ 1689.053250] mnt_cache 207KB 216KB [ 1689.058621] filp 6886KB 8887KB [ 1689.064035] names_cache 121507KB 121562KB [ 1689.069394] iint_cache 40KB 51KB [ 1689.074888] key_jar 4KB 11KB [ 1689.080304] uts_namespace 3KB 7KB [ 1689.085668] nsproxy 2KB 11KB [ 1689.091269] vm_area_struct 2991KB 3437KB [ 1689.096628] mm_struct 406KB 552KB [ 1689.102020] fs_cache 181KB 332KB [ 1689.107376] files_cache 656KB 697KB [ 1689.112831] signal_cache 1293KB 1696KB [ 1689.118193] sighand_cache 578KB 624KB [ 1689.123626] task_struct 6236KB 6236KB [ 1689.129011] cred_jar 2128KB 2820KB [ 1689.138181] anon_vma_chain 973KB 1575KB [ 1689.138191] anon_vma 150KB 292KB [ 1689.138205] pid 107KB 240KB [ 1689.154486] Acpi-Operand 156KB 198KB [ 1689.159890] Acpi-ParseExt 8KB 11KB [ 1689.165934] Acpi-Parse 41KB 47KB [ 1689.175922] Acpi-State 52KB 63KB [ 1689.227011] Acpi-Namespace 20KB 27KB [ 1689.282018] numa_policy 0KB 3KB [ 1689.287426] debug_objects_cache 1642KB 1883KB [ 1689.374183] trace_event_file 297KB 298KB [ 1689.379578] ftrace_event_field 398KB 401KB [ 1689.460081] pool_workqueue 134KB 152KB [ 1689.465478] page->ptl 449KB 972KB [ 1689.531283] kmalloc-2097152 2050KB 2050KB [ 1689.536681] kmalloc-524288 2056KB 2056KB [ 1689.611095] kmalloc-262144 1290KB 1290KB [ 1689.616497] kmalloc-131072 650KB 650KB [ 1689.693519] kmalloc-65536 2376KB 2442KB [ 1689.698926] kmalloc-32768 1980KB 1980KB [ 1689.765448] kmalloc-16384 1204KB 1270KB [ 1689.811090] kmalloc-8192 4900KB 4917KB [ 1689.816496] kmalloc-4096 23090KB 23145KB [ 1689.890876] kmalloc-2048 13570KB 14069KB [ 1689.896277] kmalloc-1024 11461KB 14088KB [ 1689.945402] kmalloc-512 17478KB 17546KB [ 1690.008975] kmalloc-256 4913KB 6255KB [ 1690.042452] kmalloc-128 1034KB 1602KB [ 1690.047841] kmalloc-96 3645KB 4368KB [ 1690.133277] kmalloc-64 2532KB 3828KB [ 1690.138749] kmalloc-32 1922KB 2512KB [ 1690.210082] kmalloc-192 1919KB 2928KB [ 1690.215477] kmem_cache 177KB 183KB [ 1690.301148] Out of memory (oom_kill_allocating_task): Kill process 21273 (systemd-journal) score 0 or sacrifice child [ 1690.372697] Killed process 21273 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:1936kB [ 1690.437106] oom_reaper: reaped process 21273 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1936kB [ 1690.562278] systemd-udevd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1690.615197] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1690.658238] CPU: 1 PID: 21847 Comm: systemd-udevd Not tainted 4.19.211-syzkaller #0 [ 1690.666059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1690.675412] Call Trace: [ 1690.678004] dump_stack+0x1fc/0x2ef [ 1690.681633] dump_header+0x15d/0xc3f [ 1690.685349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1690.690452] ? ___ratelimit+0x319/0x590 [ 1690.694430] oom_kill_process.cold+0x10/0x692 [ 1690.698928] ? check_preemption_disabled+0x41/0x280 [ 1690.703951] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1690.709242] out_of_memory+0x1072/0x1390 [ 1690.713312] ? oom_killer_disable+0x270/0x270 [ 1690.717812] ? mutex_trylock+0x15f/0x1a0 [ 1690.721886] __alloc_pages_nodemask+0x23a2/0x2890 [ 1690.726745] ? find_get_entry+0x4cd/0x8a0 [ 1690.730914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1690.735789] alloc_pages_current+0x193/0x2a0 [ 1690.740200] filemap_fault+0x146e/0x2180 [ 1690.744316] ext4_filemap_fault+0x84/0xb0 [ 1690.748475] __do_fault+0x10b/0x4b0 [ 1690.752109] __handle_mm_fault+0x273b/0x41c0 [ 1690.756527] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1690.761114] ? vm_insert_page+0x9c0/0x9c0 [ 1690.765273] ? debug_object_active_state+0x254/0x330 [ 1690.770386] ? check_preemption_disabled+0x41/0x280 [ 1690.775405] handle_mm_fault+0x436/0xb10 [ 1690.779479] __do_page_fault+0x68e/0xd60 [ 1690.783548] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1690.788567] ? spurious_fault+0x840/0x840 [ 1690.792716] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1690.797567] ? page_fault+0x8/0x30 [ 1690.801107] page_fault+0x1e/0x30 [ 1690.804554] RIP: 0033:0x7f5569797ff7 [ 1690.808263] Code: Bad RIP value. [ 1690.811621] RSP: 002b:00007ffcaafb2ce0 EFLAGS: 00010293 [ 1690.816975] RAX: 0000000000000001 RBX: 00007ffcaafb3250 RCX: 0000000000000001 [ 1690.824245] RDX: 0000560d51da03a6 RSI: 0000560d51da03a5 RDI: 0000560d52e71ea0 [ 1690.831508] RBP: 00007ffcaafb3240 R08: 0000000000000000 R09: 0000000000000001 [ 1690.838771] R10: 0000560d51d9fd0c R11: 00007f55698bb060 R12: 0000560d51da03a5 [ 1690.846038] R13: 00007ffcaafb3388 R14: 0000000000000000 R15: 0000000000000001 [ 1691.091364] Mem-Info: [ 1691.093835] active_anon:15018 inactive_anon:73843 isolated_anon:0 [ 1691.093835] active_file:17 inactive_file:11 isolated_file:5 [ 1691.093835] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1691.093835] slab_reclaimable:13647 slab_unreclaimable:115388 [ 1691.093835] mapped:14563 shmem:74801 pagetables:550 bounce:0 [ 1691.093835] free:25160 free_pcp:66 free_cma:0 [ 1691.174229] Node 0 active_anon:56868kB inactive_anon:26340kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45964kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.208443] Node 1 active_anon:3204kB inactive_anon:269032kB active_file:44kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:12288kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.240878] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.271450] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1691.276501] Node 0 DMA32 free:35620kB min:35996kB low:44992kB high:53988kB active_anon:56868kB inactive_anon:26340kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:2136kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1691.311520] lowmem_reserve[]: 0 0 1 1 1 [ 1691.315536] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.346155] lowmem_reserve[]: 0 0 0 0 0 [ 1691.353775] Node 1 Normal free:53852kB min:53876kB low:67344kB high:80812kB active_anon:3204kB inactive_anon:269032kB active_file:44kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:64kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.402511] lowmem_reserve[]: 0 0 0 0 0 [ 1691.406528] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1691.435978] Node 0 DMA32: 711*4kB (UME) 443*8kB (UME) 222*16kB (UME) 92*32kB (UME) 31*64kB (UM) 12*128kB (UM) 10*256kB (UM) 3*512kB (UM) 13*1024kB (U) 1*2048kB (M) 0*4096kB = 35860kB [ 1691.452574] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1691.463665] Node 1 Normal: 363*4kB (ME) 312*8kB (UME) 233*16kB (UME) 85*32kB (UME) 29*64kB (M) 15*128kB (UME) 8*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 7*4096kB (U) = 54108kB [ 1691.480644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.489480] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.517095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.526360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.564582] 74834 total pagecache pages [ 1691.568589] 0 pages in swap cache [ 1691.572123] Swap cache stats: add 0, delete 0, find 0/0 [ 1691.577479] Free swap = 0kB [ 1691.592020] Total swap = 0kB [ 1691.595067] 2097051 pages RAM [ 1691.598167] 0 pages HighMem/MovableOnly [ 1691.602174] 369649 pages reserved [ 1691.605616] 0 pages cma reserved [ 1691.608974] Unreclaimable slab info: [ 1691.619215] Name Used Total [ 1691.624818] pid_2 23KB 48KB [ 1691.641588] batadv_tt_change_cache 1KB 3KB [ 1691.647409] batadv_tl_cache 6KB 16KB [ 1691.670010] TIPC 13KB 30KB [ 1691.675417] SCTPv6 18KB 30KB [ 1691.687181] DCCPv6 15KB 30KB [ 1691.692611] DCCP 16KB 28KB [ 1691.698006] RXRPC 14KB 26KB [ 1691.703407] rxrpc_call_jar 101KB 110KB [ 1691.708803] bridge_fdb_cache 12KB 23KB [ 1691.714220] fib6_nodes 183KB 288KB [ 1691.719581] ip6_dst_cache 305KB 663KB [ 1691.725007] RAWv6 91KB 94KB [ 1691.730409] UDPv6 31KB 41KB [ 1691.735775] TCPv6 27KB 36KB [ 1691.741198] nf_conntrack 6KB 15KB [ 1691.746615] t10_alua_lu_gp_cache 0KB 3KB [ 1691.753414] sd_ext_cdb 0KB 7KB [ 1691.758781] scsi_sense_cache 1056KB 1060KB [ 1691.764821] virtio_scsi_cmd 16KB 16KB [ 1691.770227] sgpool-128 8KB 8KB [ 1691.775586] sgpool-64 4KB 12KB [ 1691.780989] sgpool-32 2KB 15KB [ 1691.799964] sgpool-16 1KB 7KB [ 1691.805342] sgpool-8 0KB 7KB [ 1691.819980] mqueue_inode_cache 13KB 22KB [ 1691.825456] bio_post_read_ctx 14KB 15KB [ 1691.831450] bio-2 14KB 15KB [ 1691.836818] jfs_mp 7KB 7KB [ 1691.842247] cifs_small_rq 15KB 16KB [ 1691.847607] cifs_request 67KB 67KB [ 1691.853023] cifs_mpx_ids 0KB 7KB [ 1691.858401] nfs_commit_data 3KB 14KB [ 1691.863805] nfs_write_data 34KB 44KB [ 1691.869200] ext4_system_zone 1KB 7KB [ 1691.875861] bio-1 1KB 7KB [ 1691.881879] pid_namespace 2KB 7KB [ 1691.887248] rpc_buffers 17KB 25KB [ 1691.892748] rpc_tasks 2KB 7KB [ 1691.898110] UNIX 907KB 993KB [ 1691.916728] tcp_bind_bucket 1KB 4KB [ 1691.930307] ip_fib_trie 27KB 47KB [ 1691.936146] ip_fib_alias 130KB 205KB [ 1691.947069] ip_dst_cache 9KB 24KB [ 1691.954800] RAW 54KB 67KB [ 1691.979970] UDP 52KB 67KB [ 1691.985367] TCP 25KB 28KB [ 1692.000569] hugetlbfs_inode_cache 3KB 15KB [ 1692.006925] fscache_cookie_jar 1KB 7KB [ 1692.019980] eventpoll_pwq 30KB 55KB [ 1692.039960] eventpoll_epi 57KB 66KB [ 1692.045350] inotify_inode_mark 12KB 27KB [ 1692.050910] request_queue 199KB 199KB [ 1692.056270] blkdev_requests 1KB 3KB [ 1692.061657] blkdev_ioc 38KB 38KB [ 1692.067014] bio-0 1665KB 1713KB [ 1692.072442] biovec-max 1633KB 1641KB [ 1692.077812] biovec-64 1863KB 1866KB [ 1692.083226] biovec-16 219KB 221KB [ 1692.088596] bio_integrity_payload 1KB 8KB [ 1692.094373] khugepaged_mm_slot 5KB 23KB [ 1692.099977] uid_cache 0KB 4KB [ 1692.105347] dmaengine-unmap-2 0KB 3KB [ 1692.112023] skbuff_fclone_cache 80KB 86KB [ 1692.117573] skbuff_head_cache 9024KB 9030KB [ 1692.125179] configfs_dir_cache 3KB 7KB [ 1692.130694] file_lock_cache 43KB 63KB [ 1692.136056] file_lock_ctx 9KB 15KB [ 1692.141480] fsnotify_mark_connector 6KB 15KB [ 1692.147364] net_namespace 70KB 70KB [ 1692.152841] shmem_inode_cache 8093KB 8143KB [ 1692.158201] task_delay_info 190KB 359KB [ 1692.163620] taskstats 42KB 65KB [ 1692.168981] proc_dir_entry 820KB 896KB [ 1692.174421] pde_opener 9KB 46KB [ 1692.179779] seq_file 264KB 413KB [ 1692.185169] sigqueue 68KB 70KB [ 1692.190559] kernfs_node_cache 16903KB 17313KB [ 1692.195964] mnt_cache 207KB 216KB [ 1692.201366] filp 6791KB 8880KB [ 1692.206729] names_cache 120538KB 120555KB [ 1692.212146] iint_cache 37KB 51KB [ 1692.217508] key_jar 4KB 11KB [ 1692.222897] uts_namespace 3KB 7KB [ 1692.228296] nsproxy 2KB 11KB [ 1692.234148] vm_area_struct 2970KB 3437KB [ 1692.239549] mm_struct 406KB 552KB [ 1692.245457] fs_cache 181KB 332KB [ 1692.250854] files_cache 656KB 697KB [ 1692.256204] signal_cache 1293KB 1696KB [ 1692.261593] sighand_cache 571KB 624KB [ 1692.266951] task_struct 6243KB 6243KB [ 1692.272358] cred_jar 2104KB 2820KB [ 1692.277715] anon_vma_chain 973KB 1575KB [ 1692.283157] anon_vma 150KB 292KB [ 1692.288521] pid 107KB 240KB [ 1692.293937] Acpi-Operand 156KB 198KB [ 1692.299294] Acpi-ParseExt 8KB 11KB [ 1692.304706] Acpi-Parse 41KB 47KB [ 1692.310101] Acpi-State 52KB 63KB [ 1692.315460] Acpi-Namespace 20KB 27KB [ 1692.320873] numa_policy 0KB 3KB [ 1692.326230] debug_objects_cache 1642KB 1883KB [ 1692.331799] trace_event_file 297KB 298KB [ 1692.337158] ftrace_event_field 398KB 401KB [ 1692.342673] pool_workqueue 133KB 152KB [ 1692.348035] page->ptl 441KB 972KB [ 1692.353917] kmalloc-2097152 2050KB 2050KB [ 1692.359285] kmalloc-524288 2056KB 2056KB [ 1692.365116] kmalloc-262144 1290KB 1290KB [ 1692.370695] kmalloc-131072 650KB 650KB [ 1692.376054] kmalloc-65536 2376KB 2442KB [ 1692.381454] kmalloc-32768 1980KB 1980KB [ 1692.386815] kmalloc-16384 1204KB 1270KB [ 1692.392229] kmalloc-8192 4892KB 4900KB [ 1692.397589] kmalloc-4096 23086KB 23115KB [ 1692.402997] kmalloc-2048 13619KB 14069KB [ 1692.408620] kmalloc-1024 11556KB 14088KB [ 1692.414045] kmalloc-512 17740KB 17805KB [ 1692.419408] kmalloc-256 4921KB 6255KB [ 1692.424807] kmalloc-128 1034KB 1602KB [ 1692.430208] kmalloc-96 3645KB 4368KB [ 1692.435564] kmalloc-64 2526KB 3828KB [ 1692.440966] kmalloc-32 1925KB 2512KB [ 1692.446323] kmalloc-192 1913KB 2928KB [ 1692.451797] kmem_cache 177KB 183KB [ 1692.457164] Out of memory (oom_kill_allocating_task): Kill process 21847 (systemd-udevd) score 0 or sacrifice child [ 1692.467813] Killed process 21847 (systemd-udevd) total-vm:43924kB, anon-rss:1300kB, file-rss:0kB, shmem-rss:0kB [ 1692.479487] oom_reaper: reaped process 21847 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1693.150224] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1693.166744] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1693.176118] CPU: 1 PID: 8099 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1693.183573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1693.192923] Call Trace: [ 1693.195516] dump_stack+0x1fc/0x2ef [ 1693.199142] dump_header+0x15d/0xc3f [ 1693.202863] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1693.207966] ? ___ratelimit+0x319/0x590 [ 1693.211955] oom_kill_process.cold+0x10/0x692 [ 1693.216460] ? check_preemption_disabled+0x41/0x280 [ 1693.221493] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1693.226777] out_of_memory+0x1072/0x1390 [ 1693.230845] ? oom_killer_disable+0x270/0x270 [ 1693.235343] ? mutex_trylock+0x15f/0x1a0 [ 1693.239407] __alloc_pages_nodemask+0x23a2/0x2890 [ 1693.244256] ? find_get_entry+0x4cd/0x8a0 [ 1693.248413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1693.253283] alloc_pages_current+0x193/0x2a0 [ 1693.257695] filemap_fault+0x146e/0x2180 [ 1693.261771] ext4_filemap_fault+0x84/0xb0 [ 1693.265919] __do_fault+0x10b/0x4b0 [ 1693.269549] __handle_mm_fault+0x273b/0x41c0 [ 1693.273966] ? do_signal+0x49d/0x1670 [ 1693.277764] ? vm_insert_page+0x9c0/0x9c0 [ 1693.282026] ? check_preemption_disabled+0x41/0x280 [ 1693.287054] handle_mm_fault+0x436/0xb10 [ 1693.291131] __do_page_fault+0x68e/0xd60 [ 1693.295200] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1693.300216] ? spurious_fault+0x840/0x840 [ 1693.304455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1693.309299] ? page_fault+0x8/0x30 [ 1693.312840] page_fault+0x1e/0x30 [ 1693.316286] RIP: 0033:0x451d37 [ 1693.319472] Code: Bad RIP value. [ 1693.322832] RSP: 002b:000000c0005a78e8 EFLAGS: 00010202 [ 1693.328192] RAX: 00000000000012d0 RBX: fffffffffffffffa RCX: 000000000117a760 [ 1693.335456] RDX: 000000000000012d RSI: 000000000041e36f RDI: 000000000000386b [ 1693.342723] RBP: 000000c0005a78f8 R08: 0000000000f0ce00 R09: 0000000000000002 [ 1693.349986] R10: 0000000001a4a010 R11: 0000000000000cc0 R12: 000000c0005a79a0 [ 1693.357250] R13: 0000000000000000 R14: 000000c000083380 R15: 000000000000000f [ 1693.376169] Mem-Info: [ 1693.378631] active_anon:14997 inactive_anon:73843 isolated_anon:0 [ 1693.378631] active_file:16 inactive_file:17 isolated_file:0 [ 1693.378631] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1693.378631] slab_reclaimable:13635 slab_unreclaimable:115249 [ 1693.378631] mapped:14563 shmem:74801 pagetables:533 bounce:0 [ 1693.378631] free:24933 free_pcp:171 free_cma:0 [ 1693.434314] Node 0 active_anon:56752kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45964kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1693.479306] Node 1 active_anon:3236kB inactive_anon:269032kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1693.517653] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.557739] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1693.565520] Node 0 DMA32 free:35472kB min:35996kB low:44992kB high:53988kB active_anon:56752kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:2056kB bounce:0kB free_pcp:396kB local_pcp:176kB free_cma:0kB [ 1693.599577] lowmem_reserve[]: 0 0 1 1 1 [ 1693.607058] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.639727] lowmem_reserve[]: 0 0 0 0 0 [ 1693.643882] Node 1 Normal free:53280kB min:53876kB low:67344kB high:80812kB active_anon:3236kB inactive_anon:269032kB active_file:116kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:76kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1693.679529] lowmem_reserve[]: 0 0 0 0 0 [ 1693.683601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1693.707300] Node 0 DMA32: 692*4kB (ME) 450*8kB (UME) 219*16kB (ME) 90*32kB (UME) 31*64kB (UM) 12*128kB (UM) 9*256kB (M) 3*512kB (UM) 13*1024kB (U) 1*2048kB (M) 0*4096kB = 35472kB [ 1693.733562] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1693.758313] Node 1 Normal: 356*4kB (ME) 306*8kB (UME) 228*16kB (UME) 84*32kB (ME) 29*64kB (M) 14*128kB (ME) 8*256kB (UME) 3*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 7*4096kB (U) = 53280kB [ 1693.783827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.797253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.825159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.836372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.848824] 74834 total pagecache pages [ 1693.875242] 0 pages in swap cache [ 1693.878711] Swap cache stats: add 0, delete 0, find 0/0 [ 1693.884117] Free swap = 0kB [ 1693.887127] Total swap = 0kB [ 1693.914305] 2097051 pages RAM [ 1693.917433] 0 pages HighMem/MovableOnly [ 1693.939622] 369649 pages reserved [ 1693.943143] 0 pages cma reserved [ 1693.946501] Unreclaimable slab info: [ 1693.965617] Name Used Total [ 1693.977021] pid_2 23KB 48KB [ 1693.985884] batadv_tt_change_cache 1KB 3KB [ 1694.007726] batadv_tl_cache 5KB 16KB [ 1694.019176] TIPC 13KB 30KB [ 1694.024599] SCTPv6 18KB 30KB [ 1694.048576] DCCPv6 15KB 30KB [ 1694.059316] DCCP 14KB 28KB [ 1694.069899] RXRPC 14KB 26KB [ 1694.075277] rxrpc_call_jar 101KB 110KB [ 1694.094793] bridge_fdb_cache 11KB 23KB [ 1694.104034] fib6_nodes 183KB 288KB [ 1694.109403] ip6_dst_cache 302KB 652KB [ 1694.132493] RAWv6 91KB 94KB [ 1694.137874] UDPv6 31KB 41KB [ 1694.146769] TCPv6 24KB 36KB [ 1694.170695] nf_conntrack 6KB 15KB [ 1694.176123] t10_alua_lu_gp_cache 0KB 3KB [ 1694.188726] sd_ext_cdb 0KB 7KB [ 1694.211828] scsi_sense_cache 1056KB 1060KB [ 1694.217311] virtio_scsi_cmd 16KB 16KB [ 1694.222728] sgpool-128 8KB 8KB [ 1694.228097] sgpool-64 4KB 12KB [ 1694.251070] sgpool-32 2KB 15KB [ 1694.256455] sgpool-16 1KB 7KB [ 1694.269584] sgpool-8 0KB 7KB [ 1694.292307] mqueue_inode_cache 13KB 22KB [ 1694.297792] bio_post_read_ctx 14KB 15KB [ 1694.303373] bio-2 14KB 15KB [ 1694.308730] jfs_mp 7KB 7KB [ 1694.331937] cifs_small_rq 15KB 16KB [ 1694.337315] cifs_request 67KB 67KB [ 1694.342709] cifs_mpx_ids 0KB 7KB [ 1694.348094] nfs_commit_data 3KB 14KB [ 1694.371990] nfs_write_data 34KB 44KB [ 1694.377427] ext4_system_zone 1KB 7KB [ 1694.382865] bio-1 1KB 7KB [ 1694.388226] pid_namespace 2KB 7KB [ 1694.411239] rpc_buffers 17KB 25KB [ 1694.416628] rpc_tasks 2KB 7KB [ 1694.425708] UNIX 879KB 993KB [ 1694.448113] tcp_bind_bucket 1KB 4KB [ 1694.478459] ip_fib_trie 27KB 47KB [ 1694.483994] ip_fib_alias 130KB 205KB [ 1694.489356] ip_dst_cache 8KB 24KB [ 1694.498788] RAW 54KB 67KB [ 1694.514807] UDP 50KB 67KB [ 1694.527386] TCP 25KB 28KB [ 1694.533850] hugetlbfs_inode_cache 3KB 15KB [ 1694.539587] fscache_cookie_jar 1KB 7KB [ 1694.554161] eventpoll_pwq 28KB 55KB [ 1694.559551] eventpoll_epi 52KB 66KB [ 1694.588166] inotify_inode_mark 12KB 27KB [ 1694.595667] request_queue 199KB 199KB [ 1694.603291] blkdev_requests 1KB 3KB [ 1694.608665] blkdev_ioc 35KB 38KB [ 1694.627688] bio-0 1665KB 1713KB [ 1694.634418] biovec-max 1617KB 1641KB [ 1694.646917] biovec-64 1863KB 1866KB [ 1694.654129] biovec-16 219KB 221KB [ 1694.659503] bio_integrity_payload 1KB 8KB [ 1694.678060] khugepaged_mm_slot 5KB 23KB [ 1694.699692] uid_cache 0KB 4KB [ 1694.706581] dmaengine-unmap-2 0KB 3KB [ 1694.713481] skbuff_fclone_cache 78KB 86KB [ 1694.719033] skbuff_head_cache 9183KB 9183KB [ 1694.725586] configfs_dir_cache 3KB 7KB [ 1694.736144] file_lock_cache 42KB 63KB [ 1694.747318] file_lock_ctx 9KB 15KB [ 1694.755708] fsnotify_mark_connector 6KB 15KB [ 1694.765717] net_namespace 70KB 70KB [ 1694.777211] shmem_inode_cache 8092KB 8143KB [ 1694.786077] task_delay_info 186KB 359KB [ 1694.798886] taskstats 38KB 65KB [ 1694.807927] proc_dir_entry 819KB 896KB [ 1694.819017] pde_opener 8KB 46KB [ 1694.834962] seq_file 258KB 413KB [ 1694.842084] sigqueue 68KB 70KB [ 1694.847463] kernfs_node_cache 16787KB 17289KB [ 1694.867280] mnt_cache 207KB 216KB [ 1694.878076] filp 6791KB 8880KB [ 1694.888885] names_cache 120521KB 120542KB [ 1694.899520] iint_cache 37KB 51KB [ 1694.908418] key_jar 4KB 11KB [ 1694.918116] uts_namespace 3KB 7KB [ 1694.926878] nsproxy 2KB 11KB [ 1694.935599] vm_area_struct 2967KB 3437KB [ 1694.947367] mm_struct 390KB 552KB [ 1694.954119] fs_cache 175KB 332KB [ 1694.959508] files_cache 645KB 697KB [ 1694.968568] signal_cache 1286KB 1696KB [ 1694.979402] sighand_cache 559KB 624KB [ 1694.988232] task_struct 6243KB 6243KB [ 1694.998033] cred_jar 2104KB 2820KB [ 1695.006704] anon_vma_chain 971KB 1575KB [ 1695.015665] anon_vma 144KB 292KB [ 1695.035013] pid 104KB 240KB [ 1695.043900] Acpi-Operand 156KB 198KB [ 1695.049359] Acpi-ParseExt 8KB 11KB [ 1695.068946] Acpi-Parse 41KB 47KB [ 1695.078043] Acpi-State 52KB 63KB [ 1695.089593] Acpi-Namespace 20KB 27KB [ 1695.098545] numa_policy 0KB 3KB [ 1695.108042] debug_objects_cache 1642KB 1883KB [ 1695.117065] trace_event_file 297KB 298KB [ 1695.122494] ftrace_event_field 398KB 401KB [ 1695.127943] pool_workqueue 133KB 152KB [ 1695.136674] page->ptl 441KB 972KB [ 1695.146398] kmalloc-2097152 2050KB 2050KB [ 1695.155842] kmalloc-524288 2056KB 2056KB [ 1695.173298] kmalloc-262144 1290KB 1290KB [ 1695.178679] kmalloc-131072 650KB 650KB [ 1695.196928] kmalloc-65536 2376KB 2442KB [ 1695.205444] kmalloc-32768 1980KB 1980KB [ 1695.218384] kmalloc-16384 1204KB 1270KB [ 1695.226305] kmalloc-8192 4892KB 4900KB [ 1695.237192] kmalloc-4096 23047KB 23077KB [ 1695.248738] kmalloc-2048 13619KB 14069KB [ 1695.255621] kmalloc-1024 11691KB 14088KB [ 1695.277188] kmalloc-512 18046KB 18105KB [ 1695.284479] kmalloc-256 4938KB 6255KB [ 1695.307484] kmalloc-128 1034KB 1602KB [ 1695.316388] kmalloc-96 3660KB 4368KB [ 1695.323130] kmalloc-64 2534KB 3828KB [ 1695.328511] kmalloc-32 1933KB 2512KB [ 1695.337482] kmalloc-192 1913KB 2928KB [ 1695.349670] kmem_cache 177KB 183KB [ 1695.364185] Out of memory (oom_kill_allocating_task): Kill process 8099 (syz-fuzzer) score 0 or sacrifice child [ 1695.388234] Killed process 20745 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1695.398949] oom_reaper: reaped process 20745 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1695.412839] systemd-cgroups invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1695.436231] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1695.445057] CPU: 1 PID: 21852 Comm: systemd-cgroups Not tainted 4.19.211-syzkaller #0 [ 1695.453027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1695.462378] Call Trace: [ 1695.464974] dump_stack+0x1fc/0x2ef [ 1695.468713] dump_header+0x15d/0xc3f [ 1695.472441] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1695.477554] ? ___ratelimit+0x319/0x590 [ 1695.481532] oom_kill_process.cold+0x10/0x692 [ 1695.486030] ? check_preemption_disabled+0x41/0x280 [ 1695.491059] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1695.496331] out_of_memory+0x1072/0x1390 [ 1695.500400] ? oom_killer_disable+0x270/0x270 [ 1695.504896] ? mutex_trylock+0x15f/0x1a0 [ 1695.508958] __alloc_pages_nodemask+0x23a2/0x2890 [ 1695.513816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1695.518662] ? lock_downgrade+0x720/0x720 [ 1695.522808] ? debug_check_no_obj_freed+0xb5/0x490 [ 1695.527765] alloc_pages_current+0x193/0x2a0 [ 1695.532176] ? mark_held_locks+0xf0/0xf0 [ 1695.536245] pte_alloc_one+0x16/0x190 [ 1695.540054] __handle_mm_fault+0x31e7/0x41c0 [ 1695.544491] ? do_mmap+0x59c/0x1080 [ 1695.548204] ? vm_insert_page+0x9c0/0x9c0 [ 1695.552381] ? check_preemption_disabled+0x41/0x280 [ 1695.557399] handle_mm_fault+0x436/0xb10 [ 1695.561463] __do_page_fault+0x68e/0xd60 [ 1695.565519] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1695.570611] ? spurious_fault+0x840/0x840 [ 1695.574755] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1695.579598] ? page_fault+0x8/0x30 [ 1695.583148] page_fault+0x1e/0x30 [ 1695.586600] RIP: 0033:0x7fc52fae4060 [ 1695.590328] Code: Bad RIP value. [ 1695.593684] RSP: 002b:00007ffcdf3d2b38 EFLAGS: 00010202 [ 1695.599048] RAX: 00007fc52fad34e0 RBX: 00007fc52fcfa000 RCX: 00007fc52f8d9660 [ 1695.606322] RDX: 0000000000000000 RSI: 00007fc52fcfa040 RDI: 00007fc52fcfa000 [ 1695.613694] RBP: 00007ffcdf3d2c80 R08: 00007fc52f8ba000 R09: 0000000070000021 [ 1695.620963] R10: 0000000000000031 R11: 0000000000000206 R12: 00007ffcdf3d2d68 [ 1695.628240] R13: 000000037ffff1a0 R14: 0000000000000801 R15: 00007ffcdf3d2d20 [ 1695.641119] Mem-Info: [ 1695.643600] active_anon:14997 inactive_anon:73843 isolated_anon:0 [ 1695.643600] active_file:42 inactive_file:0 isolated_file:0 [ 1695.643600] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1695.643600] slab_reclaimable:13635 slab_unreclaimable:115326 [ 1695.643600] mapped:14563 shmem:74801 pagetables:496 bounce:0 [ 1695.643600] free:24870 free_pcp:187 free_cma:0 [ 1695.679613] Node 0 active_anon:56752kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45964kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1695.728730] Node 1 active_anon:3236kB inactive_anon:269032kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1695.773143] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.811511] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1695.816561] Node 0 DMA32 free:35220kB min:35996kB low:44992kB high:53988kB active_anon:56752kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1908kB bounce:0kB free_pcp:448kB local_pcp:180kB free_cma:0kB [ 1695.851384] lowmem_reserve[]: 0 0 1 1 1 [ 1695.855386] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.885406] lowmem_reserve[]: 0 0 0 0 0 [ 1695.889406] Node 1 Normal free:53280kB min:53876kB low:67344kB high:80812kB active_anon:3236kB inactive_anon:269032kB active_file:140kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:76kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1695.923489] lowmem_reserve[]: 0 0 0 0 0 [ 1695.927495] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1695.944575] Node 0 DMA32: 693*4kB (UME) 450*8kB (UME) 219*16kB (ME) 91*32kB (UME) 31*64kB (UM) 12*128kB (UM) 10*256kB (UM) 2*512kB (M) 13*1024kB (U) 1*2048kB (M) 0*4096kB = 35252kB [ 1695.964757] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1695.975919] Node 1 Normal: 356*4kB (ME) 306*8kB (UME) 228*16kB (UME) 84*32kB (ME) 29*64kB (M) 14*128kB (ME) 8*256kB (UME) 3*512kB (M) 3*1024kB (UM) 2*2048kB (UM) 7*4096kB (U) = 53280kB [ 1695.997427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.024830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1696.036523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.046299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1696.094602] 74834 total pagecache pages [ 1696.098615] 0 pages in swap cache [ 1696.109711] Swap cache stats: add 0, delete 0, find 0/0 [ 1696.115189] Free swap = 0kB [ 1696.118202] Total swap = 0kB [ 1696.135172] 2097051 pages RAM [ 1696.138291] 0 pages HighMem/MovableOnly [ 1696.142350] 369649 pages reserved [ 1696.145793] 0 pages cma reserved [ 1696.149147] Unreclaimable slab info: [ 1696.159637] Name Used Total [ 1696.165259] pid_2 23KB 48KB [ 1696.184873] batadv_tt_change_cache 1KB 3KB [ 1696.190750] batadv_tl_cache 5KB 16KB [ 1696.196203] TIPC 13KB 30KB [ 1696.215119] SCTPv6 18KB 30KB [ 1696.227635] DCCPv6 15KB 30KB [ 1696.233985] DCCP 14KB 28KB [ 1696.239405] RXRPC 14KB 26KB [ 1696.246253] rxrpc_call_jar 101KB 110KB [ 1696.258378] bridge_fdb_cache 11KB 23KB [ 1696.278613] fib6_nodes 183KB 288KB [ 1696.287522] ip6_dst_cache 302KB 652KB [ 1696.296391] RAWv6 91KB 94KB [ 1696.305918] UDPv6 31KB 41KB [ 1696.331222] TCPv6 24KB 36KB [ 1696.336627] nf_conntrack 6KB 15KB [ 1696.343831] t10_alua_lu_gp_cache 0KB 3KB [ 1696.349459] sd_ext_cdb 0KB 7KB [ 1696.368714] scsi_sense_cache 1056KB 1060KB [ 1696.377927] virtio_scsi_cmd 16KB 16KB [ 1696.388610] sgpool-128 8KB 8KB [ 1696.396531] sgpool-64 4KB 12KB [ 1696.401956] sgpool-32 2KB 15KB [ 1696.407920] sgpool-16 1KB 7KB [ 1696.427097] sgpool-8 0KB 7KB [ 1696.435994] mqueue_inode_cache 13KB 22KB [ 1696.453319] bio_post_read_ctx 14KB 15KB [ 1696.458758] bio-2 14KB 15KB [ 1696.469645] jfs_mp 7KB 7KB [ 1696.477452] cifs_small_rq 15KB 16KB [ 1696.483023] cifs_request 67KB 67KB [ 1696.488377] cifs_mpx_ids 0KB 7KB [ 1696.507794] nfs_commit_data 3KB 14KB [ 1696.518040] nfs_write_data 34KB 44KB [ 1696.528173] ext4_system_zone 1KB 7KB [ 1696.540546] bio-1 1KB 7KB [ 1696.545929] pid_namespace 2KB 7KB [ 1696.558099] rpc_buffers 17KB 25KB [ 1696.566876] rpc_tasks 2KB 7KB [ 1696.592737] UNIX 879KB 993KB [ 1696.598144] tcp_bind_bucket 1KB 4KB [ 1696.606981] ip_fib_trie 27KB 47KB [ 1696.617426] ip_fib_alias 130KB 205KB [ 1696.626310] ip_dst_cache 8KB 24KB [ 1696.638524] RAW 54KB 67KB [ 1696.664063] UDP 50KB 67KB [ 1696.669635] TCP 25KB 28KB [ 1696.679769] hugetlbfs_inode_cache 3KB 15KB [ 1696.685493] fscache_cookie_jar 1KB 7KB [ 1696.691101] eventpoll_pwq 28KB 55KB [ 1696.696444] eventpoll_epi 52KB 66KB [ 1696.701834] inotify_inode_mark 12KB 27KB [ 1696.707272] request_queue 199KB 199KB [ 1696.712703] blkdev_requests 1KB 3KB [ 1696.718094] blkdev_ioc 35KB 38KB [ 1696.723492] bio-0 1665KB 1713KB [ 1696.728837] biovec-max 1617KB 1641KB [ 1696.734247] biovec-64 1863KB 1866KB [ 1696.739605] biovec-16 219KB 221KB [ 1696.744984] bio_integrity_payload 1KB 8KB [ 1696.750770] khugepaged_mm_slot 5KB 23KB [ 1696.756218] uid_cache 0KB 4KB [ 1696.761692] dmaengine-unmap-2 0KB 3KB [ 1696.767039] skbuff_fclone_cache 78KB 86KB [ 1696.772620] skbuff_head_cache 9333KB 9333KB [ 1696.777966] configfs_dir_cache 3KB 7KB [ 1696.783420] file_lock_cache 42KB 63KB [ 1696.788761] file_lock_ctx 9KB 15KB [ 1696.794873] fsnotify_mark_connector 6KB 15KB [ 1696.800827] net_namespace 70KB 70KB [ 1696.806182] shmem_inode_cache 8092KB 8143KB [ 1696.811595] task_delay_info 186KB 359KB [ 1696.818517] taskstats 38KB 65KB [ 1696.823938] proc_dir_entry 819KB 896KB [ 1696.829311] pde_opener 8KB 46KB [ 1696.834732] seq_file 258KB 413KB [ 1696.840231] sigqueue 68KB 70KB [ 1696.845653] kernfs_node_cache 16787KB 17289KB [ 1696.851095] mnt_cache 207KB 216KB [ 1696.856446] filp 6791KB 8880KB [ 1696.861869] names_cache 120521KB 120542KB [ 1696.867222] iint_cache 37KB 51KB [ 1696.872625] key_jar 4KB 11KB [ 1696.877974] uts_namespace 3KB 7KB [ 1696.883357] nsproxy 2KB 11KB [ 1696.888702] vm_area_struct 2967KB 3437KB [ 1696.894084] mm_struct 390KB 552KB [ 1696.899454] fs_cache 175KB 332KB [ 1696.904981] files_cache 645KB 697KB [ 1696.911008] signal_cache 1286KB 1696KB [ 1696.916376] sighand_cache 559KB 624KB [ 1696.923026] task_struct 6243KB 6243KB [ 1696.928388] cred_jar 2104KB 2820KB [ 1696.933810] anon_vma_chain 971KB 1575KB [ 1696.939173] anon_vma 144KB 292KB [ 1696.944677] pid 104KB 240KB [ 1696.950087] Acpi-Operand 156KB 198KB [ 1696.955524] Acpi-ParseExt 8KB 11KB [ 1696.961109] Acpi-Parse 41KB 47KB [ 1696.966476] Acpi-State 52KB 63KB [ 1696.971883] Acpi-Namespace 20KB 27KB [ 1696.977241] numa_policy 0KB 3KB [ 1696.982675] debug_objects_cache 1642KB 1883KB [ 1696.988228] trace_event_file 297KB 298KB [ 1696.993636] ftrace_event_field 398KB 401KB [ 1696.999078] pool_workqueue 133KB 152KB [ 1697.004507] page->ptl 441KB 972KB [ 1697.009921] kmalloc-2097152 2050KB 2050KB [ 1697.015276] kmalloc-524288 2056KB 2056KB [ 1697.020678] kmalloc-262144 1290KB 1290KB [ 1697.027024] kmalloc-131072 650KB 650KB [ 1697.032870] kmalloc-65536 2376KB 2442KB [ 1697.038239] kmalloc-32768 1980KB 1980KB [ 1697.043673] kmalloc-16384 1204KB 1270KB [ 1697.049033] kmalloc-8192 4892KB 4900KB [ 1697.054447] kmalloc-4096 23047KB 23077KB [ 1697.059861] kmalloc-2048 13619KB 14069KB [ 1697.065307] kmalloc-1024 11758KB 14088KB [ 1697.070725] kmalloc-512 18275KB 18333KB [ 1697.076075] kmalloc-256 4947KB 6255KB [ 1697.081449] kmalloc-128 1034KB 1602KB [ 1697.086788] kmalloc-96 3675KB 4368KB [ 1697.092243] kmalloc-64 2534KB 3828KB [ 1697.097586] kmalloc-32 1937KB 2512KB [ 1697.103109] kmalloc-192 1913KB 2928KB [ 1697.108487] kmem_cache 177KB 183KB [ 1697.114183] Out of memory (oom_kill_allocating_task): Kill process 21852 (systemd-cgroups) score 0 or sacrifice child [ 1697.126391] Killed process 21852 (systemd-cgroups) total-vm:2496kB, anon-rss:36kB, file-rss:0kB, shmem-rss:0kB [ 1697.136999] oom_reaper: reaped process 21852 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1697.481404] oom_reaper: reaped process 21627 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1697.490199] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1697.539731] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1697.562282] CPU: 0 PID: 8085 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1697.569753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1697.579098] Call Trace: [ 1697.581687] dump_stack+0x1fc/0x2ef [ 1697.585326] dump_header+0x15d/0xc3f [ 1697.589040] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1697.594140] ? ___ratelimit+0x319/0x590 [ 1697.598115] oom_kill_process.cold+0x10/0x692 [ 1697.602617] ? check_preemption_disabled+0x41/0x280 [ 1697.607637] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1697.612914] out_of_memory+0x1072/0x1390 [ 1697.616980] ? oom_killer_disable+0x270/0x270 [ 1697.621476] ? mutex_trylock+0x15f/0x1a0 [ 1697.625544] __alloc_pages_nodemask+0x23a2/0x2890 [ 1697.630493] ? find_get_entry+0x4cd/0x8a0 [ 1697.634647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1697.639609] alloc_pages_current+0x193/0x2a0 [ 1697.644033] filemap_fault+0x146e/0x2180 [ 1697.648113] ext4_filemap_fault+0x84/0xb0 [ 1697.652277] __do_fault+0x10b/0x4b0 [ 1697.655909] __handle_mm_fault+0x273b/0x41c0 [ 1697.660499] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1697.666294] ? vm_insert_page+0x9c0/0x9c0 [ 1697.671061] ? check_preemption_disabled+0x41/0x280 [ 1697.676080] handle_mm_fault+0x436/0xb10 [ 1697.680189] __do_page_fault+0x68e/0xd60 [ 1697.684445] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1697.689460] ? spurious_fault+0x840/0x840 [ 1697.693603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1697.698444] ? page_fault+0x8/0x30 [ 1697.701981] page_fault+0x1e/0x30 [ 1697.705429] RIP: 0033:0x4420d1 [ 1697.708611] Code: Bad RIP value. [ 1697.711950] RSP: 002b:000000c00005ff30 EFLAGS: 00010206 [ 1697.717290] RAX: 0000000000000000 RBX: 0000000000002710 RCX: 000000000046703d [ 1697.724537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00005ff10 [ 1697.731781] RBP: 000000c00005ff88 R08: 000000000004ddde R09: 000001b105a90723 [ 1697.739026] R10: 0000000000000000 R11: 0000000000000202 R12: 000000c00005f950 [ 1697.746273] R13: 000000c0005b2000 R14: 000000c0000004e0 R15: 00007f6e8989e99c [ 1697.756795] Mem-Info: [ 1697.759212] active_anon:14355 inactive_anon:73843 isolated_anon:0 [ 1697.759212] active_file:38 inactive_file:0 isolated_file:0 [ 1697.759212] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1697.759212] slab_reclaimable:13635 slab_unreclaimable:115040 [ 1697.759212] mapped:14563 shmem:74801 pagetables:507 bounce:0 [ 1697.759212] free:13890 free_pcp:288 free_cma:0 [ 1697.759898] syz-executor.2: vmalloc: allocation failure, allocated 1737285632 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1697.792445] Node 0 active_anon:54188kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45964kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1697.833887] Node 1 active_anon:3232kB inactive_anon:269032kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12288kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1697.863145] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.865802] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1697.889595] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1697.900957] Node 0 DMA32 free:17840kB min:35996kB low:44992kB high:53988kB active_anon:54188kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1952kB bounce:0kB free_pcp:892kB local_pcp:252kB free_cma:0kB [ 1697.927849] CPU: 1 PID: 21627 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1697.930743] lowmem_reserve[]: 0 0 1 1 1 [ 1697.938513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1697.938522] Call Trace: [ 1697.942524] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.951822] dump_stack+0x1fc/0x2ef [ 1697.951842] warn_alloc.cold+0x7b/0x18f [ 1697.951859] ? zone_watermark_ok_safe+0x260/0x260 [ 1697.951879] ? policy_node+0x116/0x140 [ 1697.951894] ? __sanitizer_cov_trace_pc+0x22/0x50 [ 1697.951920] __vmalloc_area_node+0x4fd/0x780 [ 1697.951939] ? __vmalloc_node_range+0x180/0x180 [ 1697.951954] ? _raw_spin_unlock+0x29/0x40 [ 1697.951968] ? __get_vm_area_node+0x2e2/0x3a0 [ 1697.951986] __vmalloc_node_range+0xed/0x180 [ 1697.952002] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1697.952018] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1697.952032] vmalloc_user+0x70/0xe0 [ 1697.952046] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1697.952061] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1697.952077] __vb2_queue_alloc+0x472/0xe60 [ 1697.952103] vb2_core_create_bufs+0x273/0x7e0 [ 1697.952119] ? __vb2_queue_free+0x870/0x870 [ 1697.952133] ? __video_do_ioctl+0x632/0xcd0 [ 1697.952153] ? __mutex_lock+0x368/0x1190 [ 1697.952171] vb2_create_bufs+0x332/0x620 [ 1697.952189] ? mark_held_locks+0xf0/0xf0 [ 1697.952203] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1697.952221] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1697.952237] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1697.952259] v4l_create_bufs+0xb2/0x160 [ 1697.952278] __video_do_ioctl+0x49a/0xcd0 [ 1697.952299] ? v4l_querycap+0x340/0x340 [ 1697.952319] ? __might_fault+0x192/0x1d0 [ 1697.952336] ? v4l_querycap+0x340/0x340 [ 1697.952352] video_usercopy+0x13f/0xfa0 [ 1697.952373] ? v4l_enumstd+0x60/0x60 [ 1697.952388] ? do_futex+0x171/0x1880 [ 1697.952404] ? mark_held_locks+0xf0/0xf0 [ 1697.952422] ? debug_check_no_obj_freed+0x201/0x490 [ 1697.952447] ? video_usercopy+0xfa0/0xfa0 [ 1697.952459] v4l2_ioctl+0x147/0x1a0 [ 1697.952472] ? video_devdata+0xa0/0xa0 [ 1697.952488] do_vfs_ioctl+0xcdb/0x12e0 [ 1697.952504] ? lock_downgrade+0x720/0x720 [ 1697.952519] ? check_preemption_disabled+0x41/0x280 [ 1697.952533] ? ioctl_preallocate+0x200/0x200 [ 1697.952552] ? __fget+0x356/0x510 [ 1697.952569] ? do_dup2+0x450/0x450 [ 1697.952583] ? __se_sys_futex+0x298/0x3b0 [ 1697.952606] ksys_ioctl+0x9b/0xc0 [ 1697.952622] __x64_sys_ioctl+0x6f/0xb0 [ 1697.952637] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1697.952651] do_syscall_64+0xf9/0x620 [ 1697.952670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1697.952681] RIP: 0033:0x7f261b4830a9 [ 1697.952695] Code: Bad RIP value. [ 1697.952703] RSP: 002b:00007f26199f5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1697.952717] RAX: ffffffffffffffda RBX: 00007f261b5a2f80 RCX: 00007f261b4830a9 [ 1697.952725] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1697.952734] RBP: 00007f261b4deae9 R08: 0000000000000000 R09: 0000000000000000 [ 1697.952741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.952750] R13: 00007ffe4a6e659f R14: 00007f26199f5300 R15: 0000000000022000 [ 1697.984504] Mem-Info: [ 1697.986577] lowmem_reserve[]: 0 0 0 0 0 [ 1698.017935] active_anon:14355 inactive_anon:73843 isolated_anon:0 [ 1698.017935] active_file:38 inactive_file:0 isolated_file:0 [ 1698.017935] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1698.017935] slab_reclaimable:13635 slab_unreclaimable:115040 [ 1698.017935] mapped:14563 shmem:74801 pagetables:507 bounce:0 [ 1698.017935] free:13890 free_pcp:288 free_cma:0 [ 1698.025840] Node 1 Normal free:26840kB min:53876kB low:67344kB high:80812kB active_anon:3232kB inactive_anon:269032kB active_file:152kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:76kB bounce:0kB free_pcp:260kB local_pcp:8kB free_cma:0kB [ 1698.059771] Node 0 active_anon:54092kB inactive_anon:26340kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45964kB dirty:0kB writeback:0kB shmem:28156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1698.067474] lowmem_reserve[]: 0 0 0 0 0 [ 1698.097611] Node 1 active_anon:3228kB inactive_anon:269032kB active_file:84kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12284kB dirty:0kB writeback:0kB shmem:271048kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1698.102646] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1698.115183] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1698.119709] Node 0 DMA32: 686*4kB (ME) 449*8kB (UME) 217*16kB (UME) 87*32kB (UME) 26*64kB (M) 8*128kB (M) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 1698.156756] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1698.169056] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1698.197085] Node 0 DMA32 free:17840kB min:35996kB low:44992kB high:53988kB active_anon:54092kB inactive_anon:26340kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1948kB bounce:0kB free_pcp:892kB local_pcp:640kB free_cma:0kB [ 1698.201895] Node 1 Normal: 365*4kB (UME) 305*8kB (UME) 227*16kB (UME) 84*32kB (UME) 30*64kB (M) 14*128kB (ME) 8*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 27244kB [ 1698.233277] lowmem_reserve[]: 0 0 1 1 1 [ 1698.240737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1698.269505] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1698.305349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1698.337099] lowmem_reserve[]: 0 0 0 0 0 [ 1698.364402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1698.393322] Node 1 Normal free:27244kB min:53876kB low:67344kB high:80812kB active_anon:3188kB inactive_anon:269032kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:224kB pagetables:60kB bounce:0kB free_pcp:260kB local_pcp:252kB free_cma:0kB [ 1698.448610] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1698.460871] lowmem_reserve[]: 0 0 0 0 0 [ 1698.514146] 74834 total pagecache pages [ 1698.544739] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1698.622568] 0 pages in swap cache [ 1698.626028] Swap cache stats: add 0, delete 0, find 0/0 [ 1698.634869] Free swap = 0kB [ 1698.637879] Total swap = 0kB [ 1698.646807] Node 0 DMA32: 686*4kB (ME) 449*8kB (UME) 217*16kB (UME) 87*32kB (UME) 26*64kB (M) 8*128kB (M) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 1698.647824] 2097051 pages RAM [ 1698.675672] 0 pages HighMem/MovableOnly [ 1698.679725] 369649 pages reserved [ 1698.687224] 0 pages cma reserved [ 1698.688041] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1698.699716] Unreclaimable slab info: [ 1698.705337] Name Used Total [ 1698.721535] Node 1 Normal: 365*4kB (UME) 305*8kB (UME) 227*16kB (UME) 84*32kB (UME) 30*64kB (M) 14*128kB (ME) 8*256kB (UME) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 1*4096kB (U) = 27244kB [ 1698.725149] pid_2 23KB 48KB [ 1698.758194] batadv_tt_change_cache 1KB 3KB [ 1698.758214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1698.767847] batadv_tl_cache 5KB 16KB [ 1698.795111] TIPC 13KB 30KB [ 1698.797698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1698.804346] SCTPv6 18KB 30KB [ 1698.815686] DCCPv6 15KB 30KB [ 1698.829310] DCCP 14KB 28KB [ 1698.835148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1698.857833] RXRPC 14KB 26KB [ 1698.860847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1698.887455] 74834 total pagecache pages [ 1698.887677] rxrpc_call_jar 101KB 110KB [ 1698.910289] bridge_fdb_cache 11KB 23KB [ 1698.915686] fib6_nodes 183KB 288KB [ 1698.917360] 0 pages in swap cache [ 1698.924654] Swap cache stats: add 0, delete 0, find 0/0 [ 1698.928930] ip6_dst_cache 302KB 652KB [ 1698.937590] RAWv6 91KB 94KB [ 1698.954713] UDPv6 31KB 41KB [ 1698.956590] Free swap = 0kB [ 1698.966791] Total swap = 0kB [ 1698.983531] TCPv6 24KB 36KB [ 1698.984111] 2097051 pages RAM [ 1698.988940] nf_conntrack 6KB 15KB [ 1698.998478] 0 pages HighMem/MovableOnly [ 1699.009456] 369649 pages reserved [ 1699.015444] t10_alua_lu_gp_cache 0KB 3KB [ 1699.019425] 0 pages cma reserved [ 1699.049031] sd_ext_cdb 0KB 7KB [ 1699.077908] scsi_sense_cache 1056KB 1060KB [ 1699.099941] virtio_scsi_cmd 16KB 16KB [ 1699.105343] sgpool-128 8KB 8KB [ 1699.113179] sgpool-64 4KB 12KB [ 1699.118554] sgpool-32 2KB 15KB [ 1699.123986] sgpool-16 1KB 7KB [ 1699.129353] sgpool-8 0KB 7KB [ 1699.134776] mqueue_inode_cache 13KB 22KB [ 1699.140265] bio_post_read_ctx 14KB 15KB [ 1699.145694] bio-2 14KB 15KB [ 1699.151100] jfs_mp 7KB 7KB [ 1699.156493] cifs_small_rq 15KB 16KB [ 1699.161911] cifs_request 67KB 67KB [ 1699.167276] cifs_mpx_ids 0KB 7KB [ 1699.172784] nfs_commit_data 3KB 14KB [ 1699.178151] nfs_write_data 34KB 44KB [ 1699.183612] ext4_system_zone 1KB 7KB [ 1699.189002] bio-1 1KB 7KB [ 1699.194459] pid_namespace 2KB 7KB [ 1699.199904] rpc_buffers 17KB 25KB [ 1699.205269] rpc_tasks 2KB 7KB [ 1699.211435] UNIX 879KB 993KB [ 1699.216903] tcp_bind_bucket 1KB 4KB [ 1699.222638] ip_fib_trie 27KB 47KB [ 1699.228010] ip_fib_alias 130KB 205KB [ 1699.233731] ip_dst_cache 8KB 24KB [ 1699.239101] RAW 54KB 67KB [ 1699.244506] UDP 50KB 67KB [ 1699.249922] TCP 25KB 28KB [ 1699.255290] hugetlbfs_inode_cache 3KB 15KB [ 1699.261037] fscache_cookie_jar 1KB 7KB [ 1699.267706] eventpoll_pwq 28KB 55KB [ 1699.273126] eventpoll_epi 52KB 66KB [ 1699.278607] inotify_inode_mark 12KB 27KB [ 1699.284218] request_queue 199KB 199KB [ 1699.289650] blkdev_requests 1KB 3KB [ 1699.295019] blkdev_ioc 35KB 38KB [ 1699.300478] bio-0 1665KB 1713KB [ 1699.305859] biovec-max 1617KB 1641KB [ 1699.311819] biovec-64 1863KB 1866KB [ 1699.318059] biovec-16 219KB 221KB [ 1699.323590] bio_integrity_payload 1KB 8KB [ 1699.329313] khugepaged_mm_slot 5KB 23KB [ 1699.335386] uid_cache 0KB 4KB [ 1699.341187] dmaengine-unmap-2 0KB 3KB [ 1699.346558] skbuff_fclone_cache 78KB 86KB [ 1699.352485] skbuff_head_cache 9304KB 9363KB [ 1699.357854] configfs_dir_cache 3KB 7KB [ 1699.363356] file_lock_cache 42KB 63KB [ 1699.368726] file_lock_ctx 9KB 15KB [ 1699.374144] fsnotify_mark_connector 6KB 15KB [ 1699.380173] net_namespace 70KB 70KB [ 1699.385629] shmem_inode_cache 8092KB 8143KB [ 1699.391823] task_delay_info 186KB 359KB [ 1699.397199] taskstats 38KB 65KB [ 1699.402674] proc_dir_entry 819KB 896KB [ 1699.408044] pde_opener 8KB 46KB [ 1699.413660] seq_file 258KB 413KB [ 1699.419034] sigqueue 68KB 70KB [ 1699.424482] kernfs_node_cache 16787KB 17289KB [ 1699.429891] mnt_cache 207KB 216KB [ 1699.435261] filp 6740KB 8868KB [ 1699.440660] names_cache 119688KB 119748KB [ 1699.446028] iint_cache 37KB 51KB [ 1699.452016] key_jar 4KB 11KB [ 1699.457384] uts_namespace 3KB 7KB [ 1699.463101] nsproxy 2KB 11KB [ 1699.468471] vm_area_struct 2967KB 3437KB [ 1699.474236] mm_struct 390KB 552KB [ 1699.479641] fs_cache 175KB 332KB [ 1699.485006] files_cache 645KB 697KB [ 1699.490504] signal_cache 1286KB 1696KB [ 1699.495873] sighand_cache 559KB 624KB [ 1699.501422] task_struct 6243KB 6243KB [ 1699.506795] cred_jar 2104KB 2820KB [ 1699.512248] anon_vma_chain 971KB 1575KB [ 1699.517619] anon_vma 144KB 292KB [ 1699.523020] pid 104KB 240KB [ 1699.528387] Acpi-Operand 156KB 198KB [ 1699.533840] Acpi-ParseExt 8KB 11KB [ 1699.539207] Acpi-Parse 41KB 47KB [ 1699.544608] Acpi-State 52KB 63KB [ 1699.550009] Acpi-Namespace 20KB 27KB [ 1699.555376] numa_policy 0KB 3KB [ 1699.560791] debug_objects_cache 1642KB 1883KB [ 1699.566332] trace_event_file 297KB 298KB [ 1699.572240] ftrace_event_field 398KB 401KB [ 1699.577702] pool_workqueue 133KB 152KB [ 1699.583645] page->ptl 441KB 972KB [ 1699.589084] kmalloc-2097152 2050KB 2050KB [ 1699.605031] kmalloc-524288 2056KB 2056KB [ 1699.612155] kmalloc-262144 1290KB 1290KB [ 1699.617529] kmalloc-131072 650KB 650KB [ 1699.627570] kmalloc-65536 2376KB 2442KB [ 1699.634682] kmalloc-32768 1980KB 1980KB [ 1699.642541] kmalloc-16384 1204KB 1270KB [ 1699.647924] kmalloc-8192 4892KB 4900KB [ 1699.654990] kmalloc-4096 22945KB 23005KB [ 1699.662804] kmalloc-2048 13619KB 14069KB [ 1699.668181] kmalloc-1024 11731KB 14080KB [ 1699.675306] kmalloc-512 18222KB 18348KB [ 1699.683074] kmalloc-256 4947KB 6255KB [ 1699.688798] kmalloc-128 1034KB 1602KB [ 1699.694295] kmalloc-96 3675KB 4368KB [ 1699.700449] kmalloc-64 2534KB 3828KB [ 1699.705817] kmalloc-32 1937KB 2512KB [ 1699.711529] kmalloc-192 1913KB 2928KB [ 1699.716899] kmem_cache 177KB 183KB [ 1699.722888] Out of memory (oom_kill_allocating_task): Kill process 8085 (syz-fuzzer) score 0 or sacrifice child [ 1699.733617] Killed process 19157 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1700.007170] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1700.027103] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1700.071397] systemd[1]: rsyslog.service: Unit entered failed state. [ 1700.095459] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1700.115341] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1700.168113] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1700.194132] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1700.216947] systemd[1]: Stopped Journal Service. [ 1700.272650] systemd[1]: Starting Journal Service... [ 1700.290030] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1700.522643] systemd-journald[21858]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1700.888226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.909692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.924817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.931807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.940900] device bridge_slave_1 left promiscuous mode [ 1700.946440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.954440] device bridge_slave_0 left promiscuous mode [ 1700.960844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.971638] device veth1_macvtap left promiscuous mode [ 1700.977109] device veth0_macvtap left promiscuous mode [ 1700.982975] device veth1_vlan left promiscuous mode [ 1700.988050] device veth0_vlan left promiscuous mode [ 1703.489458] Bluetooth: hci2: command 0x0409 tx timeout [ 1705.569511] Bluetooth: hci2: command 0x041b tx timeout [ 1707.649329] Bluetooth: hci2: command 0x040f tx timeout [ 1707.935709] device hsr_slave_1 left promiscuous mode [ 1707.943349] device hsr_slave_0 left promiscuous mode [ 1707.958380] team0 (unregistering): Port device team_slave_1 removed [ 1707.970600] team0 (unregistering): Port device team_slave_0 removed [ 1707.982767] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1707.993827] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1708.022652] bond0 (unregistering): Released all slaves [ 1708.039834] IPVS: ftp: loaded support on port[0] = 21 [ 1708.347128] chnl_net:caif_netlink_parms(): no params data found [ 1708.420279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.426707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.440539] device bridge_slave_0 entered promiscuous mode [ 1708.448001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.461644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.471547] device bridge_slave_1 entered promiscuous mode [ 1708.504700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1708.516265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1708.555088] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1708.565879] team0: Port device team_slave_0 added [ 1708.574561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1708.585686] team0: Port device team_slave_1 added [ 1708.615856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.624877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.655722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.668672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.680211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.712284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.728912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1708.741367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1708.774704] device hsr_slave_0 entered promiscuous mode [ 1708.782621] device hsr_slave_1 entered promiscuous mode [ 1708.788934] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1708.799067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1708.893359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.899868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.906536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.912955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.973160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.985802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1708.998257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1709.014497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.023015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.036128] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1709.044505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.057454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1709.066820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1709.077903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1709.086318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.092739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.102724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1709.111703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1709.119795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1709.127426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.133824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.143891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1709.151679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1709.162760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1709.171561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1709.182298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1709.191336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1709.200087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1709.211050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1709.220316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1709.227618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1709.236357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1709.245882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1709.253313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1709.261883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1709.272553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1709.280120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1709.288495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1709.300423] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1709.306577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1709.360069] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1709.374093] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1709.380468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1709.387175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1709.402382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1709.442936] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1709.452156] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1709.460230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1709.468308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1709.497953] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1709.505375] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1709.512306] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1709.522690] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1709.739235] Bluetooth: hci2: command 0x0419 tx timeout [ 1709.894804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1709.902244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1709.911653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1709.918745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1709.928664] device veth0_vlan entered promiscuous mode [ 1709.941208] device veth1_vlan entered promiscuous mode [ 1709.947317] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1710.148389] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1710.155959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1710.163588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1710.178429] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1710.187853] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1710.194857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1710.202781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1710.397370] device veth0_macvtap entered promiscuous mode [ 1710.404372] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1710.415369] device veth1_macvtap entered promiscuous mode [ 1710.422479] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1710.615993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1710.627289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1710.637936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.647824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.657284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.667087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.676267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.686306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.695943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.705763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.716454] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1710.723616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.730592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1710.737853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1710.746121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1710.754183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1710.858284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.868436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.877724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.887498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.896854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.906719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.916063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.925943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.936134] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1710.943197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.950600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1710.958577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1711.565568] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1711.577118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.602790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.618209] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1711.816218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1711.824141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1711.832347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.839432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:52:36 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x6}) 14:52:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) shmget(0x3, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) 14:52:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}]}}}) 14:52:36 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18}, 0x18) 14:52:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) shmget(0x3, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) 14:52:36 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:52:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffff1c2, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xc7e8}}, 0x18) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xe81, 0x0, 0x3, {0x4, @raw_data="4f95d660f8e87989dcfb65c50a522c1ec5f3a5838cdd20f83c08a4b95d006118b83e61d9295d4b71fda0da9e97f6775d3e4d23ab1160c7ec8d08178e4e146590ff9f5152a4ef77a1d53249a919364957972d5309e28682664267c5244b6c1579ee964e22303a631e3ee5e9c23b9a75d717aab32a99216f74f382122c309be04d7abb86af1355b003efbc7cadd4b58d45cb95279ba98299ea412425e862d04eeb426b7f0d331fa0c398f5340a887512299189ba125764f25472d633def4cff435bcf73fecdcfa00c0"}, 0x6}) 14:52:36 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:52:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)=0x1) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) (async) shmget(0x3, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) 14:52:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffff1c2, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xc7e8}}, 0x18) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xe81, 0x0, 0x3, {0x4, @raw_data="4f95d660f8e87989dcfb65c50a522c1ec5f3a5838cdd20f83c08a4b95d006118b83e61d9295d4b71fda0da9e97f6775d3e4d23ab1160c7ec8d08178e4e146590ff9f5152a4ef77a1d53249a919364957972d5309e28682664267c5244b6c1579ee964e22303a631e3ee5e9c23b9a75d717aab32a99216f74f382122c309be04d7abb86af1355b003efbc7cadd4b58d45cb95279ba98299ea412425e862d04eeb426b7f0d331fa0c398f5340a887512299189ba125764f25472d633def4cff435bcf73fecdcfa00c0"}, 0x6}) 14:52:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x3, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:52:36 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) [ 1713.117712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.124682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.133329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.140806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.148433] device bridge_slave_1 left promiscuous mode [ 1713.154956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.163493] device bridge_slave_0 left promiscuous mode [ 1713.170395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.179808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.186639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.195184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.202313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.211196] device bridge_slave_1 left promiscuous mode [ 1713.216645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.224383] device bridge_slave_0 left promiscuous mode [ 1713.230228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.241517] device veth1_macvtap left promiscuous mode [ 1713.246814] device veth0_macvtap left promiscuous mode [ 1713.253113] device veth1_vlan left promiscuous mode [ 1713.258212] device veth0_vlan left promiscuous mode [ 1713.274962] device veth1_macvtap left promiscuous mode [ 1713.280974] device veth0_macvtap left promiscuous mode [ 1713.286314] device veth1_vlan left promiscuous mode [ 1713.296128] device veth0_vlan left promiscuous mode [ 1715.328958] Bluetooth: hci1: command 0x0409 tx timeout [ 1715.488936] Bluetooth: hci4: command 0x0409 tx timeout [ 1715.494397] Bluetooth: hci3: command 0x0409 tx timeout [ 1717.408895] Bluetooth: hci1: command 0x041b tx timeout [ 1717.568869] Bluetooth: hci3: command 0x041b tx timeout [ 1717.574499] Bluetooth: hci4: command 0x041b tx timeout [ 1719.488776] Bluetooth: hci1: command 0x040f tx timeout [ 1719.648753] Bluetooth: hci4: command 0x040f tx timeout [ 1719.654457] Bluetooth: hci3: command 0x040f tx timeout [ 1721.568810] Bluetooth: hci1: command 0x0419 tx timeout [ 1721.728655] Bluetooth: hci3: command 0x0419 tx timeout [ 1721.734039] Bluetooth: hci4: command 0x0419 tx timeout [ 1721.741139] device hsr_slave_1 left promiscuous mode [ 1721.748876] device hsr_slave_0 left promiscuous mode [ 1721.766308] team0 (unregistering): Port device team_slave_1 removed [ 1721.775848] team0 (unregistering): Port device team_slave_0 removed [ 1721.786244] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1721.797098] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1721.826401] bond0 (unregistering): Released all slaves [ 1721.865531] device hsr_slave_1 left promiscuous mode [ 1721.875918] device hsr_slave_0 left promiscuous mode [ 1721.890875] team0 (unregistering): Port device team_slave_1 removed [ 1721.903186] team0 (unregistering): Port device team_slave_0 removed [ 1721.914115] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1721.925349] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1721.955557] bond0 (unregistering): Released all slaves [ 1721.975828] IPVS: ftp: loaded support on port[0] = 21 [ 1721.975834] IPVS: ftp: loaded support on port[0] = 21 [ 1721.993404] IPVS: ftp: loaded support on port[0] = 21 [ 1722.247359] chnl_net:caif_netlink_parms(): no params data found [ 1722.285425] chnl_net:caif_netlink_parms(): no params data found [ 1722.297209] chnl_net:caif_netlink_parms(): no params data found [ 1722.377145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.385844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.394990] device bridge_slave_0 entered promiscuous mode [ 1722.403645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.411627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.421398] device bridge_slave_1 entered promiscuous mode [ 1722.457490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.464620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.474594] device bridge_slave_0 entered promiscuous mode [ 1722.484362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1722.498015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.507245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.515977] device bridge_slave_1 entered promiscuous mode [ 1722.525764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1722.576764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.584887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.593627] device bridge_slave_0 entered promiscuous mode [ 1722.603452] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1722.615350] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1722.625353] team0: Port device team_slave_0 added [ 1722.631478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.637831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.647854] device bridge_slave_1 entered promiscuous mode [ 1722.657300] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1722.666510] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1722.675308] team0: Port device team_slave_1 added [ 1722.717519] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1722.728150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1722.737604] team0: Port device team_slave_0 added [ 1722.753254] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1722.762844] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1722.772176] team0: Port device team_slave_1 added [ 1722.778183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.785903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.812835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.848090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.854933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.881525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.901287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.907560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.936100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.951328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1722.960544] team0: Port device team_slave_0 added [ 1722.966343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1722.976049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.985179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.011290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.023136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1723.032789] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1723.041426] team0: Port device team_slave_1 added [ 1723.070417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1723.090705] device hsr_slave_0 entered promiscuous mode [ 1723.097246] device hsr_slave_1 entered promiscuous mode [ 1723.111560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1723.137334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1723.145642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.153497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.181084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.196842] device hsr_slave_0 entered promiscuous mode [ 1723.204186] device hsr_slave_1 entered promiscuous mode [ 1723.211199] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1723.218937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.227190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.254788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.271772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1723.295510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1723.318852] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1723.326704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1723.400617] device hsr_slave_0 entered promiscuous mode [ 1723.406447] device hsr_slave_1 entered promiscuous mode [ 1723.415161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1723.426015] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1723.573394] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1723.677157] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1723.755826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.771394] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1723.792273] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1723.812415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.825814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1723.836444] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1723.842646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.850500] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1723.857451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1723.865000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1723.881927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1723.892130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1723.906805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1723.915909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1723.923643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1723.932129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1723.941083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.947463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.956434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1723.967074] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1723.973880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.984835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1723.995100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1724.003885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1724.011976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1724.021361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.027709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.034848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1724.043718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1724.051555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.058018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.066180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1724.077147] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1724.087400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1724.095281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1724.104140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1724.112443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.118857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.126041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1724.138754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1724.148177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1724.158337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1724.167238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1724.175341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1724.183735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1724.195923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1724.206525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1724.214325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1724.222608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1724.230950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1724.239582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1724.248616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1724.261890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1724.269402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1724.276440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1724.285932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1724.294800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1724.303304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1724.311619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1724.321814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.330406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1724.340897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1724.350935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1724.363467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1724.371827] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1724.381181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1724.390073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1724.397870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1724.406781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1724.416283] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1724.423233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1724.432919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1724.440745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1724.448009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1724.457255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1724.467207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1724.476838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1724.484069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1724.493278] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1724.500341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1724.510205] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1724.516370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.526459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1724.536124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1724.544484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1724.552564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.559693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.569325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1724.582350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1724.594294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1724.602595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1724.610978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.617320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.626597] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1724.637053] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1724.645649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1724.654300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1724.664161] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1724.672904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1724.682487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1724.692788] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1724.703619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.711952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1724.720150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1724.726903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1724.734284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1724.746700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.756077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1724.764235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1724.776143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1724.785548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1724.796613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1724.804936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1724.814050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1724.826603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1724.838149] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1724.846137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1724.855049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1724.867026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1724.874670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1724.883170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1724.894483] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1724.905612] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1724.912290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1724.921067] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1724.930389] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1724.938060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1724.947447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1724.956511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1724.965044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1725.026807] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1725.036623] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1725.048968] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1725.056281] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1725.064167] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1725.071557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1725.079515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1725.088106] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1725.096521] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1725.107949] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1725.119739] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1725.128004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1725.135849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1725.145125] device veth0_vlan entered promiscuous mode [ 1725.155363] device veth1_vlan entered promiscuous mode [ 1725.161757] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1725.169023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1725.176133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1725.183352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1725.193729] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1725.204216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.213731] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1725.220865] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1725.229609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1725.237976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1725.247863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1725.255763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1725.265474] device veth0_vlan entered promiscuous mode [ 1725.280068] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1725.290857] device veth1_vlan entered promiscuous mode [ 1725.297084] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1725.307373] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1725.316789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1725.324815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1725.333304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1725.342945] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1725.355923] device veth0_macvtap entered promiscuous mode [ 1725.362737] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1725.373325] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1725.383922] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1725.393213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1725.401512] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1725.415569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1725.424157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1725.438782] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1725.446811] device veth1_macvtap entered promiscuous mode [ 1725.454402] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1725.466304] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1725.477111] device veth0_macvtap entered promiscuous mode [ 1725.483730] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1725.495800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1725.503124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.510620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1725.518650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1725.526459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1725.536224] device veth1_macvtap entered promiscuous mode [ 1725.543729] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1725.557550] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1725.565275] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1725.573361] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1725.582702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1725.595568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1725.605996] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1725.614759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1725.622748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1725.631316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1725.640593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.651042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.661034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.671599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.681550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.692703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.703402] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1725.710922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.719997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1725.727190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1725.734717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1725.742574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1725.750771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1725.759354] device veth0_vlan entered promiscuous mode [ 1725.767230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.777220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.787155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.797197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.806375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1725.817098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.827436] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1725.834561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.846402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1725.854550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1725.892269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.902618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.911960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.921915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.931124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.941196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.950900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1725.961057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1725.971978] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1725.979110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.991245] device veth1_vlan entered promiscuous mode [ 1725.997220] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1726.013625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1726.021484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1726.029876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1726.041173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.051999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.061186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.070966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.080392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.090205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.099461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.109247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.119790] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1726.127163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.137519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1726.147577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1726.164739] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1726.176616] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1726.185613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1726.194286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1726.209152] device veth0_macvtap entered promiscuous mode [ 1726.215752] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1726.238044] device veth1_macvtap entered promiscuous mode [ 1726.248129] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1726.260712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1726.272060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1726.282608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.293802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.303563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.314200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.323781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.334120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.343443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.353399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.362592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.373255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.384166] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1726.391669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.400569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1726.412245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1726.420023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1726.428137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1726.439678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.450398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.460265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.470050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.479256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.489300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.498717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.508763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.519251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.530283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.540800] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1726.547899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.557236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1726.565323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1726.687142] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1726.709519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.724356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.764679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1726.775874] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1726.787529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.796425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.831756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1726.862900] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1726.870681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.890890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.900077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1726.916777] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1726.929080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.937499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.945943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1727.001483] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1727.025098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.042528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.088182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1727.108128] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1727.119322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.129284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.136699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:52:51 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x6}) 14:52:51 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) [ 1731.491123] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.496722] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.891952] oom_reaper: reaped process 22947 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:8kB [ 1731.921902] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1731.938156] in:imklog cpuset=/ mems_allowed=0-1 [ 1731.943650] CPU: 0 PID: 21867 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1731.951111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1731.960615] Call Trace: [ 1731.963243] dump_stack+0x1fc/0x2ef [ 1731.966890] dump_header+0x15d/0xc3f [ 1731.970620] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1731.975742] ? ___ratelimit+0x319/0x590 [ 1731.979814] oom_kill_process.cold+0x10/0x692 [ 1731.985020] ? check_preemption_disabled+0x41/0x280 [ 1731.990041] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1731.995327] out_of_memory+0x1072/0x1390 [ 1731.999394] ? oom_killer_disable+0x270/0x270 [ 1732.003890] ? mutex_trylock+0x15f/0x1a0 [ 1732.007965] __alloc_pages_nodemask+0x23a2/0x2890 [ 1732.012814] ? find_get_entry+0x4cd/0x8a0 [ 1732.016976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.021931] alloc_pages_current+0x193/0x2a0 [ 1732.026431] filemap_fault+0x146e/0x2180 [ 1732.030511] ext4_filemap_fault+0x84/0xb0 [ 1732.034677] __do_fault+0x10b/0x4b0 [ 1732.038300] __handle_mm_fault+0x273b/0x41c0 [ 1732.042701] ? vm_insert_page+0x9c0/0x9c0 [ 1732.046833] ? lock_downgrade+0x720/0x720 [ 1732.050972] ? check_preemption_disabled+0x41/0x280 [ 1732.055977] handle_mm_fault+0x436/0xb10 [ 1732.060029] __do_page_fault+0x68e/0xd60 [ 1732.064076] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1732.069082] ? spurious_fault+0x840/0x840 [ 1732.073231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1732.078155] ? page_fault+0x8/0x30 [ 1732.081784] page_fault+0x1e/0x30 [ 1732.085219] RIP: 0033:0x7f6298a3822d [ 1732.088919] Code: Bad RIP value. [ 1732.092262] RSP: 002b:00007f62963d4580 EFLAGS: 00010293 [ 1732.097608] RAX: 0000000000000077 RBX: 0000000000000000 RCX: 00007f6298a3822d [ 1732.104860] RDX: 0000000000001fa0 RSI: 00007f62963d4da0 RDI: 0000000000000004 [ 1732.112196] RBP: 00005558cc2769d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.119459] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f62963d4da0 [ 1732.126728] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f62963d4e20 [ 1732.136400] Mem-Info: [ 1732.138989] active_anon:15023 inactive_anon:75878 isolated_anon:0 [ 1732.138989] active_file:44 inactive_file:13 isolated_file:0 [ 1732.138989] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1732.138989] slab_reclaimable:13237 slab_unreclaimable:117092 [ 1732.138989] mapped:22342 shmem:76856 pagetables:580 bounce:0 [ 1732.138989] free:13889 free_pcp:1454 free_cma:0 [ 1732.145685] syz-executor.2: vmalloc: allocation failure, allocated 1684828160 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1732.174342] Node 0 active_anon:55236kB inactive_anon:26336kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.198335] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1732.221342] Node 1 active_anon:4768kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28916kB dirty:0kB writeback:0kB shmem:279256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.226890] CPU: 1 PID: 22947 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1732.256723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1732.263904] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.266083] Call Trace: [ 1732.294864] dump_stack+0x1fc/0x2ef [ 1732.298510] warn_alloc.cold+0x7b/0x18f [ 1732.298882] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1732.302495] ? zone_watermark_ok_safe+0x260/0x260 [ 1732.307571] Node 0 DMA32 free:17712kB min:35996kB low:44992kB high:53988kB active_anon:55236kB inactive_anon:26336kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1952kB bounce:0kB free_pcp:2676kB local_pcp:1168kB free_cma:0kB [ 1732.312418] ? rcu_nmi_exit+0xb3/0x180 [ 1732.312454] __vmalloc_area_node+0x4fd/0x780 [ 1732.312475] ? __vmalloc_node_range+0x180/0x180 [ 1732.312490] ? _raw_spin_unlock+0x29/0x40 [ 1732.312503] ? __get_vm_area_node+0x2e2/0x3a0 [ 1732.312521] __vmalloc_node_range+0xed/0x180 [ 1732.312540] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1732.349907] lowmem_reserve[]: 0 0 1 1 1 [ 1732.350066] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1732.354719] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.358866] vmalloc_user+0x70/0xe0 [ 1732.358883] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1732.358895] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1732.358910] __vb2_queue_alloc+0x472/0xe60 [ 1732.358933] vb2_core_create_bufs+0x273/0x7e0 [ 1732.358948] ? __vb2_queue_free+0x870/0x870 [ 1732.358962] ? __video_do_ioctl+0x632/0xcd0 [ 1732.358982] ? __mutex_lock+0x368/0x1190 [ 1732.358998] vb2_create_bufs+0x332/0x620 [ 1732.365618] lowmem_reserve[]: 0 0 0 0 0 [ 1732.367901] ? mark_held_locks+0xf0/0xf0 [ 1732.377394] Node 1 Normal free:26956kB min:53876kB low:67344kB high:80812kB active_anon:4768kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:364kB bounce:0kB free_pcp:3140kB local_pcp:1416kB free_cma:0kB [ 1732.382074] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1732.382093] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1732.382108] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1732.382128] v4l_create_bufs+0xb2/0x160 [ 1732.382146] __video_do_ioctl+0x49a/0xcd0 [ 1732.382164] ? v4l_querycap+0x340/0x340 [ 1732.382182] ? __might_fault+0x192/0x1d0 [ 1732.415075] lowmem_reserve[]: 0 0 0 0 0 [ 1732.416205] ? v4l_querycap+0x340/0x340 [ 1732.420997] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1732.425369] video_usercopy+0x13f/0xfa0 [ 1732.436560] Node 0 DMA32: 664*4kB (ME) 450*8kB (ME) 150*16kB (UME) 37*32kB (ME) 17*64kB (UM) 9*128kB (M) 4*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 17712kB [ 1732.439253] ? v4l_enumstd+0x60/0x60 [ 1732.439269] ? do_futex+0x171/0x1880 [ 1732.439289] ? mark_held_locks+0xf0/0xf0 [ 1732.443615] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1732.447807] ? debug_check_no_obj_freed+0x201/0x490 [ 1732.460659] Node 1 Normal: 399*4kB (UME) 390*8kB (ME) 234*16kB (ME) 130*32kB (ME) 54*64kB (UME) 19*128kB (UME) 13*256kB (UME) 6*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 26956kB [ 1732.485924] ? video_usercopy+0xfa0/0xfa0 [ 1732.485937] v4l2_ioctl+0x147/0x1a0 [ 1732.485950] ? video_devdata+0xa0/0xa0 [ 1732.485965] do_vfs_ioctl+0xcdb/0x12e0 [ 1732.485979] ? lock_downgrade+0x720/0x720 [ 1732.485994] ? check_preemption_disabled+0x41/0x280 [ 1732.486007] ? ioctl_preallocate+0x200/0x200 [ 1732.486025] ? __fget+0x356/0x510 [ 1732.486042] ? do_dup2+0x450/0x450 [ 1732.497917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.502047] ? __se_sys_futex+0x298/0x3b0 [ 1732.502068] ksys_ioctl+0x9b/0xc0 [ 1732.502084] __x64_sys_ioctl+0x6f/0xb0 [ 1732.502098] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1732.502114] do_syscall_64+0xf9/0x620 [ 1732.506074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.510476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1732.510489] RIP: 0033:0x7f5c590870a9 [ 1732.510502] Code: Bad RIP value. [ 1732.510509] RSP: 002b:00007f5c575f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.510521] RAX: ffffffffffffffda RBX: 00007f5c591a6f80 RCX: 00007f5c590870a9 [ 1732.510528] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1732.510534] RBP: 00007f5c590e2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1732.510541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1732.510549] R13: 00007ffc2ad32d5f R14: 00007f5c575f9300 R15: 0000000000022000 [ 1732.531290] Mem-Info: [ 1732.552409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.567942] active_anon:15001 inactive_anon:75878 isolated_anon:0 [ 1732.567942] active_file:15 inactive_file:16 isolated_file:0 [ 1732.567942] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1732.567942] slab_reclaimable:13237 slab_unreclaimable:117093 [ 1732.567942] mapped:22305 shmem:76856 pagetables:579 bounce:0 [ 1732.567942] free:13889 free_pcp:1454 free_cma:0 [ 1732.576286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.597921] Node 0 active_anon:55236kB inactive_anon:26336kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.621229] 76887 total pagecache pages [ 1732.632087] Node 1 active_anon:4768kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28916kB dirty:0kB writeback:0kB shmem:279256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.632408] 0 pages in swap cache [ 1732.642741] Node 0 DMA free:10884kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.653913] Swap cache stats: add 0, delete 0, find 0/0 [ 1732.681641] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1732.685709] Free swap = 0kB [ 1732.717428] Node 0 DMA32 free:17712kB min:35996kB low:44992kB high:53988kB active_anon:55236kB inactive_anon:26336kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1952kB bounce:0kB free_pcp:2676kB local_pcp:1508kB free_cma:0kB [ 1732.719417] Total swap = 0kB [ 1732.719432] 2097051 pages RAM [ 1732.719437] 0 pages HighMem/MovableOnly [ 1732.719441] 369649 pages reserved [ 1732.719445] 0 pages cma reserved [ 1732.719453] Unreclaimable slab info: [ 1732.719459] Name Used Total [ 1732.719469] pid_2 11KB 44KB [ 1732.719553] batadv_tt_change_cache 5KB 7KB [ 1732.733016] lowmem_reserve[]: 0 0 1 1 1 [ 1732.735926] batadv_tl_cache 12KB 16KB [ 1732.759180] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.766009] TIPC 18KB 37KB [ 1732.793326] lowmem_reserve[]: 0 0 0 0 0 [ 1732.815415] SCTPv6 24KB 30KB [ 1732.835940] Node 1 Normal free:26956kB min:53876kB low:67344kB high:80812kB active_anon:4768kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:364kB bounce:0kB free_pcp:3140kB local_pcp:1724kB free_cma:0kB [ 1732.854306] DCCPv6 17KB 37KB [ 1732.870080] lowmem_reserve[]: 0 0 0 0 0 [ 1732.890682] DCCP 16KB 35KB [ 1732.930531] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10884kB [ 1732.964629] RXRPC 19KB 32KB [ 1732.979800] Node 0 DMA32: 664*4kB (ME) 450*8kB (ME) 150*16kB (UME) 37*32kB (ME) 17*64kB (UM) 9*128kB (M) 4*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 17712kB [ 1732.988690] rxrpc_call_jar 124KB 141KB [ 1733.000281] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1733.000549] bridge_fdb_cache 16KB 27KB [ 1733.005826] Node 1 Normal: 399*4kB (UME) 390*8kB (ME) 234*16kB (ME) 130*32kB (ME) 54*64kB (UME) 19*128kB (UME) 13*256kB (UME) 6*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 26956kB [ 1733.035289] fib6_nodes 240KB 288KB [ 1733.050470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.081762] ip6_dst_cache 622KB 622KB [ 1733.093361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.109865] RAWv6 121KB 128KB [ 1733.118554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.133225] UDPv6 41KB 45KB [ 1733.157712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.176678] TCPv6 39KB 42KB [ 1733.197408] 76887 total pagecache pages [ 1733.207609] nf_conntrack 15KB 15KB [ 1733.218697] 0 pages in swap cache [ 1733.237891] t10_alua_lu_gp_cache 0KB 3KB [ 1733.245230] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.256575] Free swap = 0kB [ 1733.263636] Total swap = 0kB [ 1733.266698] 2097051 pages RAM [ 1733.269883] 0 pages HighMem/MovableOnly [ 1733.274070] 369649 pages reserved [ 1733.274270] sd_ext_cdb 0KB 7KB [ 1733.277512] 0 pages cma reserved [ 1733.298401] scsi_sense_cache 1056KB 1060KB [ 1733.303891] virtio_scsi_cmd 16KB 16KB [ 1733.325033] sgpool-128 8KB 8KB [ 1733.334447] sgpool-64 4KB 12KB [ 1733.351687] sgpool-32 2KB 15KB [ 1733.357083] sgpool-16 1KB 7KB [ 1733.362621] sgpool-8 0KB 7KB [ 1733.371903] mqueue_inode_cache 16KB 30KB [ 1733.377414] bio_post_read_ctx 14KB 15KB [ 1733.383848] bio-2 14KB 15KB [ 1733.396746] jfs_mp 7KB 7KB [ 1733.403147] cifs_small_rq 15KB 16KB [ 1733.415896] cifs_request 67KB 67KB [ 1733.424455] cifs_mpx_ids 0KB 7KB [ 1733.437215] nfs_commit_data 3KB 14KB [ 1733.446830] nfs_write_data 34KB 44KB [ 1733.464639] ext4_system_zone 1KB 7KB [ 1733.473332] bio-1 1KB 7KB [ 1733.487715] pid_namespace 3KB 11KB [ 1733.496325] rpc_buffers 17KB 25KB [ 1733.508918] rpc_tasks 2KB 7KB [ 1733.514312] UNIX 2025KB 2103KB [ 1733.524011] tcp_bind_bucket 2KB 4KB [ 1733.533300] ip_fib_trie 38KB 47KB [ 1733.542409] ip_fib_alias 182KB 201KB [ 1733.547808] ip_dst_cache 24KB 24KB [ 1733.556934] RAW 72KB 82KB [ 1733.566072] UDP 77KB 81KB [ 1733.575288] TCP 33KB 33KB [ 1733.584213] hugetlbfs_inode_cache 3KB 15KB [ 1733.593472] fscache_cookie_jar 1KB 7KB [ 1733.602836] eventpoll_pwq 24KB 55KB [ 1733.612431] eventpoll_epi 45KB 66KB [ 1733.617861] inotify_inode_mark 8KB 23KB [ 1733.626890] request_queue 199KB 199KB [ 1733.636090] blkdev_requests 1KB 3KB [ 1733.645312] blkdev_ioc 19KB 38KB [ 1733.656743] bio-0 999KB 1380KB [ 1733.665955] biovec-max 1402KB 1468KB [ 1733.675029] biovec-64 1193KB 1630KB [ 1733.684327] biovec-16 176KB 236KB [ 1733.693576] bio_integrity_payload 1KB 8KB [ 1733.703094] khugepaged_mm_slot 3KB 23KB [ 1733.712466] uid_cache 0KB 4KB [ 1733.717871] dmaengine-unmap-2 0KB 3KB [ 1733.726981] skbuff_fclone_cache 41KB 60KB [ 1733.736374] skbuff_head_cache 8524KB 9292KB [ 1733.745715] configfs_dir_cache 3KB 7KB [ 1733.752035] file_lock_cache 13KB 51KB [ 1733.757499] file_lock_ctx 9KB 15KB [ 1733.775387] fsnotify_mark_connector 3KB 15KB [ 1733.783945] net_namespace 96KB 96KB [ 1733.796702] shmem_inode_cache 8039KB 8135KB [ 1733.803052] task_delay_info 281KB 359KB [ 1733.815104] taskstats 25KB 45KB [ 1733.826386] proc_dir_entry 1009KB 1020KB [ 1733.843278] pde_opener 17KB 46KB [ 1733.852161] seq_file 223KB 409KB [ 1733.866485] sigqueue 45KB 70KB [ 1733.875360] kernfs_node_cache 18240KB 18258KB [ 1733.886533] mnt_cache 243KB 260KB [ 1733.895765] filp 7705KB 8842KB [ 1733.905082] names_cache 108685KB 108744KB [ 1733.914343] iint_cache 32KB 51KB [ 1733.923496] key_jar 4KB 11KB [ 1733.932478] uts_namespace 4KB 7KB [ 1733.941658] nsproxy 3KB 11KB [ 1733.947033] vm_area_struct 2731KB 3364KB [ 1733.955849] mm_struct 453KB 520KB [ 1733.965125] fs_cache 332KB 336KB [ 1733.974648] files_cache 1218KB 1218KB [ 1733.983911] signal_cache 2160KB 2199KB [ 1733.994596] sighand_cache 647KB 652KB [ 1734.011338] task_struct 8900KB 8989KB [ 1734.016740] cred_jar 2608KB 2820KB [ 1734.027091] anon_vma_chain 807KB 1531KB [ 1734.044694] anon_vma 161KB 292KB [ 1734.051658] pid 191KB 240KB [ 1734.057057] Acpi-Operand 156KB 198KB [ 1734.075025] Acpi-ParseExt 8KB 11KB [ 1734.080502] Acpi-Parse 41KB 47KB [ 1734.085881] Acpi-State 52KB 63KB [ 1734.105213] Acpi-Namespace 20KB 27KB [ 1734.115223] numa_policy 0KB 3KB [ 1734.131084] debug_objects_cache 1782KB 1883KB [ 1734.142906] trace_event_file 297KB 298KB [ 1734.149998] ftrace_event_field 398KB 401KB [ 1734.155938] pool_workqueue 150KB 156KB [ 1734.166074] page->ptl 404KB 964KB [ 1734.172491] kmalloc-2097152 2050KB 2050KB [ 1734.182896] kmalloc-524288 2056KB 2056KB [ 1734.189680] kmalloc-262144 1290KB 1290KB [ 1734.197341] kmalloc-131072 650KB 650KB [ 1734.202929] kmalloc-65536 3168KB 3234KB [ 1734.209984] kmalloc-32768 2409KB 2475KB [ 1734.215457] kmalloc-16384 1386KB 1468KB [ 1734.221089] kmalloc-8192 5816KB 5898KB [ 1734.227512] kmalloc-4096 29966KB 30026KB [ 1734.233770] kmalloc-2048 18396KB 18602KB [ 1734.239540] kmalloc-1024 13486KB 13962KB [ 1734.245345] kmalloc-512 15948KB 17932KB [ 1734.251572] kmalloc-256 5833KB 6210KB [ 1734.257836] kmalloc-128 1406KB 1602KB [ 1734.263614] kmalloc-96 3360KB 4368KB [ 1734.269553] kmalloc-64 2777KB 3824KB [ 1734.275188] kmalloc-32 1946KB 2512KB [ 1734.280815] kmalloc-192 2452KB 2920KB [ 1734.287055] kmem_cache 177KB 183KB [ 1734.292632] Out of memory (oom_kill_allocating_task): Kill process 21867 (in:imklog) score 0 or sacrifice child [ 1734.305874] Killed process 21861 (rsyslogd) total-vm:254332kB, anon-rss:688kB, file-rss:0kB, shmem-rss:0kB [ 1734.320641] oom_reaper: reaped process 21861 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:53:02 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffff1c2, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xc7e8}}, 0x18) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0xe81, 0x0, 0x3, {0x4, @raw_data="4f95d660f8e87989dcfb65c50a522c1ec5f3a5838cdd20f83c08a4b95d006118b83e61d9295d4b71fda0da9e97f6775d3e4d23ab1160c7ec8d08178e4e146590ff9f5152a4ef77a1d53249a919364957972d5309e28682664267c5244b6c1579ee964e22303a631e3ee5e9c23b9a75d717aab32a99216f74f382122c309be04d7abb86af1355b003efbc7cadd4b58d45cb95279ba98299ea412425e862d04eeb426b7f0d331fa0c398f5340a887512299189ba125764f25472d633def4cff435bcf73fecdcfa00c0"}, 0x6}) 14:53:02 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x3, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:53:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 14:53:02 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x100000000, 0x50801) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1e, 0x6, 0xffff0001, 0x5, 0x2, r0, 0x8001, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x48) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x1, 0x8042) r5 = syz_open_dev$audion(&(0x7f0000000380), 0x2, 0x80) r6 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) r7 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f00000004c0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x1, 0x3, 0x2, 0x4, 0xcd2, 0x3, {0x6, 0x2, 0x7e5, 0x8, 0x10001, 0xfffffffffffffff8, 0x3, 0x3, 0x8, 0x2000, 0x1, 0x0, 0xffffffffffffffff, 0x8, 0x100}}}}, 0xa0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @generic={0x0, 0x6, 0x5, 0x8, 0x20200}, @jmp={0x5, 0x0, 0xc, 0xe, 0x5, 0xc, 0x1}, @generic={0x1f, 0x1, 0x5, 0x3, 0x8}, @ldst={0x3, 0x0, 0x1, 0x7, 0x8, 0xfffffffffffffffe, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x33, &(0x7f00000001c0)=""/51, 0x41000, 0xc, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0xb7e, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, r4, r5, r6, r7, r0, r8, r10]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r11 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, 0x0, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000000)={0x10}, 0x10) 14:53:02 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}], 0x0, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:53:02 executing program 5: r0 = syz_open_dev$vim2m(0x0, 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:02 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0x0, 0x0, {0x2}}, 0x18) 14:53:02 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/227, 0xe3, 0x0, 0x1a}, @flat=@weak_handle={0x77682a85, 0x100a}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x68, 0x0, &(0x7f00000003c0)="3c929e630de215d6b9a2cce28f12c5d358f3e18681a859140e01298ca071333d7546a3cbc6b56ceffa1973f160513380c4e79e05768467c51abb4c42324a38c31b49f9e593a95472f25e16be7bbbe19efa8e301f650dc2103fa8d54f2396ad43741b8c307dc74553"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000024c0)=""/173, &(0x7f0000002580)=0xad) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000025c0)=0x9, 0x4) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 14:53:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:02 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x3, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x3, 0x7}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:53:02 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0x0, 0x0, {0x2}}, 0x18) 14:53:02 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f00000001c0), 0xdd94, 0x8500) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x3, 0x400000, 0x1f, 0x1903, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x48) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x7fff}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1, r2, r3, r4, r0]}, 0x80) 14:53:02 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:02 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:53:02 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) [ 1743.050690] oom_reaper: reaped process 22987 (syz-executor.2), now anon-rss:0kB, file-rss:14332kB, shmem-rss:12kB [ 1743.094791] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1743.133673] in:imklog cpuset=/ mems_allowed=0-1 [ 1743.138591] CPU: 0 PID: 22976 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1743.146146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1743.155509] Call Trace: [ 1743.158108] dump_stack+0x1fc/0x2ef [ 1743.161862] dump_header+0x15d/0xc3f [ 1743.165901] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1743.171133] ? ___ratelimit+0x319/0x590 [ 1743.175101] oom_kill_process.cold+0x10/0x692 [ 1743.179580] ? check_preemption_disabled+0x41/0x280 [ 1743.184583] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1743.189922] out_of_memory+0x1072/0x1390 [ 1743.193967] ? oom_killer_disable+0x270/0x270 [ 1743.198938] ? mutex_trylock+0x15f/0x1a0 [ 1743.203028] __alloc_pages_nodemask+0x23a2/0x2890 [ 1743.207915] ? find_get_entry+0x4cd/0x8a0 [ 1743.212073] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.216931] alloc_pages_current+0x193/0x2a0 [ 1743.221338] filemap_fault+0x146e/0x2180 [ 1743.225432] ext4_filemap_fault+0x84/0xb0 [ 1743.229595] __do_fault+0x10b/0x4b0 [ 1743.233257] __handle_mm_fault+0x273b/0x41c0 [ 1743.237662] ? vm_insert_page+0x9c0/0x9c0 [ 1743.241814] ? lock_downgrade+0x720/0x720 [ 1743.245962] ? check_preemption_disabled+0x41/0x280 [ 1743.251010] handle_mm_fault+0x436/0xb10 [ 1743.255100] __do_page_fault+0x68e/0xd60 [ 1743.259165] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1743.264361] ? spurious_fault+0x840/0x840 [ 1743.268730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1743.273668] ? page_fault+0x8/0x30 [ 1743.277210] page_fault+0x1e/0x30 [ 1743.280945] RIP: 0033:0x7fc3c041322d [ 1743.284754] Code: Bad RIP value. [ 1743.288208] RSP: 002b:00007fc3bddaf580 EFLAGS: 00010293 [ 1743.293572] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fc3c041322d [ 1743.300938] RDX: 0000000000001fa0 RSI: 00007fc3bddafda0 RDI: 0000000000000004 [ 1743.308590] RBP: 0000558ad783b9d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.315844] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fc3bddafda0 [ 1743.323097] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fc3bddafe01 [ 1743.331849] Mem-Info: [ 1743.334281] active_anon:14923 inactive_anon:75879 isolated_anon:0 [ 1743.334281] active_file:16 inactive_file:16 isolated_file:0 [ 1743.334281] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1743.334281] slab_reclaimable:13102 slab_unreclaimable:119873 [ 1743.334281] mapped:22338 shmem:76855 pagetables:558 bounce:0 [ 1743.334281] free:13846 free_pcp:135 free_cma:0 [ 1743.337684] syz-executor.2: vmalloc: allocation failure, allocated 1680183296 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1743.367693] Node 0 active_anon:54800kB inactive_anon:26340kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1743.367718] Node 1 active_anon:4892kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29048kB dirty:0kB writeback:0kB shmem:279256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1743.367728] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.396679] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1743.411792] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1743.454998] CPU: 1 PID: 22987 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1743.465908] Node 0 DMA32 free:17652kB min:35996kB low:44992kB high:53988kB active_anon:54800kB inactive_anon:26340kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1864kB bounce:0kB free_pcp:288kB local_pcp:0kB free_cma:0kB [ 1743.470766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1743.470771] Call Trace: [ 1743.470796] dump_stack+0x1fc/0x2ef [ 1743.470814] warn_alloc.cold+0x7b/0x18f [ 1743.470832] ? zone_watermark_ok_safe+0x260/0x260 [ 1743.470852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1743.475864] lowmem_reserve[]: 0 0 1 1 1 [ 1743.483762] ? retint_kernel+0x2d/0x2d [ 1743.483787] __vmalloc_area_node+0x4fd/0x780 [ 1743.483812] ? __vmalloc_node_range+0x180/0x180 [ 1743.483826] ? _raw_spin_unlock+0x29/0x40 [ 1743.483839] ? __get_vm_area_node+0x2e2/0x3a0 [ 1743.483858] __vmalloc_node_range+0xed/0x180 [ 1743.514357] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.522140] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1743.522155] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1743.522168] vmalloc_user+0x70/0xe0 [ 1743.522181] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1743.522194] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1743.522208] __vb2_queue_alloc+0x472/0xe60 [ 1743.522232] vb2_core_create_bufs+0x273/0x7e0 [ 1743.524792] lowmem_reserve[]: 0 0 0 0 0 [ 1743.528835] ? __vb2_queue_free+0x870/0x870 [ 1743.528850] ? __video_do_ioctl+0x632/0xcd0 [ 1743.528869] ? __mutex_lock+0x368/0x1190 [ 1743.528885] vb2_create_bufs+0x332/0x620 [ 1743.528902] ? mark_held_locks+0xf0/0xf0 [ 1743.528915] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1743.528933] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1743.532888] Node 1 Normal free:26852kB min:53876kB low:67344kB high:80812kB active_anon:4892kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:368kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1743.537819] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1743.537839] v4l_create_bufs+0xb2/0x160 [ 1743.537856] __video_do_ioctl+0x49a/0xcd0 [ 1743.537874] ? v4l_querycap+0x340/0x340 [ 1743.537898] ? __might_fault+0x192/0x1d0 [ 1743.542689] lowmem_reserve[]: 0 0 0 0 0 [ 1743.546624] ? v4l_querycap+0x340/0x340 [ 1743.550596] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1743.554986] video_usercopy+0x13f/0xfa0 [ 1743.560595] Node 0 DMA32: 967*4kB (UME) 493*8kB (UME) 218*16kB (UME) 47*32kB (UME) 18*64kB (M) 7*128kB (UM) 3*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 17668kB [ 1743.564764] ? v4l_enumstd+0x60/0x60 [ 1743.569530] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1743.574006] ? do_futex+0x171/0x1880 [ 1743.600357] Node 1 Normal: 419*4kB (ME) 379*8kB (UME) 280*16kB (UME) 84*32kB (UME) 64*64kB (ME) 25*128kB (UME) 12*256kB (UME) 5*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 26852kB [ 1743.604568] ? mark_held_locks+0xf0/0xf0 [ 1743.609990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.613551] ? debug_check_no_obj_freed+0x201/0x490 [ 1743.613576] ? video_usercopy+0xfa0/0xfa0 [ 1743.613586] v4l2_ioctl+0x147/0x1a0 [ 1743.613598] ? video_devdata+0xa0/0xa0 [ 1743.613613] do_vfs_ioctl+0xcdb/0x12e0 [ 1743.613630] ? lock_downgrade+0x720/0x720 [ 1743.613645] ? check_preemption_disabled+0x41/0x280 [ 1743.613657] ? ioctl_preallocate+0x200/0x200 [ 1743.613676] ? __fget+0x356/0x510 [ 1743.613700] ? do_dup2+0x450/0x450 [ 1743.613717] ? __se_sys_futex+0x298/0x3b0 [ 1743.613740] ksys_ioctl+0x9b/0xc0 [ 1743.613756] __x64_sys_ioctl+0x6f/0xb0 [ 1743.613772] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1743.613787] do_syscall_64+0xf9/0x620 [ 1743.613808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1743.613820] RIP: 0033:0x7f5c590870a9 [ 1743.613835] Code: Bad RIP value. [ 1743.613842] RSP: 002b:00007f5c575f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.613855] RAX: ffffffffffffffda RBX: 00007f5c591a6f80 RCX: 00007f5c590870a9 [ 1743.613864] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1743.613872] RBP: 00007f5c590e2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1743.613880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.613888] R13: 00007ffc2ad32d5f R14: 00007f5c575f9300 R15: 0000000000022000 [ 1743.633078] Mem-Info: [ 1743.636698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.648043] active_anon:14923 inactive_anon:75879 isolated_anon:0 [ 1743.648043] active_file:16 inactive_file:16 isolated_file:0 [ 1743.648043] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1743.648043] slab_reclaimable:13102 slab_unreclaimable:119873 [ 1743.648043] mapped:22338 shmem:76855 pagetables:558 bounce:0 [ 1743.648043] free:13846 free_pcp:135 free_cma:0 [ 1743.649583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.655571] Node 0 active_anon:54800kB inactive_anon:26340kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1743.657793] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.657800] 76887 total pagecache pages [ 1743.657813] 0 pages in swap cache [ 1743.657822] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.657826] Free swap = 0kB [ 1743.657831] Total swap = 0kB [ 1743.657841] 2097051 pages RAM [ 1743.657845] 0 pages HighMem/MovableOnly [ 1743.657849] 369649 pages reserved [ 1743.657853] 0 pages cma reserved [ 1743.657859] Unreclaimable slab info: [ 1743.657864] Name Used Total [ 1743.657876] pid_2 19KB 44KB [ 1743.657963] batadv_tt_change_cache 3KB 7KB [ 1743.680400] Node 1 active_anon:4892kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29048kB dirty:0kB writeback:0kB shmem:279256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1743.697029] batadv_tl_cache 7KB 16KB [ 1743.697057] TIPC 13KB 37KB [ 1743.697077] SCTPv6 20KB 30KB [ 1743.697096] DCCPv6 17KB 30KB [ 1743.697109] DCCP 16KB 35KB [ 1743.697163] RXRPC 14KB 32KB [ 1743.717945] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.720624] rxrpc_call_jar 112KB 141KB [ 1743.724491] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1743.733114] bridge_fdb_cache 14KB 27KB [ 1743.753185] Node 0 DMA32 free:17652kB min:35996kB low:44992kB high:53988kB active_anon:54800kB inactive_anon:26340kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1864kB bounce:0kB free_pcp:288kB local_pcp:288kB free_cma:0kB [ 1743.761967] fib6_nodes 230KB 288KB [ 1743.779552] lowmem_reserve[]: 0 0 1 1 1 [ 1743.780730] ip6_dst_cache 690KB 690KB [ 1743.810499] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.811374] RAWv6 104KB 128KB [ 1743.816209] lowmem_reserve[]: 0 0 0 0 0 [ 1743.816230] Node 1 Normal free:26852kB min:53876kB low:67344kB high:80812kB active_anon:4892kB inactive_anon:277176kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:368kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1743.816262] lowmem_reserve[]: 0 0 0 0 0 [ 1743.816277] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1743.816342] Node 0 DMA32: 967*4kB (UME) 493*8kB (UME) 218*16kB (UME) 47*32kB (UME) 18*64kB (M) 7*128kB (UM) 3*256kB (M) 0*512kB 2*1024kB (UM) 0*2048kB 0*4096kB = 17668kB [ 1743.816411] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1743.816464] Node 1 Normal: 419*4kB (ME) 379*8kB (UME) 280*16kB (UME) 84*32kB (UME) 64*64kB (ME) 25*128kB (UME) 12*256kB (UME) 5*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 26852kB [ 1743.816546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.816557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.816568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.816578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.816583] 76887 total pagecache pages [ 1743.816597] 0 pages in swap cache [ 1743.816605] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.816611] Free swap = 0kB [ 1743.816616] Total swap = 0kB [ 1743.816624] 2097051 pages RAM [ 1743.816629] 0 pages HighMem/MovableOnly [ 1743.816633] 369649 pages reserved [ 1743.816638] 0 pages cma reserved [ 1744.454496] UDPv6 37KB 45KB [ 1744.462649] TCPv6 45KB 48KB [ 1744.483860] nf_conntrack 13KB 15KB [ 1744.493918] t10_alua_lu_gp_cache 0KB 3KB [ 1744.515150] sd_ext_cdb 0KB 7KB [ 1744.525838] scsi_sense_cache 1056KB 1060KB [ 1744.551042] virtio_scsi_cmd 16KB 16KB [ 1744.556714] sgpool-128 8KB 8KB [ 1744.577797] sgpool-64 4KB 12KB [ 1744.583792] sgpool-32 2KB 15KB [ 1744.605482] sgpool-16 1KB 7KB [ 1744.613358] sgpool-8 0KB 7KB [ 1744.624659] mqueue_inode_cache 13KB 30KB [ 1744.633915] bio_post_read_ctx 14KB 15KB [ 1744.644354] bio-2 14KB 15KB [ 1744.653821] jfs_mp 7KB 7KB [ 1744.663037] cifs_small_rq 15KB 16KB [ 1744.672960] cifs_request 67KB 67KB [ 1744.682654] cifs_mpx_ids 0KB 7KB [ 1744.696210] nfs_commit_data 3KB 14KB [ 1744.705270] nfs_write_data 34KB 44KB [ 1744.714462] ext4_system_zone 1KB 7KB [ 1744.723389] bio-1 1KB 7KB [ 1744.733396] pid_namespace 2KB 11KB [ 1744.757480] rpc_buffers 17KB 25KB [ 1744.762888] rpc_tasks 2KB 7KB [ 1744.791893] UNIX 1987KB 2096KB [ 1744.797504] tcp_bind_bucket 1KB 4KB [ 1744.814079] ip_fib_trie 34KB 47KB [ 1744.819550] ip_fib_alias 165KB 201KB [ 1744.835442] ip_dst_cache 13KB 24KB [ 1744.842830] RAW 61KB 75KB [ 1744.848771] UDP 62KB 81KB [ 1744.854165] TCP 33KB 39KB [ 1744.867544] hugetlbfs_inode_cache 3KB 15KB [ 1744.873618] fscache_cookie_jar 1KB 7KB [ 1744.879413] eventpoll_pwq 22KB 55KB [ 1744.895062] eventpoll_epi 39KB 66KB [ 1744.900940] inotify_inode_mark 12KB 23KB [ 1744.915566] request_queue 199KB 199KB [ 1744.922039] blkdev_requests 1KB 3KB [ 1744.928388] blkdev_ioc 28KB 38KB [ 1744.933999] bio-0 450KB 941KB [ 1744.940849] biovec-max 1410KB 1518KB [ 1744.948722] biovec-64 492KB 1055KB [ 1744.954117] biovec-16 121KB 210KB [ 1744.962504] bio_integrity_payload 1KB 8KB [ 1744.969413] khugepaged_mm_slot 4KB 23KB [ 1744.975132] uid_cache 0KB 4KB [ 1744.982631] dmaengine-unmap-2 0KB 3KB [ 1744.989088] skbuff_fclone_cache 58KB 60KB [ 1744.994808] skbuff_head_cache 7748KB 8932KB [ 1745.002186] configfs_dir_cache 3KB 7KB [ 1745.008759] file_lock_cache 30KB 47KB [ 1745.014172] file_lock_ctx 9KB 15KB [ 1745.021151] fsnotify_mark_connector 6KB 11KB [ 1745.027062] net_namespace 78KB 78KB [ 1745.033623] shmem_inode_cache 8038KB 8135KB [ 1745.039840] task_delay_info 264KB 359KB [ 1745.046955] taskstats 23KB 45KB [ 1745.053520] proc_dir_entry 936KB 1020KB [ 1745.060287] pde_opener 14KB 46KB [ 1745.065777] seq_file 220KB 409KB [ 1745.072813] sigqueue 55KB 70KB [ 1745.079454] kernfs_node_cache 18234KB 18258KB [ 1745.084881] mnt_cache 210KB 232KB [ 1745.091714] filp 7907KB 8838KB [ 1745.097113] names_cache 116866KB 116866KB [ 1745.103881] iint_cache 29KB 51KB [ 1745.109942] key_jar 4KB 11KB [ 1745.115417] uts_namespace 3KB 7KB [ 1745.122127] nsproxy 2KB 11KB [ 1745.128664] vm_area_struct 2727KB 3356KB [ 1745.134049] mm_struct 463KB 520KB [ 1745.140610] fs_cache 303KB 336KB [ 1745.146015] files_cache 1105KB 1215KB [ 1745.154217] signal_cache 2047KB 2199KB [ 1745.160350] sighand_cache 561KB 638KB [ 1745.165835] task_struct 8869KB 8900KB [ 1745.172723] cred_jar 2618KB 2820KB [ 1745.179208] anon_vma_chain 831KB 1523KB [ 1745.184609] anon_vma 133KB 292KB [ 1745.192326] pid 180KB 236KB [ 1745.198729] Acpi-Operand 156KB 198KB [ 1745.204982] Acpi-ParseExt 8KB 11KB [ 1745.211580] Acpi-Parse 41KB 47KB [ 1745.216979] Acpi-State 52KB 63KB [ 1745.224293] Acpi-Namespace 20KB 27KB [ 1745.231206] numa_policy 0KB 3KB [ 1745.238173] debug_objects_cache 1750KB 1883KB [ 1745.244600] trace_event_file 297KB 298KB [ 1745.253608] ftrace_event_field 398KB 401KB [ 1745.260978] pool_workqueue 135KB 156KB [ 1745.268481] page->ptl 415KB 964KB [ 1745.274798] kmalloc-2097152 2050KB 2050KB [ 1745.282221] kmalloc-524288 2056KB 2056KB [ 1745.289959] kmalloc-262144 1290KB 1290KB [ 1745.296238] kmalloc-131072 650KB 650KB [ 1745.303457] kmalloc-65536 2640KB 2970KB [ 1745.310697] kmalloc-32768 2145KB 2277KB [ 1745.316855] kmalloc-16384 1320KB 1402KB [ 1745.323521] kmalloc-8192 5469KB 5535KB [ 1745.329771] kmalloc-4096 28636KB 28657KB [ 1745.335247] kmalloc-2048 17578KB 18544KB [ 1745.341964] kmalloc-1024 12879KB 13954KB [ 1745.348992] kmalloc-512 14353KB 16998KB [ 1745.356109] kmalloc-256 5554KB 6206KB [ 1745.363162] kmalloc-128 1365KB 1598KB [ 1745.369940] kmalloc-96 3308KB 4368KB [ 1745.376031] kmalloc-64 2705KB 3824KB [ 1745.383270] kmalloc-32 1870KB 2512KB [ 1745.390117] kmalloc-192 2332KB 2920KB [ 1745.396295] kmem_cache 177KB 183KB [ 1745.403540] Out of memory (oom_kill_allocating_task): Kill process 22976 (in:imklog) score 0 or sacrifice child [ 1745.416182] Killed process 22974 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 1745.431611] oom_reaper: reaped process 22974 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:53:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}], 0x0, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:53:12 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x4064, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}], [{@permit_directio}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@uid_eq={'uid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, '_\xde\xa7\xa3\xa9t\xe3}[W\xef\xba\xc1\xdb\xa7\a\xbb\xc9#\x99k\xc4\xbe\b^\x7f'}}, {@flag='posixacl'}]}}, 0x0, 0x0, &(0x7f00000002c0)="590385faf6840c9a04350861aee5c20280bd38c659f4647ef48b8eae058076e8508d676cab71799579c189ee9d1d684dd58f2d288d874150") 14:53:12 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:53:12 executing program 5: syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:13 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x100, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000001, 0x15bd83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x10) 14:53:13 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/227, 0xe3, 0x0, 0x1a}, @flat=@weak_handle={0x77682a85, 0x100a}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x68, 0x0, &(0x7f00000003c0)="3c929e630de215d6b9a2cce28f12c5d358f3e18681a859140e01298ca071333d7546a3cbc6b56ceffa1973f160513380c4e79e05768467c51abb4c42324a38c31b49f9e593a95472f25e16be7bbbe19efa8e301f650dc2103fa8d54f2396ad43741b8c307dc74553"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000024c0)=""/173, &(0x7f0000002580)=0xad) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000025c0)=0x9, 0x4) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/227, 0xe3, 0x0, 0x1a}, @flat=@weak_handle={0x77682a85, 0x100a}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x68, 0x0, &(0x7f00000003c0)="3c929e630de215d6b9a2cce28f12c5d358f3e18681a859140e01298ca071333d7546a3cbc6b56ceffa1973f160513380c4e79e05768467c51abb4c42324a38c31b49f9e593a95472f25e16be7bbbe19efa8e301f650dc2103fa8d54f2396ad43741b8c307dc74553"}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000024c0)=""/173, &(0x7f0000002580)=0xad) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000025c0)=0x9, 0x4) (async) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) (async) 14:53:13 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:13 executing program 5: syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:13 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x100, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000001, 0x15bd83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x10) 14:53:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x100, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000001, 0x15bd83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x10) 14:53:13 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/245, 0xf5, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/227, 0xe3, 0x0, 0x1a}, @flat=@weak_handle={0x77682a85, 0x100a}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x68, 0x0, &(0x7f00000003c0)="3c929e630de215d6b9a2cce28f12c5d358f3e18681a859140e01298ca071333d7546a3cbc6b56ceffa1973f160513380c4e79e05768467c51abb4c42324a38c31b49f9e593a95472f25e16be7bbbe19efa8e301f650dc2103fa8d54f2396ad43741b8c307dc74553"}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000024c0)=""/173, &(0x7f0000002580)=0xad) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000025c0)=0x9, 0x4) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 14:53:13 executing program 5: syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:13 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:13 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x100, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000001, 0x15bd83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x100, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000001, 0x15bd83) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x10) (async) 14:53:13 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:13 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 14:53:13 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 1754.469829] oom_reaper: reaped process 23043 (syz-executor.2), now anon-rss:0kB, file-rss:14332kB, shmem-rss:12kB [ 1754.505909] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1754.522705] in:imklog cpuset=/ mems_allowed=0-1 [ 1754.536414] CPU: 0 PID: 23034 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1754.544215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1754.554215] Call Trace: [ 1754.556990] dump_stack+0x1fc/0x2ef [ 1754.560803] dump_header+0x15d/0xc3f [ 1754.564629] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1754.570804] ? ___ratelimit+0x319/0x590 [ 1754.574965] oom_kill_process.cold+0x10/0x692 [ 1754.579445] ? check_preemption_disabled+0x41/0x280 [ 1754.584489] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1754.589786] out_of_memory+0x1072/0x1390 [ 1754.593962] ? oom_killer_disable+0x270/0x270 [ 1754.599076] ? mutex_trylock+0x15f/0x1a0 [ 1754.603384] __alloc_pages_nodemask+0x23a2/0x2890 [ 1754.608243] ? find_get_entry+0x4cd/0x8a0 [ 1754.612754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1754.618481] alloc_pages_current+0x193/0x2a0 [ 1754.623284] filemap_fault+0x146e/0x2180 [ 1754.628478] ext4_filemap_fault+0x84/0xb0 [ 1754.633623] __do_fault+0x10b/0x4b0 [ 1754.637448] __handle_mm_fault+0x273b/0x41c0 [ 1754.642842] ? vm_insert_page+0x9c0/0x9c0 [ 1754.647225] ? lock_downgrade+0x720/0x720 [ 1754.651482] ? check_preemption_disabled+0x41/0x280 [ 1754.656820] handle_mm_fault+0x436/0xb10 [ 1754.661080] __do_page_fault+0x68e/0xd60 [ 1754.665492] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1754.670646] ? spurious_fault+0x840/0x840 [ 1754.675046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1754.680008] ? page_fault+0x8/0x30 [ 1754.684058] page_fault+0x1e/0x30 [ 1754.688124] RIP: 0033:0x7f840fa0f22d [ 1754.693599] Code: Bad RIP value. [ 1754.697308] RSP: 002b:00007f840d3ab580 EFLAGS: 00010293 [ 1754.703642] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f840fa0f22d [ 1754.711744] RDX: 0000000000001fa0 RSI: 00007f840d3abda0 RDI: 0000000000000004 [ 1754.721846] RBP: 000055e42ef859d0 R08: 0000000000000000 R09: 0000000000000000 [ 1754.735770] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f840d3abda0 [ 1754.744298] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f840d3abe01 [ 1754.759331] syz-executor.2: vmalloc: allocation failure, allocated 1687465984 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1754.759419] Mem-Info: [ 1754.775338] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1754.775375] CPU: 1 PID: 23043 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1754.775383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1754.775388] Call Trace: [ 1754.775412] dump_stack+0x1fc/0x2ef [ 1754.775433] warn_alloc.cold+0x7b/0x18f [ 1754.775454] ? zone_watermark_ok_safe+0x260/0x260 [ 1754.775494] __vmalloc_area_node+0x4fd/0x780 [ 1754.775515] ? __vmalloc_node_range+0x180/0x180 [ 1754.775532] ? _raw_spin_unlock+0x29/0x40 [ 1754.775546] ? __get_vm_area_node+0x2e2/0x3a0 [ 1754.775565] __vmalloc_node_range+0xed/0x180 [ 1754.775581] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1754.775597] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1754.775610] vmalloc_user+0x70/0xe0 [ 1754.775625] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1754.775640] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1754.775655] __vb2_queue_alloc+0x472/0xe60 [ 1754.775682] vb2_core_create_bufs+0x273/0x7e0 [ 1754.775698] ? __vb2_queue_free+0x870/0x870 [ 1754.775715] ? __video_do_ioctl+0x632/0xcd0 [ 1754.775734] ? __mutex_lock+0x368/0x1190 [ 1754.775751] vb2_create_bufs+0x332/0x620 [ 1754.775769] ? mark_held_locks+0xf0/0xf0 [ 1754.775790] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1754.775806] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1754.775825] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1754.775846] v4l_create_bufs+0xb2/0x160 [ 1754.775865] __video_do_ioctl+0x49a/0xcd0 [ 1754.775886] ? v4l_querycap+0x340/0x340 [ 1754.775905] ? __might_fault+0x192/0x1d0 [ 1754.775922] ? v4l_querycap+0x340/0x340 [ 1754.775939] video_usercopy+0x13f/0xfa0 [ 1754.775960] ? v4l_enumstd+0x60/0x60 [ 1754.775976] ? do_futex+0x171/0x1880 [ 1754.775992] ? mark_held_locks+0xf0/0xf0 [ 1754.776012] ? debug_check_no_obj_freed+0x201/0x490 [ 1754.776035] ? video_usercopy+0xfa0/0xfa0 [ 1754.776047] v4l2_ioctl+0x147/0x1a0 [ 1754.776061] ? video_devdata+0xa0/0xa0 [ 1754.776077] do_vfs_ioctl+0xcdb/0x12e0 [ 1754.776093] ? lock_downgrade+0x720/0x720 [ 1754.776110] ? check_preemption_disabled+0x41/0x280 [ 1754.776124] ? ioctl_preallocate+0x200/0x200 [ 1754.776144] ? __fget+0x356/0x510 [ 1754.776161] ? do_dup2+0x450/0x450 [ 1754.776176] ? __se_sys_futex+0x298/0x3b0 [ 1754.776198] ksys_ioctl+0x9b/0xc0 [ 1754.776215] __x64_sys_ioctl+0x6f/0xb0 [ 1754.776229] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1754.776244] do_syscall_64+0xf9/0x620 [ 1754.776263] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1754.776355] RIP: 0033:0x7f5c590870a9 [ 1754.776387] Code: Bad RIP value. [ 1754.776397] RSP: 002b:00007f5c575f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.776426] RAX: ffffffffffffffda RBX: 00007f5c591a6f80 RCX: 00007f5c590870a9 [ 1754.776432] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1754.776439] RBP: 00007f5c590e2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1754.776445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1754.776453] R13: 00007ffc2ad32d5f R14: 00007f5c575f9300 R15: 0000000000022000 [ 1754.776478] Mem-Info: [ 1754.776572] active_anon:14964 inactive_anon:75879 isolated_anon:0 [ 1754.776572] active_file:51 inactive_file:35 isolated_file:0 [ 1754.776572] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1754.776572] slab_reclaimable:13234 slab_unreclaimable:117082 [ 1754.776572] mapped:22402 shmem:76855 pagetables:560 bounce:0 [ 1754.776572] free:13884 free_pcp:931 free_cma:0 [ 1754.776607] Node 0 active_anon:55800kB inactive_anon:26344kB active_file:60kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60360kB dirty:44kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.776628] Node 1 active_anon:4056kB inactive_anon:277172kB active_file:144kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29248kB dirty:12kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.776633] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1754.776661] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1754.776685] Node 0 DMA32 free:17836kB min:35996kB low:44992kB high:53988kB active_anon:55800kB inactive_anon:26344kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:244kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1992kB bounce:0kB free_pcp:1600kB local_pcp:244kB free_cma:0kB [ 1754.776715] lowmem_reserve[]: 0 0 1 1 1 [ 1754.776731] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1754.776760] lowmem_reserve[]: 0 0 0 0 0 [ 1754.776778] Node 1 Normal free:26824kB min:53876kB low:67344kB high:80812kB active_anon:4056kB inactive_anon:277172kB active_file:576kB inactive_file:768kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:248kB bounce:0kB free_pcp:2124kB local_pcp:1608kB free_cma:0kB [ 1754.776809] lowmem_reserve[]: 0 0 0 0 0 [ 1754.776824] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1754.777082] Node 0 DMA32: 607*4kB (UME) 434*8kB (ME) 162*16kB (ME) 48*32kB (UME) 18*64kB (M) 6*128kB (M) 3*256kB (M) 0*512kB 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 17836kB [ 1754.789360] active_anon:14964 inactive_anon:75879 isolated_anon:0 [ 1754.789360] active_file:51 inactive_file:35 isolated_file:0 [ 1754.789360] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1754.789360] slab_reclaimable:13234 slab_unreclaimable:117082 [ 1754.789360] mapped:22402 shmem:76855 pagetables:560 bounce:0 [ 1754.789360] free:13884 free_pcp:931 free_cma:0 [ 1754.798013] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1754.814817] Node 0 active_anon:55800kB inactive_anon:26344kB active_file:60kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60360kB dirty:44kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.818864] Node 1 Normal: 314*4kB (UME) 318*8kB (UME) 257*16kB (ME) 91*32kB (ME) 60*64kB (UME) 23*128kB (UME) 10*256kB (ME) 7*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 26824kB [ 1754.823096] Node 1 active_anon:4056kB inactive_anon:277172kB active_file:144kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29248kB dirty:12kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.827686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.827698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.827708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.827717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.827722] 76958 total pagecache pages [ 1754.827732] 0 pages in swap cache [ 1754.827739] Swap cache stats: add 0, delete 0, find 0/0 [ 1754.827743] Free swap = 0kB [ 1754.827747] Total swap = 0kB [ 1754.827756] 2097051 pages RAM [ 1754.827761] 0 pages HighMem/MovableOnly [ 1754.827766] 369649 pages reserved [ 1754.827771] 0 pages cma reserved [ 1755.553509] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1755.580328] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1755.585596] Node 0 DMA32 free:18060kB min:35996kB low:44992kB high:53988kB active_anon:55708kB inactive_anon:26344kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1988kB bounce:0kB free_pcp:1624kB local_pcp:1360kB free_cma:0kB [ 1755.619189] lowmem_reserve[]: 0 0 1 1 1 [ 1755.623204] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1755.650464] lowmem_reserve[]: 0 0 0 0 0 [ 1755.654473] Node 1 Normal free:54224kB min:53876kB low:67344kB high:80812kB active_anon:4060kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:248kB bounce:0kB free_pcp:1820kB local_pcp:516kB free_cma:0kB [ 1755.684880] lowmem_reserve[]: 0 0 0 0 0 [ 1755.689669] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1755.706391] Node 0 DMA32: 607*4kB (UME) 653*8kB (UME) 166*16kB (UME) 50*32kB (UME) 19*64kB (UM) 6*128kB (M) 3*256kB (M) 0*512kB 3*1024kB (UM) 1*2048kB (M) 0*4096kB = 19780kB [ 1755.723345] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1755.734678] Node 1 Normal: 116*4kB (UME) 357*8kB (UME) 244*16kB (UME) 114*32kB (UME) 58*64kB (UME) 21*128kB (UME) 9*256kB (UME) 9*512kB (UM) 4*1024kB (UM) 49*2048kB (U) 0*4096kB = 128632kB [ 1755.752096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.761255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1755.770459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1755.779532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1755.788519] 77253 total pagecache pages [ 1755.792656] 0 pages in swap cache [ 1755.798538] Swap cache stats: add 0, delete 0, find 0/0 [ 1755.804068] Free swap = 0kB [ 1755.808201] Total swap = 0kB [ 1755.811245] 2097051 pages RAM [ 1755.814346] 0 pages HighMem/MovableOnly [ 1755.818373] 369649 pages reserved [ 1755.821821] 0 pages cma reserved [ 1755.825404] Unreclaimable slab info: [ 1755.829295] Name Used Total [ 1755.834999] pid_2 19KB 44KB [ 1755.840587] batadv_tt_change_cache 3KB 7KB [ 1755.846495] batadv_tl_cache 7KB 16KB [ 1755.852263] TIPC 13KB 37KB [ 1755.857892] SCTPv6 20KB 30KB [ 1755.863368] DCCPv6 17KB 30KB [ 1755.869107] DCCP 16KB 35KB [ 1755.874788] RXRPC 14KB 32KB [ 1755.880527] rxrpc_call_jar 101KB 133KB [ 1755.886151] bridge_fdb_cache 12KB 27KB [ 1755.891885] fib6_nodes 226KB 288KB [ 1755.897423] ip6_dst_cache 727KB 727KB [ 1755.904621] RAWv6 101KB 128KB [ 1755.910187] UDPv6 33KB 41KB [ 1755.915569] TCPv6 33KB 48KB [ 1755.921356] nf_conntrack 13KB 15KB [ 1755.926813] t10_alua_lu_gp_cache 0KB 3KB [ 1755.932775] sd_ext_cdb 0KB 7KB [ 1755.938539] scsi_sense_cache 1056KB 1060KB [ 1755.944064] virtio_scsi_cmd 16KB 16KB [ 1755.949820] sgpool-128 8KB 8KB [ 1755.955587] sgpool-64 4KB 12KB [ 1755.961579] sgpool-32 2KB 15KB [ 1755.967269] sgpool-16 1KB 7KB [ 1755.973151] sgpool-8 0KB 7KB [ 1755.978819] mqueue_inode_cache 12KB 30KB [ 1755.984299] bio_post_read_ctx 14KB 15KB [ 1755.997045] bio-2 14KB 15KB [ 1756.016958] jfs_mp 7KB 7KB [ 1756.022644] cifs_small_rq 15KB 16KB [ 1756.037257] cifs_request 67KB 67KB [ 1756.042660] cifs_mpx_ids 0KB 7KB [ 1756.056984] nfs_commit_data 3KB 14KB [ 1756.062710] nfs_write_data 34KB 44KB [ 1756.102461] ext4_system_zone 1KB 7KB [ 1756.108186] bio-1 1KB 7KB [ 1756.113729] pid_namespace 2KB 11KB [ 1756.125094] rpc_buffers 17KB 25KB [ 1756.135360] rpc_tasks 2KB 7KB [ 1756.147630] UNIX 1987KB 2096KB [ 1756.154901] tcp_bind_bucket 1KB 4KB [ 1756.165384] ip_fib_trie 33KB 47KB [ 1756.172469] ip_fib_alias 161KB 201KB [ 1756.181935] ip_dst_cache 12KB 24KB [ 1756.188315] RAW 60KB 75KB [ 1756.193793] UDP 67KB 81KB [ 1756.203186] TCP 28KB 33KB [ 1756.210044] hugetlbfs_inode_cache 3KB 15KB [ 1756.215785] fscache_cookie_jar 1KB 7KB [ 1756.221421] eventpoll_pwq 20KB 55KB [ 1756.226804] eventpoll_epi 36KB 66KB [ 1756.232299] inotify_inode_mark 13KB 23KB [ 1756.238007] request_queue 199KB 199KB [ 1756.243378] blkdev_requests 1KB 3KB [ 1756.248990] blkdev_ioc 23KB 38KB [ 1756.254539] bio-0 589KB 941KB [ 1756.260161] biovec-max 1476KB 1584KB [ 1756.265764] biovec-64 560KB 1055KB [ 1756.271328] biovec-16 96KB 195KB [ 1756.276740] bio_integrity_payload 1KB 8KB [ 1756.282746] khugepaged_mm_slot 5KB 23KB [ 1756.288332] uid_cache 0KB 4KB [ 1756.293807] dmaengine-unmap-2 0KB 3KB [ 1756.299346] skbuff_fclone_cache 63KB 63KB [ 1756.305079] skbuff_head_cache 8718KB 8932KB [ 1756.310635] configfs_dir_cache 3KB 7KB [ 1756.316112] file_lock_cache 29KB 47KB [ 1756.325504] file_lock_ctx 9KB 15KB [ 1756.332008] fsnotify_mark_connector 5KB 11KB [ 1756.342194] net_namespace 78KB 78KB [ 1756.348637] shmem_inode_cache 8043KB 8135KB [ 1756.354022] task_delay_info 263KB 359KB [ 1756.363499] taskstats 29KB 45KB [ 1756.369863] proc_dir_entry 890KB 1020KB [ 1756.375425] pde_opener 14KB 46KB [ 1756.385725] seq_file 228KB 405KB [ 1756.392102] sigqueue 49KB 70KB [ 1756.401543] kernfs_node_cache 18234KB 18258KB [ 1756.408108] mnt_cache 193KB 220KB [ 1756.413896] filp 7565KB 8816KB [ 1756.420148] names_cache 110508KB 110508KB [ 1756.425621] iint_cache 32KB 51KB [ 1756.431171] key_jar 4KB 11KB [ 1756.437082] uts_namespace 3KB 7KB [ 1756.443145] nsproxy 2KB 11KB [ 1756.449512] vm_area_struct 2902KB 3356KB [ 1756.454993] mm_struct 482KB 520KB [ 1756.460586] fs_cache 292KB 336KB [ 1756.466494] files_cache 1080KB 1207KB [ 1756.472690] signal_cache 1978KB 2177KB [ 1756.478236] sighand_cache 531KB 617KB [ 1756.483617] task_struct 9184KB 9216KB [ 1756.490103] cred_jar 2432KB 2820KB [ 1756.495577] anon_vma_chain 852KB 1523KB [ 1756.502178] anon_vma 137KB 292KB [ 1756.508338] pid 171KB 236KB [ 1756.513712] Acpi-Operand 156KB 198KB [ 1756.520101] Acpi-ParseExt 8KB 11KB [ 1756.525859] Acpi-Parse 41KB 47KB [ 1756.532631] Acpi-State 52KB 63KB [ 1756.539209] Acpi-Namespace 20KB 27KB [ 1756.544611] numa_policy 0KB 3KB [ 1756.551354] debug_objects_cache 1726KB 1883KB [ 1756.557609] trace_event_file 297KB 298KB [ 1756.562989] ftrace_event_field 398KB 401KB [ 1756.569459] pool_workqueue 134KB 156KB [ 1756.574839] page->ptl 450KB 964KB [ 1756.581456] kmalloc-2097152 2050KB 2050KB [ 1756.587439] kmalloc-524288 2056KB 2056KB [ 1756.592988] kmalloc-262144 1290KB 1290KB [ 1756.599686] kmalloc-131072 650KB 650KB [ 1756.605286] kmalloc-65536 2640KB 2706KB [ 1756.612001] kmalloc-32768 2112KB 2112KB [ 1756.618408] kmalloc-16384 1171KB 1336KB [ 1756.623888] kmalloc-8192 5354KB 5436KB [ 1756.630630] kmalloc-4096 29265KB 29269KB [ 1756.636276] kmalloc-2048 17450KB 18525KB [ 1756.642838] kmalloc-1024 13351KB 13954KB [ 1756.649202] kmalloc-512 16074KB 16998KB [ 1756.654672] kmalloc-256 5571KB 6206KB [ 1756.661552] kmalloc-128 1322KB 1598KB [ 1756.667670] kmalloc-96 3450KB 4368KB [ 1756.673227] kmalloc-64 2750KB 3824KB [ 1756.680796] kmalloc-32 1941KB 2512KB [ 1756.686400] kmalloc-192 2230KB 2920KB [ 1756.692723] kmem_cache 177KB 183KB [ 1756.702416] Out of memory (oom_kill_allocating_task): Kill process 23034 (in:imklog) score 0 or sacrifice child [ 1756.713898] Killed process 23032 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 1756.733749] oom_reaper: reaped process 23032 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:53:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x7fffffff}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:53:24 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:24 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:24 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0xbb, 0x3, 0x0, {0x6, 0x9a, 0x0, '/dvim2m\x00@ll\xe0x \xa8G\xa3\xf8\xe6\xf4\x96\x15\x7f\bu\xa8*Etfou\xd3\v\xd7\xda\xd7ZM\xc7\xe3%\x00\xf2^\x13G\xd4\xa1,\xc7jPZ\xf0\xb7\xb3\xca\x18\xe6\xc4\xf7V)#\x9f\xd9\x18\xdc\x8dmO\xc8\xca\xf8\x16&y\xdfl\x19\"b))-\x02\xe0\x14\n\x81:X\xd98\x81\xf0\x06u\x89V\v\x045b\xbc\xd6\rru\xa5\xd9\xa5\x0e9A\xa9\'\xdfMB\xa13A\x02\xe1\xba\x85<\xcc\xe2\x98\x8d\xa1\xb9\x17r,\xdf\ns\xa9\xa8\x00'/154}}, 0xbb) 14:53:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 14:53:24 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xffffffc1, 0x0, 0x0, 0x100, 0x1e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x5}, 0x10}, 0x80) 14:53:24 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 14:53:24 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0xbb, 0x3, 0x0, {0x6, 0x9a, 0x0, '/dvim2m\x00@ll\xe0x \xa8G\xa3\xf8\xe6\xf4\x96\x15\x7f\bu\xa8*Etfou\xd3\v\xd7\xda\xd7ZM\xc7\xe3%\x00\xf2^\x13G\xd4\xa1,\xc7jPZ\xf0\xb7\xb3\xca\x18\xe6\xc4\xf7V)#\x9f\xd9\x18\xdc\x8dmO\xc8\xca\xf8\x16&y\xdfl\x19\"b))-\x02\xe0\x14\n\x81:X\xd98\x81\xf0\x06u\x89V\v\x045b\xbc\xd6\rru\xa5\xd9\xa5\x0e9A\xa9\'\xdfMB\xa13A\x02\xe1\xba\x85<\xcc\xe2\x98\x8d\xa1\xb9\x17r,\xdf\ns\xa9\xa8\x00'/154}}, 0xbb) 14:53:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:24 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xffffffc1, 0x0, 0x0, 0x100, 0x1e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x5}, 0x10}, 0x80) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xffffffc1, 0x0, 0x0, 0x100, 0x1e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x5}, 0x10}, 0x80) (async) 14:53:24 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x0, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:24 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0xbb, 0x3, 0x0, {0x6, 0x9a, 0x0, '/dvim2m\x00@ll\xe0x \xa8G\xa3\xf8\xe6\xf4\x96\x15\x7f\bu\xa8*Etfou\xd3\v\xd7\xda\xd7ZM\xc7\xe3%\x00\xf2^\x13G\xd4\xa1,\xc7jPZ\xf0\xb7\xb3\xca\x18\xe6\xc4\xf7V)#\x9f\xd9\x18\xdc\x8dmO\xc8\xca\xf8\x16&y\xdfl\x19\"b))-\x02\xe0\x14\n\x81:X\xd98\x81\xf0\x06u\x89V\v\x045b\xbc\xd6\rru\xa5\xd9\xa5\x0e9A\xa9\'\xdfMB\xa13A\x02\xe1\xba\x85<\xcc\xe2\x98\x8d\xa1\xb9\x17r,\xdf\ns\xa9\xa8\x00'/154}}, 0xbb) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0xbb, 0x3, 0x0, {0x6, 0x9a, 0x0, '/dvim2m\x00@ll\xe0x \xa8G\xa3\xf8\xe6\xf4\x96\x15\x7f\bu\xa8*Etfou\xd3\v\xd7\xda\xd7ZM\xc7\xe3%\x00\xf2^\x13G\xd4\xa1,\xc7jPZ\xf0\xb7\xb3\xca\x18\xe6\xc4\xf7V)#\x9f\xd9\x18\xdc\x8dmO\xc8\xca\xf8\x16&y\xdfl\x19\"b))-\x02\xe0\x14\n\x81:X\xd98\x81\xf0\x06u\x89V\v\x045b\xbc\xd6\rru\xa5\xd9\xa5\x0e9A\xa9\'\xdfMB\xa13A\x02\xe1\xba\x85<\xcc\xe2\x98\x8d\xa1\xb9\x17r,\xdf\ns\xa9\xa8\x00'/154}}, 0xbb) (async) 14:53:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:24 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) [ 1765.839167] oom_reaper: reaped process 23107 (syz-executor.2), now anon-rss:0kB, file-rss:14332kB, shmem-rss:12kB [ 1765.870832] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1765.891573] in:imklog cpuset=/ mems_allowed=0-1 [ 1765.900402] CPU: 1 PID: 23097 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1765.907934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1765.917296] Call Trace: [ 1765.920041] dump_stack+0x1fc/0x2ef [ 1765.923688] dump_header+0x15d/0xc3f [ 1765.927429] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1765.932550] ? ___ratelimit+0x319/0x590 [ 1765.936523] oom_kill_process.cold+0x10/0x692 [ 1765.941261] ? check_preemption_disabled+0x41/0x280 [ 1765.946667] syz-executor.2: vmalloc: allocation failure, allocated 1697034240 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1765.946913] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1765.965264] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1765.966845] out_of_memory+0x1072/0x1390 [ 1765.966865] ? oom_killer_disable+0x270/0x270 [ 1765.966880] ? mutex_trylock+0x15f/0x1a0 [ 1765.966897] __alloc_pages_nodemask+0x23a2/0x2890 [ 1765.966915] ? find_get_entry+0x4cd/0x8a0 [ 1765.966938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.966975] alloc_pages_current+0x193/0x2a0 [ 1765.966991] filemap_fault+0x146e/0x2180 [ 1766.008029] ext4_filemap_fault+0x84/0xb0 [ 1766.012200] __do_fault+0x10b/0x4b0 [ 1766.015847] __handle_mm_fault+0x273b/0x41c0 [ 1766.020411] ? vm_insert_page+0x9c0/0x9c0 [ 1766.024666] ? lock_downgrade+0x720/0x720 [ 1766.028934] ? check_preemption_disabled+0x41/0x280 [ 1766.034240] handle_mm_fault+0x436/0xb10 [ 1766.038320] __do_page_fault+0x68e/0xd60 [ 1766.042404] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1766.047519] ? spurious_fault+0x840/0x840 [ 1766.051967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1766.057164] ? page_fault+0x8/0x30 [ 1766.062583] page_fault+0x1e/0x30 [ 1766.067197] RIP: 0033:0x7fc173b1f22d [ 1766.072140] Code: Bad RIP value. [ 1766.076633] RSP: 002b:00007fc1714bb580 EFLAGS: 00010293 [ 1766.085430] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fc173b1f22d [ 1766.094027] RDX: 0000000000001fa0 RSI: 00007fc1714bbda0 RDI: 0000000000000004 [ 1766.104467] RBP: 000055c69a5fe9d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.113710] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fc1714bbda0 [ 1766.121969] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fc1714bbe01 [ 1766.130792] CPU: 0 PID: 23107 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1766.139929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1766.146579] Mem-Info: [ 1766.150756] Call Trace: [ 1766.153348] active_anon:14947 inactive_anon:75879 isolated_anon:0 [ 1766.153348] active_file:14 inactive_file:16 isolated_file:0 [ 1766.153348] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1766.153348] slab_reclaimable:13372 slab_unreclaimable:114980 [ 1766.153348] mapped:22407 shmem:76855 pagetables:557 bounce:0 [ 1766.153348] free:13880 free_pcp:580 free_cma:0 [ 1766.156047] dump_stack+0x1fc/0x2ef [ 1766.196373] Node 0 active_anon:55900kB inactive_anon:26344kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1766.197478] warn_alloc.cold+0x7b/0x18f [ 1766.237945] Node 1 active_anon:3888kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29324kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1766.241966] ? zone_watermark_ok_safe+0x260/0x260 [ 1766.242003] __vmalloc_area_node+0x4fd/0x780 [ 1766.242021] ? __vmalloc_node_range+0x180/0x180 [ 1766.242035] ? _raw_spin_unlock+0x29/0x40 [ 1766.242048] ? __get_vm_area_node+0x2e2/0x3a0 [ 1766.242067] __vmalloc_node_range+0xed/0x180 [ 1766.242084] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1766.242097] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1766.242110] vmalloc_user+0x70/0xe0 [ 1766.242125] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1766.242140] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1766.242154] __vb2_queue_alloc+0x472/0xe60 [ 1766.242179] vb2_core_create_bufs+0x273/0x7e0 [ 1766.242194] ? __vb2_queue_free+0x870/0x870 [ 1766.242211] ? __video_do_ioctl+0x632/0xcd0 [ 1766.242232] ? __mutex_lock+0x368/0x1190 [ 1766.242249] vb2_create_bufs+0x332/0x620 [ 1766.242270] ? mark_held_locks+0xf0/0xf0 [ 1766.242284] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1766.242301] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1766.242319] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1766.242340] v4l_create_bufs+0xb2/0x160 [ 1766.242358] __video_do_ioctl+0x49a/0xcd0 [ 1766.242380] ? v4l_querycap+0x340/0x340 [ 1766.242400] ? __might_fault+0x192/0x1d0 [ 1766.242417] ? v4l_querycap+0x340/0x340 [ 1766.242433] video_usercopy+0x13f/0xfa0 [ 1766.242456] ? v4l_enumstd+0x60/0x60 [ 1766.242472] ? do_futex+0x171/0x1880 [ 1766.242487] ? mark_held_locks+0xf0/0xf0 [ 1766.242507] ? debug_check_no_obj_freed+0x201/0x490 [ 1766.242530] ? video_usercopy+0xfa0/0xfa0 [ 1766.242543] v4l2_ioctl+0x147/0x1a0 [ 1766.242556] ? video_devdata+0xa0/0xa0 [ 1766.242574] do_vfs_ioctl+0xcdb/0x12e0 [ 1766.242590] ? lock_downgrade+0x720/0x720 [ 1766.242607] ? check_preemption_disabled+0x41/0x280 [ 1766.242622] ? ioctl_preallocate+0x200/0x200 [ 1766.242647] ? __fget+0x356/0x510 [ 1766.242664] ? do_dup2+0x450/0x450 [ 1766.242678] ? __se_sys_futex+0x298/0x3b0 [ 1766.242702] ksys_ioctl+0x9b/0xc0 [ 1766.242717] __x64_sys_ioctl+0x6f/0xb0 [ 1766.242732] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1766.242748] do_syscall_64+0xf9/0x620 [ 1766.242767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1766.242780] RIP: 0033:0x7f5c590870a9 [ 1766.242799] Code: Bad RIP value. [ 1766.242806] RSP: 002b:00007f5c575f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.242820] RAX: ffffffffffffffda RBX: 00007f5c591a6f80 RCX: 00007f5c590870a9 [ 1766.242828] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1766.242837] RBP: 00007f5c590e2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1766.242844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1766.242853] R13: 00007ffc2ad32d5f R14: 00007f5c575f9300 R15: 0000000000022000 [ 1766.260817] Mem-Info: [ 1766.277857] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.292670] active_anon:14947 inactive_anon:75879 isolated_anon:0 [ 1766.292670] active_file:14 inactive_file:16 isolated_file:0 [ 1766.292670] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1766.292670] slab_reclaimable:13372 slab_unreclaimable:114980 [ 1766.292670] mapped:22407 shmem:76855 pagetables:557 bounce:0 [ 1766.292670] free:13880 free_pcp:580 free_cma:0 [ 1766.299872] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1766.302888] Node 0 active_anon:55900kB inactive_anon:26344kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1766.317255] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:55900kB inactive_anon:26344kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1984kB bounce:0kB free_pcp:340kB local_pcp:92kB free_cma:0kB [ 1766.330486] Node 1 active_anon:3888kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29324kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1766.341185] lowmem_reserve[]: 0 0 1 1 1 [ 1766.344562] Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.344604] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1766.344622] Node 0 DMA32 free:17864kB min:35996kB low:44992kB high:53988kB active_anon:55900kB inactive_anon:26344kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1984kB bounce:0kB free_pcp:340kB local_pcp:248kB free_cma:0kB [ 1766.344647] lowmem_reserve[]: 0 0 1 1 1 [ 1766.344662] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.344690] lowmem_reserve[]: 0 0 0 0 0 [ 1766.344709] Node 1 Normal free:26780kB min:53876kB low:67344kB high:80812kB active_anon:3888kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:1980kB local_pcp:1612kB free_cma:0kB [ 1766.344735] lowmem_reserve[]: 0 0 0 0 0 [ 1766.344754] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1766.344817] Node 0 DMA32: 660*4kB (ME) 505*8kB (UME) 207*16kB (ME) 66*32kB (ME) 22*64kB (M) 8*128kB (UM) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 17864kB [ 1766.344892] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1766.344945] Node 1 Normal: 353*4kB (UME) 249*8kB (ME) 227*16kB (ME) 115*32kB (UME) 59*64kB (UME) 20*128kB (ME) 8*256kB (UME) 9*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 26780kB [ 1766.345030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.345041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.345052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1766.345062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1766.345067] 76885 total pagecache pages [ 1766.345081] 0 pages in swap cache [ 1766.345089] Swap cache stats: add 0, delete 0, find 0/0 [ 1766.345094] Free swap = 0kB [ 1766.345099] Total swap = 0kB [ 1766.345107] 2097051 pages RAM [ 1766.345112] 0 pages HighMem/MovableOnly [ 1766.345117] 369649 pages reserved [ 1766.345122] 0 pages cma reserved [ 1767.046545] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.076263] lowmem_reserve[]: 0 0 0 0 0 [ 1767.081571] Node 1 Normal free:26780kB min:53876kB low:67344kB high:80812kB active_anon:3888kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:1980kB local_pcp:368kB free_cma:0kB [ 1767.117930] lowmem_reserve[]: 0 0 0 0 0 [ 1767.122130] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10872kB [ 1767.139167] Node 0 DMA32: 660*4kB (ME) 513*8kB (UME) 209*16kB (UME) 67*32kB (UME) 22*64kB (M) 8*128kB (UM) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 17992kB [ 1767.157875] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1767.171763] Node 1 Normal: 353*4kB (UME) 249*8kB (ME) 227*16kB (ME) 115*32kB (UME) 59*64kB (UME) 20*128kB (ME) 8*256kB (UME) 9*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 26780kB [ 1767.188772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.198529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.207780] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.217985] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.227401] 76885 total pagecache pages [ 1767.232524] 0 pages in swap cache [ 1767.235985] Swap cache stats: add 0, delete 0, find 0/0 [ 1767.241961] Free swap = 0kB [ 1767.244976] Total swap = 0kB [ 1767.248578] 2097051 pages RAM [ 1767.252044] 0 pages HighMem/MovableOnly [ 1767.256116] 369649 pages reserved [ 1767.260155] 0 pages cma reserved [ 1767.271054] Unreclaimable slab info: [ 1767.275746] Name Used Total [ 1767.284188] pid_2 23KB 44KB [ 1767.294350] batadv_tt_change_cache 3KB 7KB [ 1767.303691] batadv_tl_cache 7KB 16KB [ 1767.312504] TIPC 13KB 37KB [ 1767.321024] SCTPv6 20KB 30KB [ 1767.333231] DCCPv6 17KB 30KB [ 1767.341026] DCCP 16KB 35KB [ 1767.351049] RXRPC 14KB 32KB [ 1767.358912] rxrpc_call_jar 101KB 133KB [ 1767.364394] bridge_fdb_cache 12KB 27KB [ 1767.375363] fib6_nodes 222KB 288KB [ 1767.383099] ip6_dst_cache 746KB 746KB [ 1767.392133] RAWv6 101KB 128KB [ 1767.399338] UDPv6 33KB 41KB [ 1767.405063] TCPv6 30KB 42KB [ 1767.414499] nf_conntrack 14KB 15KB [ 1767.422183] t10_alua_lu_gp_cache 0KB 3KB [ 1767.432283] sd_ext_cdb 0KB 7KB [ 1767.443526] scsi_sense_cache 1056KB 1060KB [ 1767.453221] virtio_scsi_cmd 16KB 16KB [ 1767.463841] sgpool-128 8KB 8KB [ 1767.475397] sgpool-64 4KB 12KB [ 1767.489765] sgpool-32 2KB 15KB [ 1767.495259] sgpool-16 1KB 7KB [ 1767.506694] sgpool-8 0KB 7KB [ 1767.512469] mqueue_inode_cache 12KB 30KB [ 1767.518215] bio_post_read_ctx 14KB 15KB [ 1767.524241] bio-2 14KB 15KB [ 1767.533720] jfs_mp 7KB 7KB [ 1767.539211] cifs_small_rq 15KB 16KB [ 1767.545846] cifs_request 67KB 67KB [ 1767.555740] cifs_mpx_ids 0KB 7KB [ 1767.561852] nfs_commit_data 3KB 14KB [ 1767.571521] nfs_write_data 34KB 44KB [ 1767.579437] ext4_system_zone 1KB 7KB [ 1767.584903] bio-1 1KB 7KB [ 1767.598642] pid_namespace 2KB 11KB [ 1767.604145] rpc_buffers 17KB 25KB [ 1767.615625] rpc_tasks 2KB 7KB [ 1767.623943] UNIX 2008KB 2096KB [ 1767.635519] tcp_bind_bucket 1KB 4KB [ 1767.643652] ip_fib_trie 33KB 47KB [ 1767.655544] ip_fib_alias 158KB 201KB [ 1767.663842] ip_dst_cache 12KB 24KB [ 1767.677066] RAW 60KB 75KB [ 1767.682467] UDP 70KB 81KB [ 1767.687953] TCP 25KB 28KB [ 1767.693338] hugetlbfs_inode_cache 3KB 15KB [ 1767.703692] fscache_cookie_jar 1KB 7KB [ 1767.709448] eventpoll_pwq 19KB 55KB [ 1767.715032] eventpoll_epi 34KB 66KB [ 1767.724027] inotify_inode_mark 13KB 23KB [ 1767.729695] request_queue 199KB 199KB [ 1767.735064] blkdev_requests 1KB 3KB [ 1767.744545] blkdev_ioc 22KB 38KB [ 1767.750022] bio-0 765KB 941KB [ 1767.755389] biovec-max 1542KB 1650KB [ 1767.764423] biovec-64 679KB 1055KB [ 1767.769992] biovec-16 101KB 191KB [ 1767.775625] bio_integrity_payload 1KB 8KB [ 1767.784587] khugepaged_mm_slot 4KB 23KB [ 1767.792967] uid_cache 0KB 4KB [ 1767.801388] dmaengine-unmap-2 0KB 3KB [ 1767.814996] skbuff_fclone_cache 70KB 71KB [ 1767.824604] skbuff_head_cache 9474KB 9570KB [ 1767.833699] configfs_dir_cache 3KB 7KB [ 1767.841858] file_lock_cache 36KB 47KB [ 1767.850450] file_lock_ctx 9KB 15KB [ 1767.856693] fsnotify_mark_connector 6KB 11KB [ 1767.864109] net_namespace 78KB 78KB [ 1767.875175] shmem_inode_cache 8061KB 8135KB [ 1767.884029] task_delay_info 270KB 359KB [ 1767.895019] taskstats 31KB 45KB [ 1767.901347] proc_dir_entry 882KB 1020KB [ 1767.912255] pde_opener 14KB 46KB [ 1767.917879] seq_file 245KB 405KB [ 1767.924036] sigqueue 40KB 70KB [ 1767.934235] kernfs_node_cache 18234KB 18258KB [ 1767.940291] mnt_cache 191KB 216KB [ 1767.945708] filp 7126KB 8782KB [ 1767.955963] names_cache 106564KB 106594KB [ 1767.962133] iint_cache 33KB 51KB [ 1767.973093] key_jar 4KB 11KB [ 1767.979412] uts_namespace 3KB 7KB [ 1767.993716] nsproxy 2KB 11KB [ 1767.999861] vm_area_struct 3088KB 3356KB [ 1768.005336] mm_struct 510KB 520KB [ 1768.015474] fs_cache 292KB 336KB [ 1768.021655] files_cache 1095KB 1207KB [ 1768.033471] signal_cache 2003KB 2177KB [ 1768.039655] sighand_cache 524KB 610KB [ 1768.045527] task_struct 9462KB 9494KB [ 1768.060822] cred_jar 2204KB 2812KB [ 1768.085817] anon_vma_chain 919KB 1523KB [ 1768.108546] anon_vma 116KB 292KB [ 1768.114315] pid 167KB 236KB [ 1768.139678] Acpi-Operand 156KB 198KB [ 1768.145518] Acpi-ParseExt 8KB 11KB [ 1768.174855] Acpi-Parse 41KB 47KB [ 1768.180459] Acpi-State 52KB 63KB [ 1768.196096] Acpi-Namespace 20KB 27KB [ 1768.201892] numa_policy 0KB 3KB [ 1768.215555] debug_objects_cache 1721KB 1883KB [ 1768.231616] trace_event_file 297KB 298KB [ 1768.237288] ftrace_event_field 398KB 401KB [ 1768.252971] pool_workqueue 134KB 156KB [ 1768.263157] page->ptl 482KB 964KB [ 1768.268920] kmalloc-2097152 2050KB 2050KB [ 1768.274386] kmalloc-524288 2056KB 2056KB [ 1768.280065] kmalloc-262144 1290KB 1290KB [ 1768.286008] kmalloc-131072 650KB 650KB [ 1768.291669] kmalloc-65536 2640KB 2706KB [ 1768.297949] kmalloc-32768 2112KB 2112KB [ 1768.304915] kmalloc-16384 1171KB 1254KB [ 1768.311558] kmalloc-8192 5214KB 5296KB [ 1768.317843] kmalloc-4096 27854KB 27892KB [ 1768.324737] kmalloc-2048 16972KB 18391KB [ 1768.330881] kmalloc-1024 13189KB 13946KB [ 1768.337160] kmalloc-512 16805KB 17520KB [ 1768.342567] kmalloc-256 5407KB 6206KB [ 1768.348536] kmalloc-128 1321KB 1598KB [ 1768.353938] kmalloc-96 3563KB 4368KB [ 1768.360133] kmalloc-64 2792KB 3824KB [ 1768.365715] kmalloc-32 1986KB 2512KB [ 1768.371493] kmalloc-192 2230KB 2920KB [ 1768.377050] kmem_cache 177KB 183KB [ 1768.382544] Out of memory (oom_kill_allocating_task): Kill process 23097 (in:imklog) score 0 or sacrifice child [ 1768.393519] Killed process 23095 (rsyslogd) total-vm:254332kB, anon-rss:524kB, file-rss:0kB, shmem-rss:0kB [ 1768.405427] oom_reaper: reaped process 23095 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:53:36 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x450, 0x149a41) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d000037093e490fa9b3ff799fc06a27eefff4f8024dc30694cad520908ca91a1debc5cfe0211d9fa50f355a7724601dced4124cc116b52dbf2c54a1da5aed921709e3f3d4ce51148c1a37be475449c1ef72564d912c6e88"], 0x2c) 14:53:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f0000000040)='syzkaller\x00', 0xffffffc1, 0x0, 0x0, 0x100, 0x1e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x5}, 0x10}, 0x80) 14:53:36 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x0, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:36 executing program 2: r0 = syz_open_dev$vim2m(0x0, 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x1000, 0x200, 0x2, {0x3, @win={{0x1, 0x1, 0x8, 0x8}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x450, 0x149a41) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d000037093e490fa9b3ff799fc06a27eefff4f8024dc30694cad520908ca91a1debc5cfe0211d9fa50f355a7724601dced4124cc116b52dbf2c54a1da5aed921709e3f3d4ce51148c1a37be475449c1ef72564d912c6e88"], 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x450, 0x149a41) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d000037093e490fa9b3ff799fc06a27eefff4f8024dc30694cad520908ca91a1debc5cfe0211d9fa50f355a7724601dced4124cc116b52dbf2c54a1da5aed921709e3f3d4ce51148c1a37be475449c1ef72564d912c6e88"], 0x2c) (async) 14:53:36 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x0, 0x2, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e, 0x10000}, {}, {}, {}, {}, {0x0, 0x7fffffff}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:53:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x450, 0x149a41) (async) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d000037093e490fa9b3ff799fc06a27eefff4f8024dc30694cad520908ca91a1debc5cfe0211d9fa50f355a7724601dced4124cc116b52dbf2c54a1da5aed921709e3f3d4ce51148c1a37be475449c1ef72564d912c6e88"], 0x2c) 14:53:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) 14:53:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x0, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:36 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:53:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) (async) 14:53:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:53:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x0, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:53:36 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:53:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 1777.486419] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1777.503150] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1777.508877] CPU: 1 PID: 8085 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1777.516422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1777.526205] Call Trace: [ 1777.528934] dump_stack+0x1fc/0x2ef [ 1777.532575] dump_header+0x15d/0xc3f [ 1777.536647] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1777.541862] ? ___ratelimit+0x319/0x590 [ 1777.546649] oom_kill_process.cold+0x10/0x692 [ 1777.551602] ? check_preemption_disabled+0x41/0x280 [ 1777.556833] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1777.562479] out_of_memory+0x1072/0x1390 [ 1777.566645] ? oom_killer_disable+0x270/0x270 [ 1777.571159] ? mutex_trylock+0x15f/0x1a0 [ 1777.575239] __alloc_pages_nodemask+0x23a2/0x2890 [ 1777.580096] ? find_get_entry+0x4cd/0x8a0 [ 1777.584280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1777.589253] alloc_pages_current+0x193/0x2a0 [ 1777.593677] filemap_fault+0x146e/0x2180 [ 1777.597750] ext4_filemap_fault+0x84/0xb0 [ 1777.601899] __do_fault+0x10b/0x4b0 [ 1777.605538] ? do_raw_spin_unlock+0x171/0x230 [ 1777.610135] __handle_mm_fault+0x273b/0x41c0 [ 1777.614549] ? vm_insert_page+0x9c0/0x9c0 [ 1777.618979] ? check_preemption_disabled+0x41/0x280 [ 1777.624089] handle_mm_fault+0x436/0xb10 [ 1777.628161] __do_page_fault+0x68e/0xd60 [ 1777.632244] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1777.637345] ? spurious_fault+0x840/0x840 [ 1777.641494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1777.646511] ? page_fault+0x8/0x30 [ 1777.650058] page_fault+0x1e/0x30 [ 1777.653530] RIP: 0033:0x467160 [ 1777.656739] Code: Bad RIP value. [ 1777.660110] RSP: 002b:000000c00005fec8 EFLAGS: 00010246 [ 1777.665472] RAX: ffffffffffffff92 RBX: 0000000000000000 RCX: 000000c0000004e0 [ 1777.672746] RDX: 0000000001f4d198 RSI: 0000000000000080 RDI: 0000000001f4d198 [ 1777.680011] RBP: 000000c00005ff00 R08: 0000000000000000 R09: 0000000000000000 [ 1777.687482] R10: 000000c00005feb0 R11: 0000000000000206 R12: 000000c00005feb0 [ 1777.694770] R13: 000000c0005b2000 R14: 000000c0000004e0 R15: 00007f6e8989e99c [ 1777.705320] Mem-Info: [ 1777.715171] active_anon:15009 inactive_anon:75878 isolated_anon:0 [ 1777.715171] active_file:63 inactive_file:8 isolated_file:0 [ 1777.715171] unevictable:0 dirty:11 writeback:9 unstable:0 [ 1777.715171] slab_reclaimable:13574 slab_unreclaimable:117180 [ 1777.715171] mapped:22447 shmem:76855 pagetables:559 bounce:0 [ 1777.715171] free:25128 free_pcp:0 free_cma:0 [ 1777.754681] Node 0 active_anon:55784kB inactive_anon:26340kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60280kB dirty:32kB writeback:48kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.788365] Node 1 active_anon:4252kB inactive_anon:277172kB active_file:100kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29508kB dirty:12kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.834220] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.906346] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1777.911515] Node 0 DMA32 free:35888kB min:35996kB low:44992kB high:53988kB active_anon:55784kB inactive_anon:26340kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:80kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1932kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.944059] lowmem_reserve[]: 0 0 1 1 1 [ 1777.948147] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.980501] lowmem_reserve[]: 0 0 0 0 0 [ 1777.984526] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:4252kB inactive_anon:277172kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1778.049409] lowmem_reserve[]: 0 0 0 0 0 [ 1778.056226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1778.096697] Node 0 DMA32: 609*4kB (UME) 413*8kB (UME) 210*16kB (ME) 70*32kB (UME) 24*64kB (UM) 10*128kB (UM) 2*256kB (UM) 1*512kB (M) 21*1024kB (UM) 0*2048kB 0*4096kB = 36684kB [ 1778.129812] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1778.141257] Node 1 Normal: 369*4kB (UME) 360*8kB (ME) 267*16kB (UME) 118*32kB (ME) 47*64kB (ME) 21*128kB (UME) 7*256kB (ME) 8*512kB (M) 3*1024kB (M) 1*2048kB (U) 6*4096kB (U) = 53684kB [ 1778.159536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.169671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1778.181569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1778.190892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1778.200317] 76966 total pagecache pages [ 1778.204386] 0 pages in swap cache [ 1778.207973] Swap cache stats: add 0, delete 0, find 0/0 [ 1778.213421] Free swap = 0kB [ 1778.216474] Total swap = 0kB [ 1778.219582] 2097051 pages RAM [ 1778.224480] 0 pages HighMem/MovableOnly [ 1778.228587] 369649 pages reserved [ 1778.236437] 0 pages cma reserved [ 1778.240168] Unreclaimable slab info: [ 1778.243896] Name Used Total [ 1778.249908] pid_2 29KB 44KB [ 1778.256904] batadv_tt_change_cache 2KB 7KB [ 1778.262990] batadv_tl_cache 6KB 16KB [ 1778.268908] TIPC 10KB 37KB [ 1778.274582] SCTPv6 18KB 30KB [ 1778.280342] DCCPv6 17KB 30KB [ 1778.285697] DCCP 16KB 35KB [ 1778.291618] RXRPC 11KB 32KB [ 1778.298101] rxrpc_call_jar 84KB 133KB [ 1778.303742] bridge_fdb_cache 12KB 27KB [ 1778.309702] fib6_nodes 203KB 288KB [ 1778.315191] ip6_dst_cache 742KB 746KB [ 1778.328681] RAWv6 91KB 121KB [ 1778.335915] UDPv6 30KB 37KB [ 1778.341310] TCPv6 30KB 48KB [ 1778.353092] nf_conntrack 15KB 18KB [ 1778.358615] t10_alua_lu_gp_cache 0KB 3KB [ 1778.364351] sd_ext_cdb 0KB 7KB [ 1778.387704] scsi_sense_cache 1056KB 1060KB [ 1778.393182] virtio_scsi_cmd 16KB 16KB [ 1778.409881] sgpool-128 8KB 8KB [ 1778.415450] sgpool-64 4KB 12KB [ 1778.454429] sgpool-32 2KB 15KB [ 1778.459891] sgpool-16 1KB 7KB [ 1778.465360] sgpool-8 0KB 7KB [ 1778.525948] mqueue_inode_cache 10KB 30KB [ 1778.531451] bio_post_read_ctx 14KB 15KB [ 1778.565725] bio-2 14KB 15KB [ 1778.580449] jfs_mp 7KB 7KB [ 1778.596738] cifs_small_rq 15KB 16KB [ 1778.602499] cifs_request 67KB 67KB [ 1778.633579] cifs_mpx_ids 0KB 7KB [ 1778.657702] nfs_commit_data 3KB 14KB [ 1778.663108] nfs_write_data 34KB 44KB [ 1778.691606] ext4_system_zone 1KB 7KB [ 1778.713337] bio-1 1KB 7KB [ 1778.718805] pid_namespace 2KB 11KB [ 1778.724191] rpc_buffers 17KB 25KB [ 1778.755281] rpc_tasks 2KB 7KB [ 1778.777160] UNIX 1805KB 1946KB [ 1778.792936] tcp_bind_bucket 1KB 4KB [ 1778.804990] ip_fib_trie 30KB 47KB [ 1778.823072] ip_fib_alias 144KB 201KB [ 1778.839856] ip_dst_cache 11KB 24KB [ 1778.845392] RAW 54KB 75KB [ 1778.861949] UDP 74KB 81KB [ 1778.871145] TCP 25KB 33KB [ 1778.897626] hugetlbfs_inode_cache 3KB 15KB [ 1778.903378] fscache_cookie_jar 1KB 7KB [ 1778.925189] eventpoll_pwq 21KB 55KB [ 1778.945663] eventpoll_epi 38KB 66KB [ 1778.966739] inotify_inode_mark 15KB 23KB [ 1778.972534] request_queue 199KB 199KB [ 1778.991458] blkdev_requests 1KB 3KB [ 1779.001657] blkdev_ioc 28KB 38KB [ 1779.025333] bio-0 968KB 990KB [ 1779.041874] biovec-max 1608KB 1658KB [ 1779.052487] biovec-64 868KB 1055KB [ 1779.057978] biovec-16 114KB 191KB [ 1779.063340] bio_integrity_payload 1KB 8KB [ 1779.088827] khugepaged_mm_slot 5KB 23KB [ 1779.094328] uid_cache 0KB 4KB [ 1779.099826] dmaengine-unmap-2 0KB 3KB [ 1779.106354] skbuff_fclone_cache 81KB 86KB [ 1779.111904] skbuff_head_cache 9162KB 9566KB [ 1779.117324] configfs_dir_cache 3KB 7KB [ 1779.123238] file_lock_cache 44KB 47KB [ 1779.128798] file_lock_ctx 9KB 15KB [ 1779.134464] fsnotify_mark_connector 7KB 11KB [ 1779.140602] net_namespace 70KB 70KB [ 1779.149134] shmem_inode_cache 8086KB 8131KB [ 1779.154627] task_delay_info 247KB 359KB [ 1779.160160] taskstats 39KB 45KB [ 1779.165506] proc_dir_entry 840KB 1012KB [ 1779.171547] pde_opener 12KB 46KB [ 1779.177037] seq_file 253KB 405KB [ 1779.182896] sigqueue 53KB 70KB [ 1779.188819] kernfs_node_cache 18234KB 18258KB [ 1779.194224] mnt_cache 174KB 216KB [ 1779.199826] filp 7088KB 8767KB [ 1779.205195] names_cache 115787KB 115825KB [ 1779.210647] iint_cache 36KB 51KB [ 1779.216382] key_jar 4KB 11KB [ 1779.221846] uts_namespace 2KB 7KB [ 1779.227285] nsproxy 2KB 11KB [ 1779.233028] vm_area_struct 3129KB 3356KB [ 1779.238446] mm_struct 511KB 533KB [ 1779.243993] fs_cache 256KB 336KB [ 1779.252220] files_cache 1033KB 1200KB [ 1779.258794] signal_cache 1857KB 2170KB [ 1779.264619] sighand_cache 534KB 610KB [ 1779.270749] task_struct 8458KB 8547KB [ 1779.278785] cred_jar 2169KB 2812KB [ 1779.291759] anon_vma_chain 975KB 1523KB [ 1779.299501] anon_vma 134KB 292KB [ 1779.311971] pid 149KB 236KB [ 1779.319775] Acpi-Operand 156KB 198KB [ 1779.329928] Acpi-ParseExt 8KB 11KB [ 1779.335999] Acpi-Parse 41KB 47KB [ 1779.341472] Acpi-State 52KB 63KB [ 1779.352514] Acpi-Namespace 20KB 27KB [ 1779.358006] numa_policy 0KB 3KB [ 1779.363468] debug_objects_cache 1704KB 1883KB [ 1779.372344] trace_event_file 297KB 298KB [ 1779.382323] ftrace_event_field 398KB 401KB [ 1779.391491] pool_workqueue 127KB 152KB [ 1779.400540] page->ptl 508KB 964KB [ 1779.410579] kmalloc-2097152 2050KB 2050KB [ 1779.420078] kmalloc-524288 2056KB 2056KB [ 1779.430494] kmalloc-262144 1290KB 1290KB [ 1779.440065] kmalloc-131072 650KB 650KB [ 1779.445636] kmalloc-65536 2376KB 2442KB [ 1779.454753] kmalloc-32768 1914KB 1980KB [ 1779.462120] kmalloc-16384 1105KB 1204KB [ 1779.471297] kmalloc-8192 5082KB 5164KB [ 1779.479477] kmalloc-4096 26456KB 26494KB [ 1779.484939] kmalloc-2048 15914KB 17760KB [ 1779.495147] kmalloc-1024 12597KB 13946KB [ 1779.502028] kmalloc-512 17092KB 17512KB [ 1779.510725] kmalloc-256 5248KB 6206KB [ 1779.519546] kmalloc-128 1280KB 1598KB [ 1779.525569] kmalloc-96 3638KB 4368KB [ 1779.533192] kmalloc-64 2769KB 3824KB [ 1779.541516] kmalloc-32 1985KB 2512KB [ 1779.551262] kmalloc-192 2155KB 2920KB [ 1779.560449] kmem_cache 177KB 183KB [ 1779.569993] Out of memory (oom_kill_allocating_task): Kill process 8085 (syz-fuzzer) score 0 or sacrifice child [ 1779.582850] Killed process 22200 (syz-executor.2) total-vm:48512kB, anon-rss:444kB, file-rss:14340kB, shmem-rss:0kB [ 1779.611890] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1779.623425] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1779.628696] CPU: 0 PID: 8114 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1779.636596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1779.645968] Call Trace: [ 1779.648579] dump_stack+0x1fc/0x2ef [ 1779.652228] dump_header+0x15d/0xc3f [ 1779.655954] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1779.661192] ? ___ratelimit+0x319/0x590 [ 1779.665289] oom_kill_process.cold+0x10/0x692 [ 1779.669826] ? check_preemption_disabled+0x41/0x280 [ 1779.675210] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1779.680588] out_of_memory+0x1072/0x1390 [ 1779.684677] ? oom_killer_disable+0x270/0x270 [ 1779.689193] ? mutex_trylock+0x15f/0x1a0 [ 1779.693444] __alloc_pages_nodemask+0x23a2/0x2890 [ 1779.698301] ? find_get_entry+0x4cd/0x8a0 [ 1779.702491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1779.707385] alloc_pages_current+0x193/0x2a0 [ 1779.711910] filemap_fault+0x146e/0x2180 [ 1779.715990] ext4_filemap_fault+0x84/0xb0 [ 1779.720140] __do_fault+0x10b/0x4b0 [ 1779.723766] __handle_mm_fault+0x273b/0x41c0 [ 1779.728306] ? do_signal+0x49d/0x1670 [ 1779.732120] ? vm_insert_page+0x9c0/0x9c0 [ 1779.736293] ? check_preemption_disabled+0x41/0x280 [ 1779.741318] handle_mm_fault+0x436/0xb10 [ 1779.745488] __do_page_fault+0x68e/0xd60 [ 1779.749568] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1779.754687] ? spurious_fault+0x840/0x840 [ 1779.758861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1779.763814] ? page_fault+0x8/0x30 [ 1779.767568] page_fault+0x1e/0x30 [ 1779.771026] RIP: 0033:0x467300 [ 1779.774212] Code: Bad RIP value. [ 1779.777564] RSP: 002b:000000c000b23ab8 EFLAGS: 00010202 [ 1779.783100] RAX: 0000000000000000 RBX: 000000c00003e000 RCX: 00000000004ae06a [ 1779.790374] RDX: 000000c000b23ac0 RSI: 000000c000b23bf0 RDI: 0000000000000011 [ 1779.797733] RBP: 000000c00004a698 R08: 0000000000000000 R09: 0000000000000000 [ 1779.805233] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c00004a638 [ 1779.812682] R13: 0000000000000000 R14: 000000c000a136c0 R15: 0000000000000000 [ 1779.823373] Mem-Info: [ 1779.829659] active_anon:15010 inactive_anon:75878 isolated_anon:0 [ 1779.829659] active_file:13 inactive_file:10 isolated_file:0 [ 1779.829659] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1779.829659] slab_reclaimable:13574 slab_unreclaimable:116949 [ 1779.829659] mapped:22439 shmem:76855 pagetables:559 bounce:0 [ 1779.829659] free:25103 free_pcp:195 free_cma:0 [ 1779.870797] Node 0 active_anon:55784kB inactive_anon:26340kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1779.903341] Node 1 active_anon:4256kB inactive_anon:277172kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29452kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1779.938839] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.972625] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1779.977861] Node 0 DMA32 free:35752kB min:35996kB low:44992kB high:53988kB active_anon:55784kB inactive_anon:26340kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7392kB pagetables:1932kB bounce:0kB free_pcp:528kB local_pcp:388kB free_cma:0kB [ 1780.012525] lowmem_reserve[]: 0 0 1 1 1 [ 1780.016782] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.045055] lowmem_reserve[]: 0 0 0 0 0 [ 1780.054833] Node 1 Normal free:53680kB min:53876kB low:67344kB high:80812kB active_anon:4252kB inactive_anon:277172kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 1780.094263] lowmem_reserve[]: 0 0 0 0 0 [ 1780.099169] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1780.120589] Node 0 DMA32: 608*4kB (ME) 413*8kB (UME) 210*16kB (ME) 70*32kB (UME) 24*64kB (UM) 9*128kB (M) 1*256kB (M) 2*512kB (UM) 20*1024kB (UM) 0*2048kB 0*4096kB = 35784kB [ 1780.144263] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1780.155650] Node 1 Normal: 368*4kB (ME) 360*8kB (ME) 267*16kB (UME) 118*32kB (ME) 47*64kB (ME) 21*128kB (UME) 7*256kB (ME) 8*512kB (M) 3*1024kB (M) 1*2048kB (U) 6*4096kB (U) = 53680kB [ 1780.176709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.186029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.194707] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.208113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.216762] 76880 total pagecache pages [ 1780.220818] 0 pages in swap cache [ 1780.224347] Swap cache stats: add 0, delete 0, find 0/0 [ 1780.233762] Free swap = 0kB [ 1780.236828] Total swap = 0kB [ 1780.240557] 2097051 pages RAM [ 1780.243656] 0 pages HighMem/MovableOnly [ 1780.250694] 369649 pages reserved [ 1780.254166] 0 pages cma reserved [ 1780.261405] Unreclaimable slab info: [ 1780.265141] Name Used Total [ 1780.274843] pid_2 29KB 44KB [ 1780.282095] batadv_tt_change_cache 2KB 7KB [ 1780.292592] batadv_tl_cache 6KB 16KB [ 1780.301802] TIPC 10KB 37KB [ 1780.309474] SCTPv6 18KB 30KB [ 1780.314831] DCCPv6 17KB 30KB [ 1780.330872] DCCP 16KB 35KB [ 1780.340414] RXRPC 11KB 32KB [ 1780.353810] rxrpc_call_jar 78KB 126KB [ 1780.362353] bridge_fdb_cache 12KB 27KB [ 1780.369825] fib6_nodes 201KB 288KB [ 1780.375218] ip6_dst_cache 729KB 746KB [ 1780.381800] RAWv6 91KB 121KB [ 1780.388363] UDPv6 30KB 37KB [ 1780.393748] TCPv6 30KB 42KB [ 1780.403250] nf_conntrack 15KB 18KB [ 1780.412856] t10_alua_lu_gp_cache 0KB 3KB [ 1780.423165] sd_ext_cdb 0KB 7KB [ 1780.432728] scsi_sense_cache 1056KB 1060KB [ 1780.441956] virtio_scsi_cmd 16KB 16KB [ 1780.451224] sgpool-128 8KB 8KB [ 1780.460724] sgpool-64 4KB 12KB [ 1780.470356] sgpool-32 2KB 15KB [ 1780.480041] sgpool-16 1KB 7KB [ 1780.485438] sgpool-8 0KB 7KB [ 1780.492372] mqueue_inode_cache 10KB 30KB [ 1780.501993] bio_post_read_ctx 14KB 15KB [ 1780.512200] bio-2 14KB 15KB [ 1780.519746] jfs_mp 7KB 7KB [ 1780.525163] cifs_small_rq 15KB 16KB [ 1780.541843] cifs_request 67KB 67KB [ 1780.550908] cifs_mpx_ids 0KB 7KB [ 1780.559622] nfs_commit_data 3KB 14KB [ 1780.565051] nfs_write_data 34KB 44KB [ 1780.571666] ext4_system_zone 1KB 7KB [ 1780.579505] bio-1 1KB 7KB [ 1780.586252] pid_namespace 2KB 11KB [ 1780.591876] rpc_buffers 17KB 25KB [ 1780.602261] rpc_tasks 2KB 7KB [ 1780.613505] UNIX 1758KB 1886KB [ 1780.622450] tcp_bind_bucket 1KB 4KB [ 1780.633916] ip_fib_trie 29KB 47KB [ 1780.639481] ip_fib_alias 143KB 201KB [ 1780.644979] ip_dst_cache 11KB 24KB [ 1780.654319] RAW 54KB 75KB [ 1780.659753] UDP 72KB 81KB [ 1780.665216] TCP 25KB 28KB [ 1780.674571] hugetlbfs_inode_cache 3KB 15KB [ 1780.682319] fscache_cookie_jar 1KB 7KB [ 1780.691846] eventpoll_pwq 20KB 55KB [ 1780.700916] eventpoll_epi 37KB 66KB [ 1780.714077] inotify_inode_mark 14KB 23KB [ 1780.721745] request_queue 199KB 199KB [ 1780.735071] blkdev_requests 1KB 3KB [ 1780.743184] blkdev_ioc 28KB 38KB [ 1780.754629] bio-0 968KB 990KB [ 1780.761944] biovec-max 1608KB 1658KB [ 1780.769068] biovec-64 868KB 1055KB [ 1780.774464] biovec-16 114KB 191KB [ 1780.785534] bio_integrity_payload 1KB 8KB [ 1780.794383] khugepaged_mm_slot 5KB 23KB [ 1780.801991] uid_cache 0KB 4KB [ 1780.810161] dmaengine-unmap-2 0KB 3KB [ 1780.815562] skbuff_fclone_cache 80KB 86KB [ 1780.823038] skbuff_head_cache 9322KB 9566KB [ 1780.831296] configfs_dir_cache 3KB 7KB [ 1780.839675] file_lock_cache 44KB 47KB [ 1780.845149] file_lock_ctx 9KB 15KB [ 1780.854825] fsnotify_mark_connector 7KB 11KB [ 1780.863118] net_namespace 70KB 70KB [ 1780.872797] shmem_inode_cache 8084KB 8131KB [ 1780.882019] task_delay_info 243KB 359KB [ 1780.882028] taskstats 39KB 45KB [ 1780.882037] proc_dir_entry 825KB 1005KB [ 1780.882047] pde_opener 12KB 46KB [ 1780.882056] seq_file 250KB 405KB [ 1780.882066] sigqueue 53KB 70KB [ 1780.882076] kernfs_node_cache 18234KB 18258KB [ 1780.882086] mnt_cache 174KB 216KB [ 1780.882095] filp 7054KB 8763KB [ 1780.882104] names_cache 115787KB 115816KB [ 1780.882113] iint_cache 36KB 51KB [ 1780.882126] key_jar 4KB 11KB [ 1780.947808] uts_namespace 2KB 7KB [ 1780.953178] nsproxy 2KB 11KB [ 1780.958902] vm_area_struct 3115KB 3356KB [ 1780.964263] mm_struct 503KB 533KB [ 1780.969712] fs_cache 250KB 336KB [ 1780.975798] files_cache 981KB 1185KB [ 1780.981191] signal_cache 1821KB 2156KB [ 1780.986661] sighand_cache 522KB 610KB [ 1780.992248] task_struct 8446KB 8521KB [ 1780.997694] cred_jar 2139KB 2812KB [ 1781.003168] anon_vma_chain 962KB 1523KB [ 1781.009032] anon_vma 126KB 292KB [ 1781.014399] pid 146KB 236KB [ 1781.019832] Acpi-Operand 156KB 198KB [ 1781.025807] Acpi-ParseExt 8KB 11KB [ 1781.031186] Acpi-Parse 41KB 47KB [ 1781.036611] Acpi-State 52KB 63KB [ 1781.041971] Acpi-Namespace 20KB 27KB [ 1781.047374] numa_policy 0KB 3KB [ 1781.053099] debug_objects_cache 1704KB 1883KB [ 1781.059746] trace_event_file 297KB 298KB [ 1781.065195] ftrace_event_field 398KB 401KB [ 1781.070942] pool_workqueue 127KB 148KB [ 1781.076725] page->ptl 498KB 964KB [ 1781.082126] kmalloc-2097152 2050KB 2050KB [ 1781.088018] kmalloc-524288 2056KB 2056KB [ 1781.093473] kmalloc-262144 1290KB 1290KB [ 1781.099041] kmalloc-131072 650KB 650KB [ 1781.104413] kmalloc-65536 2376KB 2442KB [ 1781.110017] kmalloc-32768 1914KB 1914KB [ 1781.115393] kmalloc-16384 1105KB 1188KB [ 1781.121273] kmalloc-8192 5065KB 5131KB [ 1781.126878] kmalloc-4096 26447KB 26477KB [ 1781.132615] kmalloc-2048 15861KB 17735KB [ 1781.138041] kmalloc-1024 12678KB 13946KB [ 1781.143609] kmalloc-512 17328KB 17512KB [ 1781.149037] kmalloc-256 5235KB 6206KB [ 1781.154748] kmalloc-128 1258KB 1598KB [ 1781.160193] kmalloc-96 3660KB 4368KB [ 1781.165550] kmalloc-64 2757KB 3824KB [ 1781.170981] kmalloc-32 1988KB 2512KB [ 1781.176767] kmalloc-192 2125KB 2920KB [ 1781.182121] kmem_cache 177KB 183KB [ 1781.187732] Out of memory (oom_kill_allocating_task): Kill process 8114 (syz-fuzzer) score 0 or sacrifice child [ 1781.198780] Killed process 22201 (syz-executor.4) total-vm:48512kB, anon-rss:444kB, file-rss:14340kB, shmem-rss:0kB [ 1781.209973] oom_reaper: reaped process 22201 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1781.221876] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1781.280549] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1781.285448] CPU: 1 PID: 8084 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1781.293157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1781.302635] Call Trace: [ 1781.305339] dump_stack+0x1fc/0x2ef [ 1781.309083] dump_header+0x15d/0xc3f [ 1781.313195] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1781.318488] ? ___ratelimit+0x319/0x590 [ 1781.322491] oom_kill_process.cold+0x10/0x692 [ 1781.327211] ? check_preemption_disabled+0x41/0x280 [ 1781.332699] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1781.338323] out_of_memory+0x1072/0x1390 [ 1781.343676] ? oom_killer_disable+0x270/0x270 [ 1781.348368] ? mutex_trylock+0x15f/0x1a0 [ 1781.352444] __alloc_pages_nodemask+0x23a2/0x2890 [ 1781.357463] ? find_get_entry+0x4cd/0x8a0 [ 1781.362157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1781.367960] alloc_pages_current+0x193/0x2a0 [ 1781.373717] filemap_fault+0x146e/0x2180 [ 1781.378137] ext4_filemap_fault+0x84/0xb0 [ 1781.382909] __do_fault+0x10b/0x4b0 [ 1781.386662] __handle_mm_fault+0x273b/0x41c0 [ 1781.391087] ? vm_insert_page+0x9c0/0x9c0 [ 1781.395242] ? __fget+0x356/0x510 [ 1781.398859] ? check_preemption_disabled+0x41/0x280 [ 1781.403999] handle_mm_fault+0x436/0xb10 [ 1781.408067] __do_page_fault+0x68e/0xd60 [ 1781.413309] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1781.418495] ? spurious_fault+0x840/0x840 [ 1781.422826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1781.427790] ? page_fault+0x8/0x30 [ 1781.431383] page_fault+0x1e/0x30 [ 1781.434831] RIP: 0033:0x454140 [ 1781.438019] Code: 24 18 48 8b 7c 24 20 0f 1f 00 e9 bb fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <49> 3b 66 10 0f 86 e9 02 00 00 48 83 ec 70 48 89 6c 24 68 48 8d 6c [ 1781.457013] RSP: 002b:00007ffea43f3b78 EFLAGS: 00010202 [ 1781.462591] RAX: 000000c00003e000 RBX: 0000019e1110d48b RCX: 000000c0000406d8 [ 1781.469891] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffea43f3b2c [ 1781.477163] RBP: 00007ffea43f3bb8 R08: 00007ffea43fa000 R09: 000001c85572b58b [ 1781.484806] R10: 000c00f0458d02ad R11: 0000000000000001 R12: 00007ffea43f3b60 [ 1781.492448] R13: 0000000000000000 R14: 0000000001f4b640 R15: 0000000000000000 [ 1781.594108] Mem-Info: [ 1781.596663] active_anon:14880 inactive_anon:75878 isolated_anon:0 [ 1781.596663] active_file:15 inactive_file:13 isolated_file:32 [ 1781.596663] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1781.596663] slab_reclaimable:13572 slab_unreclaimable:116468 [ 1781.596663] mapped:18864 shmem:76855 pagetables:533 bounce:0 [ 1781.596663] free:25118 free_pcp:476 free_cma:0 [ 1781.631031] Node 0 active_anon:55268kB inactive_anon:26340kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:46004kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1781.661301] Node 1 active_anon:4252kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29452kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1781.690309] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.735746] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1781.740980] Node 0 DMA32 free:37328kB min:35996kB low:44992kB high:53988kB active_anon:55268kB inactive_anon:26340kB active_file:440kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7488kB pagetables:1828kB bounce:0kB free_pcp:608kB local_pcp:240kB free_cma:0kB [ 1781.813928] lowmem_reserve[]: 0 0 1 1 1 [ 1781.839114] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1781.920735] lowmem_reserve[]: 0 0 0 0 0 [ 1781.924766] Node 1 Normal free:53676kB min:53876kB low:67344kB high:80812kB active_anon:4252kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 1781.964480] lowmem_reserve[]: 0 0 0 0 0 [ 1781.968621] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1782.047366] Node 0 DMA32: 380*4kB (UME) 458*8kB (UME) 215*16kB (UME) 83*32kB (ME) 26*64kB (UM) 9*128kB (M) 1*256kB (M) 2*512kB (UM) 20*1024kB (UM) 0*2048kB 0*4096kB = 35856kB [ 1782.121506] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1782.145913] Node 1 Normal: 367*4kB (ME) 360*8kB (UME) 265*16kB (ME) 117*32kB (ME) 48*64kB (ME) 21*128kB (UME) 7*256kB (ME) 8*512kB (M) 3*1024kB (M) 1*2048kB (U) 6*4096kB (U) = 53676kB [ 1782.185754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.221410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.310378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1782.383361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1782.436013] 76877 total pagecache pages [ 1782.440718] 0 pages in swap cache [ 1782.444260] Swap cache stats: add 0, delete 0, find 0/0 [ 1782.521126] Free swap = 0kB [ 1782.545692] Total swap = 0kB [ 1782.549365] 2097051 pages RAM [ 1782.552651] 0 pages HighMem/MovableOnly [ 1782.605320] 369649 pages reserved [ 1782.643987] 0 pages cma reserved [ 1782.682844] Unreclaimable slab info: [ 1782.715729] Name Used Total [ 1782.721309] pid_2 29KB 44KB [ 1782.796188] batadv_tt_change_cache 2KB 7KB [ 1782.802462] batadv_tl_cache 6KB 16KB [ 1782.874035] TIPC 10KB 37KB [ 1782.907201] SCTPv6 18KB 30KB [ 1782.912761] DCCPv6 17KB 30KB [ 1782.980577] DCCP 16KB 35KB [ 1782.993079] RXRPC 11KB 32KB [ 1783.046332] rxrpc_call_jar 78KB 126KB [ 1783.051977] bridge_fdb_cache 12KB 27KB [ 1783.099470] fib6_nodes 200KB 288KB [ 1783.104881] ip6_dst_cache 729KB 746KB [ 1783.173425] RAWv6 91KB 121KB [ 1783.201780] UDPv6 30KB 37KB [ 1783.212568] TCPv6 30KB 42KB [ 1783.241458] nf_conntrack 15KB 18KB [ 1783.276285] t10_alua_lu_gp_cache 0KB 3KB [ 1783.281980] sd_ext_cdb 0KB 7KB [ 1783.309941] scsi_sense_cache 1056KB 1060KB [ 1783.315425] virtio_scsi_cmd 16KB 16KB [ 1783.320884] sgpool-128 8KB 8KB [ 1783.342714] sgpool-64 4KB 12KB [ 1783.355512] sgpool-32 2KB 15KB [ 1783.373636] sgpool-16 1KB 7KB [ 1783.379114] sgpool-8 0KB 7KB [ 1783.385104] mqueue_inode_cache 10KB 30KB [ 1783.414014] bio_post_read_ctx 14KB 15KB [ 1783.423621] bio-2 14KB 15KB [ 1783.451399] jfs_mp 7KB 7KB [ 1783.464080] cifs_small_rq 15KB 16KB [ 1783.483359] cifs_request 67KB 67KB [ 1783.492681] cifs_mpx_ids 0KB 7KB [ 1783.512998] nfs_commit_data 3KB 14KB [ 1783.519042] nfs_write_data 34KB 44KB [ 1783.539888] ext4_system_zone 1KB 7KB [ 1783.548707] bio-1 1KB 7KB [ 1783.554103] pid_namespace 2KB 11KB [ 1783.574336] rpc_buffers 17KB 25KB [ 1783.583847] rpc_tasks 2KB 7KB [ 1783.603533] UNIX 1749KB 1886KB [ 1783.612772] tcp_bind_bucket 1KB 4KB [ 1783.633060] ip_fib_trie 29KB 47KB [ 1783.638556] ip_fib_alias 143KB 201KB [ 1783.644129] ip_dst_cache 11KB 24KB [ 1783.665358] RAW 54KB 75KB [ 1783.674557] UDP 72KB 81KB [ 1783.694125] TCP 25KB 28KB [ 1783.699652] hugetlbfs_inode_cache 3KB 15KB [ 1783.719602] fscache_cookie_jar 1KB 7KB [ 1783.725088] eventpoll_pwq 19KB 55KB [ 1783.730503] eventpoll_epi 36KB 66KB [ 1783.752256] inotify_inode_mark 13KB 23KB [ 1783.757816] request_queue 199KB 199KB [ 1783.763272] blkdev_requests 1KB 3KB [ 1783.788589] blkdev_ioc 25KB 38KB [ 1783.793999] bio-0 994KB 1016KB [ 1783.820973] biovec-max 1608KB 1658KB [ 1783.829936] biovec-64 922KB 1055KB [ 1783.835485] biovec-16 123KB 191KB [ 1783.853523] bio_integrity_payload 1KB 8KB [ 1783.862341] khugepaged_mm_slot 5KB 23KB [ 1783.871941] uid_cache 0KB 4KB [ 1783.892542] dmaengine-unmap-2 0KB 3KB [ 1783.905355] skbuff_fclone_cache 83KB 86KB [ 1783.935523] skbuff_head_cache 9611KB 9622KB [ 1783.989855] configfs_dir_cache 3KB 7KB [ 1783.996230] file_lock_cache 44KB 47KB [ 1784.002071] file_lock_ctx 9KB 15KB [ 1784.022229] fsnotify_mark_connector 6KB 11KB [ 1784.028743] net_namespace 70KB 70KB [ 1784.034987] shmem_inode_cache 8084KB 8131KB [ 1784.059665] task_delay_info 243KB 359KB [ 1784.065246] taskstats 39KB 45KB [ 1784.083628] proc_dir_entry 825KB 1005KB [ 1784.089347] pde_opener 12KB 46KB [ 1784.094979] seq_file 247KB 401KB [ 1784.115035] sigqueue 52KB 70KB [ 1784.147759] kernfs_node_cache 18234KB 18258KB [ 1784.153561] mnt_cache 174KB 216KB [ 1784.186226] filp 7037KB 8760KB [ 1784.192077] names_cache 115107KB 115145KB [ 1784.209469] iint_cache 36KB 51KB [ 1784.219924] key_jar 4KB 11KB [ 1784.242535] uts_namespace 2KB 7KB [ 1784.253036] nsproxy 2KB 11KB [ 1784.282965] vm_area_struct 3078KB 3356KB [ 1784.296556] mm_struct 495KB 533KB [ 1784.305170] fs_cache 250KB 336KB [ 1784.317293] files_cache 981KB 1185KB [ 1784.323952] signal_cache 1821KB 2156KB [ 1784.337266] sighand_cache 550KB 610KB [ 1784.343940] task_struct 8395KB 8484KB [ 1784.361577] cred_jar 2139KB 2812KB [ 1784.374374] anon_vma_chain 960KB 1523KB [ 1784.384445] anon_vma 124KB 292KB [ 1784.393033] pid 146KB 236KB [ 1784.409123] Acpi-Operand 156KB 198KB [ 1784.441600] Acpi-ParseExt 8KB 11KB [ 1784.451685] Acpi-Parse 41KB 47KB [ 1784.462268] Acpi-State 52KB 63KB [ 1784.474541] Acpi-Namespace 20KB 27KB [ 1784.514081] numa_policy 0KB 3KB [ 1784.572153] debug_objects_cache 1704KB 1883KB [ 1784.598841] trace_event_file 297KB 298KB [ 1784.604520] ftrace_event_field 398KB 401KB [ 1784.685638] pool_workqueue 127KB 148KB [ 1784.691510] page->ptl 496KB 964KB [ 1784.733872] kmalloc-2097152 2050KB 2050KB [ 1784.763768] kmalloc-524288 2056KB 2056KB [ 1784.790945] kmalloc-262144 1290KB 1290KB [ 1784.804810] kmalloc-131072 650KB 650KB [ 1784.811787] kmalloc-65536 2376KB 2442KB [ 1784.845902] kmalloc-32768 1914KB 1914KB [ 1784.851305] kmalloc-16384 1105KB 1188KB [ 1784.904734] kmalloc-8192 5049KB 5131KB [ 1784.910513] kmalloc-4096 26107KB 26146KB [ 1784.957868] kmalloc-2048 15835KB 17728KB [ 1784.963277] kmalloc-1024 12813KB 13946KB [ 1785.023921] kmalloc-512 17883KB 17936KB [ 1785.064166] kmalloc-256 5235KB 6206KB [ 1785.101854] kmalloc-128 1258KB 1598KB [ 1785.135270] kmalloc-96 3713KB 4368KB [ 1785.173391] kmalloc-64 2757KB 3824KB [ 1785.196911] kmalloc-32 1996KB 2512KB [ 1785.202317] kmalloc-192 2125KB 2920KB [ 1785.223324] kmem_cache 177KB 183KB [ 1785.253536] Out of memory (oom_kill_allocating_task): Kill process 8084 (syz-fuzzer) score 0 or sacrifice child [ 1785.269721] Killed process 22192 (syz-executor.1) total-vm:48512kB, anon-rss:436kB, file-rss:4kB, shmem-rss:0kB [ 1785.329574] systemd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1785.354634] systemd cpuset=/ mems_allowed=0-1 [ 1785.363610] CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 [ 1785.370805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1785.380166] Call Trace: [ 1785.382870] dump_stack+0x1fc/0x2ef [ 1785.386531] dump_header+0x15d/0xc3f [ 1785.390291] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1785.395488] ? ___ratelimit+0x319/0x590 [ 1785.399494] oom_kill_process.cold+0x10/0x692 [ 1785.404003] ? oom_badness.part.0+0x135/0x6e0 [ 1785.408531] ? lock_downgrade+0x720/0x720 [ 1785.413053] ? check_preemption_disabled+0x41/0x280 [ 1785.418449] out_of_memory+0x34d/0x1390 [ 1785.423664] ? oom_killer_disable+0x270/0x270 [ 1785.428386] ? mutex_trylock+0x15f/0x1a0 [ 1785.433527] __alloc_pages_nodemask+0x23a2/0x2890 [ 1785.438413] ? find_get_entry+0x4cd/0x8a0 [ 1785.442860] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.447745] alloc_pages_current+0x193/0x2a0 [ 1785.453182] filemap_fault+0x146e/0x2180 [ 1785.457709] ext4_filemap_fault+0x84/0xb0 [ 1785.461946] __do_fault+0x10b/0x4b0 [ 1785.465687] __handle_mm_fault+0x273b/0x41c0 [ 1785.470111] ? vm_insert_page+0x9c0/0x9c0 [ 1785.474267] ? check_preemption_disabled+0x41/0x280 [ 1785.479280] handle_mm_fault+0x436/0xb10 [ 1785.483336] __do_page_fault+0x68e/0xd60 [ 1785.487475] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1785.492640] ? spurious_fault+0x840/0x840 [ 1785.496964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1785.501936] ? page_fault+0x8/0x30 [ 1785.505651] page_fault+0x1e/0x30 [ 1785.509119] RIP: 0033:0x7fa9197e4cb0 [ 1785.512831] Code: Bad RIP value. [ 1785.516174] RSP: 002b:00007ffc5b93e850 EFLAGS: 00010202 [ 1785.521650] RAX: 000055bb6c8b08e0 RBX: 000055bb6c846f50 RCX: 000055bb6c848430 [ 1785.529022] RDX: 000055bb6c846f70 RSI: 0005f1350062a92a RDI: 000055bb6c8867a0 [ 1785.536470] RBP: 000055bb6c846f70 R08: 000055bb6c8b2078 R09: 000055bb6c8c7808 [ 1785.544234] R10: 000055bb6c8c77d0 R11: 0000000000000020 R12: 0005f1350062a92a [ 1785.552590] R13: 0000000000000001 R14: 00007ffc5b93e87c R15: 00007ffc5b93e87c [ 1785.577415] Mem-Info: [ 1785.579887] active_anon:14747 inactive_anon:75878 isolated_anon:0 [ 1785.579887] active_file:172 inactive_file:99 isolated_file:32 [ 1785.579887] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1785.579887] slab_reclaimable:13572 slab_unreclaimable:116068 [ 1785.579887] mapped:15505 shmem:76855 pagetables:506 bounce:0 [ 1785.579887] free:25131 free_pcp:107 free_cma:0 [ 1785.621739] Node 0 active_anon:54760kB inactive_anon:26340kB active_file:380kB inactive_file:396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32368kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.659559] Node 1 active_anon:4228kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29452kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.886391] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.043017] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1786.073478] Node 0 DMA32 free:35976kB min:35996kB low:44992kB high:53988kB active_anon:54696kB inactive_anon:26340kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7296kB pagetables:1612kB bounce:0kB free_pcp:392kB local_pcp:252kB free_cma:0kB [ 1786.107643] lowmem_reserve[]: 0 0 1 1 1 [ 1786.111673] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.138562] lowmem_reserve[]: 0 0 0 0 0 [ 1786.142583] Node 1 Normal free:53700kB min:53876kB low:67344kB high:80812kB active_anon:4228kB inactive_anon:277172kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.171366] lowmem_reserve[]: 0 0 0 0 0 [ 1786.175379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10976kB [ 1786.218724] Node 0 DMA32: 625*4kB (ME) 440*8kB (ME) 225*16kB (UME) 89*32kB (ME) 23*64kB (M) 10*128kB (UM) 1*256kB (M) 2*512kB (UM) 19*1024kB (UM) 0*2048kB 0*4096kB = 35956kB [ 1786.247782] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1786.259361] Node 1 Normal: 369*4kB (ME) 358*8kB (UME) 267*16kB (ME) 117*32kB (ME) 48*64kB (ME) 21*128kB (UME) 7*256kB (ME) 8*512kB (M) 3*1024kB (M) 1*2048kB (U) 6*4096kB (U) = 53700kB [ 1786.277111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.286179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.294916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.307597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.316320] 76879 total pagecache pages [ 1786.320333] 0 pages in swap cache [ 1786.323779] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.329310] Free swap = 0kB [ 1786.332335] Total swap = 0kB [ 1786.340716] 2097051 pages RAM [ 1786.343925] 0 pages HighMem/MovableOnly [ 1786.348018] 369649 pages reserved [ 1786.351487] 0 pages cma reserved [ 1786.354867] Unreclaimable slab info: [ 1786.363885] Name Used Total [ 1786.369743] pid_2 28KB 44KB [ 1786.375346] batadv_tt_change_cache 2KB 7KB [ 1786.395898] batadv_tl_cache 6KB 16KB [ 1786.401307] TIPC 10KB 37KB [ 1786.429130] SCTPv6 18KB 30KB [ 1786.434542] DCCPv6 17KB 30KB [ 1786.448984] DCCP 16KB 35KB [ 1786.454422] RXRPC 11KB 32KB [ 1786.467154] rxrpc_call_jar 78KB 126KB [ 1786.472657] bridge_fdb_cache 12KB 27KB [ 1786.480887] fib6_nodes 199KB 288KB [ 1786.486334] ip6_dst_cache 729KB 746KB [ 1786.491693] RAWv6 91KB 121KB [ 1786.497570] UDPv6 30KB 37KB [ 1786.502963] TCPv6 27KB 36KB [ 1786.508554] nf_conntrack 15KB 18KB [ 1786.514487] t10_alua_lu_gp_cache 0KB 3KB [ 1786.524406] sd_ext_cdb 0KB 7KB [ 1786.546432] scsi_sense_cache 1056KB 1060KB [ 1786.551971] virtio_scsi_cmd 16KB 16KB [ 1786.557613] sgpool-128 8KB 8KB [ 1786.563360] sgpool-64 4KB 12KB [ 1786.569227] sgpool-32 2KB 15KB [ 1786.574828] sgpool-16 1KB 7KB [ 1786.580574] sgpool-8 0KB 7KB [ 1786.586666] mqueue_inode_cache 10KB 30KB [ 1786.592145] bio_post_read_ctx 14KB 15KB [ 1786.597974] bio-2 14KB 15KB [ 1786.603663] jfs_mp 7KB 7KB [ 1786.609309] cifs_small_rq 15KB 16KB [ 1786.614693] cifs_request 67KB 67KB [ 1786.622442] cifs_mpx_ids 0KB 7KB [ 1786.629169] nfs_commit_data 3KB 14KB [ 1786.634655] nfs_write_data 34KB 44KB [ 1786.646733] ext4_system_zone 1KB 7KB [ 1786.652143] bio-1 1KB 7KB [ 1786.662349] pid_namespace 2KB 11KB [ 1786.672567] rpc_buffers 17KB 25KB [ 1786.682775] rpc_tasks 2KB 7KB [ 1786.692701] UNIX 1711KB 1837KB [ 1786.702898] tcp_bind_bucket 1KB 4KB [ 1786.710977] ip_fib_trie 29KB 47KB [ 1786.724057] ip_fib_alias 143KB 201KB [ 1786.733260] ip_dst_cache 15KB 24KB [ 1786.738829] RAW 54KB 75KB [ 1786.745038] UDP 72KB 81KB [ 1786.751622] TCP 25KB 28KB [ 1786.757604] hugetlbfs_inode_cache 3KB 15KB [ 1786.763951] fscache_cookie_jar 1KB 7KB [ 1786.770304] eventpoll_pwq 19KB 55KB [ 1786.775909] eventpoll_epi 36KB 66KB [ 1786.781384] inotify_inode_mark 13KB 23KB [ 1786.788628] request_queue 199KB 199KB [ 1786.794114] blkdev_requests 1KB 3KB [ 1786.799598] blkdev_ioc 24KB 38KB [ 1786.810956] bio-0 1013KB 1035KB [ 1786.816944] biovec-max 1608KB 1658KB [ 1786.824405] biovec-64 990KB 1055KB [ 1786.829907] biovec-16 131KB 191KB [ 1786.835316] bio_integrity_payload 1KB 8KB [ 1786.841179] khugepaged_mm_slot 5KB 23KB [ 1786.847734] uid_cache 0KB 4KB [ 1786.853303] dmaengine-unmap-2 0KB 3KB [ 1786.858886] skbuff_fclone_cache 81KB 86KB [ 1786.864920] skbuff_head_cache 9858KB 9866KB [ 1786.870711] configfs_dir_cache 3KB 7KB [ 1786.876219] file_lock_cache 44KB 47KB [ 1786.881769] file_lock_ctx 9KB 15KB [ 1786.887298] fsnotify_mark_connector 6KB 11KB [ 1786.893324] net_namespace 70KB 70KB [ 1786.898916] shmem_inode_cache 8084KB 8131KB [ 1786.904651] task_delay_info 243KB 359KB [ 1786.910968] taskstats 39KB 45KB [ 1786.916378] proc_dir_entry 819KB 997KB [ 1786.921756] pde_opener 12KB 46KB [ 1786.938601] seq_file 244KB 401KB [ 1786.944107] sigqueue 52KB 70KB [ 1786.953718] kernfs_node_cache 18189KB 18258KB [ 1786.968211] mnt_cache 174KB 216KB [ 1786.973714] filp 6959KB 8756KB [ 1786.982112] names_cache 114138KB 114167KB [ 1786.990276] iint_cache 36KB 51KB [ 1786.998432] key_jar 4KB 11KB [ 1787.003858] uts_namespace 2KB 7KB [ 1787.012058] nsproxy 2KB 11KB [ 1787.017745] vm_area_struct 3063KB 3356KB [ 1787.023137] mm_struct 487KB 526KB [ 1787.030063] fs_cache 250KB 336KB [ 1787.035642] files_cache 940KB 1177KB [ 1787.041527] signal_cache 1792KB 2141KB [ 1787.048119] sighand_cache 550KB 610KB [ 1787.053664] task_struct 8395KB 8471KB [ 1787.059267] cred_jar 2115KB 2812KB [ 1787.065138] anon_vma_chain 946KB 1519KB [ 1787.071007] anon_vma 120KB 292KB [ 1787.076461] pid 146KB 236KB [ 1787.081862] Acpi-Operand 156KB 198KB [ 1787.092171] Acpi-ParseExt 8KB 11KB [ 1787.097620] Acpi-Parse 41KB 47KB [ 1787.103017] Acpi-State 52KB 63KB [ 1787.108578] Acpi-Namespace 20KB 27KB [ 1787.113944] numa_policy 0KB 3KB [ 1787.119502] debug_objects_cache 1703KB 1883KB [ 1787.125397] trace_event_file 297KB 298KB [ 1787.132682] ftrace_event_field 398KB 401KB [ 1787.138218] pool_workqueue 127KB 148KB [ 1787.143693] page->ptl 490KB 960KB [ 1787.149301] kmalloc-2097152 2050KB 2050KB [ 1787.154868] kmalloc-524288 2056KB 2056KB [ 1787.160551] kmalloc-262144 1290KB 1290KB [ 1787.171026] kmalloc-131072 650KB 650KB [ 1787.177283] kmalloc-65536 2376KB 2442KB [ 1787.183116] kmalloc-32768 1914KB 1914KB [ 1787.205193] kmalloc-16384 1105KB 1188KB [ 1787.246599] kmalloc-8192 5032KB 5098KB [ 1787.252009] kmalloc-4096 26073KB 26112KB [ 1787.280525] kmalloc-2048 15793KB 17722KB [ 1787.293143] kmalloc-1024 12894KB 13946KB [ 1787.346656] kmalloc-512 18262KB 18307KB [ 1787.352067] kmalloc-256 5235KB 6206KB [ 1787.369076] kmalloc-128 1258KB 1598KB [ 1787.374513] kmalloc-96 3735KB 4368KB [ 1787.404998] kmalloc-64 2745KB 3824KB [ 1787.414415] kmalloc-32 1996KB 2512KB [ 1787.434735] kmalloc-192 2095KB 2912KB [ 1787.463458] kmem_cache 177KB 183KB [ 1787.494887] Out of memory: Kill process 23179 (syz-executor.2) score 1001 or sacrifice child [ 1787.516915] Killed process 23181 (syz-executor.2) total-vm:62728kB, anon-rss:504kB, file-rss:14340kB, shmem-rss:32kB [ 1787.531831] oom_reaper: reaped process 23181 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1787.555171] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1787.616148] systemd-journal cpuset=/ mems_allowed=0-1 [ 1787.621577] CPU: 1 PID: 21858 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1787.629636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1787.639174] Call Trace: [ 1787.641774] dump_stack+0x1fc/0x2ef [ 1787.645419] dump_header+0x15d/0xc3f [ 1787.649324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1787.654519] ? ___ratelimit+0x319/0x590 [ 1787.659318] oom_kill_process.cold+0x10/0x692 [ 1787.663966] ? check_preemption_disabled+0x41/0x280 [ 1787.669286] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1787.674897] out_of_memory+0x1072/0x1390 [ 1787.679239] ? oom_killer_disable+0x270/0x270 [ 1787.683984] ? mutex_trylock+0x15f/0x1a0 [ 1787.688376] __alloc_pages_nodemask+0x23a2/0x2890 [ 1787.693253] ? find_get_entry+0x4cd/0x8a0 [ 1787.697427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1787.702311] alloc_pages_current+0x193/0x2a0 [ 1787.707028] filemap_fault+0x146e/0x2180 [ 1787.711214] ext4_filemap_fault+0x84/0xb0 [ 1787.715458] __do_fault+0x10b/0x4b0 [ 1787.719278] __handle_mm_fault+0x273b/0x41c0 [ 1787.723698] ? vm_insert_page+0x9c0/0x9c0 [ 1787.727858] ? lock_downgrade+0x720/0x720 [ 1787.732008] ? lock_acquire+0x170/0x3c0 [ 1787.736001] ? check_preemption_disabled+0x41/0x280 [ 1787.741123] handle_mm_fault+0x436/0xb10 [ 1787.745372] __do_page_fault+0x68e/0xd60 [ 1787.749646] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1787.754662] ? spurious_fault+0x840/0x840 [ 1787.758813] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.763846] ? page_fault+0x8/0x30 [ 1787.767846] page_fault+0x1e/0x30 [ 1787.771399] RIP: 0033:0x7f7e86879510 [ 1787.775121] Code: Bad RIP value. [ 1787.778484] RSP: 002b:00007ffe24f80990 EFLAGS: 00010202 [ 1787.783841] RAX: 0000000000000000 RBX: 000056366a73b780 RCX: 0000000000000000 [ 1787.791391] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000056366a7390c0 [ 1787.799187] RBP: 0000000000000001 R08: 00007ffe24fe1000 R09: 000001c9e6835f03 [ 1787.806567] R10: 000f7d10a6f6d684 R11: 0000000000000202 R12: 000056366a73b780 [ 1787.814104] R13: 0000000000000001 R14: 00007ffe24f809bc R15: 00007ffe24f809b0 [ 1787.832580] syz-executor.2: vmalloc: allocation failure, allocated 1725808640 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1787.833260] Mem-Info: [ 1787.860253] active_anon:14590 inactive_anon:75878 isolated_anon:0 [ 1787.860253] active_file:36 inactive_file:0 isolated_file:0 [ 1787.860253] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1787.860253] slab_reclaimable:13571 slab_unreclaimable:115772 [ 1787.860253] mapped:15271 shmem:76855 pagetables:479 bounce:0 [ 1787.860253] free:13884 free_pcp:306 free_cma:0 [ 1787.878730] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1787.903406] Node 0 active_anon:54132kB inactive_anon:26340kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31632kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.928169] CPU: 0 PID: 23181 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1787.941158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1787.942329] Node 1 active_anon:4228kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29452kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.950834] Call Trace: [ 1787.950861] dump_stack+0x1fc/0x2ef [ 1787.950884] warn_alloc.cold+0x7b/0x18f [ 1787.950902] ? zone_watermark_ok_safe+0x260/0x260 [ 1787.950935] __vmalloc_area_node+0x4fd/0x780 [ 1787.950951] ? __vmalloc_node_range+0x180/0x180 [ 1787.950965] ? _raw_spin_unlock+0x29/0x40 [ 1787.950983] ? __get_vm_area_node+0x2e2/0x3a0 [ 1787.989688] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.990462] __vmalloc_node_range+0xed/0x180 [ 1787.995290] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1787.999729] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1787.999744] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1787.999756] vmalloc_user+0x70/0xe0 [ 1787.999768] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1787.999780] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1787.999794] __vb2_queue_alloc+0x472/0xe60 [ 1787.999818] vb2_core_create_bufs+0x273/0x7e0 [ 1787.999832] ? __vb2_queue_free+0x870/0x870 [ 1787.999854] ? __video_do_ioctl+0x632/0xcd0 [ 1788.013499] Node 0 DMA32 free:17920kB min:35996kB low:44992kB high:53988kB active_anon:54132kB inactive_anon:26340kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1612kB bounce:0kB free_pcp:972kB local_pcp:744kB free_cma:0kB [ 1788.014305] ? __mutex_lock+0x368/0x1190 [ 1788.052024] lowmem_reserve[]: 0 0 1 1 1 [ 1788.055587] vb2_create_bufs+0x332/0x620 [ 1788.055605] ? mark_held_locks+0xf0/0xf0 [ 1788.055617] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1788.055635] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1788.055651] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1788.055671] v4l_create_bufs+0xb2/0x160 [ 1788.055689] __video_do_ioctl+0x49a/0xcd0 [ 1788.060871] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.066776] ? v4l_querycap+0x340/0x340 [ 1788.066794] ? __might_fault+0x192/0x1d0 [ 1788.066809] ? v4l_querycap+0x340/0x340 [ 1788.066823] video_usercopy+0x13f/0xfa0 [ 1788.066840] ? v4l_enumstd+0x60/0x60 [ 1788.066857] ? do_futex+0x171/0x1880 [ 1788.066873] ? mark_held_locks+0xf0/0xf0 [ 1788.066890] ? debug_check_no_obj_freed+0x201/0x490 [ 1788.066911] ? video_usercopy+0xfa0/0xfa0 [ 1788.079308] lowmem_reserve[]: 0 0 0 0 0 [ 1788.079735] v4l2_ioctl+0x147/0x1a0 [ 1788.084044] Node 1 Normal free:26736kB min:53876kB low:67344kB high:80812kB active_anon:4224kB inactive_anon:277172kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:252kB local_pcp:4kB free_cma:0kB [ 1788.089097] ? video_devdata+0xa0/0xa0 [ 1788.089116] do_vfs_ioctl+0xcdb/0x12e0 [ 1788.089131] ? lock_downgrade+0x720/0x720 [ 1788.089148] ? check_preemption_disabled+0x41/0x280 [ 1788.089165] ? ioctl_preallocate+0x200/0x200 [ 1788.094660] lowmem_reserve[]: 0 0 0 0 0 [ 1788.098174] ? __fget+0x356/0x510 [ 1788.098190] ? do_dup2+0x450/0x450 [ 1788.098204] ? __se_sys_futex+0x298/0x3b0 [ 1788.098224] ksys_ioctl+0x9b/0xc0 [ 1788.098241] __x64_sys_ioctl+0x6f/0xb0 [ 1788.098256] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1788.098269] do_syscall_64+0xf9/0x620 [ 1788.098299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1788.140378] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1788.143417] RIP: 0033:0x7f5c590870a9 [ 1788.151012] Node 0 DMA32: 627*4kB (UME) 441*8kB (UME) 225*16kB (UME) 89*32kB (ME) 23*64kB (M) 9*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17668kB [ 1788.152919] Code: Bad RIP value. [ 1788.164775] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1788.167542] RSP: 002b:00007f5c575f9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1788.167557] RAX: ffffffffffffffda RBX: 00007f5c591a6f80 RCX: 00007f5c590870a9 [ 1788.167563] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1788.167570] RBP: 00007f5c590e2ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1788.167576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.167583] R13: 00007ffc2ad32d5f R14: 00007f5c575f9300 R15: 0000000000022000 [ 1788.193979] Mem-Info: [ 1788.223810] Node 1 Normal: 370*4kB (UME) 357*8kB (UME) 268*16kB (UME) 116*32kB (ME) 49*64kB (UME) 20*128kB (ME) 8*256kB (UME) 9*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26736kB [ 1788.472854] active_anon:14589 inactive_anon:75878 isolated_anon:0 [ 1788.472854] active_file:12 inactive_file:12 isolated_file:0 [ 1788.472854] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1788.472854] slab_reclaimable:13571 slab_unreclaimable:115482 [ 1788.472854] mapped:15271 shmem:76855 pagetables:479 bounce:0 [ 1788.472854] free:14133 free_pcp:297 free_cma:0 [ 1788.512429] Node 0 active_anon:54132kB inactive_anon:26340kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31632kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1788.546306] Node 1 active_anon:4224kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:29452kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1788.573553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.632640] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.646869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.721355] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1788.731809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.755224] Node 0 DMA32 free:18916kB min:35996kB low:44992kB high:53988kB active_anon:54132kB inactive_anon:26340kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1612kB bounce:0kB free_pcp:888kB local_pcp:732kB free_cma:0kB [ 1788.762580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.824239] 76879 total pagecache pages [ 1788.850972] 0 pages in swap cache [ 1788.854821] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.863814] Free swap = 0kB [ 1788.889237] Total swap = 0kB [ 1788.892295] 2097051 pages RAM [ 1788.909023] lowmem_reserve[]: 0 0 1 1 1 [ 1788.913051] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.920711] 0 pages HighMem/MovableOnly [ 1788.963734] 369649 pages reserved [ 1788.984777] 0 pages cma reserved [ 1788.985076] lowmem_reserve[]: 0 0 0 0 0 [ 1788.991533] Unreclaimable slab info: [ 1789.001204] Node 1 Normal free:26736kB min:53876kB low:67344kB high:80812kB active_anon:4224kB inactive_anon:277172kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:352kB pagetables:304kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 1789.010415] Name Used Total [ 1789.051625] pid_2 28KB 44KB [ 1789.056875] lowmem_reserve[]: 0 0 0 0 0 [ 1789.061262] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1789.063975] batadv_tt_change_cache 2KB 7KB [ 1789.104380] batadv_tl_cache 6KB 16KB [ 1789.114434] Node 0 DMA32: 627*4kB (UME) 607*8kB (UME) 225*16kB (UME) 89*32kB (ME) 23*64kB (M) 9*128kB (M) 2*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 18996kB [ 1789.159038] TIPC 10KB 37KB [ 1789.193563] SCTPv6 18KB 30KB [ 1789.223512] DCCPv6 17KB 30KB [ 1789.232287] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1789.233768] DCCP 16KB 35KB [ 1789.272710] RXRPC 11KB 32KB [ 1789.305269] rxrpc_call_jar 78KB 126KB [ 1789.310941] bridge_fdb_cache 12KB 27KB [ 1789.315467] Node 1 Normal: 370*4kB (UME) 357*8kB (UME) 268*16kB (UME) 116*32kB (ME) 49*64kB (UME) 20*128kB (ME) 8*256kB (UME) 9*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26736kB [ 1789.344370] fib6_nodes 199KB 288KB [ 1789.374612] ip6_dst_cache 729KB 746KB [ 1789.375606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1789.383157] RAWv6 91KB 121KB [ 1789.424754] UDPv6 30KB 37KB [ 1789.432113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1789.470543] TCPv6 27KB 36KB [ 1789.494764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1789.503729] nf_conntrack 15KB 18KB [ 1789.542420] t10_alua_lu_gp_cache 0KB 3KB [ 1789.571366] sd_ext_cdb 0KB 7KB [ 1789.572053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1789.604631] scsi_sense_cache 1056KB 1060KB [ 1789.614900] 76879 total pagecache pages [ 1789.622572] 0 pages in swap cache [ 1789.629004] virtio_scsi_cmd 16KB 16KB [ 1789.634666] sgpool-128 8KB 8KB [ 1789.639613] Swap cache stats: add 0, delete 0, find 0/0 [ 1789.662420] sgpool-64 4KB 12KB [ 1789.672205] Free swap = 0kB [ 1789.689534] sgpool-32 2KB 15KB [ 1789.694945] sgpool-16 1KB 7KB [ 1789.703812] Total swap = 0kB [ 1789.716060] sgpool-8 0KB 7KB [ 1789.722649] mqueue_inode_cache 10KB 30KB [ 1789.733432] 2097051 pages RAM [ 1789.749842] bio_post_read_ctx 14KB 15KB [ 1789.769617] bio-2 14KB 15KB [ 1789.774905] 0 pages HighMem/MovableOnly [ 1789.804709] jfs_mp 7KB 7KB [ 1789.805052] 369649 pages reserved [ 1789.827990] 0 pages cma reserved [ 1789.834226] cifs_small_rq 15KB 16KB [ 1789.843372] cifs_request 67KB 67KB [ 1789.881527] cifs_mpx_ids 0KB 7KB [ 1789.898058] nfs_commit_data 3KB 14KB [ 1789.903447] nfs_write_data 34KB 44KB [ 1789.908993] ext4_system_zone 1KB 7KB [ 1789.914480] bio-1 1KB 7KB [ 1789.938334] pid_namespace 2KB 11KB [ 1789.943746] rpc_buffers 17KB 25KB [ 1789.952864] rpc_tasks 2KB 7KB [ 1789.976204] UNIX 1711KB 1837KB [ 1789.981963] tcp_bind_bucket 1KB 4KB [ 1790.004234] ip_fib_trie 29KB 47KB [ 1790.013102] ip_fib_alias 143KB 201KB [ 1790.036870] ip_dst_cache 15KB 24KB [ 1790.043109] RAW 54KB 75KB [ 1790.069920] UDP 72KB 81KB [ 1790.082310] TCP 25KB 28KB [ 1790.105985] hugetlbfs_inode_cache 3KB 15KB [ 1790.111832] fscache_cookie_jar 1KB 7KB [ 1790.135960] eventpoll_pwq 19KB 55KB [ 1790.141534] eventpoll_epi 35KB 66KB [ 1790.164429] inotify_inode_mark 13KB 23KB [ 1790.173622] request_queue 199KB 199KB [ 1790.200287] blkdev_requests 1KB 3KB [ 1790.213403] blkdev_ioc 24KB 38KB [ 1790.237575] bio-0 1013KB 1035KB [ 1790.243250] biovec-max 1608KB 1658KB [ 1790.266386] biovec-64 984KB 1055KB [ 1790.274074] biovec-16 128KB 191KB [ 1790.299633] bio_integrity_payload 1KB 8KB [ 1790.313160] khugepaged_mm_slot 5KB 23KB [ 1790.340963] uid_cache 0KB 4KB [ 1790.350210] dmaengine-unmap-2 0KB 3KB [ 1790.364909] skbuff_fclone_cache 81KB 86KB [ 1790.390687] skbuff_head_cache 10145KB 10151KB [ 1790.411658] configfs_dir_cache 3KB 7KB [ 1790.417352] file_lock_cache 44KB 47KB [ 1790.422939] file_lock_ctx 9KB 15KB [ 1790.444945] fsnotify_mark_connector 6KB 11KB [ 1790.471788] net_namespace 70KB 70KB [ 1790.510220] shmem_inode_cache 8084KB 8131KB [ 1790.542614] task_delay_info 242KB 359KB [ 1790.554930] taskstats 39KB 45KB [ 1790.581561] proc_dir_entry 819KB 997KB [ 1790.593167] pde_opener 12KB 46KB [ 1790.622482] seq_file 241KB 397KB [ 1790.646401] sigqueue 52KB 70KB [ 1790.651898] kernfs_node_cache 18118KB 18242KB [ 1790.682082] mnt_cache 174KB 216KB [ 1790.688612] filp 6952KB 8756KB [ 1790.694186] names_cache 112684KB 112722KB [ 1790.729793] iint_cache 36KB 51KB [ 1790.757184] key_jar 4KB 11KB [ 1790.762667] uts_namespace 2KB 7KB [ 1790.774609] nsproxy 2KB 11KB [ 1790.805112] vm_area_struct 3047KB 3356KB [ 1790.810636] mm_struct 485KB 526KB [ 1790.835036] fs_cache 244KB 332KB [ 1790.840521] files_cache 938KB 1177KB [ 1790.873327] signal_cache 1785KB 2141KB [ 1790.892797] sighand_cache 538KB 610KB [ 1790.922347] task_struct 8395KB 8471KB [ 1790.928893] cred_jar 2109KB 2812KB [ 1790.934293] anon_vma_chain 944KB 1519KB [ 1790.963874] anon_vma 119KB 292KB [ 1790.987912] pid 143KB 236KB [ 1790.993320] Acpi-Operand 156KB 198KB [ 1791.002311] Acpi-ParseExt 8KB 11KB [ 1791.053147] Acpi-Parse 41KB 47KB [ 1791.084801] Acpi-State 52KB 63KB [ 1791.143422] Acpi-Namespace 20KB 27KB [ 1791.181463] numa_policy 0KB 3KB [ 1791.193797] debug_objects_cache 1703KB 1883KB [ 1791.235537] trace_event_file 297KB 298KB [ 1791.240978] ftrace_event_field 398KB 401KB [ 1791.263993] pool_workqueue 127KB 148KB [ 1791.286706] page->ptl 488KB 960KB [ 1791.292149] kmalloc-2097152 2050KB 2050KB [ 1791.304750] kmalloc-524288 2056KB 2056KB [ 1791.333009] kmalloc-262144 1290KB 1290KB [ 1791.354068] kmalloc-131072 650KB 650KB [ 1791.383468] kmalloc-65536 2376KB 2442KB [ 1791.396362] kmalloc-32768 1914KB 1914KB [ 1791.401777] kmalloc-16384 1105KB 1188KB [ 1791.441171] kmalloc-8192 5032KB 5098KB [ 1791.466219] kmalloc-4096 26039KB 26078KB [ 1791.471675] kmalloc-2048 15793KB 17722KB [ 1791.502746] kmalloc-1024 13056KB 13946KB [ 1791.531818] kmalloc-512 18787KB 18787KB [ 1791.569518] kmalloc-256 5235KB 6206KB [ 1791.574999] kmalloc-128 1253KB 1598KB [ 1791.598642] kmalloc-96 3780KB 4368KB [ 1791.604251] kmalloc-64 2745KB 3824KB [ 1791.629433] kmalloc-32 2007KB 2512KB [ 1791.653754] kmalloc-192 2094KB 2912KB [ 1791.684626] kmem_cache 177KB 183KB [ 1791.693543] Out of memory (oom_kill_allocating_task): Kill process 21858 (systemd-journal) score 0 or sacrifice child [ 1791.726550] Killed process 21858 (systemd-journal) total-vm:46096kB, anon-rss:492kB, file-rss:0kB, shmem-rss:2828kB [ 1791.745388] oom_reaper: reaped process 21858 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2828kB [ 1791.784880] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1791.862623] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1791.886890] CPU: 0 PID: 8088 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1791.894557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1791.905042] Call Trace: [ 1791.907721] dump_stack+0x1fc/0x2ef [ 1791.911751] dump_header+0x15d/0xc3f [ 1791.915735] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1791.920970] ? ___ratelimit+0x319/0x590 [ 1791.924987] oom_kill_process.cold+0x10/0x692 [ 1791.929673] ? check_preemption_disabled+0x41/0x280 [ 1791.934888] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1791.940346] out_of_memory+0x1072/0x1390 [ 1791.944424] ? oom_killer_disable+0x270/0x270 [ 1791.949009] ? mutex_trylock+0x15f/0x1a0 [ 1791.953318] __alloc_pages_nodemask+0x23a2/0x2890 [ 1791.958162] ? find_get_entry+0x4cd/0x8a0 [ 1791.962697] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1791.967901] alloc_pages_current+0x193/0x2a0 [ 1791.972493] filemap_fault+0x146e/0x2180 [ 1791.976573] ext4_filemap_fault+0x84/0xb0 [ 1791.980947] __do_fault+0x10b/0x4b0 [ 1791.984657] __handle_mm_fault+0x273b/0x41c0 [ 1791.989271] ? vm_insert_page+0x9c0/0x9c0 [ 1791.993438] ? check_preemption_disabled+0x41/0x280 [ 1791.998734] handle_mm_fault+0x436/0xb10 [ 1792.003093] __do_page_fault+0x68e/0xd60 [ 1792.007460] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1792.012630] ? spurious_fault+0x840/0x840 [ 1792.016968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1792.022199] ? page_fault+0x8/0x30 [ 1792.025936] page_fault+0x1e/0x30 [ 1792.030102] RIP: 0033:0x44b036 [ 1792.033377] Code: Bad RIP value. [ 1792.036814] RSP: 002b:000000c0004a1988 EFLAGS: 00010283 [ 1792.042167] RAX: 0000000000000017 RBX: 000000c0004a1bf0 RCX: 000000c0004a1ac0 [ 1792.049639] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000045 [ 1792.057341] RBP: 000000c0004a19c0 R08: 0000000001db77e0 R09: 0000000000cd0f40 [ 1792.065337] R10: 000000c00003c080 R11: 0000000000000212 R12: 0000000000000000 [ 1792.072614] R13: 0000000000000004 R14: 000000c000497040 R15: 0000000000000000 [ 1792.101622] Mem-Info: [ 1792.104160] active_anon:14466 inactive_anon:75878 isolated_anon:0 [ 1792.104160] active_file:144 inactive_file:391 isolated_file:14 [ 1792.104160] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1792.104160] slab_reclaimable:13571 slab_unreclaimable:115337 [ 1792.104160] mapped:14809 shmem:76855 pagetables:479 bounce:0 [ 1792.104160] free:27457 free_pcp:714 free_cma:0 [ 1792.150954] Node 0 active_anon:54112kB inactive_anon:26340kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31628kB dirty:0kB writeback:0kB shmem:28168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1792.233726] Node 1 active_anon:3756kB inactive_anon:277168kB active_file:728kB inactive_file:4840kB unevictable:0kB isolated(anon):0kB isolated(file):56kB mapped:30660kB dirty:0kB writeback:0kB shmem:279252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1792.307144] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1792.330117] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.373345] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1792.405030] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1792.420271] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1792.440896] systemd[1]: Stopped Journal Service. [ 1792.455076] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1792.462814] systemd[1]: Starting Journal Service... [ 1792.485295] Node 0 DMA32 free:22500kB min:35996kB low:44992kB high:53988kB active_anon:54112kB inactive_anon:26340kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7264kB pagetables:1608kB bounce:0kB free_pcp:1476kB local_pcp:1124kB free_cma:0kB [ 1792.506648] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1792.574139] lowmem_reserve[]: 0 0 1 1 1 [ 1792.592450] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.655862] lowmem_reserve[]: 0 0 0 0 0 [ 1792.683879] Node 1 Normal free:468748kB min:53876kB low:67344kB high:80812kB active_anon:5024kB inactive_anon:277168kB active_file:4020kB inactive_file:11300kB unevictable:0kB writepending:420kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:448kB pagetables:480kB bounce:0kB free_pcp:2752kB local_pcp:1648kB free_cma:0kB [ 1792.725822] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1792.738285] lowmem_reserve[]: 0 0 0 0 0 [ 1792.738377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.742558] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10876kB [ 1792.765559] systemd-journald[23236]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1792.778055] Node 0 DMA32: 621*4kB (UME) 1406*8kB (UME) 245*16kB (UME) 103*32kB (UME) 25*64kB (UM) 8*128kB (M) 3*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26388kB [ 1792.781633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1792.799121] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1792.799179] Node 1 Normal: 72*4kB (UM) 3*8kB (UME) 11*16kB (UME) 48*32kB (UME) 80*64kB (UE) 77*128kB (UME) 65*256kB (UME) 62*512kB (UM) 79*1024kB (UM) 189*2048kB (U) 0*4096kB = 533352kB [ 1792.835411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.844469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.853805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.866371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1792.873100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1792.879653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.888720] 82345 total pagecache pages [ 1792.894827] device bridge_slave_1 left promiscuous mode [ 1792.900461] 0 pages in swap cache [ 1792.903915] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.909610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.916953] Free swap = 0kB [ 1792.919981] Total swap = 0kB [ 1792.923135] 2097051 pages RAM [ 1792.928248] 0 pages HighMem/MovableOnly [ 1792.928850] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.933079] 369649 pages reserved [ 1792.942466] device bridge_slave_0 left promiscuous mode [ 1792.944035] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.948451] 0 pages cma reserved [ 1792.962552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.974151] Unreclaimable slab info: [ 1792.984287] device veth1_macvtap left promiscuous mode [ 1792.989880] Name Used Total [ 1793.000540] device veth0_macvtap left promiscuous mode [ 1793.006272] pid_2 28KB 44KB [ 1793.011794] batadv_tt_change_cache 3KB 7KB [ 1793.022684] device veth1_vlan left promiscuous mode [ 1793.027980] device veth0_vlan left promiscuous mode [ 1793.033300] batadv_tl_cache 6KB 16KB [ 1793.060253] TIPC 10KB 37KB [ 1793.066007] SCTPv6 18KB 30KB [ 1793.085379] DCCPv6 17KB 30KB [ 1793.090775] DCCP 16KB 35KB [ 1793.120096] RXRPC 11KB 32KB [ 1793.125603] rxrpc_call_jar 78KB 126KB [ 1793.130990] bridge_fdb_cache 12KB 27KB [ 1793.160868] fib6_nodes 198KB 288KB [ 1793.180168] ip6_dst_cache 715KB 746KB [ 1793.185683] RAWv6 91KB 121KB [ 1793.191272] UDPv6 30KB 37KB [ 1793.219198] TCPv6 27KB 36KB [ 1793.234849] nf_conntrack 15KB 18KB [ 1793.265384] t10_alua_lu_gp_cache 0KB 3KB [ 1793.271382] sd_ext_cdb 0KB 7KB [ 1793.299910] scsi_sense_cache 1056KB 1060KB [ 1793.305675] virtio_scsi_cmd 16KB 16KB [ 1793.311059] sgpool-128 8KB 8KB [ 1793.335191] sgpool-64 4KB 12KB [ 1793.340590] sgpool-32 2KB 15KB [ 1793.370379] sgpool-16 1KB 7KB [ 1793.377796] sgpool-8 0KB 7KB [ 1793.383277] mqueue_inode_cache 10KB 30KB [ 1793.412428] bio_post_read_ctx 14KB 15KB [ 1793.425358] bio-2 14KB 15KB [ 1793.431476] jfs_mp 7KB 7KB [ 1793.460207] cifs_small_rq 15KB 16KB [ 1793.465783] cifs_request 67KB 67KB [ 1793.471591] cifs_mpx_ids 0KB 7KB [ 1793.518477] nfs_commit_data 3KB 14KB [ 1793.524148] nfs_write_data 34KB 44KB [ 1793.546869] ext4_system_zone 1KB 7KB [ 1793.552569] bio-1 1KB 7KB [ 1793.578656] pid_namespace 2KB 11KB [ 1793.598404] rpc_buffers 17KB 25KB [ 1793.618769] rpc_tasks 2KB 7KB [ 1793.638374] UNIX 1674KB 1800KB [ 1793.644748] tcp_bind_bucket 1KB 4KB [ 1793.667409] ip_fib_trie 29KB 47KB [ 1793.674153] ip_fib_alias 142KB 201KB [ 1793.709862] ip_dst_cache 14KB 24KB [ 1793.733363] RAW 54KB 75KB [ 1793.750122] UDP 72KB 81KB [ 1793.769995] TCP 25KB 28KB [ 1793.786731] hugetlbfs_inode_cache 3KB 15KB [ 1793.793975] fscache_cookie_jar 1KB 7KB [ 1793.819209] eventpoll_pwq 31KB 55KB [ 1793.824618] eventpoll_epi 57KB 66KB [ 1793.859326] inotify_inode_mark 13KB 23KB [ 1793.879306] request_queue 199KB 199KB [ 1793.885881] blkdev_requests 1KB 3KB [ 1793.905983] blkdev_ioc 24KB 38KB [ 1793.912776] bio-0 1131KB 1132KB [ 1793.940110] biovec-max 1608KB 1658KB [ 1793.959853] biovec-64 1048KB 1055KB [ 1793.965422] biovec-16 136KB 191KB [ 1793.970801] bio_integrity_payload 1KB 8KB [ 1794.005329] khugepaged_mm_slot 5KB 23KB [ 1794.011258] uid_cache 0KB 4KB [ 1794.039811] dmaengine-unmap-2 0KB 3KB [ 1794.060193] skbuff_fclone_cache 80KB 86KB [ 1794.065944] skbuff_head_cache 9367KB 10335KB [ 1794.071598] configfs_dir_cache 3KB 7KB [ 1794.119999] file_lock_cache 43KB 47KB [ 1794.126101] file_lock_ctx 9KB 15KB [ 1794.132864] fsnotify_mark_connector 6KB 11KB [ 1794.160013] net_namespace 70KB 70KB [ 1794.165980] shmem_inode_cache 8082KB 8127KB [ 1794.171667] task_delay_info 242KB 359KB [ 1794.209113] taskstats 38KB 45KB [ 1794.236594] proc_dir_entry 816KB 997KB [ 1794.242350] pde_opener 16KB 46KB [ 1794.269943] seq_file 263KB 397KB [ 1794.275968] sigqueue 52KB 70KB [ 1794.281708] kernfs_node_cache 18013KB 18203KB [ 1794.305235] mnt_cache 174KB 216KB [ 1794.311440] filp 7515KB 8756KB [ 1794.335225] names_cache 131070KB 131108KB [ 1794.343702] iint_cache 44KB 51KB [ 1794.375914] key_jar 4KB 11KB [ 1794.383153] uts_namespace 2KB 7KB [ 1794.416683] nsproxy 2KB 11KB [ 1794.424681] vm_area_struct 2844KB 3352KB [ 1794.468386] mm_struct 497KB 526KB [ 1794.474889] systemd[1]: Started Journal Service. [ 1794.483596] fs_cache 244KB 332KB [ 1794.516330] files_cache 695KB 982KB [ 1794.522841] signal_cache 1187KB 1868KB [ 1794.556370] sighand_cache 566KB 610KB [ 1794.563467] task_struct 5188KB 5277KB [ 1794.591423] cred_jar 2355KB 2812KB [ 1794.599049] anon_vma_chain 898KB 1515KB [ 1794.629945] anon_vma 153KB 292KB [ 1794.637134] pid 143KB 236KB [ 1794.643474] Acpi-Operand 156KB 198KB [ 1794.675945] Acpi-ParseExt 8KB 11KB [ 1794.682439] Acpi-Parse 41KB 47KB [ 1794.715190] Acpi-State 52KB 63KB [ 1794.733969] Acpi-Namespace 20KB 27KB [ 1794.754233] numa_policy 0KB 3KB [ 1794.784672] debug_objects_cache 1700KB 1883KB [ 1794.792410] trace_event_file 297KB 298KB [ 1794.830353] ftrace_event_field 398KB 401KB [ 1794.853597] pool_workqueue 127KB 148KB [ 1794.869989] page->ptl 483KB 960KB [ 1794.890101] kmalloc-2097152 2050KB 2050KB [ 1794.909844] kmalloc-524288 2056KB 2056KB [ 1794.919880] kmalloc-262144 1290KB 1290KB [ 1794.931758] kmalloc-131072 650KB 650KB [ 1794.938940] kmalloc-65536 2376KB 2442KB [ 1794.951197] kmalloc-32768 1914KB 1914KB [ 1794.958313] kmalloc-16384 1138KB 1188KB [ 1794.963994] kmalloc-8192 4290KB 4372KB [ 1794.975637] kmalloc-4096 19312KB 19333KB [ 1794.981990] kmalloc-2048 13557KB 16530KB [ 1794.993252] kmalloc-1024 11477KB 13891KB [ 1795.001222] kmalloc-512 16551KB 18945KB [ 1795.012820] kmalloc-256 4593KB 6161KB [ 1795.028954] kmalloc-128 1156KB 1594KB [ 1795.034904] kmalloc-96 3758KB 4368KB [ 1795.069369] kmalloc-64 2508KB 3812KB [ 1795.078603] kmalloc-32 1883KB 2512KB [ 1795.109096] kmalloc-192 1830KB 2896KB [ 1795.118566] kmem_cache 177KB 183KB [ 1795.124624] Out of memory (oom_kill_allocating_task): Kill process 8088 (syz-fuzzer) score 0 or sacrifice child [ 1795.142922] Killed process 19531 (syz-executor.5) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1795.160857] oom_reaper: reaped process 19531 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB 14:54:01 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x0, {0x3, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:01 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:01 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) (async) 14:54:01 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) (async) 14:54:01 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:54:01 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x9000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:54:01 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:54:01 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) 14:54:01 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @raw_data="7d26755de4157304ea87a8ac26d4f98a7c41af5dfc4fc50f5bc6cdf98d5f49bd70b446c15591e13028f821099653e6343df5cc209eef66d5b1647a8d92480a769a4df331fb88d35fa2e4e6236927845e386cf0eb8f751289aa2e95f3f45999cea68a054ebb6cf1a15b0c6ad4a485ab029a9b5d49b8a75899edeb1798c32906e1115352d4eb801dd4a21dfdd047a34d177e9dc313cbe7654076643efd3c1c8d85973fb11f04fb1c5d022987ad1da430b6fbc602065b629bebe71ab0b3e20c6554837336f67457127c"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:02 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) 14:54:02 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @raw_data="7d26755de4157304ea87a8ac26d4f98a7c41af5dfc4fc50f5bc6cdf98d5f49bd70b446c15591e13028f821099653e6343df5cc209eef66d5b1647a8d92480a769a4df331fb88d35fa2e4e6236927845e386cf0eb8f751289aa2e95f3f45999cea68a054ebb6cf1a15b0c6ad4a485ab029a9b5d49b8a75899edeb1798c32906e1115352d4eb801dd4a21dfdd047a34d177e9dc313cbe7654076643efd3c1c8d85973fb11f04fb1c5d022987ad1da430b6fbc602065b629bebe71ab0b3e20c6554837336f67457127c"}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:02 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) [ 1801.244982] Bluetooth: hci4: command 0x0409 tx timeout [ 1801.251173] Bluetooth: hci1: command 0x0409 tx timeout [ 1801.324988] Bluetooth: hci5: command 0x0409 tx timeout [ 1801.760251] device hsr_slave_1 left promiscuous mode [ 1801.778929] device hsr_slave_0 left promiscuous mode [ 1801.803991] team0 (unregistering): Port device team_slave_1 removed [ 1801.819236] team0 (unregistering): Port device team_slave_0 removed [ 1801.838119] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1801.858718] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1801.903998] bond0 (unregistering): Released all slaves [ 1802.133282] IPVS: ftp: loaded support on port[0] = 21 [ 1802.142602] IPVS: ftp: loaded support on port[0] = 21 [ 1802.353788] IPVS: ftp: loaded support on port[0] = 21 [ 1802.396074] IPVS: ftp: loaded support on port[0] = 21 [ 1802.817227] chnl_net:caif_netlink_parms(): no params data found [ 1802.901652] chnl_net:caif_netlink_parms(): no params data found [ 1802.924477] chnl_net:caif_netlink_parms(): no params data found [ 1803.096337] chnl_net:caif_netlink_parms(): no params data found [ 1803.191262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.203661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.217578] device bridge_slave_0 entered promiscuous mode [ 1803.230340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.243217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.254854] device bridge_slave_0 entered promiscuous mode [ 1803.299401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.313620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.326434] device bridge_slave_1 entered promiscuous mode [ 1803.335882] Bluetooth: hci1: command 0x041b tx timeout [ 1803.345506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.359797] Bluetooth: hci4: command 0x041b tx timeout [ 1803.369785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.382820] device bridge_slave_1 entered promiscuous mode [ 1803.395382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.406038] Bluetooth: hci3: command 0x0409 tx timeout [ 1803.414316] Bluetooth: hci5: command 0x041b tx timeout [ 1803.426786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.440718] device bridge_slave_0 entered promiscuous mode [ 1803.468244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.486770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.504225] device bridge_slave_1 entered promiscuous mode [ 1803.552501] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1803.580908] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1803.630009] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1803.648938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1803.661629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1803.691131] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1803.721797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.738874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.751315] device bridge_slave_0 entered promiscuous mode [ 1803.770977] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1803.782821] team0: Port device team_slave_0 added [ 1803.810606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.818300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.827357] device bridge_slave_1 entered promiscuous mode [ 1803.844351] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1803.866129] team0: Port device team_slave_0 added [ 1803.874823] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1803.883734] team0: Port device team_slave_1 added [ 1803.907138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1803.941885] team0: Port device team_slave_0 added [ 1803.985975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1804.007412] team0: Port device team_slave_1 added [ 1804.031514] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1804.044109] team0: Port device team_slave_1 added [ 1804.113154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1804.136744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.143343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.170598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.182237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.188958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.215373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.227386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.239788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.271759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.286815] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1804.299965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.306666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.335329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.347983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.356140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.383023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.396110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.402658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1804.433326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.474815] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1804.482964] team0: Port device team_slave_0 added [ 1804.489904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1804.500209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1804.508825] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1804.517479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1804.526876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1804.535876] team0: Port device team_slave_1 added [ 1804.549470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1804.557500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1805.233725] device hsr_slave_0 entered promiscuous mode [ 1805.239848] device hsr_slave_1 entered promiscuous mode [ 1805.261756] device hsr_slave_0 entered promiscuous mode [ 1805.268283] device hsr_slave_1 entered promiscuous mode [ 1805.280377] device hsr_slave_0 entered promiscuous mode [ 1805.286959] device hsr_slave_1 entered promiscuous mode [ 1805.293246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.299943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.326016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.337413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1805.344763] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1805.351901] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1805.362753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.369468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1805.396473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1805.414820] Bluetooth: hci4: command 0x040f tx timeout [ 1805.420587] Bluetooth: hci1: command 0x040f tx timeout [ 1805.484787] Bluetooth: hci5: command 0x040f tx timeout [ 1805.490493] Bluetooth: hci3: command 0x041b tx timeout [ 1805.722674] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1805.730574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1805.737785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1805.770913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1805.778906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1806.159138] device hsr_slave_0 entered promiscuous mode [ 1806.165402] device hsr_slave_1 entered promiscuous mode [ 1806.192205] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1806.200375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1807.113970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1807.123968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1807.487739] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1807.495298] Bluetooth: hci1: command 0x0419 tx timeout [ 1807.501451] Bluetooth: hci4: command 0x0419 tx timeout [ 1807.564718] Bluetooth: hci3: command 0x040f tx timeout [ 1807.570165] Bluetooth: hci5: command 0x0419 tx timeout [ 1808.219307] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1808.241551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.256764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1808.601251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.613083] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1808.630647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1808.638506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1808.646450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1808.659283] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1808.666118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1808.985429] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1809.007091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1809.014604] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1809.025488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1809.036560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1809.047545] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1809.054205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.072591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1809.081928] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1809.092715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1809.102239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1809.111108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1809.119080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.125729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.133130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1809.141233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1809.148765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1809.157899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1809.167377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.173892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.181696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1809.191283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1809.319680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.332317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1809.343795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1809.356163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1809.368495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1809.377849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1809.388316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1809.396586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.402994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.410488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1809.419574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1809.428374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.435325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.442832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1809.452253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1809.462833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1809.471892] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1809.480311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.507064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1809.518913] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1809.532996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.542348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1809.557041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1809.569003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1809.581419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1809.595853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1809.607576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1809.618760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1809.627435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1809.636182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1809.643803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.650370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.661315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1809.670521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1809.679480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1809.687963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.695270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.702750] Bluetooth: hci3: command 0x0419 tx timeout [ 1809.822803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1809.837005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1809.852381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1809.862560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1809.872054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1809.880946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1809.891127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1809.902793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1809.920802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.929664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.939624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1809.954896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1809.969883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1809.989599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1810.001382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1810.012830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1810.025453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1810.048749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1810.063561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1810.087771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1810.100687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1810.117577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1810.131052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1810.143293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1810.153941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1810.164983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.172588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.181958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1810.191689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1810.203715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1810.220539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1810.347534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1810.356521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1810.369084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1810.382585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1810.394108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1810.406075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1810.420605] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1810.430853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1810.446704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1810.470226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1810.484021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1810.502962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1810.512829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1810.525206] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1810.531750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1810.548939] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1810.556438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1810.571572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1810.582066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1810.597132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1810.727417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1810.737786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1810.756717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1810.769371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1810.778712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1810.789412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1810.800336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1810.810044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1810.820616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1810.829222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1810.851244] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1810.876371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1810.886454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1810.904001] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1811.025168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1811.033701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1811.041587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1811.049794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1811.060045] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1811.078453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1811.091042] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1811.100287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1811.109579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1811.118352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1811.127261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1811.138615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1811.146033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1811.156426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1811.168584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.181118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1811.197957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1811.213168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1811.221719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1811.231540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1811.243190] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1811.250484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1811.259939] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1811.266254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1811.393790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1811.451130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.470935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.482575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.491948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.501238] device bridge_slave_1 left promiscuous mode [ 1811.507250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.515729] device bridge_slave_0 left promiscuous mode [ 1811.521258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.532299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.540794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.550712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.558559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.568315] device bridge_slave_1 left promiscuous mode [ 1811.575979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.583166] device bridge_slave_0 left promiscuous mode [ 1811.591032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.603586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.610499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.620132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.627374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.636808] device bridge_slave_1 left promiscuous mode [ 1811.642595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.651614] device bridge_slave_0 left promiscuous mode [ 1811.657526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.673213] device veth1_macvtap left promiscuous mode [ 1811.679174] device veth0_macvtap left promiscuous mode [ 1811.684827] device veth1_vlan left promiscuous mode [ 1811.690801] device veth0_vlan left promiscuous mode [ 1811.702784] device veth1_macvtap left promiscuous mode [ 1811.710883] device veth0_macvtap left promiscuous mode [ 1811.721522] device veth1_vlan left promiscuous mode [ 1811.727905] device veth0_vlan left promiscuous mode [ 1811.742235] device veth1_macvtap left promiscuous mode [ 1811.748970] device veth0_macvtap left promiscuous mode [ 1811.758986] device veth1_vlan left promiscuous mode [ 1811.764129] device veth0_vlan left promiscuous mode [ 1825.723781] Bluetooth: hci2: command 0x0406 tx timeout [ 1826.509960] device hsr_slave_1 left promiscuous mode [ 1826.519909] device hsr_slave_0 left promiscuous mode [ 1826.540005] team0 (unregistering): Port device team_slave_1 removed [ 1826.552608] team0 (unregistering): Port device team_slave_0 removed [ 1826.565748] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1826.578497] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1826.613202] bond0 (unregistering): Released all slaves [ 1826.661290] device hsr_slave_1 left promiscuous mode [ 1826.671561] device hsr_slave_0 left promiscuous mode [ 1826.689008] team0 (unregistering): Port device team_slave_1 removed [ 1826.700487] team0 (unregistering): Port device team_slave_0 removed [ 1826.712092] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1826.726659] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1826.763633] bond0 (unregistering): Released all slaves [ 1826.812652] device hsr_slave_1 left promiscuous mode [ 1826.823044] device hsr_slave_0 left promiscuous mode [ 1826.842629] team0 (unregistering): Port device team_slave_1 removed [ 1826.853413] team0 (unregistering): Port device team_slave_0 removed [ 1826.865656] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1826.879213] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1826.913057] bond0 (unregistering): Released all slaves [ 1826.948086] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1826.967449] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1826.977484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1826.995212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.009781] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1827.020942] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1827.030794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1827.039439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.050488] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1827.061212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1827.080478] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1827.091836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1827.102851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1827.118819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1827.130632] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1827.168592] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1827.184267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.192828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.207885] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1827.216464] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1827.223312] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1827.253314] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1827.262518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1827.276944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1827.286776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1827.297509] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1827.309016] device veth0_vlan entered promiscuous mode [ 1827.322731] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1827.337965] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1827.346280] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1827.354737] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1827.369912] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1827.392261] device veth1_vlan entered promiscuous mode [ 1827.402962] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1827.421269] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1827.436247] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1827.450925] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1827.483454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1827.496069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.515883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.527991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1827.540448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1827.557185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1827.569527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1827.582522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1827.592730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1827.614177] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1827.632304] device veth0_vlan entered promiscuous mode [ 1827.671538] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1827.698867] device veth1_vlan entered promiscuous mode [ 1827.723105] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1827.741386] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1827.758352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1827.771445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1827.790117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1827.800422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1827.819853] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1827.835962] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1827.850214] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1827.860050] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1827.874249] device veth0_macvtap entered promiscuous mode [ 1827.885781] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1827.897780] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1827.913960] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1827.921276] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1827.948421] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1827.970346] device veth1_macvtap entered promiscuous mode [ 1827.982769] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1827.993878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.001700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.016800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1828.030223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.040754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.061642] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1828.072779] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1828.092572] device veth0_vlan entered promiscuous mode [ 1828.105820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1828.115271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.122510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.132108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1828.141238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1828.152262] device veth0_vlan entered promiscuous mode [ 1828.162318] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1828.176152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1828.183865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1828.191310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1828.198967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.207593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.220581] device veth1_vlan entered promiscuous mode [ 1828.236202] device veth0_macvtap entered promiscuous mode [ 1828.242835] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1828.251841] device veth1_vlan entered promiscuous mode [ 1828.264948] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1828.282357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.292807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.302139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.313239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.324092] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1828.331499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.340490] device veth1_macvtap entered promiscuous mode [ 1828.347636] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1828.356037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1828.364346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.372179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1828.380263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1828.389480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1828.402424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.412986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.422431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.432688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.444415] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1828.452268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.462385] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1828.472508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1828.481066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1828.490035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1828.504992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1828.518691] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1828.534558] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1828.574401] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1828.586051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1828.600086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.611991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.625031] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1828.642484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.659614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.683613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.693363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.704240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1828.715128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.735353] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1828.742663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.752134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1828.762389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1828.772566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1828.782458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1828.794488] device veth0_macvtap entered promiscuous mode [ 1828.801457] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1828.811774] device veth0_macvtap entered promiscuous mode [ 1828.823734] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1828.832263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.847623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.864588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.876944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.888106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1828.899040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1828.911178] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1828.919327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.936550] device veth1_macvtap entered promiscuous mode [ 1828.949743] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1828.961172] device veth1_macvtap entered promiscuous mode [ 1828.970486] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1828.977849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1828.994563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1829.003276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1829.015439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1829.024104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1829.034843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1829.056386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1829.075301] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1829.116591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1829.139580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1829.164094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.175797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.198532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.216052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.230303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.246234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.256311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.266878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.278777] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1829.287135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.301237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.312290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.322601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.333930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.344094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.356982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.370353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.382612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.393825] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1829.401643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.411837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1829.422540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1829.432006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1829.441929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1829.457701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.468141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.479020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.489706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.499616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.511198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.521293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.532354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.542022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1829.552166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.563344] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1829.570931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.585431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1829.594729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1829.609446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.619912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.630223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.640397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.649765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.659749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.669252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.679057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.688879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1829.699263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1829.712208] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1829.720937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.732659] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1829.750631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1829.868365] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1829.888888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.900878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.931223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1829.956965] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1829.980845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.994549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.025519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1830.042988] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1830.063334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.097025] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1830.107353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.120404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1830.138022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.163705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.203156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1830.278526] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1830.307286] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 1830.319374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.326951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.339435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.352121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.387388] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1830.396129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1830.403721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1830.415144] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 1830.422900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.422974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.436100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.438157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.453752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1830.461091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:54:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x0, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @raw_data="7d26755de4157304ea87a8ac26d4f98a7c41af5dfc4fc50f5bc6cdf98d5f49bd70b446c15591e13028f821099653e6343df5cc209eef66d5b1647a8d92480a769a4df331fb88d35fa2e4e6236927845e386cf0eb8f751289aa2e95f3f45999cea68a054ebb6cf1a15b0c6ad4a485ab029a9b5d49b8a75899edeb1798c32906e1115352d4eb801dd4a21dfdd047a34d177e9dc313cbe7654076643efd3c1c8d85973fb11f04fb1c5d022987ad1da430b6fbc602065b629bebe71ab0b3e20c6554837336f67457127c"}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x0, @raw_data="7d26755de4157304ea87a8ac26d4f98a7c41af5dfc4fc50f5bc6cdf98d5f49bd70b446c15591e13028f821099653e6343df5cc209eef66d5b1647a8d92480a769a4df331fb88d35fa2e4e6236927845e386cf0eb8f751289aa2e95f3f45999cea68a054ebb6cf1a15b0c6ad4a485ab029a9b5d49b8a75899edeb1798c32906e1115352d4eb801dd4a21dfdd047a34d177e9dc313cbe7654076643efd3c1c8d85973fb11f04fb1c5d022987ad1da430b6fbc602065b629bebe71ab0b3e20c6554837336f67457127c"}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:54:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffe67, 0x440040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000000)=0x10000) 14:54:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:54:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 14:54:34 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) 14:54:34 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffe67, 0x440040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000000)=0x10000) 14:54:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x0, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:54:34 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000021c0)={r0, r2}, 0x10) 14:54:34 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0xfffffffffffffe67, 0x440040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000000)=0x10000) 14:54:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'ip6gre0\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x7, 0x80000000, 0x1, @mcast2, @local, 0x20, 0x1, 0xfffffffd, 0x401}}) 14:54:34 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x0, @win={{}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:34 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x37, 0x3, 0x0, {0x200000000, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:34 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000100)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4000000000000000, 0x515000) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x6, 0x10001}}, 0x28) 14:54:34 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x31c2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x4000000) 14:54:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:34 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 14:54:34 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0xfffffffb}}, 0x18) 14:54:34 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:35 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000100)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4000000000000000, 0x515000) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x6, 0x10001}}, 0x28) 14:54:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x7, 0x7, 0x30314247, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e, 0x10000}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x7fffffff}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:54:35 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:35 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:35 executing program 0: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000100)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4000000000000000, 0x515000) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f00000000c0)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x6, 0x10001}}, 0x28) (rerun: 32) 14:54:35 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:35 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:35 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:35 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (rerun: 64) 14:54:36 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) [ 1837.389406] oom_reaper: reaped process 24433 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1837.457249] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1837.470597] in:imklog cpuset=/ mems_allowed=0-1 [ 1837.476057] CPU: 0 PID: 23146 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1837.484599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1837.495605] Call Trace: [ 1837.498623] dump_stack+0x1fc/0x2ef [ 1837.502293] dump_header+0x15d/0xc3f [ 1837.506020] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1837.511385] ? ___ratelimit+0x319/0x590 [ 1837.515749] oom_kill_process.cold+0x10/0x692 [ 1837.520940] ? check_preemption_disabled+0x41/0x280 [ 1837.526057] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1837.531603] out_of_memory+0x1072/0x1390 [ 1837.536361] ? oom_killer_disable+0x270/0x270 [ 1837.540989] ? mutex_trylock+0x15f/0x1a0 [ 1837.545065] __alloc_pages_nodemask+0x23a2/0x2890 [ 1837.550035] ? find_get_entry+0x4cd/0x8a0 [ 1837.554233] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1837.559492] alloc_pages_current+0x193/0x2a0 [ 1837.564000] filemap_fault+0x146e/0x2180 [ 1837.568303] ext4_filemap_fault+0x84/0xb0 [ 1837.572850] __do_fault+0x10b/0x4b0 [ 1837.577388] __handle_mm_fault+0x273b/0x41c0 [ 1837.581857] ? vm_insert_page+0x9c0/0x9c0 [ 1837.586010] ? lock_downgrade+0x720/0x720 [ 1837.590165] ? check_preemption_disabled+0x41/0x280 [ 1837.595188] handle_mm_fault+0x436/0xb10 [ 1837.599380] __do_page_fault+0x68e/0xd60 [ 1837.603531] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1837.608725] ? spurious_fault+0x840/0x840 [ 1837.612871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1837.617730] ? page_fault+0x8/0x30 [ 1837.621448] page_fault+0x1e/0x30 [ 1837.624994] RIP: 0033:0x7f354ebd522d [ 1837.628935] Code: Bad RIP value. [ 1837.632399] RSP: 002b:00007f354c571580 EFLAGS: 00010293 [ 1837.637749] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f354ebd522d [ 1837.645708] RDX: 0000000000001fa0 RSI: 00007f354c571da0 RDI: 0000000000000004 [ 1837.653110] RBP: 000055dbf07499d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.660667] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f354c571da0 [ 1837.668757] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f354c571e01 [ 1837.680746] Mem-Info: [ 1837.683354] active_anon:15033 inactive_anon:77911 isolated_anon:0 [ 1837.683354] active_file:21 inactive_file:17 isolated_file:0 [ 1837.683354] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1837.683354] slab_reclaimable:13136 slab_unreclaimable:117931 [ 1837.683354] mapped:22269 shmem:78902 pagetables:558 bounce:0 [ 1837.683354] free:13805 free_pcp:216 free_cma:0 [ 1837.683470] syz-executor.1: vmalloc: allocation failure, allocated 1678905344 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1837.723691] Node 0 active_anon:55988kB inactive_anon:26352kB active_file:76kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60348kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.739837] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1837.767757] CPU: 1 PID: 24433 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1837.770268] Node 1 active_anon:4144kB inactive_anon:285292kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28728kB dirty:0kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.776114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1837.776120] Call Trace: [ 1837.776148] dump_stack+0x1fc/0x2ef [ 1837.776167] warn_alloc.cold+0x7b/0x18f [ 1837.776184] ? zone_watermark_ok_safe+0x260/0x260 [ 1837.776197] ? rcu_nmi_exit+0xb3/0x180 [ 1837.776227] __vmalloc_area_node+0x4fd/0x780 [ 1837.776247] ? __vmalloc_node_range+0x180/0x180 [ 1837.776261] ? _raw_spin_unlock+0x29/0x40 [ 1837.776272] ? __get_vm_area_node+0x2e2/0x3a0 [ 1837.776290] __vmalloc_node_range+0xed/0x180 [ 1837.776306] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1837.776320] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1837.776337] vmalloc_user+0x70/0xe0 [ 1837.808545] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.814244] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1837.814259] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1837.814272] __vb2_queue_alloc+0x472/0xe60 [ 1837.814295] vb2_core_create_bufs+0x273/0x7e0 [ 1837.814307] ? __vb2_queue_free+0x870/0x870 [ 1837.814321] ? __video_do_ioctl+0x632/0xcd0 [ 1837.814340] ? __mutex_lock+0x368/0x1190 [ 1837.818579] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1837.820664] vb2_create_bufs+0x332/0x620 [ 1837.828153] Node 0 DMA32 free:17516kB min:35996kB low:44992kB high:53988kB active_anon:55988kB inactive_anon:26352kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1932kB bounce:0kB free_pcp:616kB local_pcp:344kB free_cma:0kB [ 1837.829483] ? mark_held_locks+0xf0/0xf0 [ 1837.833527] lowmem_reserve[]: 0 0 1 1 1 [ 1837.837879] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1837.847233] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.847620] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1837.852108] lowmem_reserve[]: 0 0 0 0 0 [ 1837.856626] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1837.856647] v4l_create_bufs+0xb2/0x160 [ 1837.856664] __video_do_ioctl+0x49a/0xcd0 [ 1837.856683] ? v4l_querycap+0x340/0x340 [ 1837.856702] ? __might_fault+0x192/0x1d0 [ 1837.861107] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:4144kB inactive_anon:285292kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:300kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1837.866477] ? v4l_querycap+0x340/0x340 [ 1837.866492] video_usercopy+0x13f/0xfa0 [ 1837.866510] ? v4l_enumstd+0x60/0x60 [ 1837.866525] ? do_futex+0x171/0x1880 [ 1837.866546] ? mark_held_locks+0xf0/0xf0 [ 1837.866562] ? debug_check_no_obj_freed+0x201/0x490 [ 1837.866583] ? video_usercopy+0xfa0/0xfa0 [ 1837.866593] v4l2_ioctl+0x147/0x1a0 [ 1837.866605] ? video_devdata+0xa0/0xa0 [ 1837.866622] do_vfs_ioctl+0xcdb/0x12e0 [ 1837.872783] lowmem_reserve[]: 0 0 0 0 0 [ 1837.897787] ? lock_downgrade+0x720/0x720 [ 1837.897804] ? check_preemption_disabled+0x41/0x280 [ 1837.897817] ? ioctl_preallocate+0x200/0x200 [ 1837.897835] ? __fget+0x356/0x510 [ 1837.897849] ? do_dup2+0x450/0x450 [ 1837.897864] ? __se_sys_futex+0x298/0x3b0 [ 1837.897884] ksys_ioctl+0x9b/0xc0 [ 1837.897898] __x64_sys_ioctl+0x6f/0xb0 [ 1837.897912] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1837.897925] do_syscall_64+0xf9/0x620 [ 1837.897942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1837.897958] RIP: 0033:0x7fbcd48050a9 [ 1837.905214] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 1837.908124] Code: Bad RIP value. [ 1837.912526] Node 0 DMA32: 1013*4kB (UME) 549*8kB (UME) 227*16kB (ME) 96*32kB (UME) 23*64kB (UM) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17516kB [ 1837.917201] RSP: 002b:00007fbcd2d77168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1837.917213] RAX: ffffffffffffffda RBX: 00007fbcd4924f80 RCX: 00007fbcd48050a9 [ 1837.917220] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1837.917226] RBP: 00007fbcd4860ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1837.917232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1837.917239] R13: 00007ffd122e965f R14: 00007fbcd2d77300 R15: 0000000000022000 [ 1837.926497] Mem-Info: [ 1837.932586] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1837.933749] active_anon:15033 inactive_anon:77911 isolated_anon:0 [ 1837.933749] active_file:21 inactive_file:17 isolated_file:0 [ 1837.933749] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1837.933749] slab_reclaimable:13136 slab_unreclaimable:117931 [ 1837.933749] mapped:22269 shmem:78902 pagetables:558 bounce:0 [ 1837.933749] free:13805 free_pcp:216 free_cma:0 [ 1837.947691] Node 1 Normal: 401*4kB (UME) 357*8kB (UME) 268*16kB (ME) 113*32kB (UME) 48*64kB (UME) 13*128kB (ME) 3*256kB (ME) 0*512kB 1*1024kB (U) 0*2048kB 2*4096kB (U) = 27084kB [ 1837.975517] Node 0 active_anon:55988kB inactive_anon:26352kB active_file:76kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60348kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.975545] Node 1 active_anon:4144kB inactive_anon:285292kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28728kB dirty:0kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1837.975551] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.975579] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1837.975599] Node 0 DMA32 free:17516kB min:35996kB low:44992kB high:53988kB active_anon:55988kB inactive_anon:26352kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1932kB bounce:0kB free_pcp:616kB local_pcp:272kB free_cma:0kB [ 1837.975630] lowmem_reserve[]: 0 0 1 1 1 [ 1837.975648] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1837.975675] lowmem_reserve[]: 0 0 0 0 0 [ 1837.987658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1837.990207] Node 1 Normal free:26836kB min:53876kB low:67344kB high:80812kB active_anon:4144kB inactive_anon:285292kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:300kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1838.026491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.026675] lowmem_reserve[]: 0 0 0 0 0 [ 1838.031862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.035998] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 1838.040278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.044871] Node 0 DMA32: 1013*4kB (UME) 549*8kB (UME) 227*16kB (ME) 96*32kB (UME) 23*64kB (UM) 7*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17516kB [ 1838.044943] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1838.044996] Node 1 Normal: 401*4kB (UME) 357*8kB (UME) 268*16kB (ME) 113*32kB (UME) 48*64kB (UME) 13*128kB (ME) 3*256kB (ME) 0*512kB 1*1024kB (U) 0*2048kB 2*4096kB (U) = 27084kB [ 1838.045070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.053979] 78949 total pagecache pages [ 1838.080599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.093500] 0 pages in swap cache [ 1838.097062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1838.101128] Swap cache stats: add 0, delete 0, find 0/0 [ 1838.106307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1838.106314] 78949 total pagecache pages [ 1838.106327] 0 pages in swap cache [ 1838.106335] Swap cache stats: add 0, delete 0, find 0/0 [ 1838.106340] Free swap = 0kB [ 1838.106346] Total swap = 0kB [ 1838.106355] 2097051 pages RAM [ 1838.106360] 0 pages HighMem/MovableOnly [ 1838.106364] 369649 pages reserved [ 1838.106369] 0 pages cma reserved [ 1838.799000] Free swap = 0kB [ 1838.803568] Total swap = 0kB [ 1838.807390] 2097051 pages RAM [ 1838.810867] 0 pages HighMem/MovableOnly [ 1838.814940] 369649 pages reserved [ 1838.818393] 0 pages cma reserved [ 1838.821946] Unreclaimable slab info: [ 1838.827954] Name Used Total [ 1838.833739] pid_2 19KB 40KB [ 1838.841925] batadv_tt_change_cache 3KB 7KB [ 1838.848892] batadv_tl_cache 8KB 16KB [ 1838.854635] TIPC 15KB 37KB [ 1838.861540] SCTPv6 22KB 30KB [ 1838.868118] DCCPv6 17KB 30KB [ 1838.877463] DCCP 16KB 28KB [ 1838.884444] RXRPC 16KB 39KB [ 1838.890897] rxrpc_call_jar 112KB 141KB [ 1838.899630] bridge_fdb_cache 15KB 27KB [ 1838.907115] fib6_nodes 257KB 280KB [ 1838.918320] ip6_dst_cache 664KB 708KB [ 1838.925225] RAWv6 111KB 114KB [ 1838.931493] UDPv6 39KB 45KB [ 1838.943518] TCPv6 30KB 42KB [ 1838.949947] nf_conntrack 16KB 18KB [ 1838.956306] t10_alua_lu_gp_cache 0KB 3KB [ 1838.968568] sd_ext_cdb 0KB 7KB [ 1838.974378] scsi_sense_cache 1056KB 1060KB [ 1838.980443] virtio_scsi_cmd 16KB 16KB [ 1838.990143] sgpool-128 8KB 8KB [ 1838.997161] sgpool-64 4KB 12KB [ 1839.007548] sgpool-32 2KB 15KB [ 1839.013190] sgpool-16 1KB 7KB [ 1839.019031] sgpool-8 0KB 7KB [ 1839.024824] mqueue_inode_cache 13KB 37KB [ 1839.030554] bio_post_read_ctx 14KB 15KB [ 1839.036178] bio-2 14KB 15KB [ 1839.041863] jfs_mp 7KB 7KB [ 1839.049827] cifs_small_rq 15KB 16KB [ 1839.055618] cifs_request 67KB 67KB [ 1839.061763] cifs_mpx_ids 0KB 7KB [ 1839.067487] nfs_commit_data 3KB 14KB [ 1839.075140] nfs_write_data 34KB 44KB [ 1839.080564] ext4_system_zone 1KB 7KB [ 1839.086880] bio-1 1KB 7KB [ 1839.093707] pid_namespace 2KB 11KB [ 1839.099891] rpc_buffers 17KB 25KB [ 1839.106716] rpc_tasks 2KB 7KB [ 1839.113777] UNIX 1946KB 2040KB [ 1839.120697] tcp_bind_bucket 1KB 4KB [ 1839.126660] ip_fib_trie 37KB 47KB [ 1839.133613] ip_fib_alias 181KB 201KB [ 1839.139967] ip_dst_cache 17KB 28KB [ 1839.145659] RAW 66KB 82KB [ 1839.153314] UDP 60KB 81KB [ 1839.161909] TCP 25KB 28KB [ 1839.168917] hugetlbfs_inode_cache 3KB 15KB [ 1839.175252] fscache_cookie_jar 1KB 7KB [ 1839.181396] eventpoll_pwq 26KB 55KB [ 1839.188029] eventpoll_epi 49KB 66KB [ 1839.195416] inotify_inode_mark 12KB 23KB [ 1839.201604] request_queue 199KB 199KB [ 1839.208039] blkdev_requests 1KB 3KB [ 1839.213770] blkdev_ioc 15KB 38KB [ 1839.219326] bio-0 295KB 585KB [ 1839.225185] biovec-max 1386KB 1534KB [ 1839.231392] biovec-64 379KB 669KB [ 1839.237966] biovec-16 92KB 138KB [ 1839.244396] bio_integrity_payload 1KB 8KB [ 1839.252334] khugepaged_mm_slot 4KB 23KB [ 1839.258295] uid_cache 0KB 4KB [ 1839.263857] dmaengine-unmap-2 0KB 3KB [ 1839.269600] skbuff_fclone_cache 60KB 71KB [ 1839.275635] skbuff_head_cache 7972KB 9498KB [ 1839.281605] configfs_dir_cache 3KB 7KB [ 1839.288042] file_lock_cache 30KB 47KB [ 1839.294324] file_lock_ctx 9KB 15KB [ 1839.299709] fsnotify_mark_connector 6KB 11KB [ 1839.305692] net_namespace 87KB 87KB [ 1839.311342] shmem_inode_cache 8093KB 8127KB [ 1839.317472] task_delay_info 267KB 359KB [ 1839.322846] taskstats 25KB 45KB [ 1839.328555] proc_dir_entry 948KB 978KB [ 1839.334090] pde_opener 18KB 46KB [ 1839.339469] seq_file 205KB 381KB [ 1839.346684] sigqueue 36KB 70KB [ 1839.354072] kernfs_node_cache 18236KB 18896KB [ 1839.359636] mnt_cache 213KB 236KB [ 1839.365107] filp 7347KB 8696KB [ 1839.371453] names_cache 109981KB 110041KB [ 1839.378319] iint_cache 23KB 51KB [ 1839.384705] key_jar 4KB 11KB [ 1839.391281] uts_namespace 3KB 11KB [ 1839.413045] nsproxy 2KB 11KB [ 1839.418456] vm_area_struct 3025KB 3329KB [ 1839.433278] mm_struct 508KB 526KB [ 1839.438668] fs_cache 307KB 328KB [ 1839.454479] files_cache 1105KB 1128KB [ 1839.461360] signal_cache 2044KB 2070KB [ 1839.483071] sighand_cache 552KB 624KB [ 1839.488584] task_struct 9361KB 9449KB [ 1839.503073] cred_jar 2345KB 2812KB [ 1839.508512] anon_vma_chain 949KB 1488KB [ 1839.514728] anon_vma 138KB 292KB [ 1839.520282] pid 172KB 236KB [ 1839.543072] Acpi-Operand 156KB 198KB [ 1839.549288] Acpi-ParseExt 8KB 11KB [ 1839.563245] Acpi-Parse 41KB 47KB [ 1839.569816] Acpi-State 52KB 63KB [ 1839.603056] Acpi-Namespace 20KB 27KB [ 1839.608582] numa_policy 0KB 3KB [ 1839.614604] debug_objects_cache 1842KB 1883KB [ 1839.620249] trace_event_file 297KB 298KB [ 1839.637150] ftrace_event_field 398KB 401KB [ 1839.646427] pool_workqueue 143KB 152KB [ 1839.654745] page->ptl 473KB 956KB [ 1839.662040] kmalloc-2097152 2050KB 2050KB [ 1839.668695] kmalloc-524288 2056KB 2056KB [ 1839.675166] kmalloc-262144 1290KB 1290KB [ 1839.680595] kmalloc-131072 650KB 650KB [ 1839.687734] kmalloc-65536 2904KB 2970KB [ 1839.694214] kmalloc-32768 2277KB 2277KB [ 1839.699720] kmalloc-16384 1336KB 1419KB [ 1839.706582] kmalloc-8192 5733KB 5799KB [ 1839.712602] kmalloc-4096 30332KB 30391KB [ 1839.719608] kmalloc-2048 18642KB 18742KB [ 1839.725984] kmalloc-1024 14223KB 14844KB [ 1839.732781] kmalloc-512 14715KB 17471KB [ 1839.739487] kmalloc-256 5965KB 6150KB [ 1839.746616] kmalloc-128 1408KB 1590KB [ 1839.752199] kmalloc-96 3210KB 4368KB [ 1839.759225] kmalloc-64 2845KB 3812KB [ 1839.767340] kmalloc-32 2008KB 2512KB [ 1839.773715] kmalloc-192 2335KB 2884KB [ 1839.779101] kmem_cache 177KB 183KB [ 1839.786068] Out of memory (oom_kill_allocating_task): Kill process 23146 (in:imklog) score 0 or sacrifice child [ 1839.797481] Killed process 23144 (rsyslogd) total-vm:254332kB, anon-rss:700kB, file-rss:0kB, shmem-rss:0kB [ 1839.811017] oom_reaper: reaped process 23144 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:54:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:47 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$AUDIT_USER(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3ed, 0x1, 0x70bd2a, 0x25dfdbfd, "132c1ab4e4036387d8707419426370", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xa010) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000000000000000000000000002f4365762f76696d306d0000bce3220837a4b19ed4bc2711f2419ae3851800904741f1d7612683b7f68c8f5eaead88586113ce05a6a6591b8d20c2f9e74163d98accae4a8c9cd3811d8a74ee41a981b7aec023ace000"/117], 0x2c) 14:54:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x6}) 14:54:47 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:47 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x9, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x86e4f84b5030a128, 0x9, 0x4, 0x1f, 0x40, @empty, @mcast1, 0x40, 0x700, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x20, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x0, 0x6, 0x60, @local, @local, 0x1, 0x7800, 0xfff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0x1, 0x10001, 0x6, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x6, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x5fe9e4f08d356a95, 0x700, 0x9, 0x0, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xf7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)={0x614, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x28f, 0x80, 0x8, 0xc8}, {0x2, 0x2}, {0xfe51, 0x1e, 0x20, 0x8001}, {0x0, 0xb8, 0x40, 0x2}, {0x80e, 0x1, 0x2, 0x7fffffff}, {0x1ff, 0xf8, 0x1, 0x4}, {0x4, 0xf7, 0x98, 0x9}, {0x3, 0xf0, 0x3, 0x2}, {0x3, 0x0, 0x6, 0x1}, {0x0, 0x3f, 0x3f, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_receive\x00', r0}, 0x10) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000c00)=""/169) 14:54:47 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:47 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$AUDIT_USER(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3ed, 0x1, 0x70bd2a, 0x25dfdbfd, "132c1ab4e4036387d8707419426370", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xa010) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000000000000000000000000002f4365762f76696d306d0000bce3220837a4b19ed4bc2711f2419ae3851800904741f1d7612683b7f68c8f5eaead88586113ce05a6a6591b8d20c2f9e74163d98accae4a8c9cd3811d8a74ee41a981b7aec023ace000"/117], 0x2c) 14:54:47 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x9, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x9, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x86e4f84b5030a128, 0x9, 0x4, 0x1f, 0x40, @empty, @mcast1, 0x40, 0x700, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x20, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x0, 0x6, 0x60, @local, @local, 0x1, 0x7800, 0xfff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0x1, 0x10001, 0x6, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x6, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x5fe9e4f08d356a95, 0x700, 0x9, 0x0, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xf7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)={0x614, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x28f, 0x80, 0x8, 0xc8}, {0x2, 0x2}, {0xfe51, 0x1e, 0x20, 0x8001}, {0x0, 0xb8, 0x40, 0x2}, {0x80e, 0x1, 0x2, 0x7fffffff}, {0x1ff, 0xf8, 0x1, 0x4}, {0x4, 0xf7, 0x98, 0x9}, {0x3, 0xf0, 0x3, 0x2}, {0x3, 0x0, 0x6, 0x1}, {0x0, 0x3f, 0x3f, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_receive\x00', r0}, 0x10) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000c00)=""/169) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x9, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x9, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x86e4f84b5030a128, 0x9, 0x4, 0x1f, 0x40, @empty, @mcast1, 0x40, 0x700, 0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x20, 0x2, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x0, 0x6, 0x60, @local, @local, 0x1, 0x7800, 0xfff, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0x1, 0x10001, 0x6, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x6, 0x7}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x5fe9e4f08d356a95, 0x700, 0x9, 0x0, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xf7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end]}}}}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)={0x614, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x28f, 0x80, 0x8, 0xc8}, {0x2, 0x2}, {0xfe51, 0x1e, 0x20, 0x8001}, {0x0, 0xb8, 0x40, 0x2}, {0x80e, 0x1, 0x2, 0x7fffffff}, {0x1ff, 0xf8, 0x1, 0x4}, {0x4, 0xf7, 0x98, 0x9}, {0x3, 0xf0, 0x3, 0x2}, {0x3, 0x0, 0x6, 0x1}, {0x0, 0x3f, 0x3f, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_receive\x00', r0}, 0x10) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000c00)=""/169) (async) 14:54:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x6}) 14:54:47 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000023c0)={0x0, 0x200, 0x2, {0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 14:54:47 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x9, 0x5, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x9, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x86e4f84b5030a128, 0x9, 0x4, 0x1f, 0x40, @empty, @mcast1, 0x40, 0x700, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0x4, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x20, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x0, 0x6, 0x60, @local, @local, 0x1, 0x7800, 0xfff, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xfc, 0x1, 0x10001, 0x6, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x6, 0x7}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x5fe9e4f08d356a95, 0x700, 0x9, 0x0, {{0x6, 0x4, 0x3, 0x5, 0x18, 0x68, 0x0, 0xf7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)={0x614, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x28f, 0x80, 0x8, 0xc8}, {0x2, 0x2}, {0xfe51, 0x1e, 0x20, 0x8001}, {0x0, 0xb8, 0x40, 0x2}, {0x80e, 0x1, 0x2, 0x7fffffff}, {0x1ff, 0xf8, 0x1, 0x4}, {0x4, 0xf7, 0x98, 0x9}, {0x3, 0xf0, 0x3, 0x2}, {0x3, 0x0, 0x6, 0x1}, {0x0, 0x3f, 0x3f, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x96}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rxrpc_receive\x00', r0}, 0x10) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000c00)=""/169) 14:54:47 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$AUDIT_USER(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3ed, 0x1, 0x70bd2a, 0x25dfdbfd, "132c1ab4e4036387d8707419426370", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0xa010) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000000000000000000000000002f4365762f76696d306d0000bce3220837a4b19ed4bc2711f2419ae3851800904741f1d7612683b7f68c8f5eaead88586113ce05a6a6591b8d20c2f9e74163d98accae4a8c9cd3811d8a74ee41a981b7aec023ace000"/117], 0x2c) 14:54:47 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0x0, 0x0, {0x2}}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f00000021c0), 0xca85, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000023c0)={0x1000, 0x200, 0x2, {0x3, @win={{0x1, 0x1, 0x8, 0x8}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:47 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:47 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:54:48 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}], 0xc6, 0x0, &(0x7f0000000040)="a17d2f4fa48a87cac4fb713d0843d75ec2d9ca279e48c698921824a2e2835edae5d140070b5c8b9f6c0d258c2e302946030490ddabc7a4133a6e5356d4a2c4f4d5f780a0be5997dbaf21756614bcacc9d2cd266f7f47397b89cc03d1a29a6130896fb9c17c023e68591897201ecc8bfbf4f8b0aec5a11ec5bcbf2568e9abae8738c15e79c4cb5e3748f62cbb20d98d0b1b4384b6358ca10fe72660eb727fd9cec6619941ee7fe0f34cd7a199b0a8ae58aaa449a7ef3a23936c930448de075c76e9ce0afff448"}) 14:54:48 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) 14:54:48 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:48 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_WRITE(r0, &(0x7f0000002140)={0x18, 0x0, 0x0, {0x2}}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000023c0)={0x1000, 0x200, 0x2, {0x3, @win={{0x1, 0x1, 0x8, 0x8}, 0x5, 0x9, &(0x7f0000002280)={{0x3, 0x2, 0x3, 0xfffffff9}, &(0x7f0000002240)={{0x35a3, 0x8, 0x10001, 0x6}, &(0x7f0000002200)={{0xb43, 0x4, 0x7, 0x9}}}}, 0x10000, &(0x7f00000022c0)="0227bec1a9caec66283304c51f24d987353592cd7c14037c5d6c9dd74d03543de4514bb178865d2048a4d92120e375a482df5f7e81ff073e908830e7163f6a4bfdbd200d48799fdabe086e48831f407e5e722d5c66a1b69c31d021a2ddc2b5735bce24b429bfe1cc2b036e7736c0b79c5e2ab56d7243e91071bddcda9eeecadc48f1e3fd3899037b41bba66745bf20d692ab5ff77c99ce9e7c50c03f5db7f26793e22f810894a9c1c8fb0f2c408490f5569788091d85f9036850f568f59c0729647a30c7ebb52c555bb82c2b684ac87a", 0x6}}, 0x6}) 14:54:48 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:54:48 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) socket$inet6_udp(0xa, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:54:48 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}], 0xc6, 0x0, &(0x7f0000000040)="a17d2f4fa48a87cac4fb713d0843d75ec2d9ca279e48c698921824a2e2835edae5d140070b5c8b9f6c0d258c2e302946030490ddabc7a4133a6e5356d4a2c4f4d5f780a0be5997dbaf21756614bcacc9d2cd266f7f47397b89cc03d1a29a6130896fb9c17c023e68591897201ecc8bfbf4f8b0aec5a11ec5bcbf2568e9abae8738c15e79c4cb5e3748f62cbb20d98d0b1b4384b6358ca10fe72660eb727fd9cec6619941ee7fe0f34cd7a199b0a8ae58aaa449a7ef3a23936c930448de075c76e9ce0afff448"}) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}], 0xc6, 0x0, &(0x7f0000000040)="a17d2f4fa48a87cac4fb713d0843d75ec2d9ca279e48c698921824a2e2835edae5d140070b5c8b9f6c0d258c2e302946030490ddabc7a4133a6e5356d4a2c4f4d5f780a0be5997dbaf21756614bcacc9d2cd266f7f47397b89cc03d1a29a6130896fb9c17c023e68591897201ecc8bfbf4f8b0aec5a11ec5bcbf2568e9abae8738c15e79c4cb5e3748f62cbb20d98d0b1b4384b6358ca10fe72660eb727fd9cec6619941ee7fe0f34cd7a199b0a8ae58aaa449a7ef3a23936c930448de075c76e9ce0afff448"}) (async) 14:54:48 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x6, 0x7, 0x400, 0x61, r0, 0xffff8000, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x9b1, 0x1, &(0x7f0000000000)=""/1, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x100000, 0xbbad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r0, r0, r2, 0xffffffffffffffff, r0, r0, r3, r0]}, 0xac) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000440)=""/148, 0x94, &(0x7f00000005c0)={&(0x7f0000000500)={'sha3-512-ce\x00'}, &(0x7f0000000540)="6d418d2a26f47700ecf3c15dfbfd9f8af4e5baa5702a29979d92f00f1344a833f28eb24559033e35fb9fc1bdb4ef202217c9ebd1785a7f5958034fc04d3b862b3f06339d04c3f5213da7e5af99fe103e7b223625aaab9147fb28f28e503e98f4a91224f5c28205529a5df3ba91ea249b29ba", 0x72}) 14:54:48 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) (rerun: 32) 14:54:48 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:48 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}], 0xc6, 0x0, &(0x7f0000000040)="a17d2f4fa48a87cac4fb713d0843d75ec2d9ca279e48c698921824a2e2835edae5d140070b5c8b9f6c0d258c2e302946030490ddabc7a4133a6e5356d4a2c4f4d5f780a0be5997dbaf21756614bcacc9d2cd266f7f47397b89cc03d1a29a6130896fb9c17c023e68591897201ecc8bfbf4f8b0aec5a11ec5bcbf2568e9abae8738c15e79c4cb5e3748f62cbb20d98d0b1b4384b6358ca10fe72660eb727fd9cec6619941ee7fe0f34cd7a199b0a8ae58aaa449a7ef3a23936c930448de075c76e9ce0afff448"}) 14:54:48 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x2c) 14:54:48 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) 14:54:49 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000200)) 14:54:49 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x2c) 14:54:49 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x6, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:54:49 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f0000000100)) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x2c) 14:54:49 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x6, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x4}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:54:49 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000200)) 14:54:49 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) 14:54:49 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0), 0x10, &(0x7f0000001380)={&(0x7f0000001300)={0x3, 0x80ca6e2dcf7a0606, 0x8540, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "a0fa9c4bd53493e9e54f758903f35adba7b158f05e3441f6e417c443efe9b7ad402b5294850da9ffba46fc0818855d99b1f52779c6ea7a01bc37dedca54d4eea"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0xfffffffffffffffb, 0x1000, 0x40, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}]}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/53, 0x4, 0x10, 0x2, &(0x7f0000001200)}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) 14:54:49 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:49 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x6, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x6, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x2, 0x4}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:54:49 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000200)) 14:54:49 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) 14:54:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) 14:54:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) read$FUSE(r0, 0x0, 0x0) 14:54:50 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0), 0x10, &(0x7f0000001380)={&(0x7f0000001300)={0x3, 0x80ca6e2dcf7a0606, 0x8540, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "a0fa9c4bd53493e9e54f758903f35adba7b158f05e3441f6e417c443efe9b7ad402b5294850da9ffba46fc0818855d99b1f52779c6ea7a01bc37dedca54d4eea"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0xfffffffffffffffb, 0x1000, 0x40, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}]}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/53, 0x4, 0x10, 0x2, &(0x7f0000001200)}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0), 0x10, &(0x7f0000001380)={&(0x7f0000001300)={0x3, 0x80ca6e2dcf7a0606, 0x8540, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "a0fa9c4bd53493e9e54f758903f35adba7b158f05e3441f6e417c443efe9b7ad402b5294850da9ffba46fc0818855d99b1f52779c6ea7a01bc37dedca54d4eea"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0xfffffffffffffffb, 0x1000, 0x40, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}]}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/53, 0x4, 0x10, 0x2, &(0x7f0000001200)}) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) (async) 14:54:50 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x1}, 0x10) fstat(r1, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:54:50 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) 14:54:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x6, 0x7, 0x400, 0x61, r0, 0xffff8000, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x9b1, 0x1, &(0x7f0000000000)=""/1, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x100000, 0xbbad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r0, r0, r2, 0xffffffffffffffff, r0, r0, r3, r0]}, 0xac) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f00000003c0)) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r5}, &(0x7f0000000440)=""/148, 0x94, &(0x7f00000005c0)={&(0x7f0000000500)={'sha3-512-ce\x00'}, &(0x7f0000000540)="6d418d2a26f47700ecf3c15dfbfd9f8af4e5baa5702a29979d92f00f1344a833f28eb24559033e35fb9fc1bdb4ef202217c9ebd1785a7f5958034fc04d3b862b3f06339d04c3f5213da7e5af99fe103e7b223625aaab9147fb28f28e503e98f4a91224f5c28205529a5df3ba91ea249b29ba", 0x72}) 14:54:50 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:50 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0), 0x10, &(0x7f0000001380)={&(0x7f0000001300)={0x3, 0x80ca6e2dcf7a0606, 0x8540, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "a0fa9c4bd53493e9e54f758903f35adba7b158f05e3441f6e417c443efe9b7ad402b5294850da9ffba46fc0818855d99b1f52779c6ea7a01bc37dedca54d4eea"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0xfffffffffffffffb, 0x1000, 0x40, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}]}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/53, 0x4, 0x10, 0x2, &(0x7f0000001200)}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0), 0x10, &(0x7f0000001380)={&(0x7f0000001300)={0x3, 0x80ca6e2dcf7a0606, 0x8540, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "a0fa9c4bd53493e9e54f758903f35adba7b158f05e3441f6e417c443efe9b7ad402b5294850da9ffba46fc0818855d99b1f52779c6ea7a01bc37dedca54d4eea"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001240)={0x53, 0xfffffffffffffffb, 0x1000, 0x40, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/174, 0xae}]}, &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/53, 0x4, 0x10, 0x2, &(0x7f0000001200)}) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000000c0)) (async) 14:54:50 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x1}, 0x10) fstat(r1, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x1}, 0x10) (async) fstat(r1, &(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:54:50 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) 14:54:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x6, 0x7, 0x400, 0x61, r0, 0xffff8000, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x9b1, 0x1, &(0x7f0000000000)=""/1, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x100000, 0xbbad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r0, r0, r2, 0xffffffffffffffff, r0, r0, r3, r0]}, 0xac) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f00000003c0)) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r5}, &(0x7f0000000440)=""/148, 0x94, &(0x7f00000005c0)={&(0x7f0000000500)={'sha3-512-ce\x00'}, &(0x7f0000000540)="6d418d2a26f47700ecf3c15dfbfd9f8af4e5baa5702a29979d92f00f1344a833f28eb24559033e35fb9fc1bdb4ef202217c9ebd1785a7f5958034fc04d3b862b3f06339d04c3f5213da7e5af99fe103e7b223625aaab9147fb28f28e503e98f4a91224f5c28205529a5df3ba91ea249b29ba", 0x72}) 14:54:50 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x1}, 0x10) fstat(r1, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:54:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x6, 0x7, 0x400, 0x61, r0, 0xffff8000, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x9b1, 0x1, &(0x7f0000000000)=""/1, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x100000, 0xbbad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r0, r0, r2, 0xffffffffffffffff, r0, r0, r3, r0]}, 0xac) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f00000003c0)) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, 0x0, r5}, &(0x7f0000000440)=""/148, 0x94, &(0x7f00000005c0)={&(0x7f0000000500)={'sha3-512-ce\x00'}, &(0x7f0000000540)="6d418d2a26f47700ecf3c15dfbfd9f8af4e5baa5702a29979d92f00f1344a833f28eb24559033e35fb9fc1bdb4ef202217c9ebd1785a7f5958034fc04d3b862b3f06339d04c3f5213da7e5af99fe103e7b223625aaab9147fb28f28e503e98f4a91224f5c28205529a5df3ba91ea249b29ba", 0x72}) 14:54:50 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 14:54:50 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 2: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x849256cb1bf8b2e8}, 0x10) 14:54:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x1953cc051c9959cf, r1, {0x6}}, 0x18) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x242040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='jbd2_handle_stats\x00', r2}, 0x10) 14:54:51 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) 14:54:51 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x40000, 0xb, 0x0, '\x00\x00\xc8t\xfc\x89?\t\xc6#\x00'}}, 0xfefb) 14:54:51 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x21}, 0x21) (async) 14:54:51 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x1953cc051c9959cf, r1, {0x6}}, 0x18) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x242040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='jbd2_handle_stats\x00', r2}, 0x10) 14:54:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848}, {0x1e}]}}, 0x3}) 14:54:51 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000f0ffffffffffffff0000000000000000000b000000000000002f6465762f7669326d0000"], 0x2c) 14:54:51 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0xfffffdef) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:54:51 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000f0ffffffffffffff0000000000000000000b000000000000002f6465762f7669326d0000"], 0x2c) 14:54:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x1953cc051c9959cf, r1, {0x6}}, 0x18) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x242040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='jbd2_handle_stats\x00', r2}, 0x10) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@local, 0x10001}, @any, 0x3, 0x7f, 0x81, 0x4000, 0x9, 0xd8, 0x2}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x4, r3}, 0x10) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:54:51 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) [ 1852.723683] oom_reaper: reaped process 24712 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1852.765371] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1852.779424] systemd-journal cpuset=/ mems_allowed=0-1 [ 1852.789848] CPU: 0 PID: 23236 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1852.798858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1852.808403] Call Trace: [ 1852.811034] dump_stack+0x1fc/0x2ef [ 1852.814852] dump_header+0x15d/0xc3f [ 1852.818732] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1852.823840] ? ___ratelimit+0x319/0x590 [ 1852.827803] oom_kill_process.cold+0x10/0x692 [ 1852.832531] syz-executor.2: vmalloc: allocation failure, allocated 1676541952 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1852.832839] ? check_preemption_disabled+0x41/0x280 [ 1852.846779] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1852.852781] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1852.852796] out_of_memory+0x1072/0x1390 [ 1852.852825] ? oom_killer_disable+0x270/0x270 [ 1852.852841] ? mutex_trylock+0x15f/0x1a0 [ 1852.852858] __alloc_pages_nodemask+0x23a2/0x2890 [ 1852.852878] ? find_get_entry+0x4cd/0x8a0 [ 1852.891273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1852.899735] alloc_pages_current+0x193/0x2a0 [ 1852.904758] filemap_fault+0x146e/0x2180 [ 1852.910064] ext4_filemap_fault+0x84/0xb0 [ 1852.915069] __do_fault+0x10b/0x4b0 [ 1852.918733] __handle_mm_fault+0x273b/0x41c0 [ 1852.924123] ? vm_insert_page+0x9c0/0x9c0 [ 1852.928457] ? check_preemption_disabled+0x41/0x280 [ 1852.934568] handle_mm_fault+0x436/0xb10 [ 1852.940364] __do_page_fault+0x68e/0xd60 [ 1852.945727] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1852.951257] ? spurious_fault+0x840/0x840 [ 1852.955675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1852.961599] ? page_fault+0x8/0x30 [ 1852.965750] page_fault+0x1e/0x30 [ 1852.969243] RIP: 0033:0x7f59e7e262e3 [ 1852.973145] Code: Bad RIP value. [ 1852.976518] RSP: 002b:00007ffd851e0438 EFLAGS: 00010246 [ 1852.982220] RAX: 0000000000000001 RBX: 0000559e0c7b81e0 RCX: 00007f59e7e262e3 [ 1852.989515] RDX: 0000000000000013 RSI: 00007ffd851e0440 RDI: 000000000000000c [ 1852.997055] RBP: 00007ffd851e0630 R08: 00007ffd851e8000 R09: 000001d873cdc52a [ 1853.005292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd851e0440 [ 1853.012756] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f13503f1c02f [ 1853.021867] CPU: 1 PID: 24712 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1853.030056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1853.035968] Mem-Info: [ 1853.041800] Call Trace: [ 1853.041828] dump_stack+0x1fc/0x2ef [ 1853.044647] active_anon:15253 inactive_anon:77911 isolated_anon:0 [ 1853.044647] active_file:41 inactive_file:0 isolated_file:0 [ 1853.044647] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1853.044647] slab_reclaimable:13553 slab_unreclaimable:117785 [ 1853.044647] mapped:22338 shmem:78902 pagetables:556 bounce:0 [ 1853.044647] free:13836 free_pcp:329 free_cma:0 [ 1853.047645] warn_alloc.cold+0x7b/0x18f [ 1853.051297] Node 0 active_anon:57124kB inactive_anon:26352kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60384kB dirty:64kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1853.086939] ? zone_watermark_ok_safe+0x260/0x260 [ 1853.086973] __vmalloc_area_node+0x4fd/0x780 [ 1853.086993] ? __vmalloc_node_range+0x180/0x180 [ 1853.090992] Node 1 active_anon:3888kB inactive_anon:285292kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28968kB dirty:12kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1853.119719] ? _raw_spin_unlock+0x29/0x40 [ 1853.119735] ? __get_vm_area_node+0x2e2/0x3a0 [ 1853.119752] __vmalloc_node_range+0xed/0x180 [ 1853.119774] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1853.127438] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.133946] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1853.133960] vmalloc_user+0x70/0xe0 [ 1853.133975] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1853.133988] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1853.134003] __vb2_queue_alloc+0x472/0xe60 [ 1853.142243] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1853.180016] vb2_core_create_bufs+0x273/0x7e0 [ 1853.180032] ? __vb2_queue_free+0x870/0x870 [ 1853.180046] ? __video_do_ioctl+0x632/0xcd0 [ 1853.180074] ? pi_state_update_owner+0x450/0x450 [ 1853.187100] Node 0 DMA32 free:17596kB min:35996kB low:44992kB high:53988kB active_anon:57124kB inactive_anon:26352kB active_file:136kB inactive_file:36kB unevictable:0kB writepending:264kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1984kB bounce:0kB free_pcp:820kB local_pcp:348kB free_cma:0kB [ 1853.192195] ? __mutex_lock+0x368/0x1190 [ 1853.197517] lowmem_reserve[]: 0 0 1 1 1 [ 1853.202067] vb2_create_bufs+0x332/0x620 [ 1853.242266] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.242819] ? mark_held_locks+0xf0/0xf0 [ 1853.246977] lowmem_reserve[]: 0 0 0 0 0 [ 1853.251527] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1853.257280] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:3888kB inactive_anon:285292kB active_file:44kB inactive_file:84kB unevictable:0kB writepending:12kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1853.261423] ? futex_wait_queue_me+0x404/0x5e0 [ 1853.265794] lowmem_reserve[]: 0 0 0 0 0 [ 1853.270098] ? pi_state_update_owner+0x450/0x450 [ 1853.275063] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1853.305642] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1853.305663] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1853.305684] v4l_create_bufs+0xb2/0x160 [ 1853.305702] __video_do_ioctl+0x49a/0xcd0 [ 1853.305721] ? v4l_querycap+0x340/0x340 [ 1853.310263] Node 0 DMA32: 715*4kB (UME) 580*8kB (UME) 232*16kB (UME) 87*32kB (UME) 21*64kB (M) 11*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17772kB [ 1853.314941] ? __might_fault+0x192/0x1d0 [ 1853.314961] ? v4l_querycap+0x340/0x340 [ 1853.314975] video_usercopy+0x13f/0xfa0 [ 1853.315000] ? v4l_enumstd+0x60/0x60 [ 1853.319527] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1853.346807] ? do_futex+0x171/0x1880 [ 1853.346823] ? mark_held_locks+0xf0/0xf0 [ 1853.346840] ? debug_check_no_obj_freed+0x201/0x490 [ 1853.346864] ? video_usercopy+0xfa0/0xfa0 [ 1853.351077] Node 1 Normal: 367*4kB (ME) 336*8kB (ME) 248*16kB (ME) 116*32kB (UME) 59*64kB (ME) 14*128kB (UME) 3*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 2*4096kB (U) = 26876kB [ 1853.355211] v4l2_ioctl+0x147/0x1a0 [ 1853.355225] ? video_devdata+0xa0/0xa0 [ 1853.355242] do_vfs_ioctl+0xcdb/0x12e0 [ 1853.355259] ? lock_downgrade+0x720/0x720 [ 1853.360545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1853.390640] ? check_preemption_disabled+0x41/0x280 [ 1853.390657] ? ioctl_preallocate+0x200/0x200 [ 1853.390673] ? __fget+0x356/0x510 [ 1853.390692] ? do_dup2+0x450/0x450 [ 1853.395287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1853.399722] ? __se_sys_futex+0x298/0x3b0 [ 1853.405307] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1853.418607] ksys_ioctl+0x9b/0xc0 [ 1853.418625] __x64_sys_ioctl+0x6f/0xb0 [ 1853.418640] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1853.418657] do_syscall_64+0xf9/0x620 [ 1853.423993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1853.429128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1853.433242] 78980 total pagecache pages [ 1853.437436] RIP: 0033:0x7fb845ed20a9 [ 1853.441488] 0 pages in swap cache [ 1853.441502] Swap cache stats: add 0, delete 0, find 0/0 [ 1853.457146] Code: Bad RIP value. [ 1853.457156] RSP: 002b:00007fb844444168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1853.457167] RAX: ffffffffffffffda RBX: 00007fb845ff1f80 RCX: 00007fb845ed20a9 [ 1853.457174] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1853.457181] RBP: 00007fb845f2dae9 R08: 0000000000000000 R09: 0000000000000000 [ 1853.457188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.457195] R13: 00007ffe136913df R14: 00007fb844444300 R15: 0000000000022000 [ 1853.496498] Mem-Info: [ 1853.500636] Free swap = 0kB [ 1853.519148] active_anon:15234 inactive_anon:77911 isolated_anon:0 [ 1853.519148] active_file:15 inactive_file:13 isolated_file:0 [ 1853.519148] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1853.519148] slab_reclaimable:13553 slab_unreclaimable:117773 [ 1853.519148] mapped:22292 shmem:78902 pagetables:556 bounce:0 [ 1853.519148] free:13880 free_pcp:331 free_cma:0 [ 1853.520451] Total swap = 0kB [ 1853.529071] Node 0 active_anon:57044kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1853.532123] 2097051 pages RAM [ 1853.552741] Node 1 active_anon:3892kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28864kB dirty:0kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1853.555963] 0 pages HighMem/MovableOnly [ 1853.559526] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.563208] 369649 pages reserved [ 1853.591602] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1853.592969] 0 pages cma reserved [ 1853.592977] Unreclaimable slab info: [ 1853.592982] Name Used Total [ 1853.592995] pid_2 40KB 44KB [ 1853.593068] batadv_tt_change_cache 3KB 7KB [ 1853.597652] Node 0 DMA32 free:17772kB min:35996kB low:44992kB high:53988kB active_anon:57044kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1984kB bounce:0kB free_pcp:828kB local_pcp:480kB free_cma:0kB [ 1853.601838] batadv_tl_cache 7KB 16KB [ 1853.617372] lowmem_reserve[]: 0 0 1 1 1 [ 1853.630684] TIPC 15KB 37KB [ 1853.640411] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.661044] SCTPv6 20KB 30KB [ 1853.668286] lowmem_reserve[]: 0 0 0 0 0 [ 1853.668315] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:3892kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 1853.668345] lowmem_reserve[]: 0 0 0 0 0 [ 1853.668361] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1853.697334] DCCPv6 17KB 30KB [ 1853.732745] Node 0 DMA32: 715*4kB (UME) 584*8kB (UME) 232*16kB (UME) 88*32kB (UME) 21*64kB (M) 11*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17836kB [ 1853.774821] DCCP 16KB 28KB [ 1853.797982] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1853.838289] RXRPC 35KB 45KB [ 1853.838368] Node 1 Normal: 367*4kB (ME) 336*8kB (ME) 248*16kB (ME) 116*32kB (UME) 59*64kB (ME) 14*128kB (UME) 3*256kB (ME) 1*512kB (U) 0*1024kB 0*2048kB 2*4096kB (U) = 26876kB [ 1853.848203] rxrpc_call_jar 112KB 141KB [ 1853.852458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1853.862685] bridge_fdb_cache 14KB 27KB [ 1853.890076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1853.900439] fib6_nodes 239KB 280KB [ 1853.902250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1853.936949] ip6_dst_cache 720KB 723KB [ 1853.942159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1853.978391] RAWv6 111KB 114KB [ 1853.990808] 78930 total pagecache pages [ 1853.991697] UDPv6 166KB 172KB [ 1854.013897] 0 pages in swap cache [ 1854.037430] TCPv6 36KB 48KB [ 1854.053918] Swap cache stats: add 0, delete 0, find 0/0 [ 1854.071069] nf_conntrack 18KB 18KB [ 1854.079183] Free swap = 0kB [ 1854.080020] t10_alua_lu_gp_cache 0KB 3KB [ 1854.089621] Total swap = 0kB [ 1854.105145] sd_ext_cdb 0KB 7KB [ 1854.105156] scsi_sense_cache 1056KB 1060KB [ 1854.105166] virtio_scsi_cmd 16KB 16KB [ 1854.105181] sgpool-128 8KB 8KB [ 1854.105191] sgpool-64 4KB 12KB [ 1854.105201] sgpool-32 2KB 15KB [ 1854.105210] sgpool-16 1KB 7KB [ 1854.105219] sgpool-8 0KB 7KB [ 1854.105237] mqueue_inode_cache 10KB 30KB [ 1854.105253] bio_post_read_ctx 14KB 15KB [ 1854.105328] bio-2 14KB 15KB [ 1854.105337] jfs_mp 7KB 7KB [ 1854.105379] cifs_small_rq 15KB 16KB [ 1854.105389] cifs_request 67KB 67KB [ 1854.105399] cifs_mpx_ids 0KB 7KB [ 1854.105525] nfs_commit_data 3KB 14KB [ 1854.105538] nfs_write_data 34KB 44KB [ 1854.105583] ext4_system_zone 1KB 7KB [ 1854.105617] bio-1 1KB 7KB [ 1854.105628] pid_namespace 2KB 11KB [ 1854.105648] rpc_buffers 17KB 25KB [ 1854.105658] rpc_tasks 2KB 7KB [ 1854.105669] UNIX 1929KB 2032KB [ 1854.105686] tcp_bind_bucket 1KB 4KB [ 1854.105706] ip_fib_trie 34KB 47KB [ 1854.105716] ip_fib_alias 169KB 201KB [ 1854.105726] ip_dst_cache 11KB 28KB [ 1854.105738] RAW 66KB 82KB [ 1854.105747] UDP 70KB 81KB [ 1854.105760] TCP 30KB 33KB [ 1854.105772] hugetlbfs_inode_cache 3KB 15KB [ 1854.105782] fscache_cookie_jar 1KB 7KB [ 1854.105792] eventpoll_pwq 27KB 55KB [ 1854.105802] eventpoll_epi 51KB 66KB [ 1854.105813] inotify_inode_mark 21KB 27KB [ 1854.105825] request_queue 199KB 199KB [ 1854.105835] blkdev_requests 1KB 3KB [ 1854.105844] blkdev_ioc 17KB 38KB [ 1854.105854] bio-0 407KB 562KB [ 1854.105864] biovec-max 1443KB 1542KB [ 1854.105875] biovec-64 435KB 661KB [ 1854.105885] biovec-16 84KB 131KB [ 1854.105895] bio_integrity_payload 1KB 8KB [ 1854.105906] khugepaged_mm_slot 9KB 23KB [ 1854.105923] uid_cache 0KB 4KB [ 1854.105933] dmaengine-unmap-2 0KB 3KB [ 1854.105953] skbuff_fclone_cache 96KB 101KB [ 1854.105963] skbuff_head_cache 7944KB 9442KB [ 1854.105973] configfs_dir_cache 3KB 7KB [ 1854.105983] file_lock_cache 74KB 75KB [ 1854.105993] file_lock_ctx 9KB 15KB [ 1854.106003] fsnotify_mark_connector 12KB 15KB [ 1854.106013] net_namespace 87KB 87KB [ 1854.106023] shmem_inode_cache 8180KB 8185KB [ 1854.106034] task_delay_info 301KB 359KB [ 1854.106044] taskstats 55KB 57KB [ 1854.106054] proc_dir_entry 939KB 978KB [ 1854.106064] pde_opener 18KB 46KB [ 1854.106075] seq_file 247KB 381KB [ 1854.106084] sigqueue 52KB 70KB [ 1854.106094] kernfs_node_cache 18235KB 18896KB [ 1854.106104] mnt_cache 182KB 212KB [ 1854.106114] filp 6500KB 8628KB [ 1854.106124] names_cache 112208KB 112268KB [ 1854.106134] iint_cache 27KB 51KB [ 1854.106144] key_jar 6KB 15KB [ 1854.106154] uts_namespace 2KB 11KB [ 1854.106162] nsproxy 1KB 11KB [ 1854.106172] vm_area_struct 3579KB 3581KB [ 1854.106182] mm_struct 625KB 630KB [ 1854.106192] fs_cache 309KB 328KB [ 1854.106202] files_cache 1139KB 1181KB [ 1854.106212] signal_cache 1888KB 2149KB [ 1854.106221] sighand_cache 585KB 624KB [ 1854.106230] task_struct 8717KB 8805KB [ 1854.106240] cred_jar 1862KB 2812KB [ 1854.106250] anon_vma_chain 1116KB 1488KB [ 1854.106260] anon_vma 157KB 292KB [ 1854.106270] pid 173KB 236KB [ 1854.106279] Acpi-Operand 156KB 198KB [ 1854.106289] Acpi-ParseExt 8KB 11KB [ 1854.106298] Acpi-Parse 41KB 47KB [ 1854.106307] Acpi-State 52KB 63KB [ 1854.106317] Acpi-Namespace 20KB 27KB [ 1854.106329] numa_policy 0KB 3KB [ 1854.106339] debug_objects_cache 1825KB 1883KB [ 1854.106349] trace_event_file 297KB 298KB [ 1854.106360] ftrace_event_field 398KB 401KB [ 1854.106371] pool_workqueue 136KB 152KB [ 1854.106383] page->ptl 598KB 956KB [ 1854.106432] kmalloc-2097152 2050KB 2050KB [ 1854.106443] kmalloc-524288 2056KB 2056KB [ 1854.106451] kmalloc-262144 1290KB 1290KB [ 1854.106460] kmalloc-131072 650KB 650KB [ 1854.106468] kmalloc-65536 2640KB 2838KB [ 1854.106478] kmalloc-32768 2178KB 2211KB [ 1854.106488] kmalloc-16384 1254KB 1320KB [ 1854.106497] kmalloc-8192 5857KB 5940KB [ 1854.106507] kmalloc-4096 29061KB 29121KB [ 1854.106516] kmalloc-2048 18349KB 18761KB [ 1854.106525] kmalloc-1024 13586KB 14836KB [ 1854.106533] kmalloc-512 14653KB 17373KB [ 1854.106541] kmalloc-256 5637KB 6150KB [ 1854.106550] kmalloc-128 1447KB 1590KB [ 1854.106557] kmalloc-96 3278KB 4368KB [ 1854.106572] kmalloc-64 2965KB 3812KB [ 1854.117865] 2097051 pages RAM [ 1854.125523] kmalloc-32 2072KB 2512KB [ 1854.130555] 0 pages HighMem/MovableOnly [ 1854.143303] kmalloc-192 2368KB 2884KB [ 1854.149650] 369649 pages reserved [ 1854.150898] kmem_cache 177KB 183KB [ 1854.154134] 0 pages cma reserved [ 1854.365900] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.465488] Out of memory (oom_kill_allocating_task): Kill process 23236 (systemd-journal) score 0 or sacrifice child [ 1854.484409] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.503787] Killed process 23236 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2112kB [ 1854.813187] oom_reaper: reaped process 23236 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2112kB [ 1854.827881] systemd-journal: page allocation failure: order:0, mode:0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null) [ 1854.831080] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1854.838585] systemd-journal cpuset=/ mems_allowed=0-1 [ 1854.838614] CPU: 0 PID: 23236 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1854.838622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1854.838627] Call Trace: [ 1854.838647] dump_stack+0x1fc/0x2ef [ 1854.838667] warn_alloc.cold+0x7b/0x18f [ 1854.838684] ? zone_watermark_ok_safe+0x260/0x260 [ 1854.838700] ? mark_oom_victim+0x68/0x420 [ 1854.892661] ? wait_for_completion_io+0x10/0x10 [ 1854.897435] __alloc_pages_nodemask+0x232f/0x2890 [ 1854.902743] ? find_get_entry+0x4cd/0x8a0 [ 1854.906913] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1854.910407] in:imklog cpuset=/ mems_allowed=0-1 [ 1854.911972] alloc_pages_current+0x193/0x2a0 [ 1854.921196] filemap_fault+0x146e/0x2180 [ 1854.925363] ext4_filemap_fault+0x84/0xb0 [ 1854.929772] __do_fault+0x10b/0x4b0 [ 1854.933766] __handle_mm_fault+0x273b/0x41c0 [ 1854.939106] ? vm_insert_page+0x9c0/0x9c0 [ 1854.943453] ? check_preemption_disabled+0x41/0x280 [ 1854.949291] handle_mm_fault+0x436/0xb10 [ 1854.954083] __do_page_fault+0x68e/0xd60 [ 1854.958516] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1854.964183] ? spurious_fault+0x840/0x840 [ 1854.968828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1854.973775] ? page_fault+0x8/0x30 [ 1854.978487] page_fault+0x1e/0x30 [ 1854.981967] RIP: 0033:0x7f59e7e262e3 [ 1854.985774] Code: Bad RIP value. [ 1854.989186] RSP: 002b:00007ffd851e0438 EFLAGS: 00010246 [ 1854.994614] RAX: 0000000000000001 RBX: 0000559e0c7b81e0 RCX: 00007f59e7e262e3 [ 1855.002696] RDX: 0000000000000013 RSI: 00007ffd851e0440 RDI: 000000000000000c [ 1855.011195] RBP: 00007ffd851e0630 R08: 00007ffd851e8000 R09: 000001d873cdc52a [ 1855.018473] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd851e0440 [ 1855.026334] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f13503f1c02f [ 1855.034400] CPU: 0 PID: 24479 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1855.042319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1855.052111] Call Trace: [ 1855.054712] dump_stack+0x1fc/0x2ef [ 1855.058374] dump_header+0x15d/0xc3f [ 1855.062428] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1855.067647] ? ___ratelimit+0x319/0x590 [ 1855.071657] oom_kill_process.cold+0x10/0x692 [ 1855.076165] ? check_preemption_disabled+0x41/0x280 [ 1855.081270] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1855.086823] out_of_memory+0x1072/0x1390 [ 1855.090897] ? oom_killer_disable+0x270/0x270 [ 1855.095745] ? mutex_trylock+0x15f/0x1a0 [ 1855.099910] __alloc_pages_nodemask+0x23a2/0x2890 [ 1855.104961] ? find_get_entry+0x4cd/0x8a0 [ 1855.109567] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1855.114626] alloc_pages_current+0x193/0x2a0 [ 1855.119038] filemap_fault+0x146e/0x2180 [ 1855.123128] ext4_filemap_fault+0x84/0xb0 [ 1855.127291] __do_fault+0x10b/0x4b0 [ 1855.131046] __handle_mm_fault+0x273b/0x41c0 [ 1855.135478] ? vm_insert_page+0x9c0/0x9c0 [ 1855.139892] ? lock_downgrade+0x720/0x720 [ 1855.144062] ? check_preemption_disabled+0x41/0x280 [ 1855.149442] handle_mm_fault+0x436/0xb10 [ 1855.153523] __do_page_fault+0x68e/0xd60 [ 1855.157954] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1855.163064] ? spurious_fault+0x840/0x840 [ 1855.167564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1855.172414] ? page_fault+0x8/0x30 [ 1855.176323] page_fault+0x1e/0x30 [ 1855.179781] RIP: 0033:0x7f769158122d [ 1855.183755] Code: Bad RIP value. [ 1855.187457] RSP: 002b:00007f768ef1d580 EFLAGS: 00010293 [ 1855.193520] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f769158122d [ 1855.200797] RDX: 0000000000001fa0 RSI: 00007f768ef1dda0 RDI: 0000000000000004 [ 1855.208157] RBP: 00005560d10309d0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.215930] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f768ef1dda0 [ 1855.223292] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f768ef1f4d7 [ 1855.230926] Mem-Info: [ 1855.233507] active_anon:15113 inactive_anon:77911 isolated_anon:0 [ 1855.233507] active_file:15 inactive_file:13 isolated_file:0 [ 1855.233507] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1855.233507] slab_reclaimable:13551 slab_unreclaimable:117757 [ 1855.233507] mapped:22292 shmem:78902 pagetables:556 bounce:0 [ 1855.233507] free:13896 free_pcp:452 free_cma:0 [ 1855.267770] Node 0 active_anon:57032kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1855.296191] Mem-Info: [ 1855.298633] active_anon:15113 inactive_anon:77911 isolated_anon:0 [ 1855.298633] active_file:15 inactive_file:13 isolated_file:0 [ 1855.298633] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1855.298633] slab_reclaimable:13551 slab_unreclaimable:117757 [ 1855.298633] mapped:22292 shmem:78902 pagetables:556 bounce:0 [ 1855.298633] free:13896 free_pcp:452 free_cma:0 [ 1855.332332] Node 0 active_anon:57032kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1855.338814] Node 1 active_anon:3420kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28864kB dirty:0kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1855.360386] Node 1 active_anon:3420kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28864kB dirty:0kB writeback:0kB shmem:287428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1855.360394] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.360423] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1855.447463] Node 0 DMA free:10868kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.474568] Node 0 DMA32 free:17836kB min:35996kB low:44992kB high:53988kB active_anon:57032kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1984kB bounce:0kB free_pcp:840kB local_pcp:360kB free_cma:0kB [ 1855.504036] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1855.509157] Node 0 DMA32 free:17836kB min:35996kB low:44992kB high:53988kB active_anon:57032kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1984kB bounce:0kB free_pcp:840kB local_pcp:360kB free_cma:0kB [ 1855.538430] lowmem_reserve[]: 0 0 1 1 1 [ 1855.542491] lowmem_reserve[]: 0 0 1 1 1 [ 1855.546472] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.572771] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1855.599111] lowmem_reserve[]: 0 0 0 0 0 [ 1855.603165] Node 1 Normal free:26876kB min:53876kB low:67344kB high:80812kB active_anon:3420kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:968kB local_pcp:720kB free_cma:0kB [ 1855.603605] lowmem_reserve[]: 0 0 0 0 0 [ 1855.654019] Node 1 Normal free:45776kB min:53876kB low:67344kB high:80812kB active_anon:3420kB inactive_anon:285292kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:1508kB local_pcp:248kB free_cma:0kB [ 1855.663784] lowmem_reserve[]: 0 0 0 0 0 [ 1855.687182] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1855.701106] Node 0 DMA32: 715*4kB (UME) 692*8kB (UME) 232*16kB (UME) 88*32kB (UME) 21*64kB (M) 11*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18700kB [ 1855.701568] lowmem_reserve[]: 0 0 0 0 0 [ 1855.716616] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1855.731653] Node 1 Normal: 290*4kB (UME) 328*8kB (UME) 244*16kB (UME) 119*32kB (UME) 60*64kB (UME) 23*128kB (UME) 5*256kB (UME) 3*512kB (U) 2*1024kB (U) 26*2048kB (U) 2*4096kB (U) = 84584kB [ 1855.733764] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10868kB [ 1855.749174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.749183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.749191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.749200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.749205] 79004 total pagecache pages [ 1855.749218] 0 pages in swap cache [ 1855.749226] Swap cache stats: add 0, delete 0, find 0/0 [ 1855.749230] Free swap = 0kB [ 1855.749233] Total swap = 0kB [ 1855.749240] 2097051 pages RAM [ 1855.749245] 0 pages HighMem/MovableOnly [ 1855.749249] 369649 pages reserved [ 1855.749254] 0 pages cma reserved [ 1855.835231] Node 0 DMA32: 715*4kB (UME) 692*8kB (UME) 232*16kB (UME) 88*32kB (UME) 21*64kB (M) 11*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18700kB [ 1855.860344] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1855.871881] Node 1 Normal: 25*4kB (UE) 134*8kB (UME) 245*16kB (UME) 120*32kB (UME) 60*64kB (UME) 22*128kB (UME) 7*256kB (UME) 4*512kB (U) 2*1024kB (U) 28*2048kB (U) 31*4096kB (U) = 205796kB [ 1855.895092] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.906460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.917489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.928901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1855.940764] 80447 total pagecache pages [ 1855.947253] 0 pages in swap cache [ 1855.950733] Swap cache stats: add 0, delete 0, find 0/0 [ 1855.957850] Free swap = 0kB [ 1855.960881] Total swap = 0kB [ 1855.967078] 2097051 pages RAM [ 1855.970202] 0 pages HighMem/MovableOnly [ 1855.975996] 369649 pages reserved [ 1855.979459] 0 pages cma reserved [ 1855.986001] Unreclaimable slab info: [ 1855.989907] Name Used Total [ 1855.993176] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1855.997049] pid_2 40KB 44KB [ 1856.011612] batadv_tt_change_cache 3KB 7KB [ 1856.017215] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1856.019033] batadv_tl_cache 7KB 16KB [ 1856.034748] TIPC 15KB 37KB [ 1856.050545] SCTPv6 20KB 30KB [ 1856.060105] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1856.071764] DCCPv6 17KB 30KB [ 1856.079216] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1856.091189] DCCP 16KB 28KB [ 1856.099659] RXRPC 35KB 45KB [ 1856.102347] systemd[1]: Stopped Journal Service. [ 1856.110278] rxrpc_call_jar 112KB 141KB [ 1856.122111] systemd[1]: Starting Journal Service... [ 1856.122494] bridge_fdb_cache 14KB 27KB [ 1856.147626] fib6_nodes 239KB 280KB [ 1856.158374] ip6_dst_cache 723KB 723KB [ 1856.163989] RAWv6 111KB 114KB [ 1856.169368] UDPv6 166KB 172KB [ 1856.179396] TCPv6 36KB 48KB [ 1856.185532] nf_conntrack 18KB 18KB [ 1856.191466] t10_alua_lu_gp_cache 0KB 3KB [ 1856.202353] sd_ext_cdb 0KB 7KB [ 1856.208366] scsi_sense_cache 1056KB 1060KB [ 1856.218529] virtio_scsi_cmd 16KB 16KB [ 1856.223982] sgpool-128 8KB 8KB [ 1856.230003] sgpool-64 4KB 12KB [ 1856.240374] sgpool-32 2KB 15KB [ 1856.248393] sgpool-16 1KB 7KB [ 1856.262687] sgpool-8 0KB 7KB [ 1856.268224] mqueue_inode_cache 10KB 30KB [ 1856.278629] bio_post_read_ctx 14KB 15KB [ 1856.286503] bio-2 14KB 15KB [ 1856.291894] jfs_mp 7KB 7KB [ 1856.302052] cifs_small_rq 15KB 16KB [ 1856.307739] cifs_request 67KB 67KB [ 1856.317891] cifs_mpx_ids 0KB 7KB [ 1856.323853] nfs_commit_data 3KB 14KB [ 1856.329716] nfs_write_data 34KB 44KB [ 1856.339997] ext4_system_zone 1KB 7KB [ 1856.345506] bio-1 1KB 7KB [ 1856.357954] pid_namespace 2KB 11KB [ 1856.363464] rpc_buffers 17KB 25KB [ 1856.368830] rpc_tasks 2KB 7KB [ 1856.378970] UNIX 1929KB 2032KB [ 1856.384628] tcp_bind_bucket 1KB 4KB [ 1856.390054] ip_fib_trie 34KB 47KB [ 1856.400864] ip_fib_alias 169KB 201KB [ 1856.406779] ip_dst_cache 11KB 28KB [ 1856.416714] RAW 66KB 82KB [ 1856.419964] systemd-journald[24753]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1856.422097] UDP 70KB 81KB [ 1856.422111] TCP 30KB 33KB [ 1856.422122] hugetlbfs_inode_cache 3KB 15KB [ 1856.422131] fscache_cookie_jar 1KB 7KB [ 1856.422143] eventpoll_pwq 27KB 55KB [ 1856.422225] eventpoll_epi 51KB 66KB [ 1856.422235] inotify_inode_mark 21KB 27KB [ 1856.422247] request_queue 199KB 199KB [ 1856.422256] blkdev_requests 1KB 3KB [ 1856.422274] blkdev_ioc 25KB 38KB [ 1856.500132] bio-0 483KB 562KB [ 1856.505584] biovec-max 1443KB 1542KB [ 1856.511051] biovec-64 529KB 661KB [ 1856.521341] biovec-16 100KB 131KB [ 1856.526938] bio_integrity_payload 1KB 8KB [ 1856.537705] khugepaged_mm_slot 9KB 23KB [ 1856.543245] uid_cache 0KB 4KB [ 1856.548102] systemd-journald[24753]: /dev/kmsg buffer overrun, some messages lost. [ 1856.548790] dmaengine-unmap-2 0KB 3KB [ 1856.569269] skbuff_fclone_cache 96KB 101KB [ 1856.575059] skbuff_head_cache 8121KB 9442KB [ 1856.580441] configfs_dir_cache 3KB 7KB [ 1856.591061] file_lock_cache 74KB 75KB [ 1856.596865] file_lock_ctx 9KB 15KB [ 1856.612379] fsnotify_mark_connector 12KB 15KB [ 1856.618296] net_namespace 87KB 87KB [ 1856.646899] shmem_inode_cache 8180KB 8185KB [ 1856.652355] task_delay_info 301KB 359KB [ 1856.688980] taskstats 55KB 57KB [ 1856.694688] proc_dir_entry 939KB 978KB [ 1856.700160] pde_opener 18KB 46KB [ 1856.710893] seq_file 254KB 381KB [ 1856.716432] sigqueue 52KB 70KB [ 1856.721800] kernfs_node_cache 18251KB 18896KB [ 1856.732257] mnt_cache 182KB 212KB [ 1856.732268] filp 6466KB 8621KB [ 1856.732277] names_cache 113390KB 113390KB [ 1856.732286] iint_cache 34KB 51KB [ 1856.732295] key_jar 6KB 15KB [ 1856.732304] uts_namespace 2KB 11KB [ 1856.732312] nsproxy 1KB 11KB [ 1856.732323] vm_area_struct 3630KB 3631KB [ 1856.783369] mm_struct 625KB 630KB [ 1856.788749] fs_cache 309KB 328KB [ 1856.797308] files_cache 1063KB 1177KB [ 1856.804454] signal_cache 1733KB 2149KB [ 1856.809822] sighand_cache 585KB 624KB [ 1856.818778] task_struct 8010KB 8098KB [ 1856.835415] cred_jar 1787KB 2808KB [ 1856.841596] anon_vma_chain 1129KB 1488KB [ 1856.863870] anon_vma 157KB 292KB [ 1856.869269] pid 173KB 236KB [ 1856.895408] Acpi-Operand 156KB 198KB [ 1856.900813] Acpi-ParseExt 8KB 11KB [ 1856.926590] Acpi-Parse 41KB 47KB [ 1856.931989] Acpi-State 52KB 63KB [ 1856.955642] Acpi-Namespace 20KB 27KB [ 1856.961039] numa_policy 0KB 3KB [ 1856.982203] debug_objects_cache 1825KB 1883KB [ 1856.987863] trace_event_file 297KB 298KB [ 1857.002202] ftrace_event_field 398KB 401KB [ 1857.007734] pool_workqueue 136KB 152KB [ 1857.013191] page->ptl 604KB 956KB [ 1857.018870] kmalloc-2097152 2050KB 2050KB [ 1857.042248] kmalloc-524288 2056KB 2056KB [ 1857.047784] kmalloc-262144 1290KB 1290KB [ 1857.053238] kmalloc-131072 650KB 650KB [ 1857.058609] kmalloc-65536 2640KB 2838KB [ 1857.082290] kmalloc-32768 2178KB 2211KB [ 1857.087774] kmalloc-16384 1287KB 1320KB [ 1857.093206] kmalloc-8192 5857KB 5940KB [ 1857.098617] kmalloc-4096 27578KB 27616KB [ 1857.104133] kmalloc-2048 18145KB 18748KB [ 1857.109676] kmalloc-1024 13762KB 14836KB [ 1857.115133] kmalloc-512 14670KB 17373KB [ 1857.120507] kmalloc-256 5595KB 6150KB [ 1857.126024] kmalloc-128 1447KB 1590KB [ 1857.131433] kmalloc-96 3353KB 4368KB [ 1857.136882] kmalloc-64 2935KB 3812KB [ 1857.142819] kmalloc-32 2072KB 2512KB [ 1857.148184] kmalloc-192 2293KB 2880KB [ 1857.153791] kmem_cache 177KB 183KB [ 1857.159246] Out of memory (oom_kill_allocating_task): Kill process 24479 (in:imklog) score 0 or sacrifice child [ 1857.169572] Killed process 24477 (rsyslogd) total-vm:254332kB, anon-rss:520kB, file-rss:0kB, shmem-rss:0kB [ 1857.193752] oom_reaper: reaped process 24477 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1857.215869] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1857.250407] systemd[1]: rsyslog.service: Unit entered failed state. [ 1857.291100] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1857.396594] systemd[1]: Started Journal Service. 14:55:04 executing program 1: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:04 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:04 executing program 5: syz_open_dev$audion(&(0x7f0000000100), 0x8000000000000401, 0x280802) syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:04 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:04 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000f0ffffffffffffff0000000000000000000b000000000000002f6465762f7669326d0000"], 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000f0ffffffffffffff0000000000000000000b000000000000002f6465762f7669326d0000"], 0x2c) (async) 14:55:04 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x4, r3}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x4, r3}, 0x10) (async) 14:55:04 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:04 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r4, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:04 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x8000, 0x14da41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 14:55:04 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:04 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async, rerun: 64) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x4, r3}, 0x10) 14:55:04 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x8000, 0x14da41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 14:55:04 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:04 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x8000, 0x14da41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10}, 0x10) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@host, 0x8}, @my=0x1, 0x1, 0x8, 0xfff, 0x72, 0x0, 0x9, 0x1ff}) 14:55:05 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:05 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x4, r3}, 0x10) 14:55:05 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000000000000000000000000000000000000002f6465762f97696d326d00008793c09962683a3c14eb09a277bc4355378e56bd0c8a76dcf68b95668d03239571794f079fd8cf25d366b28cf433d4d324ac5a07264339986551e0b4d0949f1ba7a553863007b0b94b774de170de85710490213f1aa29af79ae86da68d8849e907917c7fdbb896f3b3012ee897ed8a59c5765bea3795fa5da3e00a230311404f3234d3729114ae8d9e243bc805e72465f3f0d50b49895923b4e2418f0de2cc526986e918092213e7d013d8eb1909558cd4d075856b7f936ed2fb13e3fa53bdf3796b84972a80e6a4ee7e885042d2c4923fec0f3733c23584ae140598673b1c88e26b720c061151b5bd923b9ccca378b62cd6b40791dac15c32ceced7ea3e7f45010000000000000000000000000000000055524b3aabb183b9a6b2e0be762b1aa84a3ce05106d48e0cd295c560e47ad5ea0a9591e1efd4e6086be8c2d956768e54f1860a1dca69734c6b1e4f"], 0x2c) 14:55:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@host, 0x8}, @my=0x1, 0x1, 0x8, 0xfff, 0x72, 0x0, 0x9, 0x1ff}) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@host, 0x8}, @my=0x1, 0x1, 0x8, 0xfff, 0x72, 0x0, 0x9, 0x1ff}) (async) 14:55:05 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:05 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") (async) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:05 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:05 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async, rerun: 32) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 32) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:05 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r3, {0x6}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@host, 0x8}, @my=0x1, 0x1, 0x8, 0xfff, 0x72, 0x0, 0x9, 0x1ff}) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@host, 0x8}, @my=0x1, 0x1, 0x8, 0xfff, 0x72, 0x0, 0x9, 0x1ff}) (async) 14:55:05 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 14:55:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848}, {0x1e}], 0x0, 0x0, 0x0, 0x3, 0x6}}, 0x3}) 14:55:05 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x206d) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000000000000000000000000000000000000002f6465762f97696d326d00008793c09962683a3c14eb09a277bc4355378e56bd0c8a76dcf68b95668d03239571794f079fd8cf25d366b28cf433d4d324ac5a07264339986551e0b4d0949f1ba7a553863007b0b94b774de170de85710490213f1aa29af79ae86da68d8849e907917c7fdbb896f3b3012ee897ed8a59c5765bea3795fa5da3e00a230311404f3234d3729114ae8d9e243bc805e72465f3f0d50b49895923b4e2418f0de2cc526986e918092213e7d013d8eb1909558cd4d075856b7f936ed2fb13e3fa53bdf3796b84972a80e6a4ee7e885042d2c4923fec0f3733c23584ae140598673b1c88e26b720c061151b5bd923b9ccca378b62cd6b40791dac15c32ceced7ea3e7f45010000000000000000000000000000000055524b3aabb183b9a6b2e0be762b1aa84a3ce05106d48e0cd295c560e47ad5ea0a9591e1efd4e6086be8c2d956768e54f1860a1dca69734c6b1e4f"], 0x2c) 14:55:05 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x206d) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:05 executing program 3: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000044c0)=ANY=[@ANYBLOB="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"], 0x2c) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xe9, 0x6, 0x0, {0x2, 0x2, 0xc0, 0x0, '%X\xc6\xf7\xff\xff\xff&v\xe37:\xe2\xb67\xed\x81\xd6\x94\x1b\xbf\xd2\x81\'\xefsYF\xb1\xe8\xe6FZt\xd4\xf4tY\v\xadt\x92\xc9\x00\x00\x00\x00\x00\x00\x00\x00=\x91\x91&\xf1\xc1\xd9\xc7\xe0Y\b\x14\xdf\x91i\xbde\xfeI\xce\x8aJB\\\x97\xb3\x18\x12\xc35Hw#\xdc\xb1\xc6\x8a\xbcMS\xd8\xe8r^K\xd3\x0e\xa5\x00C\x91I| \xf2*\xedp0\xe1\xc2\"y\xef8\xf8\xd1f?-\x8e\xb7\x0e\x8av\x94a\xd1\xd1\x12Bz\x8e^l\x80\xc2\x9d\xed\x88\xa6&\x8e/\xc9\xce|\x02\x83\xb6\x1e\xe6\x1e7\x06\xeeK\xe9^\x11)\xda$\f\x9df\xb1\"0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, r3}, 0x18) 14:55:05 executing program 3: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000044c0)=ANY=[@ANYBLOB="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"], 0x2c) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xe9, 0x6, 0x0, {0x2, 0x2, 0xc0, 0x0, '%X\xc6\xf7\xff\xff\xff&v\xe37:\xe2\xb67\xed\x81\xd6\x94\x1b\xbf\xd2\x81\'\xefsYF\xb1\xe8\xe6FZt\xd4\xf4tY\v\xadt\x92\xc9\x00\x00\x00\x00\x00\x00\x00\x00=\x91\x91&\xf1\xc1\xd9\xc7\xe0Y\b\x14\xdf\x91i\xbde\xfeI\xce\x8aJB\\\x97\xb3\x18\x12\xc35Hw#\xdc\xb1\xc6\x8a\xbcMS\xd8\xe8r^K\xd3\x0e\xa5\x00C\x91I| \xf2*\xedp0\xe1\xc2\"y\xef8\xf8\xd1f?-\x8e\xb7\x0e\x8av\x94a\xd1\xd1\x12Bz\x8e^l\x80\xc2\x9d\xed\x88\xa6&\x8e/\xc9\xce|\x02\x83\xb6\x1e\xe6\x1e7\x06\xeeK\xe9^\x11)\xda$\f\x9df\xb1\"0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, r3}, 0x18) 14:55:06 executing program 3: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000044c0)=ANY=[@ANYBLOB="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"], 0x2c) (async) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0xe9, 0x6, 0x0, {0x2, 0x2, 0xc0, 0x0, '%X\xc6\xf7\xff\xff\xff&v\xe37:\xe2\xb67\xed\x81\xd6\x94\x1b\xbf\xd2\x81\'\xefsYF\xb1\xe8\xe6FZt\xd4\xf4tY\v\xadt\x92\xc9\x00\x00\x00\x00\x00\x00\x00\x00=\x91\x91&\xf1\xc1\xd9\xc7\xe0Y\b\x14\xdf\x91i\xbde\xfeI\xce\x8aJB\\\x97\xb3\x18\x12\xc35Hw#\xdc\xb1\xc6\x8a\xbcMS\xd8\xe8r^K\xd3\x0e\xa5\x00C\x91I| \xf2*\xedp0\xe1\xc2\"y\xef8\xf8\xd1f?-\x8e\xb7\x0e\x8av\x94a\xd1\xd1\x12Bz\x8e^l\x80\xc2\x9d\xed\x88\xa6&\x8e/\xc9\xce|\x02\x83\xb6\x1e\xe6\x1e7\x06\xeeK\xe9^\x11)\xda$\f\x9df\xb1\"0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, r3}, 0x18) 14:55:06 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:06 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:06 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) [ 1866.648806] oom_reaper: reaped process 24885 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1866.694824] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1866.708639] in:imklog cpuset=/ mems_allowed=0-1 [ 1866.713410] CPU: 0 PID: 24759 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1866.720852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1866.730197] Call Trace: [ 1866.732792] dump_stack+0x1fc/0x2ef [ 1866.736420] dump_header+0x15d/0xc3f [ 1866.740129] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1866.745233] ? ___ratelimit+0x319/0x590 [ 1866.749208] oom_kill_process.cold+0x10/0x692 [ 1866.753703] ? check_preemption_disabled+0x41/0x280 [ 1866.758719] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1866.763999] out_of_memory+0x1072/0x1390 [ 1866.768081] ? oom_killer_disable+0x270/0x270 [ 1866.772579] ? mutex_trylock+0x15f/0x1a0 [ 1866.776915] __alloc_pages_nodemask+0x23a2/0x2890 [ 1866.781789] ? find_get_entry+0x4cd/0x8a0 [ 1866.785938] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1866.790966] alloc_pages_current+0x193/0x2a0 [ 1866.795534] filemap_fault+0x146e/0x2180 [ 1866.799615] ext4_filemap_fault+0x84/0xb0 [ 1866.803743] __do_fault+0x10b/0x4b0 [ 1866.807437] __handle_mm_fault+0x273b/0x41c0 [ 1866.811933] ? vm_insert_page+0x9c0/0x9c0 [ 1866.816070] ? lock_downgrade+0x720/0x720 [ 1866.820216] ? check_preemption_disabled+0x41/0x280 [ 1866.825236] handle_mm_fault+0x436/0xb10 [ 1866.829306] __do_page_fault+0x68e/0xd60 [ 1866.833364] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1866.838381] ? spurious_fault+0x840/0x840 [ 1866.842518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1866.847356] ? page_fault+0x8/0x30 [ 1866.850889] page_fault+0x1e/0x30 [ 1866.854330] RIP: 0033:0x7f0412c4622d [ 1866.858027] Code: Bad RIP value. [ 1866.861471] RSP: 002b:00007f04105e2580 EFLAGS: 00010293 [ 1866.866825] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007f0412c4622d [ 1866.874158] RDX: 0000000000001fa0 RSI: 00007f04105e2da0 RDI: 0000000000000004 [ 1866.881462] RBP: 00005574d21f09d0 R08: 00007f0411dbf940 R09: 0000000000000000 [ 1866.888727] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007f04105e2da0 [ 1866.895994] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f04105e3c05 [ 1866.906158] Mem-Info: [ 1866.908592] active_anon:15285 inactive_anon:79943 isolated_anon:0 [ 1866.908592] active_file:44 inactive_file:27 isolated_file:0 [ 1866.908592] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1866.908592] slab_reclaimable:13796 slab_unreclaimable:124544 [ 1866.908592] mapped:22123 shmem:80950 pagetables:558 bounce:0 [ 1866.908592] free:13856 free_pcp:944 free_cma:0 [ 1866.917804] syz-executor.1: vmalloc: allocation failure, allocated 1636282368 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1866.942157] Node 0 active_anon:57196kB inactive_anon:26352kB active_file:148kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60344kB dirty:92kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.963725] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1866.983916] Node 1 active_anon:3944kB inactive_anon:293420kB active_file:28kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28148kB dirty:12kB writeback:0kB shmem:295620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1866.983924] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1866.983953] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1866.995619] CPU: 1 PID: 24885 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1867.018365] Node 0 DMA32 free:17748kB min:35996kB low:44992kB high:53988kB active_anon:57196kB inactive_anon:26352kB active_file:424kB inactive_file:0kB unevictable:0kB writepending:292kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1992kB bounce:0kB free_pcp:2040kB local_pcp:364kB free_cma:0kB [ 1867.042776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1867.042781] Call Trace: [ 1867.042804] dump_stack+0x1fc/0x2ef [ 1867.042821] warn_alloc.cold+0x7b/0x18f [ 1867.042840] ? zone_watermark_ok_safe+0x260/0x260 [ 1867.042853] ? retint_kernel+0x2d/0x2d [ 1867.042886] __vmalloc_area_node+0x4fd/0x780 [ 1867.042905] ? __vmalloc_node_range+0x180/0x180 [ 1867.042923] ? _raw_spin_unlock+0x29/0x40 [ 1867.048959] lowmem_reserve[]: 0 0 1 1 1 [ 1867.055791] ? __get_vm_area_node+0x2e2/0x3a0 [ 1867.055809] __vmalloc_node_range+0xed/0x180 [ 1867.055825] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1867.055839] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1867.055856] vmalloc_user+0x70/0xe0 [ 1867.086411] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.094340] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1867.094354] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1867.094370] __vb2_queue_alloc+0x472/0xe60 [ 1867.094397] vb2_core_create_bufs+0x273/0x7e0 [ 1867.096957] lowmem_reserve[]: 0 0 0 0 0 [ 1867.100572] ? __vb2_queue_free+0x870/0x870 [ 1867.100589] ? __video_do_ioctl+0x632/0xcd0 [ 1867.100615] ? __mutex_lock+0x368/0x1190 [ 1867.100633] vb2_create_bufs+0x332/0x620 [ 1867.100651] ? mark_held_locks+0xf0/0xf0 [ 1867.100663] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1867.100679] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1867.100698] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1867.100719] v4l_create_bufs+0xb2/0x160 [ 1867.100736] __video_do_ioctl+0x49a/0xcd0 [ 1867.100758] ? v4l_querycap+0x340/0x340 [ 1867.100777] ? __might_fault+0x192/0x1d0 [ 1867.100795] ? v4l_querycap+0x340/0x340 [ 1867.100811] video_usercopy+0x13f/0xfa0 [ 1867.100834] ? v4l_enumstd+0x60/0x60 [ 1867.100851] ? do_futex+0x171/0x1880 [ 1867.100866] ? mark_held_locks+0xf0/0xf0 [ 1867.100885] ? debug_check_no_obj_freed+0x201/0x490 [ 1867.100909] ? video_usercopy+0xfa0/0xfa0 [ 1867.100922] v4l2_ioctl+0x147/0x1a0 [ 1867.100935] ? video_devdata+0xa0/0xa0 [ 1867.100951] do_vfs_ioctl+0xcdb/0x12e0 [ 1867.100967] ? lock_downgrade+0x720/0x720 [ 1867.100982] ? check_preemption_disabled+0x41/0x280 [ 1867.100997] ? ioctl_preallocate+0x200/0x200 [ 1867.101013] ? __fget+0x356/0x510 [ 1867.101030] ? do_dup2+0x450/0x450 [ 1867.101045] ? __se_sys_futex+0x298/0x3b0 [ 1867.101068] ksys_ioctl+0x9b/0xc0 [ 1867.101085] __x64_sys_ioctl+0x6f/0xb0 [ 1867.101099] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1867.101113] do_syscall_64+0xf9/0x620 [ 1867.101132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1867.101144] RIP: 0033:0x7fbcd48050a9 [ 1867.101158] Code: Bad RIP value. [ 1867.101166] RSP: 002b:00007fbcd2d77168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.101179] RAX: ffffffffffffffda RBX: 00007fbcd4924f80 RCX: 00007fbcd48050a9 [ 1867.101188] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1867.101195] RBP: 00007fbcd4860ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1867.101203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.101212] R13: 00007ffd122e965f R14: 00007fbcd2d77300 R15: 0000000000022000 [ 1867.114051] Mem-Info: [ 1867.119172] Node 1 Normal free:27064kB min:53876kB low:67344kB high:80812kB active_anon:3944kB inactive_anon:293420kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:1736kB local_pcp:1488kB free_cma:0kB [ 1867.119206] lowmem_reserve[]: 0 0 0 0 0 [ 1867.128806] active_anon:15262 inactive_anon:79943 isolated_anon:0 [ 1867.128806] active_file:13 inactive_file:12 isolated_file:0 [ 1867.128806] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1867.128806] slab_reclaimable:13796 slab_unreclaimable:124541 [ 1867.128806] mapped:22112 shmem:80950 pagetables:558 bounce:0 [ 1867.128806] free:14039 free_pcp:944 free_cma:0 [ 1867.135458] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1867.136604] Node 0 active_anon:57104kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.140987] Node 0 DMA32: 539*4kB (ME) 527*8kB (UME) 193*16kB (UME) 98*32kB (UME) 32*64kB (UM) 14*128kB (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18228kB [ 1867.145507] Node 1 active_anon:3944kB inactive_anon:293420kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28144kB dirty:0kB writeback:0kB shmem:295620kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1867.155193] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1867.180856] Node 0 DMA free:10860kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.192400] Node 1 Normal: 390*4kB (ME) 348*8kB (UME) 226*16kB (ME) 115*32kB (UME) 27*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 27064kB [ 1867.193255] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1867.197682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.201631] Node 0 DMA32 free:18228kB min:35996kB low:44992kB high:53988kB active_anon:57104kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7552kB pagetables:1992kB bounce:0kB free_pcp:2040kB local_pcp:1676kB free_cma:0kB [ 1867.216442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.218468] lowmem_reserve[]: 0 0 1 1 1 [ 1867.222594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.230679] Node 0 Normal free:4kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1867.236266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.255873] lowmem_reserve[]: 0 0 0 0 0 [ 1867.262135] 80975 total pagecache pages [ 1867.269804] Node 1 Normal free:27064kB min:53876kB low:67344kB high:80812kB active_anon:3944kB inactive_anon:293420kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:240kB bounce:0kB free_pcp:1736kB local_pcp:248kB free_cma:0kB [ 1867.270217] 0 pages in swap cache [ 1867.278204] lowmem_reserve[]: 0 0 0 0 0 [ 1867.279322] Swap cache stats: add 0, delete 0, find 0/0 [ 1867.290337] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10860kB [ 1867.291692] Free swap = 0kB [ 1867.298823] Node 0 DMA32: 539*4kB (ME) 527*8kB (UME) 193*16kB (UME) 98*32kB (UME) 32*64kB (UM) 14*128kB (UM) 5*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18228kB [ 1867.298993] Total swap = 0kB [ 1867.311403] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1867.316615] 2097051 pages RAM [ 1867.321297] Node 1 Normal: 390*4kB (ME) 348*8kB (UME) 226*16kB (ME) 115*32kB (UME) 27*64kB (UME) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 27064kB [ 1867.321480] 0 pages HighMem/MovableOnly [ 1867.329141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.342664] 369649 pages reserved [ 1867.352818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.365489] 0 pages cma reserved [ 1867.378611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1867.384896] Unreclaimable slab info: [ 1867.386830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1867.398751] Name Used Total [ 1867.437099] 80975 total pagecache pages [ 1867.473496] pid_2 58KB 60KB [ 1867.484449] 0 pages in swap cache [ 1867.509061] batadv_tt_change_cache 2KB 7KB [ 1867.532279] Swap cache stats: add 0, delete 0, find 0/0 [ 1867.554146] batadv_tl_cache 7KB 16KB [ 1867.573439] Free swap = 0kB [ 1867.591079] TIPC 10KB 22KB [ 1867.610348] Total swap = 0kB [ 1867.632262] SCTPv6 20KB 30KB [ 1867.657981] 2097051 pages RAM [ 1867.662998] DCCPv6 52KB 90KB [ 1867.668716] 0 pages HighMem/MovableOnly [ 1867.702633] DCCP 16KB 28KB [ 1867.709388] 369649 pages reserved [ 1867.711110] RXRPC 39KB 52KB [ 1867.746544] 0 pages cma reserved [ 1867.757569] rxrpc_call_jar 82KB 110KB [ 1867.961305] bridge_fdb_cache 9KB 23KB [ 1867.975822] fib6_nodes 197KB 280KB [ 1867.981299] ip6_dst_cache 573KB 712KB [ 1867.990791] RAWv6 101KB 108KB [ 1868.000357] UDPv6 153KB 165KB [ 1868.009852] TCPv6 39KB 48KB [ 1868.019305] nf_conntrack 12KB 18KB [ 1868.030390] t10_alua_lu_gp_cache 0KB 3KB [ 1868.040604] sd_ext_cdb 0KB 7KB [ 1868.050079] scsi_sense_cache 1056KB 1060KB [ 1868.059851] virtio_scsi_cmd 16KB 16KB [ 1868.069220] sgpool-128 8KB 8KB [ 1868.078777] sgpool-64 4KB 12KB [ 1868.088146] sgpool-32 2KB 15KB [ 1868.097746] sgpool-16 1KB 7KB [ 1868.107194] sgpool-8 0KB 7KB [ 1868.117058] mqueue_inode_cache 10KB 30KB [ 1868.127859] bio_post_read_ctx 14KB 15KB [ 1868.148434] bio-2 14KB 15KB [ 1868.154746] jfs_mp 7KB 7KB [ 1868.160164] cifs_small_rq 15KB 16KB [ 1868.173199] cifs_request 67KB 67KB [ 1868.178576] cifs_mpx_ids 0KB 7KB [ 1868.184113] nfs_commit_data 3KB 14KB [ 1868.189481] nfs_write_data 34KB 44KB [ 1868.198350] ext4_system_zone 1KB 7KB [ 1868.203803] bio-1 1KB 7KB [ 1868.209176] pid_namespace 2KB 11KB [ 1868.218178] rpc_buffers 17KB 25KB [ 1868.223603] rpc_tasks 2KB 7KB [ 1868.230675] UNIX 1117KB 1278KB [ 1868.239690] tcp_bind_bucket 1KB 4KB [ 1868.245124] ip_fib_trie 28KB 47KB [ 1868.250505] ip_fib_alias 140KB 201KB [ 1868.259356] ip_dst_cache 10KB 28KB [ 1868.264892] RAW 60KB 82KB [ 1868.270251] UDP 62KB 81KB [ 1868.279072] TCP 30KB 39KB [ 1868.284515] hugetlbfs_inode_cache 3KB 15KB [ 1868.290233] fscache_cookie_jar 1KB 7KB [ 1868.299411] eventpoll_pwq 23KB 55KB [ 1868.304839] eventpoll_epi 42KB 66KB [ 1868.310205] inotify_inode_mark 25KB 31KB [ 1868.319098] request_queue 199KB 199KB [ 1868.324531] blkdev_requests 1KB 3KB [ 1868.331577] blkdev_ioc 19KB 38KB [ 1868.340398] bio-0 569KB 596KB [ 1868.345843] biovec-max 1493KB 1542KB [ 1868.351212] biovec-64 569KB 661KB [ 1868.360278] biovec-16 96KB 131KB [ 1868.365909] bio_integrity_payload 1KB 8KB [ 1868.375319] khugepaged_mm_slot 12KB 23KB [ 1868.380786] uid_cache 0KB 4KB [ 1868.386389] dmaengine-unmap-2 0KB 3KB [ 1868.395215] skbuff_fclone_cache 115KB 120KB [ 1868.400767] skbuff_head_cache 5708KB 9056KB [ 1868.406198] configfs_dir_cache 3KB 7KB [ 1868.415060] file_lock_cache 97KB 99KB [ 1868.420442] file_lock_ctx 9KB 15KB [ 1868.425891] fsnotify_mark_connector 14KB 19KB [ 1868.437159] net_namespace 78KB 78KB [ 1868.443709] shmem_inode_cache 8240KB 8244KB [ 1868.449200] task_delay_info 225KB 359KB [ 1868.458064] taskstats 75KB 76KB [ 1868.463534] proc_dir_entry 865KB 956KB [ 1868.468899] pde_opener 14KB 46KB [ 1868.477664] seq_file 282KB 381KB [ 1868.483133] sigqueue 54KB 70KB [ 1868.488519] kernfs_node_cache 18230KB 18892KB [ 1868.497886] mnt_cache 173KB 204KB [ 1868.503338] filp 6638KB 8606KB [ 1868.508718] names_cache 139004KB 139043KB [ 1868.517738] iint_cache 30KB 51KB [ 1868.523184] key_jar 5KB 15KB [ 1868.528549] uts_namespace 2KB 11KB [ 1868.539330] nsproxy 1KB 7KB [ 1868.544827] vm_area_struct 3854KB 3859KB [ 1868.550288] mm_struct 640KB 650KB [ 1868.556230] fs_cache 183KB 328KB [ 1868.561716] files_cache 610KB 971KB [ 1868.567081] signal_cache 1152KB 1983KB [ 1868.573102] sighand_cache 538KB 617KB [ 1868.578493] task_struct 6501KB 6533KB [ 1868.584699] cred_jar 1664KB 2808KB [ 1868.590692] anon_vma_chain 1223KB 1488KB [ 1868.596509] anon_vma 149KB 292KB [ 1868.602155] pid 110KB 236KB [ 1868.607613] Acpi-Operand 156KB 198KB [ 1868.613206] Acpi-ParseExt 8KB 11KB [ 1868.618645] Acpi-Parse 41KB 47KB [ 1868.624251] Acpi-State 52KB 63KB [ 1868.629713] Acpi-Namespace 20KB 27KB [ 1868.635331] numa_policy 0KB 3KB [ 1868.642788] debug_objects_cache 1791KB 1883KB [ 1868.648418] trace_event_file 297KB 298KB [ 1868.654036] ftrace_event_field 398KB 401KB [ 1868.659722] pool_workqueue 124KB 152KB [ 1868.665426] page->ptl 652KB 956KB [ 1868.671061] kmalloc-2097152 2050KB 2050KB [ 1868.676841] kmalloc-524288 2056KB 2056KB [ 1868.682487] kmalloc-262144 1290KB 1290KB [ 1868.688101] kmalloc-131072 650KB 650KB [ 1868.693609] kmalloc-65536 2640KB 2706KB [ 1868.699035] kmalloc-32768 1881KB 2013KB [ 1868.704506] kmalloc-16384 1023KB 1254KB [ 1868.710036] kmalloc-8192 5263KB 5337KB [ 1868.715705] kmalloc-4096 21581KB 21641KB [ 1868.721254] kmalloc-2048 13784KB 16498KB [ 1868.726821] kmalloc-1024 10219KB 14584KB [ 1868.732317] kmalloc-512 11613KB 16893KB [ 1868.737763] kmalloc-256 4402KB 6112KB [ 1868.745362] kmalloc-128 1217KB 1590KB [ 1868.751088] kmalloc-96 3390KB 4368KB [ 1868.756732] kmalloc-64 2763KB 3812KB [ 1868.762352] kmalloc-32 1977KB 2512KB [ 1868.768066] kmalloc-192 1972KB 2880KB [ 1868.774294] kmem_cache 177KB 183KB [ 1868.780413] Out of memory (oom_kill_allocating_task): Kill process 24759 (in:imklog) score 0 or sacrifice child [ 1868.791568] Killed process 24755 (rsyslogd) total-vm:254332kB, anon-rss:736kB, file-rss:0kB, shmem-rss:0kB [ 1868.804627] oom_reaper: reaped process 24755 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 14:55:16 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x206d) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) 14:55:16 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r0, &(0x7f0000005e40)={0x2020}, 0x206d) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) 14:55:16 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2d8b00) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:16 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$rfkill(r0, &(0x7f0000000040), 0x8) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000000)) 14:55:16 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 14:55:16 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2d8b00) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2d8b00) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:16 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 2: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:16 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x48000, 0x1}}, 0x20) 14:55:16 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x92, 0x800, 0x4, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0xdf, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@private=0xa010102, 0x7}, {@multicast1, 0xfffff7b7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1000}, {@loopback, 0x1}, {@loopback, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xd7a00000}, {@loopback, 0xffff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8, 0x8000, 0x7d1e, 0x4, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x68, 0x0, 0xbb, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x7, [0x2]}, @noop, @noop]}}}}}) 14:55:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x48000, 0x1}}, 0x20) 14:55:17 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x92, 0x800, 0x4, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0xdf, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@private=0xa010102, 0x7}, {@multicast1, 0xfffff7b7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1000}, {@loopback, 0x1}, {@loopback, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xd7a00000}, {@loopback, 0xffff}]}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8, 0x8000, 0x7d1e, 0x4, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x68, 0x0, 0xbb, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x7, [0x2]}, @noop, @noop]}}}}}) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x92, 0x800, 0x4, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0xdf, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@private=0xa010102, 0x7}, {@multicast1, 0xfffff7b7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1000}, {@loopback, 0x1}, {@loopback, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xd7a00000}, {@loopback, 0xffff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8, 0x8000, 0x7d1e, 0x4, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x68, 0x0, 0xbb, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x7, [0x2]}, @noop, @noop]}}}}}) 14:55:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x48000, 0x1}}, 0x20) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x48000, 0x1}}, 0x20) (async) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x4, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000007c0)=[{}]}) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x4, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000007c0)=[{}]}) 14:55:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 14:55:17 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180), 0x4) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 14:55:17 executing program 1: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000800)={0x0, 0x4, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f00000007c0)=[{}]}) 14:55:17 executing program 1: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:17 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180), 0x4) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000000)) 14:55:17 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) (async) 14:55:17 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x9}}, 0x18) 14:55:17 executing program 1: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:17 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180), 0x4) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:17 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x6, 0x5, 0x5}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000033121aefeb00000000000000000000000b026c18473f00002f6465762976696d320000100000"], 0x2c) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/vmci\x00'}}, 0x33) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x9}}, 0x18) 14:55:17 executing program 4: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:17 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x6, 0x5, 0x5}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000033121aefeb00000000000000000000000b026c18473f00002f6465762976696d320000100000"], 0x2c) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/vmci\x00'}}, 0x33) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x6, 0x5, 0x5}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000033121aefeb00000000000000000000000b026c18473f00002f6465762976696d320000100000"], 0x2c) (async) syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) (async) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/vmci\x00'}}, 0x33) (async) 14:55:17 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:17 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x9}}, 0x18) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) read$FUSE(r0, &(0x7f0000001dc0)={0x2020}, 0x2020) (async) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x9}}, 0x18) (async) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:17 executing program 4: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:17 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:17 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:17 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x10000000001, 0x424f40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) 14:55:17 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x6, 0x5, 0x5}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000033121aefeb00000000000000000000000b026c18473f00002f6465762976696d320000100000"], 0x2c) r4 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/vmci\x00'}}, 0x33) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x6, 0x5, 0x5}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000300000033121aefeb00000000000000000000000b026c18473f00002f6465762976696d320000100000"], 0x2c) (async) syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x400000) (async) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000200)={0x33, 0x6, 0x0, {0x4, 0x5, 0xa, 0x0, '/dev/vmci\x00'}}, 0x33) (async) 14:55:18 executing program 4: r0 = syz_open_dev$audion(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 1: r0 = syz_open_dev$audion(0x0, 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x9}}, 0x18) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xff, 0x4f8e40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x10000000001, 0x424f40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xff, 0x4f8e40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000000), 0xff, 0x4f8e40) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x10000000001, 0x424f40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0xff, 0x4f8e40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000000), 0xff, 0x4f8e40) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:18 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(0x0, 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x5266, 0x3, 0x38416761, 0x9, 0x4, 0x7, 0xa, 0xfe000002, 0x0, 0x4, 0x0, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) connect$bt_sco(r0, &(0x7f0000000100), 0x8) write$rfkill(r0, &(0x7f00000001c0)={0x2, 0x5}, 0x8) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f00006f595f57148efd999c5a2c54d883c5a000000000f700"/48], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3, 0xfffffffa, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0]}, 0x80) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x2, 0x7, 0xc, 0x5, '/dev/audio#\x00'}]}, 0x38) 14:55:18 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x5266, 0x3, 0x38416761, 0x9, 0x4, 0x7, 0xa, 0xfe000002, 0x0, 0x4, 0x0, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) connect$bt_sco(r0, &(0x7f0000000100), 0x8) write$rfkill(r0, &(0x7f00000001c0)={0x2, 0x5}, 0x8) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f00006f595f57148efd999c5a2c54d883c5a000000000f700"/48], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3, 0xfffffffa, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0]}, 0x80) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x5266, 0x3, 0x38416761, 0x9, 0x4, 0x7, 0xa, 0xfe000002, 0x0, 0x4, 0x0, 0x4}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000100), 0x8) (async) write$rfkill(r0, &(0x7f00000001c0)={0x2, 0x5}, 0x8) (async) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f00006f595f57148efd999c5a2c54d883c5a000000000f700"/48], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3, 0xfffffffa, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0]}, 0x80) (async) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x200000ac) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x2, 0x7, 0xc, 0x5, '/dev/audio#\x00'}]}, 0x38) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x2, 0x7, 0xc, 0x5, '/dev/audio#\x00'}]}, 0x38) (async) 14:55:18 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x5266, 0x3, 0x38416761, 0x9, 0x4, 0x7, 0xa, 0xfe000002, 0x0, 0x4, 0x0, 0x4}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000100), 0x8) (async, rerun: 32) write$rfkill(r0, &(0x7f00000001c0)={0x2, 0x5}, 0x8) (rerun: 32) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff0f00006f595f57148efd999c5a2c54d883c5a000000000f700"/48], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x7e, &(0x7f0000000280)=""/126, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x3, 0xfffffffa, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, r0]}, 0x80) 14:55:18 executing program 5: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000180), 0x4) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x92, 0x800, 0x4, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0xdf, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@private=0xa010102, 0x7}, {@multicast1, 0xfffff7b7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x8}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f}]}, @timestamp_prespec={0x44, 0x3c, 0x34, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1000}, {@loopback, 0x1}, {@loopback, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xd7a00000}, {@loopback, 0xffff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x8, 0x8000, 0x7d1e, 0x4, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x68, 0x0, 0xbb, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x7, [0x2]}, @noop, @noop]}}}}}) 14:55:18 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x2, 0x7, 0xc, 0x5, '/dev/audio#\x00'}]}, 0x38) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x2) write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:18 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000180), 0x4) 14:55:18 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x8800000) 14:55:18 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x2) write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x2) (async) write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:18 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0xfffffffffffffcf1) 14:55:18 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000180), 0x4) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r2, 0x7b3, &(0x7f0000000000)) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xa2c020, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x62, 0x63, 0x39, 0x37, 0x34, 0x38], 0x2d, [0x65, 0x64, 0x32, 0x34], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x61, 0x66, 0x66, 0x62], 0x2d, [0x35, 0x33, 0x61, 0x65, 0x32, 0x65, 0x66, 0x31]}}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000440)="e5e9fdee0f8ee512a915166411c376427bf2833407e3be54b146ff4d2bc49f14c66291ac2c489bed2eab5b23c3063eaa9be29b596d29cbe47e295e5db2423c6c8306e2bbfebbcf6f245afa9c01b3d61de6a348ac5e4938fb13e19781483160719388191659e2f8ff17f268cf9233f1a2e7927f5381a193e623e728be9c9dc15f7c222e64974b222bd475b12b205f872efd3193c09f6f5da14f02ec127f3fa365a515249f2e7f70b081dc3ec0fdce5a813d2632bc9f7e8d956007e1b43ef32417f259adf6f11327a3f0455d998204b4586cafc217d2") r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 14:55:18 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r1, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:18 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0xfffffffffffffcf1) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0xfffffffffffffcf1) (async) 14:55:18 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, &(0x7f0000005e40)={0x2020, 0x0, 0x0}, 0x206d) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x2) (async, rerun: 64) write$yama_ptrace_scope(r0, &(0x7f0000000080)='2\x00', 0x2) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x48000, 0x1}}, 0x20) 14:55:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$yama_ptrace_scope(r4, &(0x7f0000000080)='1\x00', 0x2) 14:55:18 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:18 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\xfe'}}, 0x2c) 14:55:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$yama_ptrace_scope(r4, &(0x7f0000000080)='1\x00', 0x2) 14:55:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:55:19 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:19 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 64) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0xfffffffffffffcf1) 14:55:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0x6}}, 0x18) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:19 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) write$yama_ptrace_scope(r4, &(0x7f0000000080)='1\x00', 0x2) 14:55:19 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) 14:55:19 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) 14:55:19 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:19 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000100)=0x2) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) [ 1880.250340] oom_reaper: reaped process 25333 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1880.274972] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1880.287428] systemd-journal cpuset=/ mems_allowed=0-1 [ 1880.292703] CPU: 0 PID: 24753 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1880.300672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1880.310043] Call Trace: [ 1880.312642] dump_stack+0x1fc/0x2ef [ 1880.316290] dump_header+0x15d/0xc3f [ 1880.320009] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1880.325122] ? ___ratelimit+0x319/0x590 [ 1880.329101] oom_kill_process.cold+0x10/0x692 [ 1880.333601] ? check_preemption_disabled+0x41/0x280 [ 1880.338626] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1880.343910] out_of_memory+0x1072/0x1390 [ 1880.348080] ? oom_killer_disable+0x270/0x270 [ 1880.352832] ? mutex_trylock+0x15f/0x1a0 [ 1880.356889] __alloc_pages_nodemask+0x23a2/0x2890 [ 1880.361720] ? find_get_entry+0x4cd/0x8a0 [ 1880.365856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1880.371149] alloc_pages_current+0x193/0x2a0 [ 1880.375542] filemap_fault+0x146e/0x2180 [ 1880.380031] ext4_filemap_fault+0x84/0xb0 [ 1880.384251] __do_fault+0x10b/0x4b0 [ 1880.387862] __handle_mm_fault+0x273b/0x41c0 [ 1880.392254] ? vm_insert_page+0x9c0/0x9c0 [ 1880.396658] ? check_preemption_disabled+0x41/0x280 [ 1880.401659] handle_mm_fault+0x436/0xb10 [ 1880.405727] __do_page_fault+0x68e/0xd60 [ 1880.409902] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1880.414936] ? spurious_fault+0x840/0x840 [ 1880.419164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1880.424198] ? page_fault+0x8/0x30 [ 1880.427826] page_fault+0x1e/0x30 [ 1880.431278] RIP: 0033:0x7fc684b092e3 [ 1880.435065] Code: Bad RIP value. [ 1880.438414] RSP: 002b:00007ffef9536488 EFLAGS: 00010246 [ 1880.443845] RAX: 0000000000000001 RBX: 00005629896a11e0 RCX: 00007fc684b092e3 [ 1880.451117] RDX: 0000000000000013 RSI: 00007ffef9536490 RDI: 000000000000000c [ 1880.458472] RBP: 00007ffef9536680 R08: 00007ffef95fc000 R09: 000001dfd0d6f5e8 [ 1880.465746] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef9536490 [ 1880.473022] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f13505a870fb [ 1880.484593] Mem-Info: [ 1880.487036] active_anon:15426 inactive_anon:79944 isolated_anon:0 [ 1880.487036] active_file:13 inactive_file:14 isolated_file:0 [ 1880.487036] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1880.487036] slab_reclaimable:14304 slab_unreclaimable:127880 [ 1880.487036] mapped:22145 shmem:80951 pagetables:558 bounce:0 [ 1880.487036] free:13859 free_pcp:276 free_cma:0 [ 1880.498530] syz-executor.1: vmalloc: allocation failure, allocated 1623691264 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1880.525925] Node 0 active_anon:56720kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1880.563049] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1880.565669] Node 1 active_anon:4984kB inactive_anon:293424kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:295624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.568187] CPU: 1 PID: 25333 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1880.599022] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.603386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1880.603391] Call Trace: [ 1880.603416] dump_stack+0x1fc/0x2ef [ 1880.603435] warn_alloc.cold+0x7b/0x18f [ 1880.603453] ? zone_watermark_ok_safe+0x260/0x260 [ 1880.603474] ? policy_node+0xeb/0x140 [ 1880.603490] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 1880.603513] __vmalloc_area_node+0x4fd/0x780 [ 1880.635290] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1880.639164] ? __vmalloc_node_range+0x180/0x180 [ 1880.641872] Node 0 DMA32 free:18332kB min:35996kB low:44992kB high:53988kB active_anon:56720kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1868kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.645425] ? _raw_spin_unlock+0x29/0x40 [ 1880.649364] lowmem_reserve[]: 0 0 1 1 1 [ 1880.654195] ? __get_vm_area_node+0x2e2/0x3a0 [ 1880.654215] __vmalloc_node_range+0xed/0x180 [ 1880.654231] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1880.654245] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1880.654257] vmalloc_user+0x70/0xe0 [ 1880.654271] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1880.654289] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1880.660416] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.662898] __vb2_queue_alloc+0x472/0xe60 [ 1880.662923] vb2_core_create_bufs+0x273/0x7e0 [ 1880.662938] ? __vb2_queue_free+0x870/0x870 [ 1880.662956] ? __video_do_ioctl+0x632/0xcd0 [ 1880.667350] lowmem_reserve[]: 0 0 0 0 0 [ 1880.672358] ? __mutex_lock+0x368/0x1190 [ 1880.672376] vb2_create_bufs+0x332/0x620 [ 1880.672394] ? mark_held_locks+0xf0/0xf0 [ 1880.672409] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1880.678086] Node 1 Normal free:27220kB min:53876kB low:67344kB high:80812kB active_anon:4984kB inactive_anon:293424kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.705860] ? _raw_spin_unlock_irqrestore+0xaf/0xe0 [ 1880.705877] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1880.705898] v4l_create_bufs+0xb2/0x160 [ 1880.705916] __video_do_ioctl+0x49a/0xcd0 [ 1880.705934] ? v4l_querycap+0x340/0x340 [ 1880.705951] ? __might_fault+0x192/0x1d0 [ 1880.705967] ? v4l_querycap+0x340/0x340 [ 1880.705982] video_usercopy+0x13f/0xfa0 [ 1880.706001] ? v4l_enumstd+0x60/0x60 [ 1880.713445] lowmem_reserve[]: 0 0 0 0 0 [ 1880.714106] ? do_futex+0x171/0x1880 [ 1880.720807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 1880.722977] ? mark_held_locks+0xf0/0xf0 [ 1880.722995] ? debug_check_no_obj_freed+0x201/0x490 [ 1880.723017] ? video_usercopy+0xfa0/0xfa0 [ 1880.723028] v4l2_ioctl+0x147/0x1a0 [ 1880.723043] ? video_devdata+0xa0/0xa0 [ 1880.727345] Node 0 DMA32: 996*4kB (UME) 549*8kB (ME) 205*16kB (M) 71*32kB (UM) 25*64kB (M) 12*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18344kB [ 1880.732711] do_vfs_ioctl+0xcdb/0x12e0 [ 1880.732727] ? lock_downgrade+0x720/0x720 [ 1880.732742] ? check_preemption_disabled+0x41/0x280 [ 1880.732754] ? ioctl_preallocate+0x200/0x200 [ 1880.732770] ? __fget+0x356/0x510 [ 1880.732784] ? do_dup2+0x450/0x450 [ 1880.732798] ? __se_sys_futex+0x298/0x3b0 [ 1880.732819] ksys_ioctl+0x9b/0xc0 [ 1880.739072] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1880.740739] __x64_sys_ioctl+0x6f/0xb0 [ 1880.745091] Node 1 Normal: 420*4kB (UME) 387*8kB (UME) 297*16kB (UME) 114*32kB (UME) 25*64kB (UME) 6*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 2*4096kB (U) = 27320kB [ 1880.771031] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1880.771045] do_syscall_64+0xf9/0x620 [ 1880.771065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1880.771077] RIP: 0033:0x7fbcd48050a9 [ 1880.771091] Code: Bad RIP value. [ 1880.776164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.779956] RSP: 002b:00007fbcd2d77168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1880.784320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.788565] RAX: ffffffffffffffda RBX: 00007fbcd4924f80 RCX: 00007fbcd48050a9 [ 1880.795710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1880.796563] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1880.800608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1880.804639] RBP: 00007fbcd4860ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1880.804646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.804653] R13: 00007ffd122e965f R14: 00007fbcd2d77300 R15: 0000000000022000 [ 1880.811478] Mem-Info: [ 1880.859603] 80978 total pagecache pages [ 1880.867445] active_anon:15426 inactive_anon:79944 isolated_anon:0 [ 1880.867445] active_file:13 inactive_file:14 isolated_file:0 [ 1880.867445] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1880.867445] slab_reclaimable:14304 slab_unreclaimable:127880 [ 1880.867445] mapped:22145 shmem:80951 pagetables:558 bounce:0 [ 1880.867445] free:14109 free_pcp:0 free_cma:0 [ 1880.876721] 0 pages in swap cache [ 1880.879957] Node 0 active_anon:56720kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.880755] Swap cache stats: add 0, delete 0, find 0/0 [ 1880.887634] Node 1 active_anon:4984kB inactive_anon:293424kB active_file:12kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28276kB dirty:0kB writeback:0kB shmem:295624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1880.904896] Free swap = 0kB [ 1880.912475] Node 0 DMA free:10876kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.915436] Total swap = 0kB [ 1880.917724] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1880.942476] 2097051 pages RAM [ 1880.951822] Node 0 DMA32 free:18332kB min:35996kB low:44992kB high:53988kB active_anon:56720kB inactive_anon:26352kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1868kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1880.957901] 0 pages HighMem/MovableOnly [ 1880.967398] lowmem_reserve[]: 0 0 1 1 1 [ 1880.983421] 369649 pages reserved [ 1881.002598] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.012342] 0 pages cma reserved [ 1881.019865] lowmem_reserve[]: 0 0 0 0 0 [ 1881.036754] Unreclaimable slab info: [ 1881.049576] Node 1 Normal free:27220kB min:53876kB low:67344kB high:80812kB active_anon:4984kB inactive_anon:293424kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:364kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1881.054698] Name Used Total [ 1881.058739] lowmem_reserve[]: 0 0 0 0 0 [ 1881.066043] pid_2 88KB 92KB [ 1881.085514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10880kB [ 1881.092836] batadv_tt_change_cache 0KB 3KB [ 1881.103906] Node 0 DMA32: 996*4kB (UME) 549*8kB (ME) 205*16kB (M) 71*32kB (UM) 25*64kB (M) 12*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18344kB [ 1881.144435] batadv_tl_cache 4KB 16KB [ 1881.177262] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1881.212048] TIPC 10KB 22KB [ 1881.238306] Node 1 Normal: 420*4kB (UME) 387*8kB (UME) 297*16kB (UME) 114*32kB (UME) 25*64kB (UME) 6*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 2*4096kB (U) = 27320kB [ 1881.244495] SCTPv6 14KB 24KB [ 1881.285127] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.319901] DCCPv6 30KB 75KB [ 1881.323845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.357126] DCCP 16KB 28KB [ 1881.367349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1881.386964] RXRPC 39KB 52KB [ 1881.402317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1881.402325] 80978 total pagecache pages [ 1881.404537] 0 pages in swap cache [ 1881.418937] rxrpc_call_jar 78KB 110KB [ 1881.447193] Swap cache stats: add 0, delete 0, find 0/0 [ 1881.459175] bridge_fdb_cache 9KB 23KB [ 1881.472221] Free swap = 0kB [ 1881.484208] fib6_nodes 160KB 276KB [ 1881.488532] Total swap = 0kB [ 1881.498020] ip6_dst_cache 211KB 611KB [ 1881.498034] RAWv6 70KB 101KB [ 1881.507943] 2097051 pages RAM [ 1881.515476] UDPv6 157KB 165KB [ 1881.521016] 0 pages HighMem/MovableOnly [ 1881.526060] TCPv6 30KB 54KB [ 1881.529009] 369649 pages reserved [ 1881.539791] nf_conntrack 13KB 18KB [ 1881.550691] 0 pages cma reserved [ 1881.555703] t10_alua_lu_gp_cache 0KB 3KB [ 1881.579371] sd_ext_cdb 0KB 7KB [ 1881.584817] scsi_sense_cache 1056KB 1060KB [ 1881.590187] virtio_scsi_cmd 16KB 16KB [ 1881.598801] sgpool-128 8KB 8KB [ 1881.604725] sgpool-64 4KB 12KB [ 1881.610095] sgpool-32 2KB 15KB [ 1881.618713] sgpool-16 1KB 7KB [ 1881.624151] sgpool-8 0KB 7KB [ 1881.629541] mqueue_inode_cache 10KB 30KB [ 1881.638768] bio_post_read_ctx 14KB 15KB [ 1881.646326] bio-2 14KB 15KB [ 1881.659053] jfs_mp 7KB 7KB [ 1881.665276] fuse_request 4KB 8KB [ 1881.670678] cifs_small_rq 15KB 16KB [ 1881.684576] cifs_request 67KB 67KB [ 1881.689964] cifs_mpx_ids 0KB 7KB [ 1881.697791] nfs_commit_data 3KB 14KB [ 1881.709036] nfs_write_data 34KB 44KB [ 1881.717095] ext4_system_zone 1KB 7KB [ 1881.728152] bio-1 1KB 7KB [ 1881.736013] pid_namespace 2KB 11KB [ 1881.749094] rpc_buffers 17KB 25KB [ 1881.757037] rpc_tasks 2KB 7KB [ 1881.768396] UNIX 466KB 607KB [ 1881.776227] tcp_bind_bucket 1KB 4KB [ 1881.787603] ip_fib_trie 23KB 47KB [ 1881.795461] ip_fib_alias 112KB 193KB [ 1881.800843] ip_dst_cache 4KB 24KB [ 1881.815060] RAW 42KB 67KB [ 1881.820461] UDP 43KB 81KB [ 1881.830097] TCP 25KB 39KB [ 1881.839447] hugetlbfs_inode_cache 3KB 15KB [ 1881.855813] fscache_cookie_jar 1KB 7KB [ 1881.864798] eventpoll_pwq 21KB 55KB [ 1881.870183] eventpoll_epi 39KB 66KB [ 1881.880391] inotify_inode_mark 28KB 35KB [ 1881.904244] request_queue 199KB 199KB [ 1881.909643] blkdev_requests 1KB 3KB [ 1881.919124] blkdev_ioc 19KB 38KB [ 1881.928162] bio-0 661KB 761KB [ 1881.938353] biovec-max 1427KB 1493KB [ 1881.949374] biovec-64 779KB 834KB [ 1881.959706] biovec-16 103KB 131KB [ 1881.968496] bio_integrity_payload 1KB 8KB [ 1881.979339] khugepaged_mm_slot 16KB 23KB [ 1881.988245] uid_cache 0KB 4KB [ 1881.998381] dmaengine-unmap-2 0KB 3KB [ 1882.006999] skbuff_fclone_cache 194KB 213KB [ 1882.017499] skbuff_head_cache 3961KB 7758KB [ 1882.026314] configfs_dir_cache 3KB 7KB [ 1882.036590] file_lock_cache 131KB 138KB [ 1882.045373] file_lock_ctx 9KB 15KB [ 1882.058215] fsnotify_mark_connector 14KB 19KB [ 1882.067523] net_namespace 52KB 52KB [ 1882.077621] shmem_inode_cache 8368KB 8384KB [ 1882.086617] task_delay_info 207KB 359KB [ 1882.097058] taskstats 111KB 114KB [ 1882.106451] proc_dir_entry 735KB 885KB [ 1882.116832] pde_opener 8KB 46KB [ 1882.125624] seq_file 298KB 378KB [ 1882.135707] sigqueue 47KB 70KB [ 1882.144826] kernfs_node_cache 18234KB 18892KB [ 1882.150200] mnt_cache 172KB 204KB [ 1882.166763] filp 6084KB 8550KB [ 1882.174586] names_cache 151665KB 151725KB [ 1882.179985] iint_cache 31KB 51KB [ 1882.194288] key_jar 5KB 15KB [ 1882.199670] uts_namespace 2KB 11KB [ 1882.207109] nsproxy 1KB 7KB [ 1882.215719] vm_area_struct 3745KB 3909KB [ 1882.222835] mm_struct 606KB 650KB [ 1882.228443] fs_cache 132KB 300KB [ 1882.237223] files_cache 481KB 862KB [ 1882.244312] signal_cache 1093KB 1933KB [ 1882.250369] sighand_cache 573KB 617KB [ 1882.262971] task_struct 7000KB 7088KB [ 1882.268500] cred_jar 1443KB 2800KB [ 1882.276344] anon_vma_chain 1286KB 1488KB [ 1882.284639] anon_vma 157KB 292KB [ 1882.290025] pid 64KB 232KB [ 1882.303419] Acpi-Operand 156KB 198KB [ 1882.308972] Acpi-ParseExt 8KB 11KB [ 1882.316785] Acpi-Parse 41KB 47KB [ 1882.324571] Acpi-State 52KB 63KB [ 1882.330091] Acpi-Namespace 20KB 27KB [ 1882.338014] numa_policy 0KB 3KB [ 1882.346521] debug_objects_cache 1739KB 1883KB [ 1882.354481] trace_event_file 297KB 298KB [ 1882.362127] ftrace_event_field 398KB 401KB [ 1882.367745] pool_workqueue 121KB 148KB [ 1882.373381] page->ptl 691KB 956KB [ 1882.378930] kmalloc-2097152 2050KB 2050KB [ 1882.384526] kmalloc-524288 2056KB 2056KB [ 1882.390030] kmalloc-262144 1290KB 1290KB [ 1882.396382] kmalloc-131072 650KB 650KB [ 1882.402808] kmalloc-65536 1848KB 2310KB [ 1882.408317] kmalloc-32768 1650KB 1815KB [ 1882.413912] kmalloc-16384 973KB 1155KB [ 1882.419407] kmalloc-8192 5214KB 5263KB [ 1882.424989] kmalloc-4096 19936KB 19992KB [ 1882.431189] kmalloc-2048 11647KB 14700KB [ 1882.437315] kmalloc-1024 8323KB 14104KB [ 1882.443329] kmalloc-512 9335KB 15626KB [ 1882.449312] kmalloc-256 4057KB 6060KB [ 1882.454886] kmalloc-128 1015KB 1586KB [ 1882.466784] kmalloc-96 3255KB 4368KB [ 1882.472274] kmalloc-64 2743KB 3812KB [ 1882.477650] kmalloc-32 1927KB 2512KB [ 1882.490391] kmalloc-192 1756KB 2860KB [ 1882.497713] kmem_cache 177KB 183KB [ 1882.508585] Out of memory (oom_kill_allocating_task): Kill process 24753 (systemd-journal) score 0 or sacrifice child [ 1882.527514] Killed process 24753 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1552kB [ 1882.540711] oom_reaper: reaped process 24753 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1552kB [ 1882.700824] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1882.716609] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1882.743326] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1882.750372] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1882.765914] systemd[1]: Stopped Journal Service. [ 1882.798158] systemd[1]: Starting Journal Service... [ 1883.082401] systemd-journald[25372]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1883.589319] systemd[1]: Started Journal Service. 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) (async) 14:55:30 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) (async) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000100)=0x2) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000100)=0x2) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000000c0)) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000240)) 14:55:30 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) (async) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f00000000c0)=[@enter_looper, @request_death={0x400c630e, 0x3}, @acquire, @free_buffer={0x40086303, r2}], 0x16, 0x0, &(0x7f0000000100)="a1a804263a4bebac8971d9734fe3f11d710ee3620d2f"}) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000100)=0x2) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x20c0) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2c) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async, rerun: 64) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f00000000c0)=[@enter_looper, @request_death={0x400c630e, 0x3}, @acquire, @free_buffer={0x40086303, r2}], 0x16, 0x0, &(0x7f0000000100)="a1a804263a4bebac8971d9734fe3f11d710ee3620d2f"}) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) socket(0x29, 0x800, 0xc6) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4, 0x10dac1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x5) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x2c) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) (async) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f00000000c0)=[@enter_looper, @request_death={0x400c630e, 0x3}, @acquire, @free_buffer={0x40086303, r2}], 0x16, 0x0, &(0x7f0000000100)="a1a804263a4bebac8971d9734fe3f11d710ee3620d2f"}) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000100)=0x2) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aefe1c455f47f72c00000003000000200010000000000000000000000000000b000000000000002f6465762f76696d326d00002c004d66f8b477246105c4e413929c2c3f891468e9a8e7ef870ed5751191"], 0x2c) 14:55:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4, 0x10dac1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x5) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f0000000040)={@any, 0x8ad}) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aefe1c455f47f72c00000003000000200010000000000000000000000000000b000000000000002f6465762f76696d326d00002c004d66f8b477246105c4e413929c2c3f891468e9a8e7ef870ed5751191"], 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aefe1c455f47f72c00000003000000200010000000000000000000000000000b000000000000002f6465762f76696d326d00002c004d66f8b477246105c4e413929c2c3f891468e9a8e7ef870ed5751191"], 0x2c) (async) 14:55:30 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) 14:55:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x4, 0x10dac1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x5) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) fstat(r3, &(0x7f00000001c0)) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000680)=""/4096) 14:55:30 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aefe1c455f47f72c00000003000000200010000000000000000000000000000b000000000000002f6465762f76696d326d00002c004d66f8b477246105c4e413929c2c3f891468e9a8e7ef870ed5751191"], 0x2c) 14:55:30 executing program 0: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000030000000000000000eeffff0200000000d5000009ffffffe70000007469636b5ff3746f700000"], 0x2b) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='generic_add_lease\x00', r1}, 0x10) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x80000000, 0x10000, 0x218, 0x0, {0x1, 0x100, 0x2, 0x10000, 0x20, 0x64, 0x80000001, 0x40, 0xfffffffb, 0x8000, 0x9, r2, 0xee00, 0x3, 0x1000}}, {0x0, 0x4}}}, 0xa0) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) 14:55:30 executing program 0: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000030000000000000000eeffff0200000000d5000009ffffffe70000007469636b5ff3746f700000"], 0x2b) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='generic_add_lease\x00', r1}, 0x10) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x80000000, 0x10000, 0x218, 0x0, {0x1, 0x100, 0x2, 0x10000, 0x20, 0x64, 0x80000001, 0x40, 0xfffffffb, 0x8000, 0x9, r2, 0xee00, 0x3, 0x1000}}, {0x0, 0x4}}}, 0xa0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000030000000000000000eeffff0200000000d5000009ffffffe70000007469636b5ff3746f700000"], 0x2b) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='generic_add_lease\x00', r1}, 0x10) (async) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x80000000, 0x10000, 0x218, 0x0, {0x1, 0x100, 0x2, 0x10000, 0x20, 0x64, 0x80000001, 0x40, 0xfffffffb, 0x8000, 0x9, r2, 0xee00, 0x3, 0x1000}}, {0x0, 0x4}}}, 0xa0) (async) 14:55:30 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:30 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0xbd, 0x3, 0x0, {0x0, 0x9c, 0x0, '/$ev\xdd m2mu\xbd|\xe8\x1f\b\xc4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xe5\x1c?x>-\xe3\x13\xe9\xaf\xf0\x1d\x8a\x9f\xb9t)\xa9D&S\n\x9d\xd7gjv\xf9\xf2\xe2\x94N:J\xeb\xf4\f\t\x90\x1b\x9ej\x8d\x87\xa5\x9a\xc9\xdc\xfa\xbe\xa6\xa1\xd3\tn\xe6\xba\x1a:\r\xb4\xda\x9f\x1a\xf0\xfah\xcf\xc9\tm\x14\xd2}\x8f{\x12\'Z\x9e-\xab\xde\xd5u\xddy\x80w\xca\xcd\xd3\xad\xf6\xd5p85\xbc\xd9\xfd\xfb\'\xe6z\xdfw%jV\x1b\xe5\xba\xae+_\x98\x13c\'\xd7\x92YT\xa4\n\x84\rV'}}, 0xbd) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x901a}}, 0x18) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) 14:55:30 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0xbd, 0x3, 0x0, {0x0, 0x9c, 0x0, '/$ev\xdd m2mu\xbd|\xe8\x1f\b\xc4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xe5\x1c?x>-\xe3\x13\xe9\xaf\xf0\x1d\x8a\x9f\xb9t)\xa9D&S\n\x9d\xd7gjv\xf9\xf2\xe2\x94N:J\xeb\xf4\f\t\x90\x1b\x9ej\x8d\x87\xa5\x9a\xc9\xdc\xfa\xbe\xa6\xa1\xd3\tn\xe6\xba\x1a:\r\xb4\xda\x9f\x1a\xf0\xfah\xcf\xc9\tm\x14\xd2}\x8f{\x12\'Z\x9e-\xab\xde\xd5u\xddy\x80w\xca\xcd\xd3\xad\xf6\xd5p85\xbc\xd9\xfd\xfb\'\xe6z\xdfw%jV\x1b\xe5\xba\xae+_\x98\x13c\'\xd7\x92YT\xa4\n\x84\rV'}}, 0xbd) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x901a}}, 0x18) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 14:55:30 executing program 0: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000030000000000000000eeffff0200000000d5000009ffffffe70000007469636b5ff3746f700000"], 0x2b) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='generic_add_lease\x00', r1}, 0x10) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x80000000, 0x10000, 0x218, 0x0, {0x1, 0x100, 0x2, 0x10000, 0x20, 0x64, 0x80000001, 0x40, 0xfffffffb, 0x8000, 0x9, r2, 0xee00, 0x3, 0x1000}}, {0x0, 0x4}}}, 0xa0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b000000030000000000000000eeffff0200000000d5000009ffffffe70000007469636b5ff3746f700000"], 0x2b) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='generic_add_lease\x00', r1}, 0x10) (async) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)) (async) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x80000000, 0x10000, 0x218, 0x0, {0x1, 0x100, 0x2, 0x10000, 0x20, 0x64, 0x80000001, 0x40, 0xfffffffb, 0x8000, 0x9, r2, 0xee00, 0x3, 0x1000}}, {0x0, 0x4}}}, 0xa0) (async) 14:55:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) 14:55:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) socket(0x38, 0xa, 0x400) 14:55:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:30 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0xbd, 0x3, 0x0, {0x0, 0x9c, 0x0, '/$ev\xdd m2mu\xbd|\xe8\x1f\b\xc4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xe5\x1c?x>-\xe3\x13\xe9\xaf\xf0\x1d\x8a\x9f\xb9t)\xa9D&S\n\x9d\xd7gjv\xf9\xf2\xe2\x94N:J\xeb\xf4\f\t\x90\x1b\x9ej\x8d\x87\xa5\x9a\xc9\xdc\xfa\xbe\xa6\xa1\xd3\tn\xe6\xba\x1a:\r\xb4\xda\x9f\x1a\xf0\xfah\xcf\xc9\tm\x14\xd2}\x8f{\x12\'Z\x9e-\xab\xde\xd5u\xddy\x80w\xca\xcd\xd3\xad\xf6\xd5p85\xbc\xd9\xfd\xfb\'\xe6z\xdfw%jV\x1b\xe5\xba\xae+_\x98\x13c\'\xd7\x92YT\xa4\n\x84\rV'}}, 0xbd) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x901a}}, 0x18) 14:55:31 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) 14:55:31 executing program 5: openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket(0x38, 0xa, 0x400) 14:55:31 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x2400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) 14:55:31 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x2400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x2400) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) (async) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) 14:55:31 executing program 5: socket(0x38, 0xa, 0x400) 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) bind$bt_sco(r1, &(0x7f0000000000), 0x8) 14:55:31 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000300)={0x2, 0x1, 0x3, 0x9b, 0x3, 0x2}) r1 = socket(0x38, 0xa, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001dc0)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000001c0)='tick_stop\x00\\s\a-I\xc6\xaf\x82Xs\xad\xc0\x8d\r\x98/\xcb\xda}\xdb\xcf\xbfc\xc8\xca&]\xe0\xe5\x06ZlE|5Y\x9d\x9f\xcf\x9c\xfc\xc8\x0e\x97\xb7Du\xedko\xe0\xe6\xdf\xfe\x94', 0x41) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x2400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x2400) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) (async) 14:55:31 executing program 5: socket(0x0, 0xa, 0x400) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:31 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) 14:55:31 executing program 5: socket(0x0, 0xa, 0x400) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffffffffffff, 0x80000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000240)) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) pselect6(0x40, &(0x7f0000000200)={0x10000, 0x1, 0x4, 0x7ff, 0x62, 0x9, 0x3ff, 0x1}, &(0x7f00000002c0)={0x7ff, 0x3, 0x1, 0x100000, 0x3, 0x31, 0x4, 0xfffffffffffffffe}, &(0x7f0000000300)={0x7, 0x7, 0x8000000000000000, 0x4, 0x5, 0x101, 0xfff, 0x1}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x39f4]}, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03975b18f8959847ef0a7ea68185f427e603", @ANYRES64=r3, @ANYRESOCT=r3], 0xfa, 0x0, &(0x7f0000000040)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:31 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 5: socket(0x0, 0xa, 0x400) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffffffffffff, 0x80000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000240)) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) pselect6(0x40, &(0x7f0000000200)={0x10000, 0x1, 0x4, 0x7ff, 0x62, 0x9, 0x3ff, 0x1}, &(0x7f00000002c0)={0x7ff, 0x3, 0x1, 0x100000, 0x3, 0x31, 0x4, 0xfffffffffffffffe}, &(0x7f0000000300)={0x7, 0x7, 0x8000000000000000, 0x4, 0x5, 0x101, 0xfff, 0x1}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x39f4]}, 0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03975b18f8959847ef0a7ea68185f427e603", @ANYRES64=r3, @ANYRESOCT=r3], 0xfa, 0x0, &(0x7f0000000040)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") (async, rerun: 64) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) (rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async, rerun: 64) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) (rerun: 64) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffffffffffff, 0x80000) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000240)) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) pselect6(0x40, &(0x7f0000000200)={0x10000, 0x1, 0x4, 0x7ff, 0x62, 0x9, 0x3ff, 0x1}, &(0x7f00000002c0)={0x7ff, 0x3, 0x1, 0x100000, 0x3, 0x31, 0x4, 0xfffffffffffffffe}, &(0x7f0000000300)={0x7, 0x7, 0x8000000000000000, 0x4, 0x5, 0x101, 0xfff, 0x1}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x39f4]}, 0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03975b18f8959847ef0a7ea68185f427e603", @ANYRES64=r3, @ANYRESOCT=r3], 0xfa, 0x0, &(0x7f0000000040)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:31 executing program 5: socket(0x38, 0x0, 0x400) 14:55:31 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:31 executing program 5: socket(0x38, 0x0, 0x0) 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:31 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) 14:55:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x6, 0xb, 0x0, '/0\x97\xd1\xcc\x04\x00\x00m\x00\x00'}}, 0x2c) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) getegid() 14:55:31 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) 14:55:31 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)=0x5) 14:55:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x6, 0xb, 0x0, '/0\x97\xd1\xcc\x04\x00\x00m\x00\x00'}}, 0x2c) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:55:31 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:31 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) 14:55:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x6, 0xb, 0x0, '/0\x97\xd1\xcc\x04\x00\x00m\x00\x00'}}, 0x2c) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x6, 0xb, 0x0, '/0\x97\xd1\xcc\x04\x00\x00m\x00\x00'}}, 0x2c) (async) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) 14:55:31 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = getegid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x9, 0x810c, 0x6, {0x3, 0x80, 0x40000000000, 0x8, 0xfffffffffffffff7, 0x6, 0x1000, 0x7, 0x3, 0x2000, 0xfff, r4, r5, 0x6, 0x15}}, {0x0, 0x2}}}, 0xa0) 14:55:31 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 14:55:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)=0x5) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)=0x5) (async) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0xa8a01) 14:55:32 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ffeffff03000000000000000000000004000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:32 executing program 1: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)=0x5) 14:55:32 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ffeffff03000000000000000000000004000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:32 executing program 2: syz_open_dev$audion(0x0, 0x1, 0xa8a01) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:32 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ffeffff03000000000000000000000004000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:32 executing program 2: syz_open_dev$audion(0x0, 0x1, 0xa8a01) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) statx(0xffffffffffffff9c, 0x0, 0x400, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/vim2m\x00'}}]}}) 14:55:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:32 executing program 2: syz_open_dev$audion(0x0, 0x1, 0xa8a01) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x400002) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x0, 0x81}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r1}, 0x10) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/vim2m\x00'}}]}}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/vim2m\x00'}}]}}) (async) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0xa8a01) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x400002) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x0, 0x81}) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r1}, 0x10) 14:55:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x400002) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x4, 0x0, 0x2, 0x0, 0x81}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r1}, 0x10) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0xa8a01) 14:55:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x52, 0x1f, @buffer={0x0, 0x8f, &(0x7f0000000000)=""/143}, &(0x7f00000000c0)="8e3ad2431b02ddcb7aedf154201aaa725f09f73dc14214c5950498b8110f66b3a883f80790c4c9a26a6f6067e38b48f487471bac15578fb1ccc903dd8733cdd702aa2899d87a81964f00b4e3a35ebeccf775", &(0x7f00000001c0)=""/81, 0xff, 0x2, 0x1, &(0x7f0000000240)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0xa8a01) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/vim2m\x00'}}]}}) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:32 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x44, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio#\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/vim2m\x00'}}]}}) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x52, 0x1f, @buffer={0x0, 0x8f, &(0x7f0000000000)=""/143}, &(0x7f00000000c0)="8e3ad2431b02ddcb7aedf154201aaa725f09f73dc14214c5950498b8110f66b3a883f80790c4c9a26a6f6067e38b48f487471bac15578fb1ccc903dd8733cdd702aa2899d87a81964f00b4e3a35ebeccf775", &(0x7f00000001c0)=""/81, 0xff, 0x2, 0x1, &(0x7f0000000240)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x52, 0x1f, @buffer={0x0, 0x8f, &(0x7f0000000000)=""/143}, &(0x7f00000000c0)="8e3ad2431b02ddcb7aedf154201aaa725f09f73dc14214c5950498b8110f66b3a883f80790c4c9a26a6f6067e38b48f487471bac15578fb1ccc903dd8733cdd702aa2899d87a81964f00b4e3a35ebeccf775", &(0x7f00000001c0)=""/81, 0xff, 0x2, 0x1, &(0x7f0000000240)}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000005a6d50900b000000000000002f6465762f76696d326d7c42"], 0x2c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x2, 0x5, {{0x18, 0x4, 0x1, 0x23, 0x60, 0x65, 0x0, 0x3f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @ssrr={0x89, 0xf, 0x48, [@loopback, @loopback, @remote]}, @rr={0x7, 0x23, 0xaf, [@empty, @private=0xa010100, @private=0xa010100, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @local, @multicast1]}, @ra={0x94, 0x4}, @noop]}}}}}) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) 14:55:32 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000005a6d50900b000000000000002f6465762f76696d326d7c42"], 0x2c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x2, 0x5, {{0x18, 0x4, 0x1, 0x23, 0x60, 0x65, 0x0, 0x3f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @ssrr={0x89, 0xf, 0x48, [@loopback, @loopback, @remote]}, @rr={0x7, 0x23, 0xaf, [@empty, @private=0xa010100, @private=0xa010100, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @local, @multicast1]}, @ra={0x94, 0x4}, @noop]}}}}}) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000005a6d50900b000000000000002f6465762f76696d326d7c42"], 0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x2, 0x5, {{0x18, 0x4, 0x1, 0x23, 0x60, 0x65, 0x0, 0x3f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @ssrr={0x89, 0xf, 0x48, [@loopback, @loopback, @remote]}, @rr={0x7, 0x23, 0xaf, [@empty, @private=0xa010100, @private=0xa010100, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @local, @multicast1]}, @ra={0x94, 0x4}, @noop]}}}}}) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) (async) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffe, 0x52, 0x1f, @buffer={0x0, 0x8f, &(0x7f0000000000)=""/143}, &(0x7f00000000c0)="8e3ad2431b02ddcb7aedf154201aaa725f09f73dc14214c5950498b8110f66b3a883f80790c4c9a26a6f6067e38b48f487471bac15578fb1ccc903dd8733cdd702aa2899d87a81964f00b4e3a35ebeccf775", &(0x7f00000001c0)=""/81, 0xff, 0x2, 0x1, &(0x7f0000000240)}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x880, 0x1, 0x8, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x8000009}, 0x48) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x80000000, 0x400402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xb36d02f771d73ac, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x9e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x4d1, 0xdc, &(0x7f00000001c0)=""/220, 0x41000, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xa, 0x81, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2, r0, r3, r0, r0, r0, r4, r0, r0]}, 0x80) 14:55:32 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:32 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) 14:55:32 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ffeffff03000000000000000000000004000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x880, 0x1, 0x8, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x8000009}, 0x48) (async) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x80000000, 0x400402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xb36d02f771d73ac, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x9e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x4d1, 0xdc, &(0x7f00000001c0)=""/220, 0x41000, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xa, 0x81, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2, r0, r3, r0, r0, r0, r4, r0, r0]}, 0x80) 14:55:32 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000005a6d50900b000000000000002f6465762f76696d326d7c42"], 0x2c) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x2, 0x5, {{0x18, 0x4, 0x1, 0x23, 0x60, 0x65, 0x0, 0x3f, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x28}, {[@timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @ssrr={0x89, 0xf, 0x48, [@loopback, @loopback, @remote]}, @rr={0x7, 0x23, 0xaf, [@empty, @private=0xa010100, @private=0xa010100, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @local, @multicast1]}, @ra={0x94, 0x4}, @noop]}}}}}) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) 14:55:32 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) 14:55:32 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x880, 0x1, 0x8, '\x00', 0x0, r0, 0x4, 0x0, 0x0, 0x8000009}, 0x48) (async) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) r4 = syz_open_dev$audion(&(0x7f0000000340), 0x80000000, 0x400402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xb36d02f771d73ac, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@call={0x85, 0x0, 0x0, 0x9e}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x4d1, 0xdc, &(0x7f00000001c0)=""/220, 0x41000, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xa, 0x81, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2, r0, r3, r0, r0, r0, r4, r0, r0]}, 0x80) 14:55:32 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1ffeffff03000000000000000000000004000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x200) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x200) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x200) (async) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x80, &(0x7f0000000180)) (async) geteuid() (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) (async) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x3f, &(0x7f00000000c0)=0x4) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x101000) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1517}, @func, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000240)=""/253, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x2621}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) 14:55:33 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:33 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x200) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x80, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x200) (async) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x80, &(0x7f0000000180)) (async) geteuid() (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10080, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}, {@euid_lt={'euid<', 0xee00}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) (async) 14:55:33 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}], [{@fowner_gt={'fowner>', 0xee00}}]}}) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x3f, &(0x7f00000000c0)=0x4) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async, rerun: 64) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x101000) (async, rerun: 32) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1517}, @func, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000240)=""/253, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x2621}, 0x10}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) 14:55:33 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 14:55:33 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}], [{@fowner_gt={'fowner>', 0xee00}}]}}) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) getegid() (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}], [{@fowner_gt={'fowner>', 0xee00}}]}}) (async) 14:55:33 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}], [{@fowner_gt={'fowner>', 0xee00}}]}}) 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0xd, 0x1}, 0xdece, 0x20, &(0x7f0000000140)={0x1f, 0x16, 0x81, 0x4, 0x1}, 0x8, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, &(0x7f0000000340)="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"}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/audio#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@seclabel}, {@hash}, {@uid_lt}]}}) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r4, {0x9}}, 0x18) 14:55:33 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x3f, &(0x7f00000000c0)=0x4) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x101000) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1517}, @func, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000240)=""/253, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x2621}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x3f, &(0x7f00000000c0)=0x4) (async) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000100), 0x3, 0x101000) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1517}, @func, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000240)=""/253, 0x41100, 0x1, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x2621}, 0x10}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) (async) 14:55:33 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 14:55:33 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0xd, 0x1}, 0xdece, 0x20, &(0x7f0000000140)={0x1f, 0x16, 0x81, 0x4, 0x1}, 0x8, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, &(0x7f0000000340)="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"}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/audio#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@seclabel}, {@hash}, {@uid_lt}]}}) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r4, {0x9}}, 0x18) 14:55:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:33 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 14:55:33 executing program 0: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0xd, 0x1}, 0xdece, 0x20, &(0x7f0000000140)={0x1f, 0x16, 0x81, 0x4, 0x1}, 0x8, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, &(0x7f0000000340)="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"}) (async, rerun: 64) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/audio#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@seclabel}, {@hash}, {@uid_lt}]}}) (async) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r4, {0x9}}, 0x18) 14:55:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:33 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:33 executing program 0: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) (async) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) (async, rerun: 64) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x1, 0x2, 0x4, 0x2, 0x5, {0x0, 0xea60}, {0x8ffe4729bc77ec3f, 0xc, 0xf7, 0x4, 0x1, 0x6, "dc0ee02e"}, 0xb1e, 0x2, {}, 0x2, 0x0, r0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:34 executing program 0: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) (async) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 0: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000011c0)=[{}]}) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000000)={&(0x7f00000001c0)=[0x1000, 0xe2, 0x6, 0xb09, 0x8, 0x6, 0x1, 0x0, 0x3ff, 0x40, 0x0, 0x9, 0x800, 0x31, 0x4270, 0xdb, 0x1, 0x1, 0x0, 0x20, 0x9aa7, 0x23a, 0x4, 0x8, 0x800, 0x3, 0x1, 0x1, 0x1f, 0xfffffffd, 0x9, 0x101, 0xffffffc1, 0x65b, 0x62f1, 0x8, 0x3, 0x800, 0xffffffff, 0xfffffff8, 0x9, 0xb, 0x41, 0x1, 0x2, 0x9, 0x3ff, 0x0, 0x4, 0x5, 0x1, 0x7, 0x3, 0x3, 0x35cd, 0x1, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x0, 0x3, 0x1, 0x1, 0x5, 0xc42, 0x9, 0x1ff, 0x8, 0x3, 0x9d, 0xfff, 0x1, 0xf49d, 0x4, 0xed6, 0x585, 0x4, 0x3, 0xff, 0x80000001, 0xd, 0x94, 0x6, 0x9, 0x3, 0x7f, 0x7, 0x0, 0x6, 0x6, 0x80000001, 0x7fff, 0x2, 0x0, 0x8000, 0x8, 0xca31, 0x2, 0x7, 0xd43, 0x2, 0x2, 0x3, 0x0, 0xd7, 0xffffffff, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8, 0x6, 0x70f, 0x7, 0x7ff, 0x5, 0x1150, 0x5e2, 0x0, 0x1, 0x8, 0x3, 0xef, 0xffffff91, 0x4, 0x4, 0x4, 0x3, 0x5, 0xfffffffd, 0x4, 0x4, 0x649e9d65, 0x0, 0x8000, 0x7fffffff, 0xffffff81, 0x100, 0x1, 0x8, 0xffffffff, 0x2, 0x8001, 0x6, 0x1f, 0xffff8e68, 0x6, 0x400, 0x5, 0x80000001, 0x0, 0x3, 0x40, 0x8, 0x8001, 0x1e, 0x8001, 0x9, 0x73, 0x6, 0x87, 0x8, 0x400, 0x2, 0x2, 0x26, 0x80, 0x800, 0x0, 0x0, 0x400, 0x3, 0x40000000, 0x9, 0xfbf, 0x2, 0x5, 0x0, 0x2, 0x9, 0x0, 0x2, 0x8, 0x40, 0x6, 0x7fff, 0xa7, 0x9, 0xd69, 0x8000, 0xfff, 0x1ff, 0x761, 0x415, 0x3f, 0x800, 0x328, 0x9, 0x0, 0x7, 0x6, 0x7fff, 0x2, 0x8000, 0x5bbf, 0x3, 0x0, 0x20, 0x4, 0x1000, 0x1, 0xfff, 0x9, 0x101, 0x9, 0x4, 0xc3cf, 0xeac0, 0x81, 0x6, 0xffffffff, 0x101, 0x3, 0x1, 0x101, 0x7, 0x10000, 0x2a, 0x8, 0x8, 0x4, 0x7, 0x7, 0xc6c2, 0x10000, 0x1f, 0x0, 0x5, 0x8, 0x9, 0x1, 0xffffffc0, 0x8, 0xc2, 0x3, 0x7, 0x2, 0x9, 0x4, 0x6d0, 0x7, 0x36, 0x80000001, 0x2, 0x8, 0x200, 0x0, 0x6, 0x2, 0x9c, 0x4, 0x1f, 0x3, 0x0, 0x3f, 0x1, 0x1200, 0x2, 0x7ff, 0x10000, 0x7ff, 0x2, 0x80, 0x6, 0x3ff, 0x3540cc6a, 0x2f02, 0x3b, 0x7, 0x5, 0xa534, 0x1ff, 0x7, 0x7, 0x6, 0x8, 0x1, 0x0, 0x8, 0x100, 0x1, 0x61bc6db2, 0x3, 0x200, 0x3, 0x20, 0x99d, 0x0, 0x1, 0x3, 0x3, 0x8, 0x700, 0x400, 0x70cf, 0x6, 0x3, 0xadd32f8, 0x7f, 0x6, 0x1000, 0x94, 0x2e7, 0x0, 0x100, 0x47a, 0x80000000, 0x40, 0x98d, 0x6, 0xf965, 0xc3, 0x400, 0x101, 0x8001, 0x101, 0x1, 0x1, 0x1, 0x5d8a, 0x9, 0x101, 0x6, 0xffff6648, 0x5, 0xfff, 0xe53, 0x5, 0x12bc9346, 0x6, 0x798, 0x6000, 0x800, 0x4, 0x8, 0x0, 0xfffffe00, 0xfffffff9, 0x0, 0x5, 0x7, 0x1, 0x86, 0x3, 0x4f894800, 0x3, 0x4780, 0x400, 0x7fffffff, 0xffff, 0xc05, 0x5, 0xfffffffe, 0x800, 0x7, 0xffff, 0x8, 0x3f, 0x2, 0x673, 0x634, 0x8, 0x2b, 0x25, 0xb62, 0x8, 0x2, 0x4, 0x4, 0x0, 0x9, 0x8, 0x7fffffff, 0x10001, 0x7ff, 0x4, 0x7, 0x7fff, 0x7, 0x7, 0x5, 0x98, 0x5, 0xfffffff8, 0x8000, 0x8, 0x8, 0x0, 0x1, 0x7, 0x5, 0x3, 0x20, 0x6, 0x0, 0x497, 0x0, 0x95, 0x6, 0x3ff, 0x7, 0x1, 0x0, 0xb, 0x81, 0x3b, 0x7, 0x6, 0xa1, 0x8001, 0x9, 0x80000000, 0x7608e713, 0x0, 0x73, 0x0, 0x7, 0xfff, 0x4, 0x101, 0x8, 0x6, 0x1ff, 0x3, 0x7, 0x3a26, 0x6, 0x91, 0x5, 0x3f, 0x2, 0x1, 0x8, 0x9, 0x3ff, 0x7f, 0x8, 0x7b42, 0x9, 0x8, 0x1f, 0x1ff, 0x200, 0x8, 0x7, 0x80000000, 0x9, 0x8, 0x7, 0x0, 0x26, 0x297df301, 0x2, 0x7, 0x1, 0x2, 0x1, 0x828, 0x7, 0x1c, 0x3, 0x3, 0x6, 0x4, 0xf2, 0x20, 0x400, 0x80000000, 0x7fc, 0xffff, 0x3, 0xd3, 0x2, 0xffff, 0x7fffffff, 0x5, 0x4, 0x2, 0x2, 0x80, 0x10001, 0x7ff, 0xab5, 0x7, 0x6, 0x2, 0x8ca3, 0xfffff800, 0x0, 0x3, 0x7, 0x1f, 0x8000, 0x2, 0x3, 0x5, 0x1, 0x5, 0x8, 0x7, 0xfff, 0x7d, 0x5cc, 0x8, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0x5, 0x90d3, 0x101, 0x8, 0x3, 0x7, 0x4, 0x9, 0x3, 0x7fff, 0x5, 0x9, 0x436, 0x1, 0x8, 0x1, 0x3, 0x7, 0x0, 0x0, 0x7b0, 0x681, 0x1, 0x7, 0x7fff, 0x6, 0xffffff80, 0x6, 0x8, 0x5, 0xffff, 0xcae7, 0x0, 0x9, 0x3, 0xfb9aa11d, 0x3ff, 0x6, 0x30000, 0xffff, 0x8, 0xfff, 0x1, 0xc6a, 0xfffff83b, 0xb7, 0x1, 0x0, 0x4, 0x8, 0x24000000, 0x10001, 0x80000001, 0x276d91e9, 0x18, 0x4, 0x5, 0x63b1, 0x7138, 0xa984, 0x3f, 0x7f, 0x1, 0xbbf, 0x4, 0x6, 0x3ff, 0x2, 0x7, 0x7f, 0x6, 0x800, 0x5, 0xf5, 0x1, 0x40, 0x10001, 0x0, 0x807, 0x58, 0x5, 0x100, 0x40, 0x3, 0x5, 0x9, 0x7, 0x8, 0x70, 0x1, 0x8001, 0x1fc1, 0x1e5f, 0x800, 0x1, 0x3, 0x3, 0x5, 0x9, 0x3ff, 0xfffffffa, 0x800, 0x8, 0x1, 0x3f, 0x661d, 0x81, 0xffffffff, 0x6, 0x2, 0x4, 0xfff, 0x3, 0x3, 0x4, 0x5, 0x0, 0x3, 0x1ff, 0x9, 0x8, 0x80000000, 0x4, 0x9, 0x5, 0x6, 0x9, 0x8, 0xac, 0x2, 0x7, 0x5890cf68, 0x1, 0x8, 0xb081, 0xb43, 0xe63, 0x2, 0x7, 0x76, 0x9, 0x20, 0x2f51, 0x2fd, 0x80e7, 0x8, 0x0, 0x0, 0x100, 0xa3, 0x10001, 0x9, 0x81, 0x4, 0x100, 0x5, 0x9e900, 0x1, 0xcf, 0x7, 0x200, 0x100, 0x4, 0x7, 0x6, 0x4, 0x8c, 0x4, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x7f00000, 0x3, 0x746, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x7, 0x7, 0x2, 0x4, 0xe632, 0x7, 0x0, 0x8b, 0x6, 0x3cf, 0x2, 0x9, 0x0, 0x1, 0x8, 0x8e, 0xcbc3, 0x3, 0x40, 0xffff, 0x8, 0x81, 0x9, 0x0, 0x36815662, 0x6, 0x0, 0x6, 0x82f, 0x4b8, 0x9, 0x8, 0xffff, 0x8, 0x4, 0x800, 0x9, 0x40, 0xd62, 0x4, 0x87, 0x3ff, 0x80000000, 0x7fffffff, 0xffff, 0x4, 0x69721e37, 0x8, 0x7f, 0x9, 0x4, 0x200, 0x20200, 0x0, 0x7, 0xe5, 0x80000001, 0x93c, 0xfff, 0xfff, 0x7f, 0x3, 0x5, 0x331, 0xff, 0xf, 0x6, 0x97, 0x81, 0x4, 0x7dc, 0x1, 0x7, 0x1, 0x3fe00000, 0x8, 0x7, 0x7fff, 0xd6, 0x6f6, 0x6, 0x10001, 0x3, 0x101, 0x87a6, 0x80, 0x2400, 0x60, 0x6, 0xfffffff8, 0x6, 0x2, 0x9, 0xe0e0, 0x8, 0x0, 0x4, 0x5, 0x80, 0x2822, 0x3ff0000, 0x32b, 0x3, 0x4, 0x80000001, 0x7fffffff, 0x4, 0x6, 0xeb, 0x1e, 0x92, 0x100, 0x8, 0x5, 0x81, 0x9fe3, 0x6, 0x40, 0x3, 0x7, 0xffff376e, 0x9, 0x1, 0x9, 0x80000000, 0x38000, 0x7ff, 0x80, 0x6, 0x0, 0xba76, 0xfffffffb, 0xffffff7f, 0x7, 0x3, 0xfffffffa, 0x101, 0x81, 0x80000000, 0x6, 0x7ff, 0x7421, 0xffffff80, 0x5, 0x7250, 0x6, 0x7, 0x6fc526fc, 0xfffffff9, 0x9, 0x8, 0x8, 0xfffff47c, 0xfd98, 0x10001, 0x8, 0xbb17, 0x7f, 0x8, 0x9, 0x1, 0x6, 0x6, 0x9, 0x80000001, 0xfffffff8, 0x0, 0x5, 0x4, 0x7, 0x8000, 0x3f, 0x0, 0xffffffff, 0x2, 0x2, 0x7f, 0x8, 0x1a, 0x80000001, 0x3, 0x7, 0xe1, 0x3, 0x7, 0x4, 0x7fff, 0x4, 0x6, 0x8, 0x0, 0xfffeffff, 0x6, 0x800, 0x10001, 0x9, 0x9, 0x3f, 0xffff, 0x1, 0x7, 0x0, 0x297, 0x6, 0x3, 0x77, 0x2, 0xff, 0x8, 0xa4, 0x401, 0x5, 0x2, 0xc34, 0x7, 0x8, 0x8, 0x817, 0x7, 0x8, 0xffffffff, 0x80, 0x6699ab31, 0x5, 0x5, 0x5, 0xfffff000, 0x48a0, 0x29, 0x5, 0x6, 0x100, 0xbb7b, 0x3, 0x7fff, 0x3ff, 0x9, 0xfffffffe, 0x0, 0x65, 0x0, 0x100, 0x2, 0x1, 0x100, 0xffffff22, 0x401, 0xfffffff7, 0x9, 0x8, 0x4, 0x200, 0x16, 0x550, 0x607, 0x4, 0x10000000, 0x2, 0x8, 0x63f493c9, 0x1, 0x1ff, 0xff, 0xffffff81, 0x1, 0x7f, 0x2, 0x8, 0xfffffffd, 0x10000, 0x10001, 0x401, 0x6, 0xf437, 0xfff, 0x0, 0x5, 0x7d51, 0x1000, 0x3, 0x7ff, 0x1ff, 0xc6, 0x100, 0x2, 0x4, 0x6, 0x7fffffff, 0x401, 0x1, 0xdb03, 0x200, 0x4, 0x1000, 0x5, 0x200, 0x6, 0x432, 0x5, 0x2, 0x9, 0x69d, 0x8, 0xffffff99, 0x1, 0x6, 0x8, 0x9, 0x3e83, 0x2, 0x2, 0x50, 0xcc, 0x7, 0x3f, 0x3, 0x1000, 0x2, 0x9], 0x1, 0x400}) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x1, 0x2, 0x4, 0x2, 0x5, {0x0, 0xea60}, {0x8ffe4729bc77ec3f, 0xc, 0xf7, 0x4, 0x1, 0x6, "dc0ee02e"}, 0xb1e, 0x2, {}, 0x2, 0x0, r0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x1, 0x2, 0x4, 0x2, 0x5, {0x0, 0xea60}, {0x8ffe4729bc77ec3f, 0xc, 0xf7, 0x4, 0x1, 0x6, "dc0ee02e"}, 0xb1e, 0x2, {}, 0x2, 0x0, r0}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:34 executing program 0: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000011c0)=[{}]}) (async) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000000)={&(0x7f00000001c0)=[0x1000, 0xe2, 0x6, 0xb09, 0x8, 0x6, 0x1, 0x0, 0x3ff, 0x40, 0x0, 0x9, 0x800, 0x31, 0x4270, 0xdb, 0x1, 0x1, 0x0, 0x20, 0x9aa7, 0x23a, 0x4, 0x8, 0x800, 0x3, 0x1, 0x1, 0x1f, 0xfffffffd, 0x9, 0x101, 0xffffffc1, 0x65b, 0x62f1, 0x8, 0x3, 0x800, 0xffffffff, 0xfffffff8, 0x9, 0xb, 0x41, 0x1, 0x2, 0x9, 0x3ff, 0x0, 0x4, 0x5, 0x1, 0x7, 0x3, 0x3, 0x35cd, 0x1, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x0, 0x3, 0x1, 0x1, 0x5, 0xc42, 0x9, 0x1ff, 0x8, 0x3, 0x9d, 0xfff, 0x1, 0xf49d, 0x4, 0xed6, 0x585, 0x4, 0x3, 0xff, 0x80000001, 0xd, 0x94, 0x6, 0x9, 0x3, 0x7f, 0x7, 0x0, 0x6, 0x6, 0x80000001, 0x7fff, 0x2, 0x0, 0x8000, 0x8, 0xca31, 0x2, 0x7, 0xd43, 0x2, 0x2, 0x3, 0x0, 0xd7, 0xffffffff, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8, 0x6, 0x70f, 0x7, 0x7ff, 0x5, 0x1150, 0x5e2, 0x0, 0x1, 0x8, 0x3, 0xef, 0xffffff91, 0x4, 0x4, 0x4, 0x3, 0x5, 0xfffffffd, 0x4, 0x4, 0x649e9d65, 0x0, 0x8000, 0x7fffffff, 0xffffff81, 0x100, 0x1, 0x8, 0xffffffff, 0x2, 0x8001, 0x6, 0x1f, 0xffff8e68, 0x6, 0x400, 0x5, 0x80000001, 0x0, 0x3, 0x40, 0x8, 0x8001, 0x1e, 0x8001, 0x9, 0x73, 0x6, 0x87, 0x8, 0x400, 0x2, 0x2, 0x26, 0x80, 0x800, 0x0, 0x0, 0x400, 0x3, 0x40000000, 0x9, 0xfbf, 0x2, 0x5, 0x0, 0x2, 0x9, 0x0, 0x2, 0x8, 0x40, 0x6, 0x7fff, 0xa7, 0x9, 0xd69, 0x8000, 0xfff, 0x1ff, 0x761, 0x415, 0x3f, 0x800, 0x328, 0x9, 0x0, 0x7, 0x6, 0x7fff, 0x2, 0x8000, 0x5bbf, 0x3, 0x0, 0x20, 0x4, 0x1000, 0x1, 0xfff, 0x9, 0x101, 0x9, 0x4, 0xc3cf, 0xeac0, 0x81, 0x6, 0xffffffff, 0x101, 0x3, 0x1, 0x101, 0x7, 0x10000, 0x2a, 0x8, 0x8, 0x4, 0x7, 0x7, 0xc6c2, 0x10000, 0x1f, 0x0, 0x5, 0x8, 0x9, 0x1, 0xffffffc0, 0x8, 0xc2, 0x3, 0x7, 0x2, 0x9, 0x4, 0x6d0, 0x7, 0x36, 0x80000001, 0x2, 0x8, 0x200, 0x0, 0x6, 0x2, 0x9c, 0x4, 0x1f, 0x3, 0x0, 0x3f, 0x1, 0x1200, 0x2, 0x7ff, 0x10000, 0x7ff, 0x2, 0x80, 0x6, 0x3ff, 0x3540cc6a, 0x2f02, 0x3b, 0x7, 0x5, 0xa534, 0x1ff, 0x7, 0x7, 0x6, 0x8, 0x1, 0x0, 0x8, 0x100, 0x1, 0x61bc6db2, 0x3, 0x200, 0x3, 0x20, 0x99d, 0x0, 0x1, 0x3, 0x3, 0x8, 0x700, 0x400, 0x70cf, 0x6, 0x3, 0xadd32f8, 0x7f, 0x6, 0x1000, 0x94, 0x2e7, 0x0, 0x100, 0x47a, 0x80000000, 0x40, 0x98d, 0x6, 0xf965, 0xc3, 0x400, 0x101, 0x8001, 0x101, 0x1, 0x1, 0x1, 0x5d8a, 0x9, 0x101, 0x6, 0xffff6648, 0x5, 0xfff, 0xe53, 0x5, 0x12bc9346, 0x6, 0x798, 0x6000, 0x800, 0x4, 0x8, 0x0, 0xfffffe00, 0xfffffff9, 0x0, 0x5, 0x7, 0x1, 0x86, 0x3, 0x4f894800, 0x3, 0x4780, 0x400, 0x7fffffff, 0xffff, 0xc05, 0x5, 0xfffffffe, 0x800, 0x7, 0xffff, 0x8, 0x3f, 0x2, 0x673, 0x634, 0x8, 0x2b, 0x25, 0xb62, 0x8, 0x2, 0x4, 0x4, 0x0, 0x9, 0x8, 0x7fffffff, 0x10001, 0x7ff, 0x4, 0x7, 0x7fff, 0x7, 0x7, 0x5, 0x98, 0x5, 0xfffffff8, 0x8000, 0x8, 0x8, 0x0, 0x1, 0x7, 0x5, 0x3, 0x20, 0x6, 0x0, 0x497, 0x0, 0x95, 0x6, 0x3ff, 0x7, 0x1, 0x0, 0xb, 0x81, 0x3b, 0x7, 0x6, 0xa1, 0x8001, 0x9, 0x80000000, 0x7608e713, 0x0, 0x73, 0x0, 0x7, 0xfff, 0x4, 0x101, 0x8, 0x6, 0x1ff, 0x3, 0x7, 0x3a26, 0x6, 0x91, 0x5, 0x3f, 0x2, 0x1, 0x8, 0x9, 0x3ff, 0x7f, 0x8, 0x7b42, 0x9, 0x8, 0x1f, 0x1ff, 0x200, 0x8, 0x7, 0x80000000, 0x9, 0x8, 0x7, 0x0, 0x26, 0x297df301, 0x2, 0x7, 0x1, 0x2, 0x1, 0x828, 0x7, 0x1c, 0x3, 0x3, 0x6, 0x4, 0xf2, 0x20, 0x400, 0x80000000, 0x7fc, 0xffff, 0x3, 0xd3, 0x2, 0xffff, 0x7fffffff, 0x5, 0x4, 0x2, 0x2, 0x80, 0x10001, 0x7ff, 0xab5, 0x7, 0x6, 0x2, 0x8ca3, 0xfffff800, 0x0, 0x3, 0x7, 0x1f, 0x8000, 0x2, 0x3, 0x5, 0x1, 0x5, 0x8, 0x7, 0xfff, 0x7d, 0x5cc, 0x8, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0x5, 0x90d3, 0x101, 0x8, 0x3, 0x7, 0x4, 0x9, 0x3, 0x7fff, 0x5, 0x9, 0x436, 0x1, 0x8, 0x1, 0x3, 0x7, 0x0, 0x0, 0x7b0, 0x681, 0x1, 0x7, 0x7fff, 0x6, 0xffffff80, 0x6, 0x8, 0x5, 0xffff, 0xcae7, 0x0, 0x9, 0x3, 0xfb9aa11d, 0x3ff, 0x6, 0x30000, 0xffff, 0x8, 0xfff, 0x1, 0xc6a, 0xfffff83b, 0xb7, 0x1, 0x0, 0x4, 0x8, 0x24000000, 0x10001, 0x80000001, 0x276d91e9, 0x18, 0x4, 0x5, 0x63b1, 0x7138, 0xa984, 0x3f, 0x7f, 0x1, 0xbbf, 0x4, 0x6, 0x3ff, 0x2, 0x7, 0x7f, 0x6, 0x800, 0x5, 0xf5, 0x1, 0x40, 0x10001, 0x0, 0x807, 0x58, 0x5, 0x100, 0x40, 0x3, 0x5, 0x9, 0x7, 0x8, 0x70, 0x1, 0x8001, 0x1fc1, 0x1e5f, 0x800, 0x1, 0x3, 0x3, 0x5, 0x9, 0x3ff, 0xfffffffa, 0x800, 0x8, 0x1, 0x3f, 0x661d, 0x81, 0xffffffff, 0x6, 0x2, 0x4, 0xfff, 0x3, 0x3, 0x4, 0x5, 0x0, 0x3, 0x1ff, 0x9, 0x8, 0x80000000, 0x4, 0x9, 0x5, 0x6, 0x9, 0x8, 0xac, 0x2, 0x7, 0x5890cf68, 0x1, 0x8, 0xb081, 0xb43, 0xe63, 0x2, 0x7, 0x76, 0x9, 0x20, 0x2f51, 0x2fd, 0x80e7, 0x8, 0x0, 0x0, 0x100, 0xa3, 0x10001, 0x9, 0x81, 0x4, 0x100, 0x5, 0x9e900, 0x1, 0xcf, 0x7, 0x200, 0x100, 0x4, 0x7, 0x6, 0x4, 0x8c, 0x4, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x7f00000, 0x3, 0x746, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x7, 0x7, 0x2, 0x4, 0xe632, 0x7, 0x0, 0x8b, 0x6, 0x3cf, 0x2, 0x9, 0x0, 0x1, 0x8, 0x8e, 0xcbc3, 0x3, 0x40, 0xffff, 0x8, 0x81, 0x9, 0x0, 0x36815662, 0x6, 0x0, 0x6, 0x82f, 0x4b8, 0x9, 0x8, 0xffff, 0x8, 0x4, 0x800, 0x9, 0x40, 0xd62, 0x4, 0x87, 0x3ff, 0x80000000, 0x7fffffff, 0xffff, 0x4, 0x69721e37, 0x8, 0x7f, 0x9, 0x4, 0x200, 0x20200, 0x0, 0x7, 0xe5, 0x80000001, 0x93c, 0xfff, 0xfff, 0x7f, 0x3, 0x5, 0x331, 0xff, 0xf, 0x6, 0x97, 0x81, 0x4, 0x7dc, 0x1, 0x7, 0x1, 0x3fe00000, 0x8, 0x7, 0x7fff, 0xd6, 0x6f6, 0x6, 0x10001, 0x3, 0x101, 0x87a6, 0x80, 0x2400, 0x60, 0x6, 0xfffffff8, 0x6, 0x2, 0x9, 0xe0e0, 0x8, 0x0, 0x4, 0x5, 0x80, 0x2822, 0x3ff0000, 0x32b, 0x3, 0x4, 0x80000001, 0x7fffffff, 0x4, 0x6, 0xeb, 0x1e, 0x92, 0x100, 0x8, 0x5, 0x81, 0x9fe3, 0x6, 0x40, 0x3, 0x7, 0xffff376e, 0x9, 0x1, 0x9, 0x80000000, 0x38000, 0x7ff, 0x80, 0x6, 0x0, 0xba76, 0xfffffffb, 0xffffff7f, 0x7, 0x3, 0xfffffffa, 0x101, 0x81, 0x80000000, 0x6, 0x7ff, 0x7421, 0xffffff80, 0x5, 0x7250, 0x6, 0x7, 0x6fc526fc, 0xfffffff9, 0x9, 0x8, 0x8, 0xfffff47c, 0xfd98, 0x10001, 0x8, 0xbb17, 0x7f, 0x8, 0x9, 0x1, 0x6, 0x6, 0x9, 0x80000001, 0xfffffff8, 0x0, 0x5, 0x4, 0x7, 0x8000, 0x3f, 0x0, 0xffffffff, 0x2, 0x2, 0x7f, 0x8, 0x1a, 0x80000001, 0x3, 0x7, 0xe1, 0x3, 0x7, 0x4, 0x7fff, 0x4, 0x6, 0x8, 0x0, 0xfffeffff, 0x6, 0x800, 0x10001, 0x9, 0x9, 0x3f, 0xffff, 0x1, 0x7, 0x0, 0x297, 0x6, 0x3, 0x77, 0x2, 0xff, 0x8, 0xa4, 0x401, 0x5, 0x2, 0xc34, 0x7, 0x8, 0x8, 0x817, 0x7, 0x8, 0xffffffff, 0x80, 0x6699ab31, 0x5, 0x5, 0x5, 0xfffff000, 0x48a0, 0x29, 0x5, 0x6, 0x100, 0xbb7b, 0x3, 0x7fff, 0x3ff, 0x9, 0xfffffffe, 0x0, 0x65, 0x0, 0x100, 0x2, 0x1, 0x100, 0xffffff22, 0x401, 0xfffffff7, 0x9, 0x8, 0x4, 0x200, 0x16, 0x550, 0x607, 0x4, 0x10000000, 0x2, 0x8, 0x63f493c9, 0x1, 0x1ff, 0xff, 0xffffff81, 0x1, 0x7f, 0x2, 0x8, 0xfffffffd, 0x10000, 0x10001, 0x401, 0x6, 0xf437, 0xfff, 0x0, 0x5, 0x7d51, 0x1000, 0x3, 0x7ff, 0x1ff, 0xc6, 0x100, 0x2, 0x4, 0x6, 0x7fffffff, 0x401, 0x1, 0xdb03, 0x200, 0x4, 0x1000, 0x5, 0x200, 0x6, 0x432, 0x5, 0x2, 0x9, 0x69d, 0x8, 0xffffff99, 0x1, 0x6, 0x8, 0x9, 0x3e83, 0x2, 0x2, 0x50, 0xcc, 0x7, 0x3f, 0x3, 0x1000, 0x2, 0x9], 0x1, 0x400}) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x1, 0x2, 0x4, 0x2, 0x5, {0x0, 0xea60}, {0x8ffe4729bc77ec3f, 0xc, 0xf7, 0x4, 0x1, 0x6, "dc0ee02e"}, 0xb1e, 0x2, {}, 0x2, 0x0, r0}) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (rerun: 32) 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 0: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000011c0)=[{}]}) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000000)={&(0x7f00000001c0)=[0x1000, 0xe2, 0x6, 0xb09, 0x8, 0x6, 0x1, 0x0, 0x3ff, 0x40, 0x0, 0x9, 0x800, 0x31, 0x4270, 0xdb, 0x1, 0x1, 0x0, 0x20, 0x9aa7, 0x23a, 0x4, 0x8, 0x800, 0x3, 0x1, 0x1, 0x1f, 0xfffffffd, 0x9, 0x101, 0xffffffc1, 0x65b, 0x62f1, 0x8, 0x3, 0x800, 0xffffffff, 0xfffffff8, 0x9, 0xb, 0x41, 0x1, 0x2, 0x9, 0x3ff, 0x0, 0x4, 0x5, 0x1, 0x7, 0x3, 0x3, 0x35cd, 0x1, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x0, 0x3, 0x1, 0x1, 0x5, 0xc42, 0x9, 0x1ff, 0x8, 0x3, 0x9d, 0xfff, 0x1, 0xf49d, 0x4, 0xed6, 0x585, 0x4, 0x3, 0xff, 0x80000001, 0xd, 0x94, 0x6, 0x9, 0x3, 0x7f, 0x7, 0x0, 0x6, 0x6, 0x80000001, 0x7fff, 0x2, 0x0, 0x8000, 0x8, 0xca31, 0x2, 0x7, 0xd43, 0x2, 0x2, 0x3, 0x0, 0xd7, 0xffffffff, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8, 0x6, 0x70f, 0x7, 0x7ff, 0x5, 0x1150, 0x5e2, 0x0, 0x1, 0x8, 0x3, 0xef, 0xffffff91, 0x4, 0x4, 0x4, 0x3, 0x5, 0xfffffffd, 0x4, 0x4, 0x649e9d65, 0x0, 0x8000, 0x7fffffff, 0xffffff81, 0x100, 0x1, 0x8, 0xffffffff, 0x2, 0x8001, 0x6, 0x1f, 0xffff8e68, 0x6, 0x400, 0x5, 0x80000001, 0x0, 0x3, 0x40, 0x8, 0x8001, 0x1e, 0x8001, 0x9, 0x73, 0x6, 0x87, 0x8, 0x400, 0x2, 0x2, 0x26, 0x80, 0x800, 0x0, 0x0, 0x400, 0x3, 0x40000000, 0x9, 0xfbf, 0x2, 0x5, 0x0, 0x2, 0x9, 0x0, 0x2, 0x8, 0x40, 0x6, 0x7fff, 0xa7, 0x9, 0xd69, 0x8000, 0xfff, 0x1ff, 0x761, 0x415, 0x3f, 0x800, 0x328, 0x9, 0x0, 0x7, 0x6, 0x7fff, 0x2, 0x8000, 0x5bbf, 0x3, 0x0, 0x20, 0x4, 0x1000, 0x1, 0xfff, 0x9, 0x101, 0x9, 0x4, 0xc3cf, 0xeac0, 0x81, 0x6, 0xffffffff, 0x101, 0x3, 0x1, 0x101, 0x7, 0x10000, 0x2a, 0x8, 0x8, 0x4, 0x7, 0x7, 0xc6c2, 0x10000, 0x1f, 0x0, 0x5, 0x8, 0x9, 0x1, 0xffffffc0, 0x8, 0xc2, 0x3, 0x7, 0x2, 0x9, 0x4, 0x6d0, 0x7, 0x36, 0x80000001, 0x2, 0x8, 0x200, 0x0, 0x6, 0x2, 0x9c, 0x4, 0x1f, 0x3, 0x0, 0x3f, 0x1, 0x1200, 0x2, 0x7ff, 0x10000, 0x7ff, 0x2, 0x80, 0x6, 0x3ff, 0x3540cc6a, 0x2f02, 0x3b, 0x7, 0x5, 0xa534, 0x1ff, 0x7, 0x7, 0x6, 0x8, 0x1, 0x0, 0x8, 0x100, 0x1, 0x61bc6db2, 0x3, 0x200, 0x3, 0x20, 0x99d, 0x0, 0x1, 0x3, 0x3, 0x8, 0x700, 0x400, 0x70cf, 0x6, 0x3, 0xadd32f8, 0x7f, 0x6, 0x1000, 0x94, 0x2e7, 0x0, 0x100, 0x47a, 0x80000000, 0x40, 0x98d, 0x6, 0xf965, 0xc3, 0x400, 0x101, 0x8001, 0x101, 0x1, 0x1, 0x1, 0x5d8a, 0x9, 0x101, 0x6, 0xffff6648, 0x5, 0xfff, 0xe53, 0x5, 0x12bc9346, 0x6, 0x798, 0x6000, 0x800, 0x4, 0x8, 0x0, 0xfffffe00, 0xfffffff9, 0x0, 0x5, 0x7, 0x1, 0x86, 0x3, 0x4f894800, 0x3, 0x4780, 0x400, 0x7fffffff, 0xffff, 0xc05, 0x5, 0xfffffffe, 0x800, 0x7, 0xffff, 0x8, 0x3f, 0x2, 0x673, 0x634, 0x8, 0x2b, 0x25, 0xb62, 0x8, 0x2, 0x4, 0x4, 0x0, 0x9, 0x8, 0x7fffffff, 0x10001, 0x7ff, 0x4, 0x7, 0x7fff, 0x7, 0x7, 0x5, 0x98, 0x5, 0xfffffff8, 0x8000, 0x8, 0x8, 0x0, 0x1, 0x7, 0x5, 0x3, 0x20, 0x6, 0x0, 0x497, 0x0, 0x95, 0x6, 0x3ff, 0x7, 0x1, 0x0, 0xb, 0x81, 0x3b, 0x7, 0x6, 0xa1, 0x8001, 0x9, 0x80000000, 0x7608e713, 0x0, 0x73, 0x0, 0x7, 0xfff, 0x4, 0x101, 0x8, 0x6, 0x1ff, 0x3, 0x7, 0x3a26, 0x6, 0x91, 0x5, 0x3f, 0x2, 0x1, 0x8, 0x9, 0x3ff, 0x7f, 0x8, 0x7b42, 0x9, 0x8, 0x1f, 0x1ff, 0x200, 0x8, 0x7, 0x80000000, 0x9, 0x8, 0x7, 0x0, 0x26, 0x297df301, 0x2, 0x7, 0x1, 0x2, 0x1, 0x828, 0x7, 0x1c, 0x3, 0x3, 0x6, 0x4, 0xf2, 0x20, 0x400, 0x80000000, 0x7fc, 0xffff, 0x3, 0xd3, 0x2, 0xffff, 0x7fffffff, 0x5, 0x4, 0x2, 0x2, 0x80, 0x10001, 0x7ff, 0xab5, 0x7, 0x6, 0x2, 0x8ca3, 0xfffff800, 0x0, 0x3, 0x7, 0x1f, 0x8000, 0x2, 0x3, 0x5, 0x1, 0x5, 0x8, 0x7, 0xfff, 0x7d, 0x5cc, 0x8, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0x5, 0x90d3, 0x101, 0x8, 0x3, 0x7, 0x4, 0x9, 0x3, 0x7fff, 0x5, 0x9, 0x436, 0x1, 0x8, 0x1, 0x3, 0x7, 0x0, 0x0, 0x7b0, 0x681, 0x1, 0x7, 0x7fff, 0x6, 0xffffff80, 0x6, 0x8, 0x5, 0xffff, 0xcae7, 0x0, 0x9, 0x3, 0xfb9aa11d, 0x3ff, 0x6, 0x30000, 0xffff, 0x8, 0xfff, 0x1, 0xc6a, 0xfffff83b, 0xb7, 0x1, 0x0, 0x4, 0x8, 0x24000000, 0x10001, 0x80000001, 0x276d91e9, 0x18, 0x4, 0x5, 0x63b1, 0x7138, 0xa984, 0x3f, 0x7f, 0x1, 0xbbf, 0x4, 0x6, 0x3ff, 0x2, 0x7, 0x7f, 0x6, 0x800, 0x5, 0xf5, 0x1, 0x40, 0x10001, 0x0, 0x807, 0x58, 0x5, 0x100, 0x40, 0x3, 0x5, 0x9, 0x7, 0x8, 0x70, 0x1, 0x8001, 0x1fc1, 0x1e5f, 0x800, 0x1, 0x3, 0x3, 0x5, 0x9, 0x3ff, 0xfffffffa, 0x800, 0x8, 0x1, 0x3f, 0x661d, 0x81, 0xffffffff, 0x6, 0x2, 0x4, 0xfff, 0x3, 0x3, 0x4, 0x5, 0x0, 0x3, 0x1ff, 0x9, 0x8, 0x80000000, 0x4, 0x9, 0x5, 0x6, 0x9, 0x8, 0xac, 0x2, 0x7, 0x5890cf68, 0x1, 0x8, 0xb081, 0xb43, 0xe63, 0x2, 0x7, 0x76, 0x9, 0x20, 0x2f51, 0x2fd, 0x80e7, 0x8, 0x0, 0x0, 0x100, 0xa3, 0x10001, 0x9, 0x81, 0x4, 0x100, 0x5, 0x9e900, 0x1, 0xcf, 0x7, 0x200, 0x100, 0x4, 0x7, 0x6, 0x4, 0x8c, 0x4, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x7f00000, 0x3, 0x746, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x7, 0x7, 0x2, 0x4, 0xe632, 0x7, 0x0, 0x8b, 0x6, 0x3cf, 0x2, 0x9, 0x0, 0x1, 0x8, 0x8e, 0xcbc3, 0x3, 0x40, 0xffff, 0x8, 0x81, 0x9, 0x0, 0x36815662, 0x6, 0x0, 0x6, 0x82f, 0x4b8, 0x9, 0x8, 0xffff, 0x8, 0x4, 0x800, 0x9, 0x40, 0xd62, 0x4, 0x87, 0x3ff, 0x80000000, 0x7fffffff, 0xffff, 0x4, 0x69721e37, 0x8, 0x7f, 0x9, 0x4, 0x200, 0x20200, 0x0, 0x7, 0xe5, 0x80000001, 0x93c, 0xfff, 0xfff, 0x7f, 0x3, 0x5, 0x331, 0xff, 0xf, 0x6, 0x97, 0x81, 0x4, 0x7dc, 0x1, 0x7, 0x1, 0x3fe00000, 0x8, 0x7, 0x7fff, 0xd6, 0x6f6, 0x6, 0x10001, 0x3, 0x101, 0x87a6, 0x80, 0x2400, 0x60, 0x6, 0xfffffff8, 0x6, 0x2, 0x9, 0xe0e0, 0x8, 0x0, 0x4, 0x5, 0x80, 0x2822, 0x3ff0000, 0x32b, 0x3, 0x4, 0x80000001, 0x7fffffff, 0x4, 0x6, 0xeb, 0x1e, 0x92, 0x100, 0x8, 0x5, 0x81, 0x9fe3, 0x6, 0x40, 0x3, 0x7, 0xffff376e, 0x9, 0x1, 0x9, 0x80000000, 0x38000, 0x7ff, 0x80, 0x6, 0x0, 0xba76, 0xfffffffb, 0xffffff7f, 0x7, 0x3, 0xfffffffa, 0x101, 0x81, 0x80000000, 0x6, 0x7ff, 0x7421, 0xffffff80, 0x5, 0x7250, 0x6, 0x7, 0x6fc526fc, 0xfffffff9, 0x9, 0x8, 0x8, 0xfffff47c, 0xfd98, 0x10001, 0x8, 0xbb17, 0x7f, 0x8, 0x9, 0x1, 0x6, 0x6, 0x9, 0x80000001, 0xfffffff8, 0x0, 0x5, 0x4, 0x7, 0x8000, 0x3f, 0x0, 0xffffffff, 0x2, 0x2, 0x7f, 0x8, 0x1a, 0x80000001, 0x3, 0x7, 0xe1, 0x3, 0x7, 0x4, 0x7fff, 0x4, 0x6, 0x8, 0x0, 0xfffeffff, 0x6, 0x800, 0x10001, 0x9, 0x9, 0x3f, 0xffff, 0x1, 0x7, 0x0, 0x297, 0x6, 0x3, 0x77, 0x2, 0xff, 0x8, 0xa4, 0x401, 0x5, 0x2, 0xc34, 0x7, 0x8, 0x8, 0x817, 0x7, 0x8, 0xffffffff, 0x80, 0x6699ab31, 0x5, 0x5, 0x5, 0xfffff000, 0x48a0, 0x29, 0x5, 0x6, 0x100, 0xbb7b, 0x3, 0x7fff, 0x3ff, 0x9, 0xfffffffe, 0x0, 0x65, 0x0, 0x100, 0x2, 0x1, 0x100, 0xffffff22, 0x401, 0xfffffff7, 0x9, 0x8, 0x4, 0x200, 0x16, 0x550, 0x607, 0x4, 0x10000000, 0x2, 0x8, 0x63f493c9, 0x1, 0x1ff, 0xff, 0xffffff81, 0x1, 0x7f, 0x2, 0x8, 0xfffffffd, 0x10000, 0x10001, 0x401, 0x6, 0xf437, 0xfff, 0x0, 0x5, 0x7d51, 0x1000, 0x3, 0x7ff, 0x1ff, 0xc6, 0x100, 0x2, 0x4, 0x6, 0x7fffffff, 0x401, 0x1, 0xdb03, 0x200, 0x4, 0x1000, 0x5, 0x200, 0x6, 0x432, 0x5, 0x2, 0x9, 0x69d, 0x8, 0xffffff99, 0x1, 0x6, 0x8, 0x9, 0x3e83, 0x2, 0x2, 0x50, 0xcc, 0x7, 0x3f, 0x3, 0x1000, 0x2, 0x9], 0x1, 0x400}) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f00000011c0)=[{}]}) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000000)={&(0x7f00000001c0)=[0x1000, 0xe2, 0x6, 0xb09, 0x8, 0x6, 0x1, 0x0, 0x3ff, 0x40, 0x0, 0x9, 0x800, 0x31, 0x4270, 0xdb, 0x1, 0x1, 0x0, 0x20, 0x9aa7, 0x23a, 0x4, 0x8, 0x800, 0x3, 0x1, 0x1, 0x1f, 0xfffffffd, 0x9, 0x101, 0xffffffc1, 0x65b, 0x62f1, 0x8, 0x3, 0x800, 0xffffffff, 0xfffffff8, 0x9, 0xb, 0x41, 0x1, 0x2, 0x9, 0x3ff, 0x0, 0x4, 0x5, 0x1, 0x7, 0x3, 0x3, 0x35cd, 0x1, 0x0, 0x1000, 0x9, 0x8, 0x7, 0x0, 0x3, 0x1, 0x1, 0x5, 0xc42, 0x9, 0x1ff, 0x8, 0x3, 0x9d, 0xfff, 0x1, 0xf49d, 0x4, 0xed6, 0x585, 0x4, 0x3, 0xff, 0x80000001, 0xd, 0x94, 0x6, 0x9, 0x3, 0x7f, 0x7, 0x0, 0x6, 0x6, 0x80000001, 0x7fff, 0x2, 0x0, 0x8000, 0x8, 0xca31, 0x2, 0x7, 0xd43, 0x2, 0x2, 0x3, 0x0, 0xd7, 0xffffffff, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8, 0x6, 0x70f, 0x7, 0x7ff, 0x5, 0x1150, 0x5e2, 0x0, 0x1, 0x8, 0x3, 0xef, 0xffffff91, 0x4, 0x4, 0x4, 0x3, 0x5, 0xfffffffd, 0x4, 0x4, 0x649e9d65, 0x0, 0x8000, 0x7fffffff, 0xffffff81, 0x100, 0x1, 0x8, 0xffffffff, 0x2, 0x8001, 0x6, 0x1f, 0xffff8e68, 0x6, 0x400, 0x5, 0x80000001, 0x0, 0x3, 0x40, 0x8, 0x8001, 0x1e, 0x8001, 0x9, 0x73, 0x6, 0x87, 0x8, 0x400, 0x2, 0x2, 0x26, 0x80, 0x800, 0x0, 0x0, 0x400, 0x3, 0x40000000, 0x9, 0xfbf, 0x2, 0x5, 0x0, 0x2, 0x9, 0x0, 0x2, 0x8, 0x40, 0x6, 0x7fff, 0xa7, 0x9, 0xd69, 0x8000, 0xfff, 0x1ff, 0x761, 0x415, 0x3f, 0x800, 0x328, 0x9, 0x0, 0x7, 0x6, 0x7fff, 0x2, 0x8000, 0x5bbf, 0x3, 0x0, 0x20, 0x4, 0x1000, 0x1, 0xfff, 0x9, 0x101, 0x9, 0x4, 0xc3cf, 0xeac0, 0x81, 0x6, 0xffffffff, 0x101, 0x3, 0x1, 0x101, 0x7, 0x10000, 0x2a, 0x8, 0x8, 0x4, 0x7, 0x7, 0xc6c2, 0x10000, 0x1f, 0x0, 0x5, 0x8, 0x9, 0x1, 0xffffffc0, 0x8, 0xc2, 0x3, 0x7, 0x2, 0x9, 0x4, 0x6d0, 0x7, 0x36, 0x80000001, 0x2, 0x8, 0x200, 0x0, 0x6, 0x2, 0x9c, 0x4, 0x1f, 0x3, 0x0, 0x3f, 0x1, 0x1200, 0x2, 0x7ff, 0x10000, 0x7ff, 0x2, 0x80, 0x6, 0x3ff, 0x3540cc6a, 0x2f02, 0x3b, 0x7, 0x5, 0xa534, 0x1ff, 0x7, 0x7, 0x6, 0x8, 0x1, 0x0, 0x8, 0x100, 0x1, 0x61bc6db2, 0x3, 0x200, 0x3, 0x20, 0x99d, 0x0, 0x1, 0x3, 0x3, 0x8, 0x700, 0x400, 0x70cf, 0x6, 0x3, 0xadd32f8, 0x7f, 0x6, 0x1000, 0x94, 0x2e7, 0x0, 0x100, 0x47a, 0x80000000, 0x40, 0x98d, 0x6, 0xf965, 0xc3, 0x400, 0x101, 0x8001, 0x101, 0x1, 0x1, 0x1, 0x5d8a, 0x9, 0x101, 0x6, 0xffff6648, 0x5, 0xfff, 0xe53, 0x5, 0x12bc9346, 0x6, 0x798, 0x6000, 0x800, 0x4, 0x8, 0x0, 0xfffffe00, 0xfffffff9, 0x0, 0x5, 0x7, 0x1, 0x86, 0x3, 0x4f894800, 0x3, 0x4780, 0x400, 0x7fffffff, 0xffff, 0xc05, 0x5, 0xfffffffe, 0x800, 0x7, 0xffff, 0x8, 0x3f, 0x2, 0x673, 0x634, 0x8, 0x2b, 0x25, 0xb62, 0x8, 0x2, 0x4, 0x4, 0x0, 0x9, 0x8, 0x7fffffff, 0x10001, 0x7ff, 0x4, 0x7, 0x7fff, 0x7, 0x7, 0x5, 0x98, 0x5, 0xfffffff8, 0x8000, 0x8, 0x8, 0x0, 0x1, 0x7, 0x5, 0x3, 0x20, 0x6, 0x0, 0x497, 0x0, 0x95, 0x6, 0x3ff, 0x7, 0x1, 0x0, 0xb, 0x81, 0x3b, 0x7, 0x6, 0xa1, 0x8001, 0x9, 0x80000000, 0x7608e713, 0x0, 0x73, 0x0, 0x7, 0xfff, 0x4, 0x101, 0x8, 0x6, 0x1ff, 0x3, 0x7, 0x3a26, 0x6, 0x91, 0x5, 0x3f, 0x2, 0x1, 0x8, 0x9, 0x3ff, 0x7f, 0x8, 0x7b42, 0x9, 0x8, 0x1f, 0x1ff, 0x200, 0x8, 0x7, 0x80000000, 0x9, 0x8, 0x7, 0x0, 0x26, 0x297df301, 0x2, 0x7, 0x1, 0x2, 0x1, 0x828, 0x7, 0x1c, 0x3, 0x3, 0x6, 0x4, 0xf2, 0x20, 0x400, 0x80000000, 0x7fc, 0xffff, 0x3, 0xd3, 0x2, 0xffff, 0x7fffffff, 0x5, 0x4, 0x2, 0x2, 0x80, 0x10001, 0x7ff, 0xab5, 0x7, 0x6, 0x2, 0x8ca3, 0xfffff800, 0x0, 0x3, 0x7, 0x1f, 0x8000, 0x2, 0x3, 0x5, 0x1, 0x5, 0x8, 0x7, 0xfff, 0x7d, 0x5cc, 0x8, 0x5, 0x7fffffff, 0x2, 0x9, 0x1, 0x5, 0x90d3, 0x101, 0x8, 0x3, 0x7, 0x4, 0x9, 0x3, 0x7fff, 0x5, 0x9, 0x436, 0x1, 0x8, 0x1, 0x3, 0x7, 0x0, 0x0, 0x7b0, 0x681, 0x1, 0x7, 0x7fff, 0x6, 0xffffff80, 0x6, 0x8, 0x5, 0xffff, 0xcae7, 0x0, 0x9, 0x3, 0xfb9aa11d, 0x3ff, 0x6, 0x30000, 0xffff, 0x8, 0xfff, 0x1, 0xc6a, 0xfffff83b, 0xb7, 0x1, 0x0, 0x4, 0x8, 0x24000000, 0x10001, 0x80000001, 0x276d91e9, 0x18, 0x4, 0x5, 0x63b1, 0x7138, 0xa984, 0x3f, 0x7f, 0x1, 0xbbf, 0x4, 0x6, 0x3ff, 0x2, 0x7, 0x7f, 0x6, 0x800, 0x5, 0xf5, 0x1, 0x40, 0x10001, 0x0, 0x807, 0x58, 0x5, 0x100, 0x40, 0x3, 0x5, 0x9, 0x7, 0x8, 0x70, 0x1, 0x8001, 0x1fc1, 0x1e5f, 0x800, 0x1, 0x3, 0x3, 0x5, 0x9, 0x3ff, 0xfffffffa, 0x800, 0x8, 0x1, 0x3f, 0x661d, 0x81, 0xffffffff, 0x6, 0x2, 0x4, 0xfff, 0x3, 0x3, 0x4, 0x5, 0x0, 0x3, 0x1ff, 0x9, 0x8, 0x80000000, 0x4, 0x9, 0x5, 0x6, 0x9, 0x8, 0xac, 0x2, 0x7, 0x5890cf68, 0x1, 0x8, 0xb081, 0xb43, 0xe63, 0x2, 0x7, 0x76, 0x9, 0x20, 0x2f51, 0x2fd, 0x80e7, 0x8, 0x0, 0x0, 0x100, 0xa3, 0x10001, 0x9, 0x81, 0x4, 0x100, 0x5, 0x9e900, 0x1, 0xcf, 0x7, 0x200, 0x100, 0x4, 0x7, 0x6, 0x4, 0x8c, 0x4, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x7f00000, 0x3, 0x746, 0x100, 0x0, 0x5, 0x0, 0x0, 0x8, 0x7, 0x7, 0x7, 0x2, 0x4, 0xe632, 0x7, 0x0, 0x8b, 0x6, 0x3cf, 0x2, 0x9, 0x0, 0x1, 0x8, 0x8e, 0xcbc3, 0x3, 0x40, 0xffff, 0x8, 0x81, 0x9, 0x0, 0x36815662, 0x6, 0x0, 0x6, 0x82f, 0x4b8, 0x9, 0x8, 0xffff, 0x8, 0x4, 0x800, 0x9, 0x40, 0xd62, 0x4, 0x87, 0x3ff, 0x80000000, 0x7fffffff, 0xffff, 0x4, 0x69721e37, 0x8, 0x7f, 0x9, 0x4, 0x200, 0x20200, 0x0, 0x7, 0xe5, 0x80000001, 0x93c, 0xfff, 0xfff, 0x7f, 0x3, 0x5, 0x331, 0xff, 0xf, 0x6, 0x97, 0x81, 0x4, 0x7dc, 0x1, 0x7, 0x1, 0x3fe00000, 0x8, 0x7, 0x7fff, 0xd6, 0x6f6, 0x6, 0x10001, 0x3, 0x101, 0x87a6, 0x80, 0x2400, 0x60, 0x6, 0xfffffff8, 0x6, 0x2, 0x9, 0xe0e0, 0x8, 0x0, 0x4, 0x5, 0x80, 0x2822, 0x3ff0000, 0x32b, 0x3, 0x4, 0x80000001, 0x7fffffff, 0x4, 0x6, 0xeb, 0x1e, 0x92, 0x100, 0x8, 0x5, 0x81, 0x9fe3, 0x6, 0x40, 0x3, 0x7, 0xffff376e, 0x9, 0x1, 0x9, 0x80000000, 0x38000, 0x7ff, 0x80, 0x6, 0x0, 0xba76, 0xfffffffb, 0xffffff7f, 0x7, 0x3, 0xfffffffa, 0x101, 0x81, 0x80000000, 0x6, 0x7ff, 0x7421, 0xffffff80, 0x5, 0x7250, 0x6, 0x7, 0x6fc526fc, 0xfffffff9, 0x9, 0x8, 0x8, 0xfffff47c, 0xfd98, 0x10001, 0x8, 0xbb17, 0x7f, 0x8, 0x9, 0x1, 0x6, 0x6, 0x9, 0x80000001, 0xfffffff8, 0x0, 0x5, 0x4, 0x7, 0x8000, 0x3f, 0x0, 0xffffffff, 0x2, 0x2, 0x7f, 0x8, 0x1a, 0x80000001, 0x3, 0x7, 0xe1, 0x3, 0x7, 0x4, 0x7fff, 0x4, 0x6, 0x8, 0x0, 0xfffeffff, 0x6, 0x800, 0x10001, 0x9, 0x9, 0x3f, 0xffff, 0x1, 0x7, 0x0, 0x297, 0x6, 0x3, 0x77, 0x2, 0xff, 0x8, 0xa4, 0x401, 0x5, 0x2, 0xc34, 0x7, 0x8, 0x8, 0x817, 0x7, 0x8, 0xffffffff, 0x80, 0x6699ab31, 0x5, 0x5, 0x5, 0xfffff000, 0x48a0, 0x29, 0x5, 0x6, 0x100, 0xbb7b, 0x3, 0x7fff, 0x3ff, 0x9, 0xfffffffe, 0x0, 0x65, 0x0, 0x100, 0x2, 0x1, 0x100, 0xffffff22, 0x401, 0xfffffff7, 0x9, 0x8, 0x4, 0x200, 0x16, 0x550, 0x607, 0x4, 0x10000000, 0x2, 0x8, 0x63f493c9, 0x1, 0x1ff, 0xff, 0xffffff81, 0x1, 0x7f, 0x2, 0x8, 0xfffffffd, 0x10000, 0x10001, 0x401, 0x6, 0xf437, 0xfff, 0x0, 0x5, 0x7d51, 0x1000, 0x3, 0x7ff, 0x1ff, 0xc6, 0x100, 0x2, 0x4, 0x6, 0x7fffffff, 0x401, 0x1, 0xdb03, 0x200, 0x4, 0x1000, 0x5, 0x200, 0x6, 0x432, 0x5, 0x2, 0x9, 0x69d, 0x8, 0xffffff99, 0x1, 0x6, 0x8, 0x9, 0x3e83, 0x2, 0x2, 0x50, 0xcc, 0x7, 0x3f, 0x3, 0x1000, 0x2, 0x9], 0x1, 0x400}) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000001f00000000000b000000000000002f6465762f76696d326d0000"], 0x2c) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0xfffffffffffffffc}}, 0x28) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000001f00000000000b000000000000002f6465762f76696d326d0000"], 0x2c) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0xfffffffffffffffc}}, 0x28) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x200000) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@userptr={0x5, 0xb, 0x4, 0x70000, 0x8000, {}, {0x5, 0x1, 0x5, 0x9, 0x3, 0x9, "1a78af11"}, 0x9, 0x2, {&(0x7f00000000c0)}, 0xf44b, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='svc_xprt_create_err\x00', r0}, 0x10) 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x200000) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@userptr={0x5, 0xb, 0x4, 0x70000, 0x8000, {}, {0x5, 0x1, 0x5, 0x9, 0x3, 0x9, "1a78af11"}, 0x9, 0x2, {&(0x7f00000000c0)}, 0xf44b, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='svc_xprt_create_err\x00', r0}, 0x10) 14:55:34 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000001f00000000000b000000000000002f6465762f76696d326d0000"], 0x2c) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0xfffffffffffffffc}}, 0x28) 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x1, 0x200000) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@userptr={0x5, 0xb, 0x4, 0x70000, 0x8000, {}, {0x5, 0x1, 0x5, 0x9, 0x3, 0x9, "1a78af11"}, 0x9, 0x2, {&(0x7f00000000c0)}, 0xf44b, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='svc_xprt_create_err\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)) (async) syz_open_dev$video(&(0x7f0000000080), 0x1, 0x200000) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)=@userptr={0x5, 0xb, 0x4, 0x70000, 0x8000, {}, {0x5, 0x1, 0x5, 0x9, 0x3, 0x9, "1a78af11"}, 0x9, 0x2, {&(0x7f00000000c0)}, 0xf44b, 0x0, r2}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='svc_xprt_create_err\x00', r0}, 0x10) (async) 14:55:34 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003000000000000000000000500000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:34 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}], 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x4, [0x6, 0x82]}, {r1, 0x0, 0x0, [0x10001, 0x1]}, 0x0, [0x4, 0x101]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003000000000000000000000500000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:34 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) 14:55:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003000000000000000000000500000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:34 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}], 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x4, [0x6, 0x82]}, {r1, 0x0, 0x0, [0x10001, 0x1]}, 0x0, [0x4, 0x101]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x4, [0x6, 0x82]}, {r1, 0x0, 0x0, [0x10001, 0x1]}, 0x0, [0x4, 0x101]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:34 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:34 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200842) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:35 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x9, 0x9}}) 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {0x80000000}, {}, {}], 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x4, [0x6, 0x82]}, {r1, 0x0, 0x0, [0x10001, 0x1]}, 0x0, [0x4, 0x101]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x8, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000007c0)={{0x80000000, 0x0, 0x4, [0x6, 0x82]}, {r1, 0x0, 0x0, [0x10001, 0x1]}, 0x0, [0x4, 0x101]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200842) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200842) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x404, 0x408001) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x80, 0x9, 0x5, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x31, [@broadcast, @loopback, @remote, @multicast1, @loopback, @remote, @broadcast]}, @lsrr={0x83, 0xf, 0xfc, [@rand_addr=0x64010100, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x0, [{@private=0xa010101, 0x4}, {@rand_addr=0x64010101, 0x20}, {@empty, 0x1}, {@loopback}]}, @noop, @lsrr={0x83, 0x7, 0x7c, [@private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x0, 0x7f, 0x40, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7800, 0xa82, 0x9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x9, 0x9}}) 14:55:35 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200842) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x200842) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x404, 0x408001) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x80, 0x9, 0x5, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x31, [@broadcast, @loopback, @remote, @multicast1, @loopback, @remote, @broadcast]}, @lsrr={0x83, 0xf, 0xfc, [@rand_addr=0x64010100, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x0, [{@private=0xa010101, 0x4}, {@rand_addr=0x64010101, 0x20}, {@empty, 0x1}, {@loopback}]}, @noop, @lsrr={0x83, 0x7, 0x7c, [@private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x0, 0x7f, 0x40, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7800, 0xa82, 0x9}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x9}}) 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000500)={&(0x7f00000000c0)={{@host, 0xbc}, {@local, 0x9}, 0x400, "da924efb601de2091e37c277436e4fec55fffd4a3687a5ff3a92484a45fc005683e70ff10039c82917dc4b3157b01a64f345d14c81106e23a552eae3b78611c8e454921870184fdd6427791e737a7b0b5de3bf6de93ad49b9dc03fd6aa6ce6cc571b85bdeb80107b5a1ebf261014ea1b4b2102334928c798d32ce3b4cf9c3e871e5157e4781375117bfef66d338fc3917f3e30bfeb646df27eda926042287ee8b6dbcde0e7e8839ca9066da9c0e7a4648cc8f069fd14fc5bdfc20ab5a4813f0a7cbe88ac59987c38dfb6f6c539c286123f2d2a14569458850a08559bca0cf6e1a08c202093493daaae3de3a1977354b6963ca95b1abe33744b503003025d508e74b4645039d7009346faecdda8e3a8c61984fd43186f3bf71a962e25590b4a400e0c63b037f43b528bd1a76bb91718cdb37ad8d485febe25e9e1544c205790502ff941ff097dd864218eed4f451cc4fce86ae7fe23c538c48b5c3ac5bf58c93ad1db6ea8442fb35db566320b594d2de114f9b205dea5c62e130615a75548747cd9cba69fc4b0129ce4f78df45f70c1a11cc8f8d28f118431109c9c8c27493c65e18de2cd90ece272b8e15a858779de6fc3b9ca2f996b1d2d61d9a864bb4b8c2fd52077dfe17f69ebfb838537bc5795cd08820e8451e2b9083b9994a9eda4be2707571891f830a3c340691017773681084541bbe4b12935d287899fa5b7ce6ddfe3570072536e72bd740838d8d951a01943006eb396047ebd11efab9bebf61e52c69111e9eef29942dc13a9093b7c71630fb7d7c5fb69e7362aa4e2a07cc8c48442b8ee7cf057c8f3bcf4f8fffcdcd00a9a406adc7c4a1803e845427c4c3dde9f8e3765481b06cf56fc4ed47e330e441f3ace25a530ea2feef0feb0770859a3b0c823eab33fa6cfde0a5f376d586fad68c2aa1827af33d4b7efceda447b7139a6f6afe068eadfeee9588abb0f06a2549948a0facb0764888032f7b804f26d46368b4877b6afaae7774b2100b879a666d750d854c107a9183c17de3755d4fbdfb31e60668697c6f434063107c738b1363d65381704f56523229dd3c95340f61e37e31322a3cc35c6dfd9f532608d5c33faa7d3c0fd874fc9517f7ebddd59185c1cd8ccacc84b133d5e7307b4e55d71085d80f0a6677e4777a34a32af7416315d12f030d86b0e381495740e457914d17e5bc0ec14093b24cb1443ecf7fa5d4c6a44bfff90a4b37cde5efed423ea5ff404f8238c7a7db757fde9ed2a732e897d4e532c9e7f5d996b3cbabf97696a8f2127572aa0f86fb1fdccb8bf5eab57c5e8c0dc6104aa21a58897f545dc1d2060406d2110ddae032e23a47a46934f7a68d0dd2675b7483ffbbbc13ee6640311521f4f5a2f3e4e555c75d8fb7d61c95500ed2340a2f77719711946fc34a4d397c6969cfb7b1632f6971cf805d1a2bd2e10751618"}, 0x418, 0x9}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@any, 0x1}) 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x404, 0x408001) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x80, 0x9, 0x5, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0x31, [@broadcast, @loopback, @remote, @multicast1, @loopback, @remote, @broadcast]}, @lsrr={0x83, 0xf, 0xfc, [@rand_addr=0x64010100, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xda, 0x1, 0x0, [{@private=0xa010101, 0x4}, {@rand_addr=0x64010101, 0x20}, {@empty, 0x1}, {@loopback}]}, @noop, @lsrr={0x83, 0x7, 0x7c, [@private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r2, 0x0, 0x7f, 0x40, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7800, 0xa82, 0x9}}) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (rerun: 64) 14:55:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}}}) 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000500)={&(0x7f00000000c0)={{@host, 0xbc}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x9}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@any, 0x1}) 14:55:35 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000500)={&(0x7f00000000c0)={{@host, 0xbc}, {@local, 0x9}, 0x400, "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"}, 0x418, 0x9}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@any, 0x1}) 14:55:35 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) 14:55:35 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) (async) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) (async) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) (async) read$rfkill(r1, &(0x7f0000000940), 0x8) (async) 14:55:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:35 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) (async) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) 14:55:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x113102) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:36 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x113102) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x113102) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:36 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) clock_gettime(0x0, &(0x7f00000005c0)) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x113102) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 0: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r0}, 0x10) 14:55:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 3: r0 = socket(0x1d, 0xa, 0x5) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:37 executing program 0: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)) (async) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r0}, 0x10) 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:37 executing program 0: ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r0}, 0x10) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000040)) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tick_stop\x00', r0}, 0x10) (async) 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 3: r0 = socket(0x1d, 0xa, 0x5) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:37 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x10020, 0x2c0001) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x183000) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x8200) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_clear_extent_bit\x00', r0}, 0x10) 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) [ 1893.465213] can: request_module (can-proto-5) failed. 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x10020, 0x2c0001) (async) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x183000) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x8200) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_clear_extent_bit\x00', r0}, 0x10) 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 3: r0 = socket(0x1d, 0xa, 0x5) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) socket(0x1d, 0xa, 0x5) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) [ 1893.614937] can: request_module (can-proto-5) failed. 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:37 executing program 0: syz_open_dev$audion(&(0x7f0000001d80), 0x10020, 0x2c0001) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x183000) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x8200) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_clear_extent_bit\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x10020, 0x2c0001) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x183000) (async) syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x8200) (async) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='btrfs_clear_extent_bit\x00', r0}, 0x10) (async) 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") [ 1893.765478] can: request_module (can-proto-5) failed. 14:55:37 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) [ 1893.822626] can: request_module (can-proto-5) failed. 14:55:37 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x2000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:37 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:37 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x101800) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 4: r0 = socket(0x1d, 0xa, 0x5) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x101800) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x101800) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x101800) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) (async) 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000000000), 0x8000000000000000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:38 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='io_uring_fail_link\x00', r0}, 0x10) 14:55:38 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x401, 0x101800) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}], 0x4, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000300)=[{}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000b000000000000002f6465762f76696d326d0000"], 0x2c) [ 1894.280253] can: request_module (can-proto-5) failed. 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2c, 0x3, 0x0, {0xfffffffffffffffe, 0xff1f, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2c, 0x3, 0x0, {0xfffffffffffffffe, 0xff1f, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2c, 0x3, 0x0, {0xfffffffffffffffe, 0xff1f, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='io_uring_fail_link\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='io_uring_fail_link\x00', r0}, 0x10) (async) 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2c, 0x3, 0x0, {0xfffffffffffffffe, 0xff1f, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x2c, 0x3, 0x0, {0xfffffffffffffffe, 0xff1f, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:38 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='io_uring_fail_link\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='io_uring_fail_link\x00', r0}, 0x10) (async) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='irq_noise\x00', r0}, 0x10) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) mount$fuseblk(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1f}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@default_permissions}], [{@measure}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='irq_noise\x00', r0}, 0x10) 14:55:38 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) mount$fuseblk(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1f}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@default_permissions}], [{@measure}]}}) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='irq_noise\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='irq_noise\x00', r0}, 0x10) (async) 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:38 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) mount$fuseblk(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1f}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@default_permissions}], [{@measure}]}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:38 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) syz_open_dev$vivid(&(0x7f00000003c0), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x104, 0x0, &(0x7f0000000580)=[@release={0x40046306, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x1, 0x202b}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/228, 0xe4, 0x0, 0x25}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/168, 0xa8, 0x2, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x2, 0x2, 0xa}, @flat=@handle={0x73682a85, 0xb, 0x3}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}, @exit_looper, @release], 0xf4, 0x0, &(0x7f00000006c0)="1e1476c8cf82f765672a68318f8c5dc92701df51d8b5eb494fb60fe26ca696f8326654070ef0360a8ac3a7aca5c99bbab423733dc0eb6ebb359f39022b380a456196c0f68dc673e9ebbec16659a33e19909520a430ed6e77804a3b074ba1196675b8c267cb30c61cae6a38ee6a3ef2fccba4c145006cb4994222fb3c69a0a1216993d720d72f182e81180fa11d5733bae8ee4ee8638a7e4e814591651c18df29a3605fe0cb3f85901ad40db1b7a4c2b722f22ded3d29f1a06e5a512d6ebe196ff033d30963e1820592ffb212809ee059fcb0ff2dfcb476910631cd295f4d02712471abffa637bcdc4516fe1b530741258a6f2c96"}) 14:55:38 executing program 2: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:38 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:39 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, r1+60000000}, &(0x7f0000000680)={0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:39 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) (async) syz_open_dev$vivid(&(0x7f00000003c0), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x104, 0x0, &(0x7f0000000580)=[@release={0x40046306, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x1, 0x202b}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/228, 0xe4, 0x0, 0x25}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/168, 0xa8, 0x2, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x2, 0x2, 0xa}, @flat=@handle={0x73682a85, 0xb, 0x3}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}, @exit_looper, @release], 0xf4, 0x0, &(0x7f00000006c0)="1e1476c8cf82f765672a68318f8c5dc92701df51d8b5eb494fb60fe26ca696f8326654070ef0360a8ac3a7aca5c99bbab423733dc0eb6ebb359f39022b380a456196c0f68dc673e9ebbec16659a33e19909520a430ed6e77804a3b074ba1196675b8c267cb30c61cae6a38ee6a3ef2fccba4c145006cb4994222fb3c69a0a1216993d720d72f182e81180fa11d5733bae8ee4ee8638a7e4e814591651c18df29a3605fe0cb3f85901ad40db1b7a4c2b722f22ded3d29f1a06e5a512d6ebe196ff033d30963e1820592ffb212809ee059fcb0ff2dfcb476910631cd295f4d02712471abffa637bcdc4516fe1b530741258a6f2c96"}) 14:55:39 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:39 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 14:55:39 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000022c0)=@multiplanar_fd={0x6, 0x0, 0x4, 0x2000, 0xd05, {r0, r1/1000+10000}, {0x1, 0xc, 0xff, 0x8, 0x0, 0x7, "705a60ad"}, 0xe7, 0x4, {&(0x7f0000002240)=[{0x80, 0x7, {}, 0x15b6}, {0x80000000, 0x8, {r2}}]}, 0x1, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f640e762f76696d326d0000"], 0x2c) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) fstat(r4, &(0x7f0000002100)) r6 = syz_open_dev$audion(&(0x7f0000002340), 0x4cb3f3c8, 0x32d501) fstat(r3, &(0x7f00000023c0)) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000002380), 0x2) r7 = geteuid() r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000002440)) write$FUSE_ENTRY(r2, &(0x7f0000002180)={0x90, 0xfffffffffffffffe, r5, {0x6, 0x0, 0x9, 0x6, 0x1ff, 0x8000, {0x2, 0x80000001, 0x7, 0x2, 0x100, 0x0, 0x401, 0x3, 0x101, 0x6000, 0xfffffffa, r7, 0x0, 0x1f, 0x14fa9245}}}, 0x90) 14:55:39 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) 14:55:39 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) 14:55:39 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:39 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000022c0)=@multiplanar_fd={0x6, 0x0, 0x4, 0x2000, 0xd05, {r0, r1/1000+10000}, {0x1, 0xc, 0xff, 0x8, 0x0, 0x7, "705a60ad"}, 0xe7, 0x4, {&(0x7f0000002240)=[{0x80, 0x7, {}, 0x15b6}, {0x80000000, 0x8, {r2}}]}, 0x1, 0x0, 0xffffffffffffffff}) (async) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f640e762f76696d326d0000"], 0x2c) (async) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) (async) fstat(r4, &(0x7f0000002100)) (async) r6 = syz_open_dev$audion(&(0x7f0000002340), 0x4cb3f3c8, 0x32d501) fstat(r3, &(0x7f00000023c0)) (async) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000002380), 0x2) (async) r7 = geteuid() (async) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000002440)) (async) write$FUSE_ENTRY(r2, &(0x7f0000002180)={0x90, 0xfffffffffffffffe, r5, {0x6, 0x0, 0x9, 0x6, 0x1ff, 0x8000, {0x2, 0x80000001, 0x7, 0x2, 0x100, 0x0, 0x401, 0x3, 0x101, 0x6000, 0xfffffffa, r7, 0x0, 0x1f, 0x14fa9245}}}, 0x90) 14:55:39 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:39 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:39 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) read$rfkill(r1, &(0x7f0000000940), 0x8) 14:55:40 executing program 4: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000022c0)=@multiplanar_fd={0x6, 0x0, 0x4, 0x2000, 0xd05, {r0, r1/1000+10000}, {0x1, 0xc, 0xff, 0x8, 0x0, 0x7, "705a60ad"}, 0xe7, 0x4, {&(0x7f0000002240)=[{0x80, 0x7, {}, 0x15b6}, {0x80000000, 0x8, {r2}}]}, 0x1, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f640e762f76696d326d0000"], 0x2c) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) fstat(r4, &(0x7f0000002100)) r6 = syz_open_dev$audion(&(0x7f0000002340), 0x4cb3f3c8, 0x32d501) fstat(r3, &(0x7f00000023c0)) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000002380), 0x2) r7 = geteuid() r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000002440)) write$FUSE_ENTRY(r2, &(0x7f0000002180)={0x90, 0xfffffffffffffffe, r5, {0x6, 0x0, 0x9, 0x6, 0x1ff, 0x8000, {0x2, 0x80000001, 0x7, 0x2, 0x100, 0x0, 0x401, 0x3, 0x101, 0x6000, 0xfffffffa, r7, 0x0, 0x1f, 0x14fa9245}}}, 0x90) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000022c0)=@multiplanar_fd={0x6, 0x0, 0x4, 0x2000, 0xd05, {r0, r1/1000+10000}, {0x1, 0xc, 0xff, 0x8, 0x0, 0x7, "705a60ad"}, 0xe7, 0x4, {&(0x7f0000002240)=[{0x80, 0x7, {}, 0x15b6}, {0x80000000, 0x8, {r2}}]}, 0x1}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000000000000000000000000000000000000b000000000000002f640e762f76696d326d0000"], 0x2c) (async) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) (async) fstat(r4, &(0x7f0000002100)) (async) syz_open_dev$audion(&(0x7f0000002340), 0x4cb3f3c8, 0x32d501) (async) fstat(r3, &(0x7f00000023c0)) (async) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000002380), 0x2) (async) geteuid() (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) (async) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000002440)) (async) write$FUSE_ENTRY(r2, &(0x7f0000002180)={0x90, 0xfffffffffffffffe, r5, {0x6, 0x0, 0x9, 0x6, 0x1ff, 0x8000, {0x2, 0x80000001, 0x7, 0x2, 0x100, 0x0, 0x401, 0x3, 0x101, 0x6000, 0xfffffffa, r7, 0x0, 0x1f, 0x14fa9245}}}, 0x90) (async) 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "cb947d12eb2343c3746457415e0179d7c4a941be1b97728b576b06b3d6c2e098b68285ed2854afadf1c15b52f70197ec9459aaabe2c28a91ade53d670d01df9f8bb605ddece9d5c56454a273e2e5d55d14eef6be6942fc02db767ecbf881bc1a1f9e4e40c46c0a8c19504fc949464c0f82c70001d4bc4659708819e03058507bf6824ea4e9ed3c5b27c2db10cbdcee910cfb94245a8d3b0650e0bed61bb2eca3c44c177940b89e4a6299b594443f031770e6af9047ce3f289224d990e25f43465d1a93ae8b45de32c18f33b22f4c93c99ff55ef61e8e2790e7aafa5995a26526e628eee086b26929445625e081216a56c7c5b8ecec5fb224129fbd59a6e4c53ac7c2788a58cba7eaca4ca14139508dfb034790a4daf21eb15c857605d6446d2715b876a26c700d435be1c826b23b5dad2fc5daf2494c7f34d9282e5f839785a060d70938b3f8318f0dcf75cfbbe14b0ada714d4869828f586d08e98a1abe9b7cd66b29199e0f5e1ae03530b22a939d763a502f8590172d5035a7e8047b81a019596dd56b03b1af493e22d45d7f783a7abbb252442e98307cdbee0fbc4fc25fb5b16653e23287510c22082227a6e4fa1d4a77dbb89c1c6973757eb1b2038caa4f1ed763e1159f38e747bf99759c460e9333ecc7cde76286f3b4e21d774e86048dfe9deb2128ebf3a2358f17c6505790c9a0037ab943da54784592478ef45c24bd45d668aa45a0b5e6f3a9615ea6889db8110f10653ff7c81502a10743f0f4fdd316bee57de35f22a70c245a0e125d4b9babc57236124d5b905204bb3c055eb2a57a2009e7e3aa2f934df70310a47b95c4932b10d4d46f496dca001f0c7c1f61169e5783386bad4504bcc449478b94966026182a45b1109ab586e7e906750a2b54f8c03d58da3fc41e1191f9df06136d34720318b82e8d435c2e7c8ae25e5f18c630c08f3e2d035d94d17e61f2a1242074a4a725bd242e892d82a1d31aa962ff19bc98b7a025a7a983c4c447faf84f9b2c161fd8379d5bf8a970609fcaceecc204168290b1bb24beadb590f3e8533d18118993c145ae63f24482f36633783dfb5416b87cba71e225b712fa268bcdf87394a3f566b07984c8480acd3944beeacefad2a5bd9cab1d2a8aa53654378f84be9cc874b4040b0bef0a52077df0b1778432c399a6f9e87c769fe777e53d5e70b5796b320df54695ce41320b50aaf469b55d870cb6689f7b5914ba6c42595d0a1b655e2ffc5e2b8a5ea28932ca208bf9bbab189cba97b5be53f5974f0e9b41d2b85b1ad2b287a459749e463ff07d768bb4ce0b7c3cccb05f1d512ca44b46c4a96af2387e08f9c0bc5ccb9cba087cb03da1f6e0cdc0c3cd83496a62b254fead47d9396aec1e47b752f7df2bacc9c37b9869f59aec8adbe94da537cb45bd1f4208677db768c6bf49eba0999cc54c43aab3f2c9"}, 0x418, 0x6}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000900)) 14:55:40 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, 0x0) syz_open_dev$vivid(&(0x7f00000003c0), 0x0, 0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x104, 0x0, &(0x7f0000000580)=[@release={0x40046306, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x1, 0x202b}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/228, 0xe4, 0x0, 0x25}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/168, 0xa8, 0x2, 0x26}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x2, 0x2, 0xa}, @flat=@handle={0x73682a85, 0xb, 0x3}}, &(0x7f0000000540)={0x0, 0x18, 0x38}}}, @exit_looper, @release], 0xf4, 0x0, &(0x7f00000006c0)="1e1476c8cf82f765672a68318f8c5dc92701df51d8b5eb494fb60fe26ca696f8326654070ef0360a8ac3a7aca5c99bbab423733dc0eb6ebb359f39022b380a456196c0f68dc673e9ebbec16659a33e19909520a430ed6e77804a3b074ba1196675b8c267cb30c61cae6a38ee6a3ef2fccba4c145006cb4994222fb3c69a0a1216993d720d72f182e81180fa11d5733bae8ee4ee8638a7e4e814591651c18df29a3605fe0cb3f85901ad40db1b7a4c2b722f22ded3d29f1a06e5a512d6ebe196ff033d30963e1820592ffb212809ee059fcb0ff2dfcb476910631cd295f4d02712471abffa637bcdc4516fe1b530741258a6f2c96"}) 14:55:40 executing program 5: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000e00)={&(0x7f00000009c0)={{@local, 0xffff}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x6}) 14:55:40 executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0xff, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_timer\x00', r0}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:55:40 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x80}}, 0x18) 14:55:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) 14:55:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0xff, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_timer\x00', r0}, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0xff, 0x2401) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_timer\x00', r0}, 0x10) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 14:55:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x80}}, 0x18) 14:55:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0xff, 0x2401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='rxrpc_timer\x00', r0}, 0x10) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:55:40 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x80}}, 0x18) 14:55:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000780)=""/129, &(0x7f0000000840)=0x81) 14:55:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:40 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) 14:55:40 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0xffffffffffffffda, r2, {0x6, 0x7ff, 0x0, {0x4, 0x8001, 0x7, 0x10000000000, 0xa65, 0x7, 0x4, 0x1, 0x9ad, 0x6000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x800}}}, 0x78) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:40 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002100)={0x78, 0x0, 0x0, {0x7f, 0x3, 0x0, {0x3, 0xffffffff, 0x708e4991, 0x80000000, 0xffffffffffffff74, 0xfffffffffffffffb, 0x9, 0x3, 0x13bfffa4, 0x8000, 0x6, r0, 0xee01, 0x2, 0x20}}}, 0x78) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:40 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:40 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:40 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0xffffffffffffffda, r2, {0x6, 0x7ff, 0x0, {0x4, 0x8001, 0x7, 0x10000000000, 0xa65, 0x7, 0x4, 0x1, 0x9ad, 0x6000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x800}}}, 0x78) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000001dc0)={0x2020}, 0x2020) (async) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0xffffffffffffffda, r2, {0x6, 0x7ff, 0x0, {0x4, 0x8001, 0x7, 0x10000000000, 0xa65, 0x7, 0x4, 0x1, 0x9ad, 0x6000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x800}}}, 0x78) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:41 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002100)={0x78, 0x0, 0x0, {0x7f, 0x3, 0x0, {0x3, 0xffffffff, 0x708e4991, 0x80000000, 0xffffffffffffff74, 0xfffffffffffffffb, 0x9, 0x3, 0x13bfffa4, 0x8000, 0x6, r0, 0xee01, 0x2, 0x20}}}, 0x78) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002100)={0x78, 0x0, 0x0, {0x7f, 0x3, 0x0, {0x3, 0xffffffff, 0x708e4991, 0x80000000, 0xffffffffffffff74, 0xfffffffffffffffb, 0x9, 0x3, 0x13bfffa4, 0x8000, 0x6, r0, 0xee01, 0x2, 0x20}}}, 0x78) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) read$FUSE(r0, &(0x7f0000001dc0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0xffffffffffffffda, r2, {0x6, 0x7ff, 0x0, {0x4, 0x8001, 0x7, 0x10000000000, 0xa65, 0x7, 0x4, 0x1, 0x9ad, 0x6000, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x800}}}, 0x78) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f00000000c0)={0x18, 0x0, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:41 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x102042) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x5, 0xc1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x102042) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x102042) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) (async) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x5, 0xc1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:41 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14040000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="0002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040080000805040000008000040102000000080007010000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400f01f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="f400028038000100240001006c726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004000000000000000000", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000000"], 0x414}, 0x1, 0x0, 0x0, 0x8004}, 0x11) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x102042) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x202, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x5, 0xc1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x5, 0xc1c0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x202, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000030000000000000000000000000000000000000008000000000000002f6465762f7601a7696d326d71f48815ee03bbcc9c4a000049625e6d6dca64725d017833a705755ee6731775ab927f8cd1d3adac094088b5c86f6af6d8b813899b6f3837df8e5b9b32d62c2db0e4268ab32ed876f526f81dc36b7bbebbb7e56c486747b70ce1af055c2204f904ee7ad935dfc7b22e63ddaa47d0328a573e4aee7495e4a44b2fe3999ad3cc142bfc1d5a721f93a16e24fa2fba5045cfd36a416e14e554f6d6080c6ca7a74df87415f546863ffcb5a8877e07c831c149261e16844e93cb20801b5c342776633d1458f73852f5c1a090ebcf1a862e18ae886fb1f996c23b4127468401e990e1f4c5bf236ee16f2d5de04112a6da198c4ddf90e017abf14361b29eaa145a08a975a2f6558b4e91413fb1ab7b"], 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x202, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2c) (async) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0xfffffffffffffffe, 0x82840) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tick_stop\x00', r1}, 0x10) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000680)=""/133, &(0x7f00000000c0)=0x85) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0xfffffffffffffffe, 0x82840) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tick_stop\x00', r1}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0xfffffffffffffffe, 0x82840) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tick_stop\x00', r1}, 0x10) (async) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x202, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x2c) 14:55:41 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x8242) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x56dac3) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40a1c2d0444f61f6796353eaf3bd2e900003000000000000000000000006000000009c6400002f6465762f76696d326d00"/60], 0x2c) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0xfffffffffffffffe, 0x82840) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tick_stop\x00', r1}, 0x10) syz_open_dev$audion(&(0x7f0000001d80), 0xfffffffffffffffe, 0x82840) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='tick_stop\x00', r1}, 0x10) (async) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x56dac3) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40a1c2d0444f61f6796353eaf3bd2e900003000000000000000000000006000000009c6400002f6465762f76696d326d00"/60], 0x2c) 14:55:41 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10}, 0x10}}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x70, 0x453, 0x400, 0x70bd29, 0x25dfdbfe, "c40aebf8b34a0ea5368107b8198f05ced9afd215482e684b547c3f492f62fede68cf5456186aea11fafc8c800ebb62973d7d44a6f8d983859e4c388afb073b2bf0b69179c32208065ffaf2a335134a856cc86962c4823eec36c0ff48a85cd4", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x20, 0x56dac3) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="40a1c2d0444f61f6796353eaf3bd2e900003000000000000000000000006000000009c6400002f6465762f76696d326d00"/60], 0x2c) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) [ 1897.857681] audit: type=1107 audit(1672584941.899:142): pid=26963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='Ä [ 1897.857681] ëø³J¥6¸ÎÙ¯ÒH.hKT|?I/bþÞhÏTVjêúüŒ€»b—=}D¦øÙƒ…žL8Šû;+ð¶‘yÃ"_úò£5J…lÈibÄ‚>ì6ÀÿH¨\Ô' 14:55:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x70, 0x453, 0x400, 0x70bd29, 0x25dfdbfe, "c40aebf8b34a0ea5368107b8198f05ced9afd215482e684b547c3f492f62fede68cf5456186aea11fafc8c800ebb62973d7d44a6f8d983859e4c388afb073b2bf0b69179c32208065ffaf2a335134a856cc86962c4823eec36c0ff48a85cd4", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 14:55:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10}, 0x10}}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x70, 0x453, 0x400, 0x70bd29, 0x25dfdbfe, "c40aebf8b34a0ea5368107b8198f05ced9afd215482e684b547c3f492f62fede68cf5456186aea11fafc8c800ebb62973d7d44a6f8d983859e4c388afb073b2bf0b69179c32208065ffaf2a335134a856cc86962c4823eec36c0ff48a85cd4", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10}, 0x10}}, 0x0) (async) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x70, 0x453, 0x400, 0x70bd29, 0x25dfdbfe, "c40aebf8b34a0ea5368107b8198f05ced9afd215482e684b547c3f492f62fede68cf5456186aea11fafc8c800ebb62973d7d44a6f8d983859e4c388afb073b2bf0b69179c32208065ffaf2a335134a856cc86962c4823eec36c0ff48a85cd4", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) 14:55:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) [ 1898.004378] audit: type=1107 audit(1672584942.049:143): pid=26980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='Ä [ 1898.004378] ëø³J¥6¸ÎÙ¯ÒH.hKT|?I/bþÞhÏTVjêúüŒ€»b—=}D¦øÙƒ…žL8Šû;+ð¶‘yÃ"_úò£5J…lÈibÄ‚>ì6ÀÿH¨\Ô' 14:55:42 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x9, 0x9}}) [ 1898.124495] audit: type=1107 audit(1672584942.129:144): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='Ä [ 1898.124495] ëø³J¥6¸ÎÙ¯ÒH.hKT|?I/bþÞhÏTVjêúüŒ€»b—=}D¦øÙƒ…žL8Šû;+ð¶‘yÃ"_úò£5J…lÈibÄ‚>ì6ÀÿH¨\Ô' 14:55:42 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async, rerun: 32) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (rerun: 32) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x9, 0x9}}) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) [ 1898.235632] audit: type=1107 audit(1672584942.139:145): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='Ä [ 1898.235632] ëø³J¥6¸ÎÙ¯ÒH.hKT|?I/bþÞhÏTVjêúüŒ€»b—=}D¦øÙƒ…žL8Šû;+ð¶‘yÃ"_úò£5J…lÈibÄ‚>ì6ÀÿH¨\Ô' 14:55:42 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000de00830d529fa2e974fc5b0c54c04f0000000000000000010000000000000000b00d02d5"], 0x2c) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x9}}) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000de00830d529fa2e974fc5b0c54c04f0000000000000000010000000000000000b00d02d5"], 0x2c) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}}}) 14:55:42 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$yama_ptrace_scope(r0, &(0x7f0000000000)='2\x00', 0x2) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003000000de00830d529fa2e974fc5b0c54c04f0000000000000000010000000000000000b00d02d5"], 0x2c) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000008c0)={{@my=0x1, 0x1}, 0x0, 0x0, 0x8001}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000040)) 14:55:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x1, 0x1}, 0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x80, 0x80000001, 0x3fe0000, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0xe1, 0x4, 0x0, @broadcast, @empty, {[@end, @noop]}}}}}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x28, 0x8, {}, {0x77359400}, {0x2}, 0x1, @canfd={{}, 0x7, 0x2, 0x0, 0x0, "191f510b072fea8c0691ce2519c4c3c0ea4ece0e82b799ed3af34974a3eab3eec241aa56dc51995aa5eaa0052847bfc8521bfd00830bd5b473785d6ca6e62269"}}, 0x80}, 0x1, 0x0, 0x0, 0x8801}, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 14:55:42 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 14:55:42 executing program 5: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7800, 0x7, 0xf8, 0x6, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0xb, "4dbd9ac3df73b45c98"}, @timestamp_addr={0x44, 0x4, 0x33, 0x1, 0x3}, @end, @noop]}}}}}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x0, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x6, 0x100000001, 0x1, 0x0, [0x0]}}, 0x29) 14:55:42 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x1, 0x1}, 0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x80, 0x80000001, 0x3fe0000, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0xe1, 0x4, 0x0, @broadcast, @empty, {[@end, @noop]}}}}}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x28, 0x8, {}, {0x77359400}, {0x2}, 0x1, @canfd={{}, 0x7, 0x2, 0x0, 0x0, "191f510b072fea8c0691ce2519c4c3c0ea4ece0e82b799ed3af34974a3eab3eec241aa56dc51995aa5eaa0052847bfc8521bfd00830bd5b473785d6ca6e62269"}}, 0x80}, 0x1, 0x0, 0x0, 0x8801}, 0x1) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x0, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x6, 0x100000001, 0x1, 0x0, [0x0]}}, 0x29) 14:55:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x0, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x1, 0x1}, 0x8) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2) (async) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000300)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x80, 0x80000001, 0x3fe0000, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0xe1, 0x4, 0x0, @broadcast, @empty, {[@end, @noop]}}}}}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x28, 0x8, {}, {0x77359400}, {0x2}, 0x1, @canfd={{}, 0x7, 0x2, 0x0, 0x0, "191f510b072fea8c0691ce2519c4c3c0ea4ece0e82b799ed3af34974a3eab3eec241aa56dc51995aa5eaa0052847bfc8521bfd00830bd5b473785d6ca6e62269"}}, 0x80}, 0x1, 0x0, 0x0, 0x8801}, 0x1) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$rfkill(r0, &(0x7f0000000100)={0x7, 0x0, 0x1, 0x1, 0x1}, 0x8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x80, 0x80000001, 0x3fe0000, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0xe1, 0x4, 0x0, @broadcast, @empty, {[@end, @noop]}}}}}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x28, 0x8, {}, {0x77359400}, {0x2}, 0x1, @canfd={{}, 0x7, 0x2, 0x0, 0x0, "191f510b072fea8c0691ce2519c4c3c0ea4ece0e82b799ed3af34974a3eab3eec241aa56dc51995aa5eaa0052847bfc8521bfd00830bd5b473785d6ca6e62269"}}, 0x80}, 0x1, 0x0, 0x0, 0x8801}, 0x1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x6, 0x100000001, 0x1, 0x0, [0x0]}}, 0x29) 14:55:42 executing program 3: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:42 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x42c, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x33, [0x2, 0x4, 0x4b6, 0x6, 0x400, 0x5, 0x2, 0x101, 0x5, 0x3, 0xea7, 0x2, 0x1, 0x49, 0x4, 0x0, 0xffffffff, 0xcbef, 0x6, 0x4000000, 0x1, 0x1, 0x6, 0xffffffff, 0x5d5, 0x4, 0x71d4, 0x2, 0x9, 0x9, 0x8, 0xd2f, 0x5, 0x0, 0x9, 0x1, 0x3ff, 0x4, 0xfffffff9, 0x1f, 0x81, 0x2, 0x3, 0x1ff, 0x2, 0x4f7a, 0x497f, 0x200, 0x70, 0x800, 0x0, 0x7122d2a4, 0x9, 0x45, 0x5, 0xb7, 0x9, 0x3f, 0x2, 0x7fffffff, 0x4, 0x9, 0x7], [0x7fff, 0x9, 0x5e8a, 0x5, 0x2, 0x7, 0x200, 0x4, 0x4, 0x1660, 0xfff, 0x4, 0x3cc9, 0x8001, 0x0, 0x9, 0x4, 0xfffffffa, 0x8, 0xda, 0x8, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x9, 0x7fff, 0x3, 0x9, 0x101, 0xe752, 0x2, 0x8, 0x3ff, 0x7fff, 0x4d4, 0x7fff, 0x8, 0x5fcf, 0x3, 0x17, 0x1ff, 0x8, 0x5, 0x3, 0x9, 0x0, 0x20, 0x401, 0x80, 0x2, 0x10000, 0x6, 0xa93f, 0x0, 0x93a, 0x9, 0xc5, 0x4, 0x8, 0x7, 0x3], [0x1ff, 0x8, 0x2, 0x8001, 0xfffffffa, 0xfffffc01, 0x4, 0x7, 0x8, 0x9, 0x5, 0x1, 0x5, 0x1fc00000, 0x80, 0x3, 0xfffffffd, 0x8, 0x20, 0x6, 0xba, 0x6, 0xdc1, 0x8bb, 0x4, 0x7fffffff, 0x401, 0x1, 0x2, 0x3, 0x0, 0x101, 0x1, 0x6, 0x2, 0x8, 0x3, 0x0, 0x8, 0x10000, 0x1, 0x4, 0x5, 0x400, 0x81, 0xffff7fff, 0x0, 0x1f, 0x2, 0x1f, 0xcc, 0x2, 0x1f, 0x8, 0x7520, 0x400, 0x0, 0x80000000, 0x7f, 0x3, 0x81, 0xffff, 0x3, 0x20], [0x4, 0x3af, 0xffff, 0x800, 0x4, 0x8, 0x6, 0x3ff, 0x1, 0x80, 0x9, 0x4, 0x3, 0x8, 0x3, 0xa2, 0x7, 0x5, 0x3, 0x4, 0x1, 0x42, 0x20000, 0x3, 0x7f, 0x9, 0x5, 0x9, 0x1000, 0x9, 0x7ff, 0x7, 0x7fffffff, 0x0, 0x5, 0x7, 0x8, 0x8001, 0x7, 0x7f, 0x20, 0x7fffffff, 0x0, 0xfffffffb, 0x3f, 0x3, 0x7f, 0xb7, 0x0, 0x6, 0x6, 0xffffffff, 0x2, 0x4, 0xffffff96, 0x4131, 0x54a, 0x10000, 0xfffffffc, 0xfffffff8, 0x0, 0x335, 0xff, 0x8000], 0xc, ['-\x00', 'tick_stop\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20040480}, 0x4040040) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:42 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:42 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:43 executing program 3: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:43 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:43 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x42c, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x33, [0x2, 0x4, 0x4b6, 0x6, 0x400, 0x5, 0x2, 0x101, 0x5, 0x3, 0xea7, 0x2, 0x1, 0x49, 0x4, 0x0, 0xffffffff, 0xcbef, 0x6, 0x4000000, 0x1, 0x1, 0x6, 0xffffffff, 0x5d5, 0x4, 0x71d4, 0x2, 0x9, 0x9, 0x8, 0xd2f, 0x5, 0x0, 0x9, 0x1, 0x3ff, 0x4, 0xfffffff9, 0x1f, 0x81, 0x2, 0x3, 0x1ff, 0x2, 0x4f7a, 0x497f, 0x200, 0x70, 0x800, 0x0, 0x7122d2a4, 0x9, 0x45, 0x5, 0xb7, 0x9, 0x3f, 0x2, 0x7fffffff, 0x4, 0x9, 0x7], [0x7fff, 0x9, 0x5e8a, 0x5, 0x2, 0x7, 0x200, 0x4, 0x4, 0x1660, 0xfff, 0x4, 0x3cc9, 0x8001, 0x0, 0x9, 0x4, 0xfffffffa, 0x8, 0xda, 0x8, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x9, 0x7fff, 0x3, 0x9, 0x101, 0xe752, 0x2, 0x8, 0x3ff, 0x7fff, 0x4d4, 0x7fff, 0x8, 0x5fcf, 0x3, 0x17, 0x1ff, 0x8, 0x5, 0x3, 0x9, 0x0, 0x20, 0x401, 0x80, 0x2, 0x10000, 0x6, 0xa93f, 0x0, 0x93a, 0x9, 0xc5, 0x4, 0x8, 0x7, 0x3], [0x1ff, 0x8, 0x2, 0x8001, 0xfffffffa, 0xfffffc01, 0x4, 0x7, 0x8, 0x9, 0x5, 0x1, 0x5, 0x1fc00000, 0x80, 0x3, 0xfffffffd, 0x8, 0x20, 0x6, 0xba, 0x6, 0xdc1, 0x8bb, 0x4, 0x7fffffff, 0x401, 0x1, 0x2, 0x3, 0x0, 0x101, 0x1, 0x6, 0x2, 0x8, 0x3, 0x0, 0x8, 0x10000, 0x1, 0x4, 0x5, 0x400, 0x81, 0xffff7fff, 0x0, 0x1f, 0x2, 0x1f, 0xcc, 0x2, 0x1f, 0x8, 0x7520, 0x400, 0x0, 0x80000000, 0x7f, 0x3, 0x81, 0xffff, 0x3, 0x20], [0x4, 0x3af, 0xffff, 0x800, 0x4, 0x8, 0x6, 0x3ff, 0x1, 0x80, 0x9, 0x4, 0x3, 0x8, 0x3, 0xa2, 0x7, 0x5, 0x3, 0x4, 0x1, 0x42, 0x20000, 0x3, 0x7f, 0x9, 0x5, 0x9, 0x1000, 0x9, 0x7ff, 0x7, 0x7fffffff, 0x0, 0x5, 0x7, 0x8, 0x8001, 0x7, 0x7f, 0x20, 0x7fffffff, 0x0, 0xfffffffb, 0x3f, 0x3, 0x7f, 0xb7, 0x0, 0x6, 0x6, 0xffffffff, 0x2, 0x4, 0xffffff96, 0x4131, 0x54a, 0x10000, 0xfffffffc, 0xfffffff8, 0x0, 0x335, 0xff, 0x8000], 0xc, ['-\x00', 'tick_stop\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20040480}, 0x4040040) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (rerun: 32) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:43 executing program 1: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") r1 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x2009c1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x5, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 14:55:43 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r1}, 0x10) 14:55:43 executing program 3: ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x9, 0x9}}) 14:55:43 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x42c, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x33, [0x2, 0x4, 0x4b6, 0x6, 0x400, 0x5, 0x2, 0x101, 0x5, 0x3, 0xea7, 0x2, 0x1, 0x49, 0x4, 0x0, 0xffffffff, 0xcbef, 0x6, 0x4000000, 0x1, 0x1, 0x6, 0xffffffff, 0x5d5, 0x4, 0x71d4, 0x2, 0x9, 0x9, 0x8, 0xd2f, 0x5, 0x0, 0x9, 0x1, 0x3ff, 0x4, 0xfffffff9, 0x1f, 0x81, 0x2, 0x3, 0x1ff, 0x2, 0x4f7a, 0x497f, 0x200, 0x70, 0x800, 0x0, 0x7122d2a4, 0x9, 0x45, 0x5, 0xb7, 0x9, 0x3f, 0x2, 0x7fffffff, 0x4, 0x9, 0x7], [0x7fff, 0x9, 0x5e8a, 0x5, 0x2, 0x7, 0x200, 0x4, 0x4, 0x1660, 0xfff, 0x4, 0x3cc9, 0x8001, 0x0, 0x9, 0x4, 0xfffffffa, 0x8, 0xda, 0x8, 0x5, 0x0, 0xfffffffd, 0x5, 0x3, 0x9, 0x7fff, 0x3, 0x9, 0x101, 0xe752, 0x2, 0x8, 0x3ff, 0x7fff, 0x4d4, 0x7fff, 0x8, 0x5fcf, 0x3, 0x17, 0x1ff, 0x8, 0x5, 0x3, 0x9, 0x0, 0x20, 0x401, 0x80, 0x2, 0x10000, 0x6, 0xa93f, 0x0, 0x93a, 0x9, 0xc5, 0x4, 0x8, 0x7, 0x3], [0x1ff, 0x8, 0x2, 0x8001, 0xfffffffa, 0xfffffc01, 0x4, 0x7, 0x8, 0x9, 0x5, 0x1, 0x5, 0x1fc00000, 0x80, 0x3, 0xfffffffd, 0x8, 0x20, 0x6, 0xba, 0x6, 0xdc1, 0x8bb, 0x4, 0x7fffffff, 0x401, 0x1, 0x2, 0x3, 0x0, 0x101, 0x1, 0x6, 0x2, 0x8, 0x3, 0x0, 0x8, 0x10000, 0x1, 0x4, 0x5, 0x400, 0x81, 0xffff7fff, 0x0, 0x1f, 0x2, 0x1f, 0xcc, 0x2, 0x1f, 0x8, 0x7520, 0x400, 0x0, 0x80000000, 0x7f, 0x3, 0x81, 0xffff, 0x3, 0x20], [0x4, 0x3af, 0xffff, 0x800, 0x4, 0x8, 0x6, 0x3ff, 0x1, 0x80, 0x9, 0x4, 0x3, 0x8, 0x3, 0xa2, 0x7, 0x5, 0x3, 0x4, 0x1, 0x42, 0x20000, 0x3, 0x7f, 0x9, 0x5, 0x9, 0x1000, 0x9, 0x7ff, 0x7, 0x7fffffff, 0x0, 0x5, 0x7, 0x8, 0x8001, 0x7, 0x7f, 0x20, 0x7fffffff, 0x0, 0xfffffffb, 0x3f, 0x3, 0x7f, 0xb7, 0x0, 0x6, 0x6, 0xffffffff, 0x2, 0x4, 0xffffff96, 0x4131, 0x54a, 0x10000, 0xfffffffc, 0xfffffff8, 0x0, 0x335, 0xff, 0x8000], 0xc, ['-\x00', 'tick_stop\x00']}, ["", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20040480}, 0x4040040) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x7f, 0x40000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:43 executing program 2: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x204002, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x38}}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000500)="376a14262ca96323f94d4ab5a5e0f111f592b2421d76f6aeb9f9c5f5e6975feb9964471ec1ead1b317fa80da90107672ba6dee8a02263701f5b10b40351e0c704bda04f59518e6d5825c88286ba2eea292d2e23009c93c2e4a0366e768a7338a52131d9f3b51500b5128b9ebcc23e798ac1df6d3a2b07cb2214bdeb472437eddbffb938cb76ecfd3c7774ca5ed00e7bda9a59a2c74fb9063edc2f0b412d59aafb5f397e0382abe331a121d658e29962958da7a87144b92c445f5a0fb0aa0668e311049017f9338809f8343c37cf1ed635257c813b9ce28fd07eb248649a8dc28eee5") 14:55:43 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) 14:55:43 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x3, 0x4, 0xbab118b99a7f00df, 0x6, {}, {0x5, 0xc, 0xb0, 0x8, 0x1, 0x2, "eb399839"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x1ff, 0x0, {&(0x7f0000000080)}, 0x10001}, {0x8, 0x1ff, {&(0x7f0000000140)}, 0x100}]}, 0x1, 0x0, r0}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000181900000000000000000b0000000000c9df4a3c5e0000506465762f9e6e4bde1b142b09bcc561a5d620f12fa02eba564918fd842fc597d6bc6f6380e93f7c9b7399d0919a24d9557171c6f67b8be02302a9cd76"], 0x2c) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x9, 0x9}}) 14:55:43 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r2 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}], [{@fowner_gt={'fowner>', 0xee00}}]}}) 14:55:43 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x3c, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x42000) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/208, &(0x7f0000000100)=0xd0) 14:55:43 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:43 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x7, 0x9, 0x9}}) 14:55:43 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) 14:55:43 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x3, 0x4, 0xbab118b99a7f00df, 0x6, {}, {0x5, 0xc, 0xb0, 0x8, 0x1, 0x2, "eb399839"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x1ff, 0x0, {&(0x7f0000000080)}, 0x10001}, {0x8, 0x1ff, {&(0x7f0000000140)}, 0x100}]}, 0x1, 0x0, r0}) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000181900000000000000000b0000000000c9df4a3c5e0000506465762f9e6e4bde1b142b09bcc561a5d620f12fa02eba564918fd842fc597d6bc6f6380e93f7c9b7399d0919a24d9557171c6f67b8be02302a9cd76"], 0x2c) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x0, 0x9, 0x9}}) 14:55:43 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x2, 0x3, 0x4, 0xbab118b99a7f00df, 0x6, {}, {0x5, 0xc, 0xb0, 0x8, 0x1, 0x2, "eb399839"}, 0x6, 0x2, {&(0x7f0000000180)=[{0x1ff, 0x0, {&(0x7f0000000080)}, 0x10001}, {0x8, 0x1ff, {&(0x7f0000000140)}, 0x100}]}, 0x1, 0x0, r0}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000003000000000000000000181900000000000000000b0000000000c9df4a3c5e0000506465762f9e6e4bde1b142b09bcc561a5d620f12fa02eba564918fd842fc597d6bc6f6380e93f7c9b7399d0919a24d9557171c6f67b8be02302a9cd76"], 0x2c) 14:55:43 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) 14:55:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x0, 0x9, 0x9}}) 14:55:43 executing program 5: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/13) 14:55:43 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5800) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0x100}, 0xffffffc1, 0x7, 0x3f, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:44 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x3c, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x42000) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/208, &(0x7f0000000100)=0xd0) 14:55:44 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e, 0x10000}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:55:44 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5800) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0x100}, 0xffffffc1, 0x7, 0x3f, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5800) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0x100}, 0xffffffc1, 0x7, 0x3f, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) (async) 14:55:44 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/13) 14:55:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x0, 0x9, 0x9}}) 14:55:44 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) 14:55:44 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:55:44 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5800) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xee01, 0xee01, 0xee01, 0x100}, 0xffffffc1, 0x7, 0x3f, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7ff}) (async) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vim2m\x00'}}, 0x2c) 14:55:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x0, 0x9}}) 14:55:44 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) 14:55:44 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) 14:55:45 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x3c, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x42000) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/208, &(0x7f0000000100)=0xd0) 14:55:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x0, 0x9}}) [ 1905.012568] oom_reaper: reaped process 27212 (syz-executor.1), now anon-rss:0kB, file-rss:14336kB, shmem-rss:12kB [ 1905.048554] systemd-journal invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1905.066393] systemd-journal cpuset=/ mems_allowed=0-1 [ 1905.071917] CPU: 0 PID: 25372 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0 [ 1905.080015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1905.089371] Call Trace: [ 1905.091966] dump_stack+0x1fc/0x2ef [ 1905.095598] dump_header+0x15d/0xc3f [ 1905.099315] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1905.104465] ? ___ratelimit+0x319/0x590 [ 1905.108454] oom_kill_process.cold+0x10/0x692 [ 1905.112970] ? check_preemption_disabled+0x41/0x280 [ 1905.118003] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1905.123287] out_of_memory+0x1072/0x1390 [ 1905.127359] ? oom_killer_disable+0x270/0x270 [ 1905.131856] ? mutex_trylock+0x15f/0x1a0 [ 1905.135920] __alloc_pages_nodemask+0x23a2/0x2890 [ 1905.140772] ? find_get_entry+0x4cd/0x8a0 [ 1905.144907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1905.149746] alloc_pages_current+0x193/0x2a0 [ 1905.149984] syz-executor.1: vmalloc: allocation failure, allocated 1605697536 of 2067779584 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1905.154142] filemap_fault+0x146e/0x2180 [ 1905.167995] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1905.171969] ext4_filemap_fault+0x84/0xb0 [ 1905.171984] __do_fault+0x10b/0x4b0 [ 1905.172002] __handle_mm_fault+0x273b/0x41c0 [ 1905.189204] ? vm_insert_page+0x9c0/0x9c0 [ 1905.193358] ? check_preemption_disabled+0x41/0x280 [ 1905.198370] handle_mm_fault+0x436/0xb10 [ 1905.202431] __do_page_fault+0x68e/0xd60 [ 1905.206490] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1905.211498] ? spurious_fault+0x840/0x840 [ 1905.215638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1905.220476] ? page_fault+0x8/0x30 [ 1905.224004] page_fault+0x1e/0x30 [ 1905.227450] RIP: 0033:0x7fea818d02e3 [ 1905.231157] Code: Bad RIP value. [ 1905.234517] RSP: 002b:00007ffe578964c8 EFLAGS: 00010246 [ 1905.239871] RAX: 0000000000000001 RBX: 00005584387351e0 RCX: 00007fea818d02e3 [ 1905.247127] RDX: 0000000000000013 RSI: 00007ffe578964d0 RDI: 000000000000000c [ 1905.254472] RBP: 00007ffe578966c0 R08: 00007ffe5799f000 R09: 000001e72ddf8010 [ 1905.261730] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe578964d0 [ 1905.268991] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005f135075f219c [ 1905.276269] CPU: 1 PID: 27212 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1905.284158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1905.286151] Mem-Info: [ 1905.293612] Call Trace: [ 1905.293638] dump_stack+0x1fc/0x2ef [ 1905.293656] warn_alloc.cold+0x7b/0x18f [ 1905.293675] ? zone_watermark_ok_safe+0x260/0x260 [ 1905.296098] active_anon:15887 inactive_anon:81976 isolated_anon:0 [ 1905.296098] active_file:12 inactive_file:12 isolated_file:0 [ 1905.296098] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1905.296098] slab_reclaimable:14962 slab_unreclaimable:127863 [ 1905.296098] mapped:22078 shmem:83000 pagetables:558 bounce:0 [ 1905.296098] free:13963 free_pcp:897 free_cma:0 [ 1905.298675] __vmalloc_area_node+0x4fd/0x780 [ 1905.302322] Node 0 active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.306234] ? __vmalloc_node_range+0x180/0x180 [ 1905.311088] Node 1 active_anon:4984kB inactive_anon:301556kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28008kB dirty:0kB writeback:0kB shmem:303820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.344289] ? _raw_spin_unlock+0x29/0x40 [ 1905.344304] ? __get_vm_area_node+0x2e2/0x3a0 [ 1905.344321] __vmalloc_node_range+0xed/0x180 [ 1905.344338] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1905.348738] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.376419] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1905.376434] vmalloc_user+0x70/0xe0 [ 1905.376447] ? vb2_vmalloc_alloc+0xb3/0x2f0 [ 1905.376460] vb2_vmalloc_alloc+0xb3/0x2f0 [ 1905.376476] __vb2_queue_alloc+0x472/0xe60 [ 1905.381185] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1905.408487] vb2_core_create_bufs+0x273/0x7e0 [ 1905.408504] ? __vb2_queue_free+0x870/0x870 [ 1905.412648] Node 0 DMA32 free:18000kB min:35996kB low:44992kB high:53988kB active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1864kB bounce:0kB free_pcp:2076kB local_pcp:1344kB free_cma:0kB [ 1905.417114] ? __video_do_ioctl+0x632/0xcd0 [ 1905.421508] lowmem_reserve[]: 0 0 1 1 1 [ 1905.425805] ? pi_state_update_owner+0x450/0x450 [ 1905.451951] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.457324] ? __mutex_lock+0x368/0x1190 [ 1905.460975] lowmem_reserve[]: 0 0 0 0 0 [ 1905.465240] vb2_create_bufs+0x332/0x620 [ 1905.469357] Node 1 Normal free:26980kB min:53876kB low:67344kB high:80812kB active_anon:4984kB inactive_anon:301556kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:368kB bounce:0kB free_pcp:1512kB local_pcp:4kB free_cma:0kB [ 1905.473584] ? mark_held_locks+0xf0/0xf0 [ 1905.473598] ? __bpf_trace_vb2_event_class+0xe0/0xe0 [ 1905.473616] ? futex_wait_queue_me+0x404/0x5e0 [ 1905.478614] lowmem_reserve[]: 0 0 0 0 0 [ 1905.483113] ? pi_state_update_owner+0x450/0x450 [ 1905.483128] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1905.483142] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1905.483168] v4l_create_bufs+0xb2/0x160 [ 1905.487468] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 1905.516544] __video_do_ioctl+0x49a/0xcd0 [ 1905.516564] ? v4l_querycap+0x340/0x340 [ 1905.516582] ? __might_fault+0x192/0x1d0 [ 1905.516603] ? v4l_querycap+0x340/0x340 [ 1905.520931] Node 0 DMA32: 918*4kB (ME) 513*8kB (UME) 227*16kB (ME) 82*32kB (ME) 32*64kB (UME) 5*128kB (M) 1*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 18000kB [ 1905.524888] video_usercopy+0x13f/0xfa0 [ 1905.529713] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1905.555652] ? v4l_enumstd+0x60/0x60 [ 1905.555666] ? do_futex+0x171/0x1880 [ 1905.555682] ? mark_held_locks+0xf0/0xf0 [ 1905.555701] ? debug_check_no_obj_freed+0x201/0x490 [ 1905.559734] Node 1 Normal: 489*4kB (UME) 410*8kB (ME) 291*16kB (ME) 64*32kB (ME) 13*64kB (ME) 3*128kB (UME) 4*256kB (UE) 1*512kB (U) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 26980kB [ 1905.563722] ? video_usercopy+0xfa0/0xfa0 [ 1905.563735] v4l2_ioctl+0x147/0x1a0 [ 1905.563750] ? video_devdata+0xa0/0xa0 [ 1905.567792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.596417] do_vfs_ioctl+0xcdb/0x12e0 [ 1905.596435] ? lock_downgrade+0x720/0x720 [ 1905.596450] ? check_preemption_disabled+0x41/0x280 [ 1905.596469] ? ioctl_preallocate+0x200/0x200 [ 1905.600544] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.605698] ? __fget+0x356/0x510 [ 1905.610277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.614210] ? do_dup2+0x450/0x450 [ 1905.618941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.624113] ? __se_sys_futex+0x298/0x3b0 [ 1905.624134] ksys_ioctl+0x9b/0xc0 [ 1905.624151] __x64_sys_ioctl+0x6f/0xb0 [ 1905.629314] 83024 total pagecache pages [ 1905.633271] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1905.633287] do_syscall_64+0xf9/0x620 [ 1905.633307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1905.646172] 0 pages in swap cache [ 1905.650267] RIP: 0033:0x7fbcd48050a9 [ 1905.650283] Code: Bad RIP value. [ 1905.650295] RSP: 002b:00007fbcd2d77168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1905.654256] Swap cache stats: add 0, delete 0, find 0/0 [ 1905.658298] RAX: ffffffffffffffda RBX: 00007fbcd4924f80 RCX: 00007fbcd48050a9 [ 1905.662282] Free swap = 0kB [ 1905.677227] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 1905.677234] RBP: 00007fbcd4860ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1905.677257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.681222] Total swap = 0kB [ 1905.692193] R13: 00007ffd122e965f R14: 00007fbcd2d77300 R15: 0000000000022000 [ 1905.732867] Mem-Info: [ 1905.733894] 2097051 pages RAM [ 1905.737516] active_anon:15887 inactive_anon:81976 isolated_anon:0 [ 1905.737516] active_file:12 inactive_file:12 isolated_file:0 [ 1905.737516] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1905.737516] slab_reclaimable:14962 slab_unreclaimable:127863 [ 1905.737516] mapped:22078 shmem:83000 pagetables:558 bounce:0 [ 1905.737516] free:13963 free_pcp:897 free_cma:0 [ 1905.746317] 0 pages HighMem/MovableOnly [ 1905.746322] 369649 pages reserved [ 1905.746326] 0 pages cma reserved [ 1905.746333] Unreclaimable slab info: [ 1905.746339] Name Used Total [ 1905.746350] pid_2 130KB 136KB [ 1905.746443] batadv_tl_cache 4KB 16KB [ 1905.746470] TIPC 10KB 22KB [ 1905.746496] SCTPv6 14KB 24KB [ 1905.746514] DCCPv6 17KB 30KB [ 1905.746526] DCCP 16KB 28KB [ 1905.765135] Node 0 active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.772776] RXRPC 11KB 19KB [ 1905.791779] Node 1 active_anon:4984kB inactive_anon:301556kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28008kB dirty:0kB writeback:0kB shmem:303820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1905.797295] rxrpc_call_jar 78KB 110KB [ 1905.819032] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.821398] bridge_fdb_cache 9KB 23KB [ 1905.839674] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1905.845212] fib6_nodes 156KB 272KB [ 1905.861492] Node 0 DMA32 free:18000kB min:35996kB low:44992kB high:53988kB active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1864kB bounce:0kB free_pcp:2076kB local_pcp:732kB free_cma:0kB [ 1905.869636] ip6_dst_cache 127KB 547KB [ 1905.889131] lowmem_reserve[]: 0 0 1 1 1 [ 1905.896552] RAWv6 70KB 101KB [ 1905.906385] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1905.935729] UDPv6 163KB 168KB [ 1905.943149] lowmem_reserve[]: 0 0 0 0 0 [ 1905.950770] TCPv6 36KB 42KB [ 1905.954208] Node 1 Normal free:26980kB min:53876kB low:67344kB high:80812kB active_anon:4984kB inactive_anon:301556kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:416kB pagetables:368kB bounce:0kB free_pcp:1512kB local_pcp:1508kB free_cma:0kB [ 1905.959515] nf_conntrack 13KB 18KB [ 1905.968234] lowmem_reserve[]: 0 0 0 0 0 [ 1905.984073] t10_alua_lu_gp_cache 0KB 3KB [ 1905.990143] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 1906.029228] sd_ext_cdb 0KB 7KB [ 1906.054233] Node 0 DMA32: 918*4kB (ME) 513*8kB (UME) 227*16kB (ME) 82*32kB (ME) 32*64kB (UME) 5*128kB (M) 1*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 18000kB [ 1906.064316] scsi_sense_cache 1056KB 1060KB [ 1906.080645] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1906.100391] virtio_scsi_cmd 16KB 16KB [ 1906.127247] Node 1 Normal: 489*4kB (UME) 410*8kB (ME) 291*16kB (ME) 64*32kB (ME) 13*64kB (ME) 3*128kB (UME) 4*256kB (UE) 1*512kB (U) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 26980kB [ 1906.145595] sgpool-128 8KB 8KB [ 1906.166368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.166380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.166389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1906.184532] sgpool-64 4KB 12KB [ 1906.210226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1906.210234] 83024 total pagecache pages [ 1906.210248] 0 pages in swap cache [ 1906.210257] Swap cache stats: add 0, delete 0, find 0/0 [ 1906.210261] Free swap = 0kB [ 1906.210266] Total swap = 0kB [ 1906.210275] 2097051 pages RAM [ 1906.210283] 0 pages HighMem/MovableOnly [ 1906.229399] sgpool-32 2KB 15KB [ 1906.240037] 369649 pages reserved [ 1906.240043] 0 pages cma reserved [ 1906.383639] sgpool-16 1KB 7KB [ 1906.389009] sgpool-8 0KB 7KB [ 1906.394440] mqueue_inode_cache 10KB 30KB [ 1906.399972] bio_post_read_ctx 14KB 15KB [ 1906.405405] bio-2 14KB 15KB [ 1906.410916] jfs_mp 7KB 7KB [ 1906.416290] fuse_request 1KB 8KB [ 1906.421775] cifs_small_rq 15KB 16KB [ 1906.427142] cifs_request 67KB 67KB [ 1906.432554] cifs_mpx_ids 0KB 7KB [ 1906.437945] nfs_commit_data 3KB 14KB [ 1906.443372] nfs_write_data 34KB 44KB [ 1906.448779] ext4_system_zone 1KB 7KB [ 1906.454340] bio-1 1KB 7KB [ 1906.459716] pid_namespace 2KB 11KB [ 1906.465164] rpc_buffers 17KB 25KB [ 1906.470664] rpc_tasks 2KB 7KB [ 1906.476133] UNIX 240KB 352KB [ 1906.481564] tcp_bind_bucket 1KB 4KB [ 1906.486983] ip_fib_trie 23KB 47KB [ 1906.492410] ip_fib_alias 112KB 189KB [ 1906.497773] ip_dst_cache 4KB 24KB [ 1906.503202] RAW 42KB 67KB [ 1906.508574] UDP 33KB 67KB [ 1906.514018] TCP 28KB 33KB [ 1906.519389] hugetlbfs_inode_cache 3KB 15KB [ 1906.525209] fscache_cookie_jar 1KB 7KB [ 1906.530716] eventpoll_pwq 18KB 55KB [ 1906.536078] eventpoll_epi 33KB 66KB [ 1906.541607] inotify_inode_mark 32KB 35KB [ 1906.547070] request_queue 199KB 199KB [ 1906.552493] blkdev_requests 1KB 3KB [ 1906.557856] blkdev_ioc 13KB 38KB [ 1906.563290] bio-0 153KB 262KB [ 1906.568655] biovec-max 1295KB 1402KB [ 1906.574089] biovec-64 187KB 385KB [ 1906.579458] biovec-16 70KB 105KB [ 1906.584896] bio_integrity_payload 1KB 8KB [ 1906.595266] khugepaged_mm_slot 23KB 27KB [ 1906.601990] uid_cache 0KB 4KB [ 1906.607362] dmaengine-unmap-2 0KB 3KB [ 1906.616718] audit_buffer 0KB 3KB [ 1906.623007] skbuff_fclone_cache 475KB 495KB [ 1906.628921] skbuff_head_cache 2274KB 5572KB [ 1906.638305] configfs_dir_cache 3KB 7KB [ 1906.644717] file_lock_cache 163KB 170KB [ 1906.654186] file_lock_ctx 9KB 15KB [ 1906.659566] fsnotify_mark_connector 20KB 23KB [ 1906.666408] net_namespace 52KB 52KB [ 1906.675863] shmem_inode_cache 8450KB 8466KB [ 1906.682170] task_delay_info 263KB 359KB [ 1906.687795] taskstats 167KB 176KB [ 1906.697108] proc_dir_entry 695KB 843KB [ 1906.703418] pde_opener 9KB 46KB [ 1906.708788] seq_file 266KB 374KB [ 1906.718174] sigqueue 55KB 70KB [ 1906.724466] kernfs_node_cache 18265KB 18892KB [ 1906.734552] mnt_cache 222KB 256KB [ 1906.740851] filp 5355KB 8358KB [ 1906.746217] names_cache 155987KB 156047KB [ 1906.755577] iint_cache 23KB 51KB [ 1906.766840] key_jar 4KB 11KB [ 1906.776511] uts_namespace 2KB 11KB [ 1906.782814] nsproxy 1KB 7KB [ 1906.788180] vm_area_struct 3842KB 3898KB [ 1906.797454] mm_struct 789KB 806KB [ 1906.803978] fs_cache 169KB 292KB [ 1906.809346] files_cache 595KB 821KB [ 1906.819147] signal_cache 1213KB 1933KB [ 1906.825516] sighand_cache 589KB 617KB [ 1906.835746] task_struct 8603KB 8692KB [ 1906.843500] cred_jar 1075KB 2752KB [ 1906.848876] anon_vma_chain 1216KB 1484KB [ 1906.858138] anon_vma 176KB 292KB [ 1906.864474] pid 64KB 232KB [ 1906.874243] Acpi-Operand 156KB 198KB [ 1906.879627] Acpi-ParseExt 8KB 11KB [ 1906.885944] Acpi-Parse 41KB 47KB [ 1906.895340] Acpi-State 52KB 63KB [ 1906.901641] Acpi-Namespace 20KB 27KB [ 1906.907010] numa_policy 0KB 3KB [ 1906.916324] debug_objects_cache 1786KB 1883KB [ 1906.925120] trace_event_file 297KB 298KB [ 1906.934620] ftrace_event_field 398KB 401KB [ 1906.941031] pool_workqueue 121KB 148KB [ 1906.946403] page->ptl 849KB 956KB [ 1906.955788] kmalloc-2097152 2050KB 2050KB [ 1906.962099] kmalloc-524288 2056KB 2056KB [ 1906.967556] kmalloc-262144 1290KB 1290KB [ 1906.976846] kmalloc-131072 650KB 650KB [ 1906.983128] kmalloc-65536 1848KB 1914KB [ 1906.988498] kmalloc-32768 1650KB 1716KB [ 1906.997758] kmalloc-16384 940KB 1023KB [ 1907.008710] kmalloc-8192 4653KB 4752KB [ 1907.018142] kmalloc-4096 19788KB 19847KB [ 1907.024418] kmalloc-2048 11944KB 14515KB [ 1907.029794] kmalloc-1024 7148KB 13434KB [ 1907.039916] kmalloc-512 6258KB 12671KB [ 1907.045287] kmalloc-256 3964KB 6033KB [ 1907.054799] kmalloc-128 1035KB 1586KB [ 1907.061200] kmalloc-96 2925KB 4368KB [ 1907.066560] kmalloc-64 3070KB 3812KB [ 1907.076044] kmalloc-32 1960KB 2512KB [ 1907.083773] kmalloc-192 1730KB 2836KB [ 1907.089238] kmem_cache 177KB 183KB [ 1907.098557] Out of memory (oom_kill_allocating_task): Kill process 25372 (systemd-journal) score 0 or sacrifice child [ 1907.110281] Killed process 25372 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:1296kB [ 1907.126096] oom_reaper: reaped process 25372 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1296kB [ 1907.146704] in:imklog invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1907.162014] in:imklog cpuset=/ mems_allowed=0-1 [ 1907.166722] CPU: 1 PID: 24937 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1907.174168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1907.183529] Call Trace: [ 1907.186129] dump_stack+0x1fc/0x2ef [ 1907.189770] dump_header+0x15d/0xc3f [ 1907.193502] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1907.198620] ? ___ratelimit+0x319/0x590 [ 1907.202611] oom_kill_process.cold+0x10/0x692 [ 1907.207121] ? check_preemption_disabled+0x41/0x280 [ 1907.212150] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1907.217423] out_of_memory+0x1072/0x1390 [ 1907.221563] ? oom_killer_disable+0x270/0x270 [ 1907.226052] ? mutex_trylock+0x15f/0x1a0 [ 1907.230108] __alloc_pages_nodemask+0x23a2/0x2890 [ 1907.234942] ? find_get_entry+0x4cd/0x8a0 [ 1907.239088] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1907.243939] alloc_pages_current+0x193/0x2a0 [ 1907.248437] filemap_fault+0x146e/0x2180 [ 1907.252496] ext4_filemap_fault+0x84/0xb0 [ 1907.256632] __do_fault+0x10b/0x4b0 [ 1907.260258] __handle_mm_fault+0x273b/0x41c0 [ 1907.264657] ? vm_insert_page+0x9c0/0x9c0 [ 1907.268792] ? lock_downgrade+0x720/0x720 [ 1907.272937] ? check_preemption_disabled+0x41/0x280 [ 1907.277946] handle_mm_fault+0x436/0xb10 [ 1907.282004] __do_page_fault+0x68e/0xd60 [ 1907.286058] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1907.291063] ? spurious_fault+0x840/0x840 [ 1907.295197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1907.300027] ? page_fault+0x8/0x30 [ 1907.303553] page_fault+0x1e/0x30 [ 1907.306996] RIP: 0033:0x7fbbd66b822d [ 1907.310698] Code: Bad RIP value. [ 1907.314049] RSP: 002b:00007fbbd4054580 EFLAGS: 00010293 [ 1907.319397] RAX: 0000000000000078 RBX: 0000000000000000 RCX: 00007fbbd66b822d [ 1907.326652] RDX: 0000000000001fa0 RSI: 00007fbbd4054da0 RDI: 0000000000000004 [ 1907.333905] RBP: 000055fafb2479d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.341159] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007fbbd4054da0 [ 1907.348412] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007fbbd4054e96 [ 1907.363540] Mem-Info: [ 1907.365997] active_anon:15787 inactive_anon:81976 isolated_anon:0 [ 1907.365997] active_file:12 inactive_file:12 isolated_file:0 [ 1907.365997] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1907.365997] slab_reclaimable:14962 slab_unreclaimable:127863 [ 1907.365997] mapped:21753 shmem:83000 pagetables:521 bounce:0 [ 1907.365997] free:14975 free_pcp:0 free_cma:0 [ 1907.402988] Node 0 active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1907.431050] Node 1 active_anon:4584kB inactive_anon:301556kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:26708kB dirty:0kB writeback:0kB shmem:303820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1907.460501] Node 0 DMA free:10864kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.490498] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1907.495652] Node 0 DMA32 free:20000kB min:35996kB low:44992kB high:53988kB active_anon:58564kB inactive_anon:26348kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1864kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.524326] lowmem_reserve[]: 0 0 1 1 1 [ 1907.528321] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1907.555969] lowmem_reserve[]: 0 0 0 0 0 [ 1907.560045] Node 1 Normal free:185268kB min:53876kB low:67344kB high:80812kB active_anon:4584kB inactive_anon:301556kB active_file:12kB inactive_file:2024kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:384kB pagetables:220kB bounce:0kB free_pcp:1624kB local_pcp:364kB free_cma:0kB [ 1907.589281] lowmem_reserve[]: 0 0 0 0 0 [ 1907.593367] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10864kB [ 1907.606634] Node 0 DMA32: 1103*4kB (UME) 565*8kB (ME) 227*16kB (ME) 85*32kB (ME) 35*64kB (UME) 8*128kB (M) 0*256kB 1*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 20084kB [ 1907.621908] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1907.633048] Node 1 Normal: 34*4kB (UE) 18*8kB (ME) 282*16kB (ME) 103*32kB (UME) 28*64kB (UME) 7*128kB (UME) 7*256kB (UE) 4*512kB (U) 7*1024kB (U) 8*2048kB (UM) 49*4096kB (U) = 238872kB [ 1907.651719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.660662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.667544] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1907.669242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1907.685600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1907.694238] 85096 total pagecache pages [ 1907.698278] 0 pages in swap cache [ 1907.699277] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1907.701781] Swap cache stats: add 0, delete 0, find 0/0 [ 1907.701786] Free swap = 0kB [ 1907.701791] Total swap = 0kB [ 1907.701801] 2097051 pages RAM [ 1907.701806] 0 pages HighMem/MovableOnly [ 1907.701810] 369649 pages reserved [ 1907.701815] 0 pages cma reserved [ 1907.701820] Unreclaimable slab info: [ 1907.701825] Name Used Total [ 1907.701834] pid_2 130KB 136KB [ 1907.701909] batadv_tl_cache 4KB 16KB [ 1907.701936] TIPC 10KB 22KB [ 1907.701958] SCTPv6 14KB 24KB [ 1907.701976] DCCPv6 17KB 30KB [ 1907.701991] DCCP 16KB 28KB [ 1907.751413] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1907.751625] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1907.751665] systemd[1]: Stopped Journal Service. [ 1907.771511] systemd[1]: Starting Journal Service... [ 1907.817854] RXRPC 11KB 19KB [ 1907.838274] rxrpc_call_jar 78KB 110KB [ 1907.845068] bridge_fdb_cache 9KB 23KB [ 1907.861494] fib6_nodes 156KB 272KB [ 1907.867462] ip6_dst_cache 127KB 547KB [ 1907.878187] RAWv6 70KB 101KB [ 1907.895383] UDPv6 163KB 168KB [ 1907.901807] TCPv6 36KB 42KB [ 1907.907299] nf_conntrack 13KB 18KB [ 1907.916899] t10_alua_lu_gp_cache 0KB 3KB [ 1907.923492] sd_ext_cdb 0KB 7KB [ 1907.934370] scsi_sense_cache 1056KB 1060KB [ 1907.942406] virtio_scsi_cmd 16KB 16KB [ 1907.948479] sgpool-128 8KB 8KB [ 1907.961770] sgpool-64 4KB 12KB [ 1907.969486] sgpool-32 2KB 15KB [ 1907.975715] sgpool-16 1KB 7KB [ 1907.983350] sgpool-8 0KB 7KB [ 1907.989035] mqueue_inode_cache 10KB 30KB [ 1907.995455] bio_post_read_ctx 14KB 15KB [ 1908.001674] bio-2 14KB 15KB [ 1908.010057] jfs_mp 7KB 7KB [ 1908.016264] fuse_request 1KB 8KB [ 1908.021867] cifs_small_rq 15KB 16KB [ 1908.027440] cifs_request 67KB 67KB [ 1908.032973] cifs_mpx_ids 0KB 7KB [ 1908.043396] nfs_commit_data 3KB 14KB [ 1908.048794] nfs_write_data 34KB 44KB [ 1908.054264] ext4_system_zone 1KB 7KB [ 1908.059673] bio-1 1KB 7KB [ 1908.065135] pid_namespace 2KB 11KB [ 1908.070686] rpc_buffers 17KB 25KB [ 1908.076153] rpc_tasks 2KB 7KB [ 1908.082023] UNIX 240KB 352KB [ 1908.087406] tcp_bind_bucket 1KB 4KB [ 1908.092841] ip_fib_trie 23KB 47KB [ 1908.098252] ip_fib_alias 112KB 189KB [ 1908.103806] ip_dst_cache 4KB 24KB [ 1908.109269] RAW 42KB 67KB [ 1908.114808] UDP 33KB 67KB [ 1908.116342] systemd-journald[27264]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1908.120436] TCP 28KB 33KB [ 1908.140549] hugetlbfs_inode_cache 3KB 15KB [ 1908.146266] fscache_cookie_jar 1KB 7KB [ 1908.151756] eventpoll_pwq 24KB 55KB [ 1908.157130] eventpoll_epi 45KB 66KB [ 1908.162576] inotify_inode_mark 32KB 35KB [ 1908.168030] request_queue 199KB 199KB [ 1908.173471] blkdev_requests 1KB 3KB [ 1908.178837] blkdev_ioc 25KB 38KB [ 1908.184316] bio-0 240KB 262KB [ 1908.189681] biovec-max 1295KB 1402KB [ 1908.195102] biovec-64 255KB 385KB [ 1908.200542] biovec-16 87KB 105KB [ 1908.205988] bio_integrity_payload 1KB 8KB [ 1908.211893] khugepaged_mm_slot 23KB 27KB [ 1908.217386] uid_cache 0KB 4KB [ 1908.222854] dmaengine-unmap-2 0KB 3KB [ 1908.228218] audit_buffer 0KB 3KB [ 1908.249882] skbuff_fclone_cache 475KB 495KB [ 1908.255448] skbuff_head_cache 2400KB 5572KB [ 1908.269866] configfs_dir_cache 3KB 7KB [ 1908.275347] file_lock_cache 163KB 170KB [ 1908.286763] systemd-journald[27264]: /dev/kmsg buffer overrun, some messages lost. [ 1908.294693] file_lock_ctx 9KB 15KB [ 1908.300641] fsnotify_mark_connector 20KB 23KB [ 1908.306532] net_namespace 52KB 52KB [ 1908.329858] shmem_inode_cache 8450KB 8466KB [ 1908.335248] task_delay_info 263KB 359KB [ 1908.349820] taskstats 167KB 176KB [ 1908.355205] proc_dir_entry 695KB 843KB [ 1908.369802] pde_opener 9KB 46KB [ 1908.375227] seq_file 266KB 374KB [ 1908.380702] sigqueue 55KB 70KB [ 1908.386098] kernfs_node_cache 18278KB 18892KB [ 1908.414832] mnt_cache 222KB 256KB [ 1908.420284] filp 5338KB 8358KB [ 1908.425652] names_cache 155337KB 155337KB [ 1908.435703] iint_cache 31KB 51KB [ 1908.441139] key_jar 4KB 11KB [ 1908.446500] uts_namespace 2KB 11KB [ 1908.456880] nsproxy 1KB 7KB [ 1908.462308] vm_area_struct 3821KB 3898KB [ 1908.474899] mm_struct 789KB 806KB [ 1908.480359] fs_cache 169KB 292KB [ 1908.485733] files_cache 595KB 821KB [ 1908.496003] signal_cache 1213KB 1933KB [ 1908.501508] sighand_cache 589KB 617KB [ 1908.506870] task_struct 8528KB 8616KB [ 1908.517034] cred_jar 1075KB 2752KB [ 1908.522562] anon_vma_chain 1216KB 1484KB [ 1908.527921] anon_vma 176KB 292KB [ 1908.538361] pid 64KB 232KB [ 1908.543774] Acpi-Operand 156KB 198KB [ 1908.549137] Acpi-ParseExt 8KB 11KB [ 1908.576356] Acpi-Parse 41KB 47KB [ 1908.581822] Acpi-State 52KB 63KB [ 1908.587190] Acpi-Namespace 20KB 27KB [ 1908.614777] numa_policy 0KB 3KB [ 1908.620289] debug_objects_cache 1786KB 1883KB [ 1908.625830] trace_event_file 297KB 298KB [ 1908.636116] ftrace_event_field 398KB 401KB [ 1908.641673] pool_workqueue 121KB 148KB [ 1908.647040] page->ptl 849KB 956KB [ 1908.657397] kmalloc-2097152 2050KB 2050KB [ 1908.662890] kmalloc-524288 2056KB 2056KB [ 1908.668257] kmalloc-262144 1290KB 1290KB [ 1908.676396] kmalloc-131072 650KB 650KB [ 1908.681859] kmalloc-65536 1848KB 1914KB [ 1908.687225] kmalloc-32768 1650KB 1716KB [ 1908.692731] kmalloc-16384 973KB 1023KB [ 1908.698100] kmalloc-8192 4620KB 4735KB [ 1908.703517] kmalloc-4096 19550KB 19609KB [ 1908.709230] kmalloc-2048 11944KB 14515KB [ 1908.714706] kmalloc-1024 7161KB 13434KB [ 1908.720107] kmalloc-512 6495KB 12671KB [ 1908.725522] kmalloc-256 3964KB 6033KB [ 1908.731009] kmalloc-128 1035KB 1586KB [ 1908.736642] kmalloc-96 2978KB 4368KB [ 1908.742098] kmalloc-64 3018KB 3812KB [ 1908.747466] kmalloc-32 1960KB 2512KB [ 1908.752921] kmalloc-192 1730KB 2836KB [ 1908.762561] kmem_cache 177KB 183KB [ 1908.767942] Out of memory (oom_kill_allocating_task): Kill process 24937 (in:imklog) score 0 or sacrifice child [ 1908.799840] Killed process 24935 (rsyslogd) total-vm:254332kB, anon-rss:696kB, file-rss:0kB, shmem-rss:0kB [ 1908.826538] oom_reaper: reaped process 24935 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1908.863385] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1908.884418] systemd[1]: rsyslog.service: Unit entered failed state. [ 1908.916131] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1908.937376] systemd[1]: Started Journal Service. 14:55:56 executing program 5: shmctl$SHM_INFO(0x0, 0xe, 0x0) 14:55:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x0, 0x9}}) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 14:55:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) 14:55:56 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x72) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000009500"/24], &(0x7f0000000200)='GPL\x00', 0x3, 0x65, &(0x7f0000000480)=""/101, 0x41100, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x1, 0x800005}, 0x8, 0x10, &(0x7f0000000300)={0x3414, 0x5, 0x5, 0xffffff01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0]}, 0x80) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)=@multiplanar_overlay={0x6e64, 0x1, 0x4, 0x0, 0x6, {r4, r5/1000+10000}, {0x3, 0x8, 0x8, 0x3f, 0x1f, 0x4, "4c21845a"}, 0x10000, 0x3, {&(0x7f0000000240)=[{0xffffffe1, 0x6, {0x850}, 0x100}, {0x0, 0x4, {}, 0x4}]}, 0x3}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x87a2, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1f, 0x1, 0x44, @mcast1, @private0, 0x10, 0x10, 0x50d2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', r6, 0x29, 0xff, 0x4, 0xb8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x10, 0x5cc0, 0xffffff01}}) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x8, 0x30, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x54}], &(0x7f0000000180)='GPL\x00', 0x0, 0x52, &(0x7f0000000700)=""/82, 0x40f00, 0x4, '\x00', r7, 0x25, r1, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xf, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r8, r1, r9]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r0, 0x4, r2}, 0x10) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/353], 0x127) 14:55:56 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9}}) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 14:55:56 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) 14:55:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9}}) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) 14:55:56 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x72) (async) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000009500"/24], &(0x7f0000000200)='GPL\x00', 0x3, 0x65, &(0x7f0000000480)=""/101, 0x41100, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x1, 0x800005}, 0x8, 0x10, &(0x7f0000000300)={0x3414, 0x5, 0x5, 0xffffff01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0]}, 0x80) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)=@multiplanar_overlay={0x6e64, 0x1, 0x4, 0x0, 0x6, {r4, r5/1000+10000}, {0x3, 0x8, 0x8, 0x3f, 0x1f, 0x4, "4c21845a"}, 0x10000, 0x3, {&(0x7f0000000240)=[{0xffffffe1, 0x6, {0x850}, 0x100}, {0x0, 0x4, {}, 0x4}]}, 0x3}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x87a2, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1f, 0x1, 0x44, @mcast1, @private0, 0x10, 0x10, 0x50d2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', r6, 0x29, 0xff, 0x4, 0xb8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x10, 0x5cc0, 0xffffff01}}) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) (async) r9 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x8, 0x30, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x54}], &(0x7f0000000180)='GPL\x00', 0x0, 0x52, &(0x7f0000000700)=""/82, 0x40f00, 0x4, '\x00', r7, 0x25, r1, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xf, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r8, r1, r9]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r0, 0x4, r2}, 0x10) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/353], 0x127) 14:55:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9}}) 14:55:56 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) 14:55:56 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xf84, 0x100, 0xffff, 0x821, r0, 0x7fffffff, '\x00', r3, r4, 0x5, 0x2, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) 14:55:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) 14:55:56 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x72) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000009500"/24], &(0x7f0000000200)='GPL\x00', 0x3, 0x65, &(0x7f0000000480)=""/101, 0x41100, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x1, 0x800005}, 0x8, 0x10, &(0x7f0000000300)={0x3414, 0x5, 0x5, 0xffffff01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0]}, 0x80) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)=@multiplanar_overlay={0x6e64, 0x1, 0x4, 0x0, 0x6, {r4, r5/1000+10000}, {0x3, 0x8, 0x8, 0x3f, 0x1f, 0x4, "4c21845a"}, 0x10000, 0x3, {&(0x7f0000000240)=[{0xffffffe1, 0x6, {0x850}, 0x100}, {0x0, 0x4, {}, 0x4}]}, 0x3}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x87a2, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1f, 0x1, 0x44, @mcast1, @private0, 0x10, 0x10, 0x50d2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', r6, 0x29, 0xff, 0x4, 0xb8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x10, 0x5cc0, 0xffffff01}}) r8 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) r9 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x8, 0x30, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x54}], &(0x7f0000000180)='GPL\x00', 0x0, 0x52, &(0x7f0000000700)=""/82, 0x40f00, 0x4, '\x00', r7, 0x25, r1, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xf, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r8, r1, r9]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r0, 0x4, r2}, 0x10) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2701000003000000000000000000000006000000002037000601000000f5ffffb19fb7535dd8c074e6f0a63a4781d207cd4da29a567173b479d0d9b30f10665a4c5104a50e0daaaff7a9bf872f977accd47308000000d9f046ec251f09579691674e5c4f708789550fc2a342eaece30a65fa007818aa42a6d4b82febc19b8339bed9afebbe12a53cec2062ccc293a9ffaa3398bd98b664c4bd9df0c0c6eb4bbbbeb0924b41cd4a4fdafc3f2780f38ca9b58c9354e547683742772612e9bdb857d32ae78e4f3fd0454dac90bca184e1a3d7a9ab08ae1b92e161906eff34555190c03a77a518adf1cc214593be15819254744f8dec7f146585539d90e54f27e30f99cd4b687ec19463d71d3d16bf9a35467e49e7a81670005c1ac38964379f70a2e80fa46e2114f4a0b3cf968c0547eb33c1d43a69b00e39abf04d67a67cf1891063adb1982d14e4b37f000000b11fb4a6c200"/353], 0x127) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x72) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000009500"/24], &(0x7f0000000200)='GPL\x00', 0x3, 0x65, &(0x7f0000000480)=""/101, 0x41100, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x1, 0x800005}, 0x8, 0x10, &(0x7f0000000300)={0x3414, 0x5, 0x5, 0xffffff01}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r0]}, 0x80) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000500)=@multiplanar_overlay={0x6e64, 0x1, 0x4, 0x0, 0x6, {r4, r5/1000+10000}, {0x3, 0x8, 0x8, 0x3f, 0x1f, 0x4, "4c21845a"}, 0x10000, 0x3, {&(0x7f0000000240)=[{0xffffffe1, 0x6, {0x850}, 0x100}, {0x0, 0x4, {}, 0x4}]}, 0x3}) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x87a2, &(0x7f0000000100)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1f, 0x1, 0x44, @mcast1, @private0, 0x10, 0x10, 0x50d2, 0x100}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', r6, 0x29, 0xff, 0x4, 0xb8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x10, 0x5cc0, 0xffffff01}}) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) (async) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x0, 0xa, 0x8, 0x30, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x54}], &(0x7f0000000180)='GPL\x00', 0x0, 0x52, &(0x7f0000000700)=""/82, 0x40f00, 0x4, '\x00', r7, 0x25, r1, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xf, 0x101, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[r3, r8, r1, r9]}, 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r0, r0, 0x4, r2}, 0x10) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/353], 0x127) (async) 14:55:56 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) syz_open_dev$audion(&(0x7f0000000240), 0x3, 0x81100) 14:55:56 executing program 5: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x80000) 14:55:56 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) write$FUSE_OPEN(r4, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) (async) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) (async) 14:55:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) write$FUSE_OPEN(r5, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x8001}, @host, 0x8, 0x3, 0xfffffffffffffffa, 0x4000000, 0x1f, 0x3, 0xfffffc00}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0xf379, 0x1, 0x6}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000001c0)=[0x7d, 0x1000, 0x1, 0x7fff, 0x9c1, 0x7, 0x0, 0x80000000, 0x582, 0x7fffffff, 0x2, 0x2b47352e, 0x10001, 0xfffffffe, 0x9, 0x2, 0x1, 0x1ff, 0x7fff, 0x6, 0x1ff, 0x1, 0x7, 0x7, 0x0, 0x0, 0x20, 0x1, 0x1ef, 0x1, 0xc7d, 0x4, 0xfffffff9, 0x8, 0x915, 0x38, 0x80000001, 0xd7, 0x3d5, 0x7, 0x5, 0x318, 0xfffffffa, 0x1, 0x6, 0x1, 0x5, 0x0, 0xc7, 0x1, 0x9, 0x6, 0xff, 0x3f, 0x6, 0x6, 0x6, 0x401, 0x0, 0x81, 0x3ff, 0x6, 0xd06, 0x401, 0x9, 0x1000, 0xffffca25, 0x4, 0xffffffff, 0x4, 0x4, 0x80000001, 0x7, 0x7, 0x7, 0x80000001, 0x262, 0x400, 0x9, 0x114a, 0xfffffffd, 0x8000, 0x27, 0xfffffffe, 0x4927, 0x3, 0x20, 0x3ff, 0x2, 0x20, 0xaf, 0x4814, 0xffffffff, 0x0, 0x2, 0x9, 0x6, 0x6, 0x5, 0x6, 0xffffffff, 0x54f4, 0x0, 0xffff8001, 0x9, 0x5, 0x0, 0x2, 0xffff, 0xa3, 0xff, 0x5, 0xd6a, 0x4, 0xffff, 0x1, 0x9, 0x800, 0x4, 0x80, 0x8, 0x1f, 0x7, 0x4, 0x0, 0x3, 0x1ff, 0x3ad, 0x38, 0x3, 0x60, 0x0, 0x10000, 0x0, 0x6, 0x80000000, 0x6, 0x3, 0xfffffff8, 0x4d1, 0x5, 0x3, 0xffff, 0x1, 0x6, 0x8, 0x41c, 0x3ff, 0x5, 0x80000001, 0xffffff77, 0x10001, 0x10, 0xfffff800, 0x80000001, 0x5, 0xf28, 0x214a, 0x80000000, 0xfffffc00, 0x80000000, 0x9ae, 0xc46b, 0x5, 0x4, 0x1, 0x200, 0x6, 0x0, 0x6, 0x7, 0x6, 0x76821f1e, 0x7fffffff, 0x0, 0x2, 0x1, 0x4, 0x8000, 0xf, 0x1, 0x10001, 0x100, 0x8, 0x6, 0x101, 0x400, 0x0, 0xffff4891, 0x3ff, 0x1, 0x820c, 0x3, 0x7fffffff, 0x4e, 0x400, 0x58c, 0x4, 0x3f, 0x3, 0x7, 0x0, 0x0, 0x2, 0xe0, 0x2, 0x48a826a3, 0x1, 0x8, 0x7, 0x52, 0x3, 0x7, 0x200, 0x5, 0x5, 0xfd, 0x3, 0x8, 0x7f, 0x8, 0xb46, 0xfffffff7, 0x3, 0x4, 0xaa4, 0xffff8000, 0x80000001, 0x1, 0x57737647, 0x4, 0xffff0001, 0x1, 0x479, 0x2646, 0x25, 0x0, 0x1, 0x4, 0x800, 0x7, 0x3, 0x88, 0x2, 0xa, 0x3, 0x7e5, 0x500, 0x5, 0x7, 0x80000001, 0x7, 0x4, 0x8000, 0xff, 0xcd0, 0x8, 0x1f, 0x3ff, 0x4, 0x9, 0x357, 0xffffffff, 0x2, 0x3ff, 0x6, 0x3ff, 0x8001, 0x1031, 0x337, 0xfffff3b8, 0x2436, 0x9, 0x0, 0x7fff, 0xfffffffa, 0x4, 0x20, 0x1000, 0x3f, 0x9, 0x3f, 0x5, 0xd505, 0x4, 0x7, 0x39c6d1d6, 0x810f, 0x7ff, 0x800, 0x730, 0x200, 0x5, 0x6, 0x2, 0x80, 0x3c, 0xa8cc, 0x9d7f, 0x6445e42a, 0x4, 0xffffff7f, 0xe1f, 0x8, 0x5f2, 0x5, 0x20, 0x8d7c, 0x7, 0x4, 0xfff, 0x9, 0xffffffff, 0x2, 0x8af, 0x12c0cffb, 0x6, 0x80000000, 0x6, 0xa, 0x1, 0xb16, 0xf8, 0x0, 0x3ff, 0xfffffffc, 0x4879, 0x4, 0x2a630d22, 0x7, 0x0, 0x1, 0x8000, 0x3, 0x80000000, 0x6, 0x2, 0x60, 0x20400000, 0x80, 0x1, 0x40, 0x7f, 0xfff, 0x6, 0x7fff, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x8, 0x4, 0x0, 0x8000, 0x0, 0x6, 0x3, 0x800, 0x4, 0x7, 0x6, 0x36, 0x2, 0x3, 0xffffff3a, 0x5, 0x8, 0x8000, 0x4, 0xa385, 0x5, 0x0, 0xbfba, 0x6, 0x800, 0x3, 0x33, 0x4000, 0x9, 0x8, 0x100, 0xfffffff7, 0x0, 0x20, 0x9, 0xe63, 0x43, 0x7b26, 0xfffffffb, 0x4, 0x8001, 0x5, 0x80000001, 0xffffffff, 0x1, 0xe3, 0x7f, 0x1, 0x4, 0x0, 0x6, 0x6, 0x8000, 0x80, 0x13e, 0x3, 0x1, 0x6, 0x3f, 0x0, 0x101, 0x80000001, 0x6, 0x7, 0xfdc, 0x7, 0x7, 0x8, 0x400, 0x2, 0x5, 0x4, 0x1, 0x80000001, 0xff, 0x3, 0x0, 0x8, 0x9, 0x454debfb, 0x800, 0x9, 0x8, 0x0, 0x20d9, 0x1, 0xfffffffc, 0x8001, 0x993, 0x2a, 0x6, 0x5, 0x2, 0x7fffffff, 0x54, 0x2, 0x7, 0x9, 0x4, 0x33b3, 0x0, 0x7fffffff, 0xde4, 0x80000000, 0x80000000, 0x1, 0x7cedbf0b, 0x1ff, 0x4, 0x6, 0xfffffffc, 0xefc, 0x8001, 0x4, 0x3, 0x7, 0x1, 0x9, 0xfffffffa, 0x9, 0x1, 0x27f7, 0x9, 0x7, 0x2, 0x80, 0x3f, 0xfffffff8, 0x3, 0x4, 0x5, 0x3, 0x3, 0x4000000, 0x1, 0xfffffff9, 0x9, 0x7fffffff, 0x9, 0x9, 0xfffffc00, 0x1, 0x800, 0x0, 0x5, 0x9, 0x0, 0x2, 0x7, 0x10001, 0x20, 0x1ff, 0x5, 0x5, 0x40000000, 0xbc6, 0x7fff, 0x9, 0xff, 0x8001, 0x1647, 0x7, 0xff, 0x2, 0x1, 0x7f, 0xffffffff, 0x0, 0x6, 0x7d, 0x0, 0x7, 0x56, 0x0, 0xffffffff, 0x635, 0x0, 0x7, 0xa4db, 0x80, 0xd3, 0x6, 0x8, 0x3, 0x9, 0x9, 0x8, 0x1, 0x8, 0x1000, 0x8, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x9937, 0x3, 0x8001, 0xffffff41, 0x4, 0x0, 0x9, 0x97, 0x7, 0x6e, 0x86e3, 0xffffff7f, 0xff, 0x1, 0xfffffffd, 0xf9, 0x10000, 0x2, 0xde9, 0x2, 0xfffffffb, 0x8, 0xace1, 0xec, 0x1, 0x4, 0x14f7, 0xffffffff, 0x3, 0x1623, 0x200, 0x1f, 0x10000, 0x47, 0x8, 0x8, 0x4, 0x8000, 0x2, 0x4, 0x0, 0x401, 0x0, 0xfffff000, 0x3ff, 0xad, 0x69c, 0x1f, 0x4, 0xea, 0x2, 0x3f, 0xfffffffb, 0xff, 0x80, 0x80, 0x3ff, 0xf8bf, 0x4, 0x800, 0x0, 0x6, 0x8c0, 0x7, 0xd99c, 0x8, 0x2, 0x400, 0xeb, 0x5, 0x73759f89, 0x6d293091, 0x7, 0x8, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x4, 0x6, 0x1, 0x8, 0x1ff, 0xdb2, 0x1, 0x2, 0x7f, 0x1, 0x3, 0xfffff412, 0x7f, 0xf3ea, 0x7, 0x6, 0x5, 0x7, 0x6, 0x1f, 0x81, 0x8, 0x4, 0x2, 0x2, 0x7034837e, 0x400, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x7, 0x1ff, 0x200, 0xa24, 0x0, 0x9, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x2, 0x20, 0x4a78, 0x20, 0x81, 0x8, 0x0, 0x5d9, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0x9, 0x1, 0x1000, 0x5, 0x1, 0x7d75, 0x7fffffff, 0x2, 0x20000, 0x800, 0x7, 0x9, 0x9, 0x7f, 0x140, 0x3, 0xee9, 0x3ff, 0x8, 0x2f, 0x7, 0x2, 0x6, 0x40, 0xff, 0x401, 0xfffffffe, 0x3, 0x6, 0x3ff, 0x8, 0x10000, 0xffffffff, 0x460, 0x8, 0x2, 0x4, 0x80000001, 0x1, 0xff, 0x7, 0x0, 0x2, 0xd94, 0x3ff, 0x3, 0x1, 0x4, 0x7, 0x7, 0x3, 0xffffffff, 0x401, 0xcd, 0x3, 0x7fffffff, 0x40, 0xbce, 0x10000, 0x10001, 0xfc000000, 0x6a, 0x512, 0x4, 0x43b, 0xb49c, 0xdf013b7, 0x400, 0x8, 0x7, 0x8333, 0x200, 0x0, 0xb814, 0x8, 0x1, 0x50, 0x1, 0x9, 0x2, 0x3, 0x8, 0x4, 0x3, 0x100000, 0xc9, 0xc1, 0xfff, 0xff, 0x7, 0x5, 0xd4c, 0x1, 0x2, 0x100, 0x4, 0x7, 0x8, 0x7fffffff, 0x80000000, 0x1, 0x8, 0x7ff, 0x8000, 0xef, 0x4, 0x2b1, 0x0, 0x7, 0x3ff, 0x421f, 0x1, 0x1ff, 0x5, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x30, 0x0, 0x400, 0x40, 0x101, 0x7ff, 0x1, 0xff, 0x9, 0x80000001, 0x2, 0x8, 0x20, 0x7, 0xd2b, 0x8, 0x0, 0x3, 0x7fff, 0x1, 0x3b35, 0x7, 0x3, 0x1, 0x68b, 0x4, 0x3f, 0x401, 0x3, 0x81d, 0x5, 0xd09, 0x1, 0x6, 0x200, 0x9, 0x101, 0x4348, 0x6, 0x4, 0x1, 0x80000000, 0x10000, 0x1, 0x3, 0x9, 0xf2d7, 0x2, 0x1ff, 0x80, 0x4, 0x3f, 0x2, 0x3, 0x8a6, 0x2, 0x1, 0x1f, 0x7425, 0x14, 0x80, 0x30644be9, 0x4, 0x9, 0x3ff, 0x8, 0x80000001, 0x6b2, 0x80000001, 0x9d, 0x4, 0xffffffff, 0x9, 0xcc98, 0x6, 0x6, 0xb68, 0x7, 0x5, 0x80000000, 0x5, 0x7fff, 0x8001, 0x7, 0x3, 0x3, 0x80000001, 0x514, 0x3, 0x2, 0x81, 0x7, 0x6, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0x7f, 0x0, 0x401, 0x40, 0x1, 0x3f, 0x6, 0x5, 0x1800, 0x40, 0x477a, 0x80000001, 0x4, 0xffffffff, 0xff, 0x2, 0x40, 0xfffffffa, 0x5, 0x4, 0x7, 0x3, 0x1fb751d1, 0x2, 0x9, 0xa8, 0x0, 0x0, 0x5bea, 0x1, 0x0, 0xffff8001, 0x7, 0x0, 0x100, 0x8, 0xb5ab, 0x5b, 0x9, 0x8, 0x9149, 0x81, 0x80000000, 0x7, 0x4, 0x10000, 0xfffffffb, 0x8, 0x1, 0xfffffffb, 0x1000, 0x1, 0x0, 0x0, 0x9, 0x200, 0x7f, 0x24, 0x8, 0x100, 0xfffffffb, 0x80000000, 0x7, 0x776, 0x5af8, 0x6, 0x1, 0x8, 0x7, 0x81, 0x4, 0x7f, 0xdb7, 0xffff, 0x1, 0x101, 0x0, 0x7, 0x9, 0x80000000, 0x7, 0x5, 0x7, 0x5, 0x5, 0x0, 0x5234, 0x3, 0x18, 0x20, 0x8, 0x8, 0x100, 0x9, 0xfffffffc, 0x0, 0x8, 0xfffffffb, 0x7fff, 0xfff, 0x7ef, 0x2, 0x8, 0x1, 0x5, 0x7, 0x101, 0xc8d, 0x3ff, 0x80, 0x6, 0x10000, 0x1ff, 0xa6d, 0x9, 0x20, 0xfffffff9, 0x1a9bd243, 0x575faf48, 0x4, 0x4, 0x80000000, 0x80000001, 0x0, 0x5, 0x99b, 0x2], 0x1, 0x400, 0x2}) 14:55:56 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) write$FUSE_OPEN(r5, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x8001}, @host, 0x8, 0x3, 0xfffffffffffffffa, 0x4000000, 0x1f, 0x3, 0xfffffc00}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) 14:55:56 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) write$FUSE_OPEN(r4, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0xf379, 0x1, 0x6}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000001c0)=[0x7d, 0x1000, 0x1, 0x7fff, 0x9c1, 0x7, 0x0, 0x80000000, 0x582, 0x7fffffff, 0x2, 0x2b47352e, 0x10001, 0xfffffffe, 0x9, 0x2, 0x1, 0x1ff, 0x7fff, 0x6, 0x1ff, 0x1, 0x7, 0x7, 0x0, 0x0, 0x20, 0x1, 0x1ef, 0x1, 0xc7d, 0x4, 0xfffffff9, 0x8, 0x915, 0x38, 0x80000001, 0xd7, 0x3d5, 0x7, 0x5, 0x318, 0xfffffffa, 0x1, 0x6, 0x1, 0x5, 0x0, 0xc7, 0x1, 0x9, 0x6, 0xff, 0x3f, 0x6, 0x6, 0x6, 0x401, 0x0, 0x81, 0x3ff, 0x6, 0xd06, 0x401, 0x9, 0x1000, 0xffffca25, 0x4, 0xffffffff, 0x4, 0x4, 0x80000001, 0x7, 0x7, 0x7, 0x80000001, 0x262, 0x400, 0x9, 0x114a, 0xfffffffd, 0x8000, 0x27, 0xfffffffe, 0x4927, 0x3, 0x20, 0x3ff, 0x2, 0x20, 0xaf, 0x4814, 0xffffffff, 0x0, 0x2, 0x9, 0x6, 0x6, 0x5, 0x6, 0xffffffff, 0x54f4, 0x0, 0xffff8001, 0x9, 0x5, 0x0, 0x2, 0xffff, 0xa3, 0xff, 0x5, 0xd6a, 0x4, 0xffff, 0x1, 0x9, 0x800, 0x4, 0x80, 0x8, 0x1f, 0x7, 0x4, 0x0, 0x3, 0x1ff, 0x3ad, 0x38, 0x3, 0x60, 0x0, 0x10000, 0x0, 0x6, 0x80000000, 0x6, 0x3, 0xfffffff8, 0x4d1, 0x5, 0x3, 0xffff, 0x1, 0x6, 0x8, 0x41c, 0x3ff, 0x5, 0x80000001, 0xffffff77, 0x10001, 0x10, 0xfffff800, 0x80000001, 0x5, 0xf28, 0x214a, 0x80000000, 0xfffffc00, 0x80000000, 0x9ae, 0xc46b, 0x5, 0x4, 0x1, 0x200, 0x6, 0x0, 0x6, 0x7, 0x6, 0x76821f1e, 0x7fffffff, 0x0, 0x2, 0x1, 0x4, 0x8000, 0xf, 0x1, 0x10001, 0x100, 0x8, 0x6, 0x101, 0x400, 0x0, 0xffff4891, 0x3ff, 0x1, 0x820c, 0x3, 0x7fffffff, 0x4e, 0x400, 0x58c, 0x4, 0x3f, 0x3, 0x7, 0x0, 0x0, 0x2, 0xe0, 0x2, 0x48a826a3, 0x1, 0x8, 0x7, 0x52, 0x3, 0x7, 0x200, 0x5, 0x5, 0xfd, 0x3, 0x8, 0x7f, 0x8, 0xb46, 0xfffffff7, 0x3, 0x4, 0xaa4, 0xffff8000, 0x80000001, 0x1, 0x57737647, 0x4, 0xffff0001, 0x1, 0x479, 0x2646, 0x25, 0x0, 0x1, 0x4, 0x800, 0x7, 0x3, 0x88, 0x2, 0xa, 0x3, 0x7e5, 0x500, 0x5, 0x7, 0x80000001, 0x7, 0x4, 0x8000, 0xff, 0xcd0, 0x8, 0x1f, 0x3ff, 0x4, 0x9, 0x357, 0xffffffff, 0x2, 0x3ff, 0x6, 0x3ff, 0x8001, 0x1031, 0x337, 0xfffff3b8, 0x2436, 0x9, 0x0, 0x7fff, 0xfffffffa, 0x4, 0x20, 0x1000, 0x3f, 0x9, 0x3f, 0x5, 0xd505, 0x4, 0x7, 0x39c6d1d6, 0x810f, 0x7ff, 0x800, 0x730, 0x200, 0x5, 0x6, 0x2, 0x80, 0x3c, 0xa8cc, 0x9d7f, 0x6445e42a, 0x4, 0xffffff7f, 0xe1f, 0x8, 0x5f2, 0x5, 0x20, 0x8d7c, 0x7, 0x4, 0xfff, 0x9, 0xffffffff, 0x2, 0x8af, 0x12c0cffb, 0x6, 0x80000000, 0x6, 0xa, 0x1, 0xb16, 0xf8, 0x0, 0x3ff, 0xfffffffc, 0x4879, 0x4, 0x2a630d22, 0x7, 0x0, 0x1, 0x8000, 0x3, 0x80000000, 0x6, 0x2, 0x60, 0x20400000, 0x80, 0x1, 0x40, 0x7f, 0xfff, 0x6, 0x7fff, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x8, 0x4, 0x0, 0x8000, 0x0, 0x6, 0x3, 0x800, 0x4, 0x7, 0x6, 0x36, 0x2, 0x3, 0xffffff3a, 0x5, 0x8, 0x8000, 0x4, 0xa385, 0x5, 0x0, 0xbfba, 0x6, 0x800, 0x3, 0x33, 0x4000, 0x9, 0x8, 0x100, 0xfffffff7, 0x0, 0x20, 0x9, 0xe63, 0x43, 0x7b26, 0xfffffffb, 0x4, 0x8001, 0x5, 0x80000001, 0xffffffff, 0x1, 0xe3, 0x7f, 0x1, 0x4, 0x0, 0x6, 0x6, 0x8000, 0x80, 0x13e, 0x3, 0x1, 0x6, 0x3f, 0x0, 0x101, 0x80000001, 0x6, 0x7, 0xfdc, 0x7, 0x7, 0x8, 0x400, 0x2, 0x5, 0x4, 0x1, 0x80000001, 0xff, 0x3, 0x0, 0x8, 0x9, 0x454debfb, 0x800, 0x9, 0x8, 0x0, 0x20d9, 0x1, 0xfffffffc, 0x8001, 0x993, 0x2a, 0x6, 0x5, 0x2, 0x7fffffff, 0x54, 0x2, 0x7, 0x9, 0x4, 0x33b3, 0x0, 0x7fffffff, 0xde4, 0x80000000, 0x80000000, 0x1, 0x7cedbf0b, 0x1ff, 0x4, 0x6, 0xfffffffc, 0xefc, 0x8001, 0x4, 0x3, 0x7, 0x1, 0x9, 0xfffffffa, 0x9, 0x1, 0x27f7, 0x9, 0x7, 0x2, 0x80, 0x3f, 0xfffffff8, 0x3, 0x4, 0x5, 0x3, 0x3, 0x4000000, 0x1, 0xfffffff9, 0x9, 0x7fffffff, 0x9, 0x9, 0xfffffc00, 0x1, 0x800, 0x0, 0x5, 0x9, 0x0, 0x2, 0x7, 0x10001, 0x20, 0x1ff, 0x5, 0x5, 0x40000000, 0xbc6, 0x7fff, 0x9, 0xff, 0x8001, 0x1647, 0x7, 0xff, 0x2, 0x1, 0x7f, 0xffffffff, 0x0, 0x6, 0x7d, 0x0, 0x7, 0x56, 0x0, 0xffffffff, 0x635, 0x0, 0x7, 0xa4db, 0x80, 0xd3, 0x6, 0x8, 0x3, 0x9, 0x9, 0x8, 0x1, 0x8, 0x1000, 0x8, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x9937, 0x3, 0x8001, 0xffffff41, 0x4, 0x0, 0x9, 0x97, 0x7, 0x6e, 0x86e3, 0xffffff7f, 0xff, 0x1, 0xfffffffd, 0xf9, 0x10000, 0x2, 0xde9, 0x2, 0xfffffffb, 0x8, 0xace1, 0xec, 0x1, 0x4, 0x14f7, 0xffffffff, 0x3, 0x1623, 0x200, 0x1f, 0x10000, 0x47, 0x8, 0x8, 0x4, 0x8000, 0x2, 0x4, 0x0, 0x401, 0x0, 0xfffff000, 0x3ff, 0xad, 0x69c, 0x1f, 0x4, 0xea, 0x2, 0x3f, 0xfffffffb, 0xff, 0x80, 0x80, 0x3ff, 0xf8bf, 0x4, 0x800, 0x0, 0x6, 0x8c0, 0x7, 0xd99c, 0x8, 0x2, 0x400, 0xeb, 0x5, 0x73759f89, 0x6d293091, 0x7, 0x8, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x4, 0x6, 0x1, 0x8, 0x1ff, 0xdb2, 0x1, 0x2, 0x7f, 0x1, 0x3, 0xfffff412, 0x7f, 0xf3ea, 0x7, 0x6, 0x5, 0x7, 0x6, 0x1f, 0x81, 0x8, 0x4, 0x2, 0x2, 0x7034837e, 0x400, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x7, 0x1ff, 0x200, 0xa24, 0x0, 0x9, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x2, 0x20, 0x4a78, 0x20, 0x81, 0x8, 0x0, 0x5d9, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0x9, 0x1, 0x1000, 0x5, 0x1, 0x7d75, 0x7fffffff, 0x2, 0x20000, 0x800, 0x7, 0x9, 0x9, 0x7f, 0x140, 0x3, 0xee9, 0x3ff, 0x8, 0x2f, 0x7, 0x2, 0x6, 0x40, 0xff, 0x401, 0xfffffffe, 0x3, 0x6, 0x3ff, 0x8, 0x10000, 0xffffffff, 0x460, 0x8, 0x2, 0x4, 0x80000001, 0x1, 0xff, 0x7, 0x0, 0x2, 0xd94, 0x3ff, 0x3, 0x1, 0x4, 0x7, 0x7, 0x3, 0xffffffff, 0x401, 0xcd, 0x3, 0x7fffffff, 0x40, 0xbce, 0x10000, 0x10001, 0xfc000000, 0x6a, 0x512, 0x4, 0x43b, 0xb49c, 0xdf013b7, 0x400, 0x8, 0x7, 0x8333, 0x200, 0x0, 0xb814, 0x8, 0x1, 0x50, 0x1, 0x9, 0x2, 0x3, 0x8, 0x4, 0x3, 0x100000, 0xc9, 0xc1, 0xfff, 0xff, 0x7, 0x5, 0xd4c, 0x1, 0x2, 0x100, 0x4, 0x7, 0x8, 0x7fffffff, 0x80000000, 0x1, 0x8, 0x7ff, 0x8000, 0xef, 0x4, 0x2b1, 0x0, 0x7, 0x3ff, 0x421f, 0x1, 0x1ff, 0x5, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x30, 0x0, 0x400, 0x40, 0x101, 0x7ff, 0x1, 0xff, 0x9, 0x80000001, 0x2, 0x8, 0x20, 0x7, 0xd2b, 0x8, 0x0, 0x3, 0x7fff, 0x1, 0x3b35, 0x7, 0x3, 0x1, 0x68b, 0x4, 0x3f, 0x401, 0x3, 0x81d, 0x5, 0xd09, 0x1, 0x6, 0x200, 0x9, 0x101, 0x4348, 0x6, 0x4, 0x1, 0x80000000, 0x10000, 0x1, 0x3, 0x9, 0xf2d7, 0x2, 0x1ff, 0x80, 0x4, 0x3f, 0x2, 0x3, 0x8a6, 0x2, 0x1, 0x1f, 0x7425, 0x14, 0x80, 0x30644be9, 0x4, 0x9, 0x3ff, 0x8, 0x80000001, 0x6b2, 0x80000001, 0x9d, 0x4, 0xffffffff, 0x9, 0xcc98, 0x6, 0x6, 0xb68, 0x7, 0x5, 0x80000000, 0x5, 0x7fff, 0x8001, 0x7, 0x3, 0x3, 0x80000001, 0x514, 0x3, 0x2, 0x81, 0x7, 0x6, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0x7f, 0x0, 0x401, 0x40, 0x1, 0x3f, 0x6, 0x5, 0x1800, 0x40, 0x477a, 0x80000001, 0x4, 0xffffffff, 0xff, 0x2, 0x40, 0xfffffffa, 0x5, 0x4, 0x7, 0x3, 0x1fb751d1, 0x2, 0x9, 0xa8, 0x0, 0x0, 0x5bea, 0x1, 0x0, 0xffff8001, 0x7, 0x0, 0x100, 0x8, 0xb5ab, 0x5b, 0x9, 0x8, 0x9149, 0x81, 0x80000000, 0x7, 0x4, 0x10000, 0xfffffffb, 0x8, 0x1, 0xfffffffb, 0x1000, 0x1, 0x0, 0x0, 0x9, 0x200, 0x7f, 0x24, 0x8, 0x100, 0xfffffffb, 0x80000000, 0x7, 0x776, 0x5af8, 0x6, 0x1, 0x8, 0x7, 0x81, 0x4, 0x7f, 0xdb7, 0xffff, 0x1, 0x101, 0x0, 0x7, 0x9, 0x80000000, 0x7, 0x5, 0x7, 0x5, 0x5, 0x0, 0x5234, 0x3, 0x18, 0x20, 0x8, 0x8, 0x100, 0x9, 0xfffffffc, 0x0, 0x8, 0xfffffffb, 0x7fff, 0xfff, 0x7ef, 0x2, 0x8, 0x1, 0x5, 0x7, 0x101, 0xc8d, 0x3ff, 0x80, 0x6, 0x10000, 0x1ff, 0xa6d, 0x9, 0x20, 0xfffffff9, 0x1a9bd243, 0x575faf48, 0x4, 0x4, 0x80000000, 0x80000001, 0x0, 0x5, 0x99b, 0x2], 0x1, 0x400, 0x2}) 14:55:56 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e, 0x10000}, {0xf9, 0xfffffffe}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) 14:55:56 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) 14:55:56 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0xffffffffffffff7d) write$FUSE_LK(r0, &(0x7f0000000200)={0x28, 0xfffffffffffffff5, 0x0, {{0x200, 0x7f, 0x2, 0xffffffffffffffff}}}, 0x28) r2 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3fa, 0x20, 0x2070bd2c, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_open_dev$audion(&(0x7f0000001d80), 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$audion(&(0x7f0000000300), 0xffffffffffffffff, 0x200000) write$FUSE_OPEN(r5, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x8001}, @host, 0x8, 0x3, 0xfffffffffffffffa, 0x4000000, 0x1f, 0x3, 0xfffffc00}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) 14:55:56 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x2000000, '/dev/vim2m\x00'}}, 0x2c) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0xf379, 0x1, 0x6}) (async, rerun: 32) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f00000001c0)=[0x7d, 0x1000, 0x1, 0x7fff, 0x9c1, 0x7, 0x0, 0x80000000, 0x582, 0x7fffffff, 0x2, 0x2b47352e, 0x10001, 0xfffffffe, 0x9, 0x2, 0x1, 0x1ff, 0x7fff, 0x6, 0x1ff, 0x1, 0x7, 0x7, 0x0, 0x0, 0x20, 0x1, 0x1ef, 0x1, 0xc7d, 0x4, 0xfffffff9, 0x8, 0x915, 0x38, 0x80000001, 0xd7, 0x3d5, 0x7, 0x5, 0x318, 0xfffffffa, 0x1, 0x6, 0x1, 0x5, 0x0, 0xc7, 0x1, 0x9, 0x6, 0xff, 0x3f, 0x6, 0x6, 0x6, 0x401, 0x0, 0x81, 0x3ff, 0x6, 0xd06, 0x401, 0x9, 0x1000, 0xffffca25, 0x4, 0xffffffff, 0x4, 0x4, 0x80000001, 0x7, 0x7, 0x7, 0x80000001, 0x262, 0x400, 0x9, 0x114a, 0xfffffffd, 0x8000, 0x27, 0xfffffffe, 0x4927, 0x3, 0x20, 0x3ff, 0x2, 0x20, 0xaf, 0x4814, 0xffffffff, 0x0, 0x2, 0x9, 0x6, 0x6, 0x5, 0x6, 0xffffffff, 0x54f4, 0x0, 0xffff8001, 0x9, 0x5, 0x0, 0x2, 0xffff, 0xa3, 0xff, 0x5, 0xd6a, 0x4, 0xffff, 0x1, 0x9, 0x800, 0x4, 0x80, 0x8, 0x1f, 0x7, 0x4, 0x0, 0x3, 0x1ff, 0x3ad, 0x38, 0x3, 0x60, 0x0, 0x10000, 0x0, 0x6, 0x80000000, 0x6, 0x3, 0xfffffff8, 0x4d1, 0x5, 0x3, 0xffff, 0x1, 0x6, 0x8, 0x41c, 0x3ff, 0x5, 0x80000001, 0xffffff77, 0x10001, 0x10, 0xfffff800, 0x80000001, 0x5, 0xf28, 0x214a, 0x80000000, 0xfffffc00, 0x80000000, 0x9ae, 0xc46b, 0x5, 0x4, 0x1, 0x200, 0x6, 0x0, 0x6, 0x7, 0x6, 0x76821f1e, 0x7fffffff, 0x0, 0x2, 0x1, 0x4, 0x8000, 0xf, 0x1, 0x10001, 0x100, 0x8, 0x6, 0x101, 0x400, 0x0, 0xffff4891, 0x3ff, 0x1, 0x820c, 0x3, 0x7fffffff, 0x4e, 0x400, 0x58c, 0x4, 0x3f, 0x3, 0x7, 0x0, 0x0, 0x2, 0xe0, 0x2, 0x48a826a3, 0x1, 0x8, 0x7, 0x52, 0x3, 0x7, 0x200, 0x5, 0x5, 0xfd, 0x3, 0x8, 0x7f, 0x8, 0xb46, 0xfffffff7, 0x3, 0x4, 0xaa4, 0xffff8000, 0x80000001, 0x1, 0x57737647, 0x4, 0xffff0001, 0x1, 0x479, 0x2646, 0x25, 0x0, 0x1, 0x4, 0x800, 0x7, 0x3, 0x88, 0x2, 0xa, 0x3, 0x7e5, 0x500, 0x5, 0x7, 0x80000001, 0x7, 0x4, 0x8000, 0xff, 0xcd0, 0x8, 0x1f, 0x3ff, 0x4, 0x9, 0x357, 0xffffffff, 0x2, 0x3ff, 0x6, 0x3ff, 0x8001, 0x1031, 0x337, 0xfffff3b8, 0x2436, 0x9, 0x0, 0x7fff, 0xfffffffa, 0x4, 0x20, 0x1000, 0x3f, 0x9, 0x3f, 0x5, 0xd505, 0x4, 0x7, 0x39c6d1d6, 0x810f, 0x7ff, 0x800, 0x730, 0x200, 0x5, 0x6, 0x2, 0x80, 0x3c, 0xa8cc, 0x9d7f, 0x6445e42a, 0x4, 0xffffff7f, 0xe1f, 0x8, 0x5f2, 0x5, 0x20, 0x8d7c, 0x7, 0x4, 0xfff, 0x9, 0xffffffff, 0x2, 0x8af, 0x12c0cffb, 0x6, 0x80000000, 0x6, 0xa, 0x1, 0xb16, 0xf8, 0x0, 0x3ff, 0xfffffffc, 0x4879, 0x4, 0x2a630d22, 0x7, 0x0, 0x1, 0x8000, 0x3, 0x80000000, 0x6, 0x2, 0x60, 0x20400000, 0x80, 0x1, 0x40, 0x7f, 0xfff, 0x6, 0x7fff, 0x1000, 0x3, 0x0, 0x1, 0x6, 0x8, 0x4, 0x0, 0x8000, 0x0, 0x6, 0x3, 0x800, 0x4, 0x7, 0x6, 0x36, 0x2, 0x3, 0xffffff3a, 0x5, 0x8, 0x8000, 0x4, 0xa385, 0x5, 0x0, 0xbfba, 0x6, 0x800, 0x3, 0x33, 0x4000, 0x9, 0x8, 0x100, 0xfffffff7, 0x0, 0x20, 0x9, 0xe63, 0x43, 0x7b26, 0xfffffffb, 0x4, 0x8001, 0x5, 0x80000001, 0xffffffff, 0x1, 0xe3, 0x7f, 0x1, 0x4, 0x0, 0x6, 0x6, 0x8000, 0x80, 0x13e, 0x3, 0x1, 0x6, 0x3f, 0x0, 0x101, 0x80000001, 0x6, 0x7, 0xfdc, 0x7, 0x7, 0x8, 0x400, 0x2, 0x5, 0x4, 0x1, 0x80000001, 0xff, 0x3, 0x0, 0x8, 0x9, 0x454debfb, 0x800, 0x9, 0x8, 0x0, 0x20d9, 0x1, 0xfffffffc, 0x8001, 0x993, 0x2a, 0x6, 0x5, 0x2, 0x7fffffff, 0x54, 0x2, 0x7, 0x9, 0x4, 0x33b3, 0x0, 0x7fffffff, 0xde4, 0x80000000, 0x80000000, 0x1, 0x7cedbf0b, 0x1ff, 0x4, 0x6, 0xfffffffc, 0xefc, 0x8001, 0x4, 0x3, 0x7, 0x1, 0x9, 0xfffffffa, 0x9, 0x1, 0x27f7, 0x9, 0x7, 0x2, 0x80, 0x3f, 0xfffffff8, 0x3, 0x4, 0x5, 0x3, 0x3, 0x4000000, 0x1, 0xfffffff9, 0x9, 0x7fffffff, 0x9, 0x9, 0xfffffc00, 0x1, 0x800, 0x0, 0x5, 0x9, 0x0, 0x2, 0x7, 0x10001, 0x20, 0x1ff, 0x5, 0x5, 0x40000000, 0xbc6, 0x7fff, 0x9, 0xff, 0x8001, 0x1647, 0x7, 0xff, 0x2, 0x1, 0x7f, 0xffffffff, 0x0, 0x6, 0x7d, 0x0, 0x7, 0x56, 0x0, 0xffffffff, 0x635, 0x0, 0x7, 0xa4db, 0x80, 0xd3, 0x6, 0x8, 0x3, 0x9, 0x9, 0x8, 0x1, 0x8, 0x1000, 0x8, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x9937, 0x3, 0x8001, 0xffffff41, 0x4, 0x0, 0x9, 0x97, 0x7, 0x6e, 0x86e3, 0xffffff7f, 0xff, 0x1, 0xfffffffd, 0xf9, 0x10000, 0x2, 0xde9, 0x2, 0xfffffffb, 0x8, 0xace1, 0xec, 0x1, 0x4, 0x14f7, 0xffffffff, 0x3, 0x1623, 0x200, 0x1f, 0x10000, 0x47, 0x8, 0x8, 0x4, 0x8000, 0x2, 0x4, 0x0, 0x401, 0x0, 0xfffff000, 0x3ff, 0xad, 0x69c, 0x1f, 0x4, 0xea, 0x2, 0x3f, 0xfffffffb, 0xff, 0x80, 0x80, 0x3ff, 0xf8bf, 0x4, 0x800, 0x0, 0x6, 0x8c0, 0x7, 0xd99c, 0x8, 0x2, 0x400, 0xeb, 0x5, 0x73759f89, 0x6d293091, 0x7, 0x8, 0x8, 0x80000001, 0x0, 0x9, 0x0, 0x4, 0x6, 0x1, 0x8, 0x1ff, 0xdb2, 0x1, 0x2, 0x7f, 0x1, 0x3, 0xfffff412, 0x7f, 0xf3ea, 0x7, 0x6, 0x5, 0x7, 0x6, 0x1f, 0x81, 0x8, 0x4, 0x2, 0x2, 0x7034837e, 0x400, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x7, 0x1ff, 0x200, 0xa24, 0x0, 0x9, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x2, 0x20, 0x4a78, 0x20, 0x81, 0x8, 0x0, 0x5d9, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0x9, 0x1, 0x1000, 0x5, 0x1, 0x7d75, 0x7fffffff, 0x2, 0x20000, 0x800, 0x7, 0x9, 0x9, 0x7f, 0x140, 0x3, 0xee9, 0x3ff, 0x8, 0x2f, 0x7, 0x2, 0x6, 0x40, 0xff, 0x401, 0xfffffffe, 0x3, 0x6, 0x3ff, 0x8, 0x10000, 0xffffffff, 0x460, 0x8, 0x2, 0x4, 0x80000001, 0x1, 0xff, 0x7, 0x0, 0x2, 0xd94, 0x3ff, 0x3, 0x1, 0x4, 0x7, 0x7, 0x3, 0xffffffff, 0x401, 0xcd, 0x3, 0x7fffffff, 0x40, 0xbce, 0x10000, 0x10001, 0xfc000000, 0x6a, 0x512, 0x4, 0x43b, 0xb49c, 0xdf013b7, 0x400, 0x8, 0x7, 0x8333, 0x200, 0x0, 0xb814, 0x8, 0x1, 0x50, 0x1, 0x9, 0x2, 0x3, 0x8, 0x4, 0x3, 0x100000, 0xc9, 0xc1, 0xfff, 0xff, 0x7, 0x5, 0xd4c, 0x1, 0x2, 0x100, 0x4, 0x7, 0x8, 0x7fffffff, 0x80000000, 0x1, 0x8, 0x7ff, 0x8000, 0xef, 0x4, 0x2b1, 0x0, 0x7, 0x3ff, 0x421f, 0x1, 0x1ff, 0x5, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x30, 0x0, 0x400, 0x40, 0x101, 0x7ff, 0x1, 0xff, 0x9, 0x80000001, 0x2, 0x8, 0x20, 0x7, 0xd2b, 0x8, 0x0, 0x3, 0x7fff, 0x1, 0x3b35, 0x7, 0x3, 0x1, 0x68b, 0x4, 0x3f, 0x401, 0x3, 0x81d, 0x5, 0xd09, 0x1, 0x6, 0x200, 0x9, 0x101, 0x4348, 0x6, 0x4, 0x1, 0x80000000, 0x10000, 0x1, 0x3, 0x9, 0xf2d7, 0x2, 0x1ff, 0x80, 0x4, 0x3f, 0x2, 0x3, 0x8a6, 0x2, 0x1, 0x1f, 0x7425, 0x14, 0x80, 0x30644be9, 0x4, 0x9, 0x3ff, 0x8, 0x80000001, 0x6b2, 0x80000001, 0x9d, 0x4, 0xffffffff, 0x9, 0xcc98, 0x6, 0x6, 0xb68, 0x7, 0x5, 0x80000000, 0x5, 0x7fff, 0x8001, 0x7, 0x3, 0x3, 0x80000001, 0x514, 0x3, 0x2, 0x81, 0x7, 0x6, 0x4, 0xffffffff, 0x7fffffff, 0x5, 0x7f, 0x0, 0x401, 0x40, 0x1, 0x3f, 0x6, 0x5, 0x1800, 0x40, 0x477a, 0x80000001, 0x4, 0xffffffff, 0xff, 0x2, 0x40, 0xfffffffa, 0x5, 0x4, 0x7, 0x3, 0x1fb751d1, 0x2, 0x9, 0xa8, 0x0, 0x0, 0x5bea, 0x1, 0x0, 0xffff8001, 0x7, 0x0, 0x100, 0x8, 0xb5ab, 0x5b, 0x9, 0x8, 0x9149, 0x81, 0x80000000, 0x7, 0x4, 0x10000, 0xfffffffb, 0x8, 0x1, 0xfffffffb, 0x1000, 0x1, 0x0, 0x0, 0x9, 0x200, 0x7f, 0x24, 0x8, 0x100, 0xfffffffb, 0x80000000, 0x7, 0x776, 0x5af8, 0x6, 0x1, 0x8, 0x7, 0x81, 0x4, 0x7f, 0xdb7, 0xffff, 0x1, 0x101, 0x0, 0x7, 0x9, 0x80000000, 0x7, 0x5, 0x7, 0x5, 0x5, 0x0, 0x5234, 0x3, 0x18, 0x20, 0x8, 0x8, 0x100, 0x9, 0xfffffffc, 0x0, 0x8, 0xfffffffb, 0x7fff, 0xfff, 0x7ef, 0x2, 0x8, 0x1, 0x5, 0x7, 0x101, 0xc8d, 0x3ff, 0x80, 0x6, 0x10000, 0x1ff, 0xa6d, 0x9, 0x20, 0xfffffff9, 0x1a9bd243, 0x575faf48, 0x4, 0x4, 0x80000000, 0x80000001, 0x0, 0x5, 0x99b, 0x2], 0x1, 0x400, 0x2}) 14:55:56 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) 14:55:56 executing program 4: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x23, 0x8, 0x3, 0x6, 0x41, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x7, 0x9, 0x9}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) 14:55:56 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) 14:55:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x343040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tick_stop\x00', r0}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000100)={0x3, 0x6, 0x3, 0x8, 0x3f, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xbe, 0x2000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) write$rfkill(r3, &(0x7f0000000200)={0xffffffff, 0x8, 0x2, 0x1}, 0x8) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000040)) 14:55:56 executing program 3: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x149a41) 14:55:56 executing program 2: syz_open_dev$audion(&(0x7f0000001d80), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@host, 0xfffffffa}, 0x8, 0x7, 0x5, 0x1, 0x7ff, 0x20, 0x2, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) 14:55:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x7b3fb848, 0xfffffff8}, {0x1e, 0x10000}, {0xf9, 0xfffffffe}, {0x5d, 0x1}], 0x7, 0x3f, 0x8, 0x3, 0x6}}, 0x3}) [ 1915.801400] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.806998] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.211293] cron invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1918.222522] cron cpuset=/ mems_allowed=0-1 [ 1918.226781] CPU: 0 PID: 7750 Comm: cron Not tainted 4.19.211-syzkaller #0 [ 1918.233701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1918.243051] Call Trace: [ 1918.245642] dump_stack+0x1fc/0x2ef [ 1918.249276] dump_header+0x15d/0xc3f [ 1918.252991] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1918.258094] ? ___ratelimit+0x319/0x590 [ 1918.262069] oom_kill_process.cold+0x10/0x692 [ 1918.266570] ? check_preemption_disabled+0x41/0x280 [ 1918.271682] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1918.276958] out_of_memory+0x1072/0x1390 [ 1918.281025] ? oom_killer_disable+0x270/0x270 [ 1918.285525] ? mutex_trylock+0x15f/0x1a0 [ 1918.289618] __alloc_pages_nodemask+0x23a2/0x2890 [ 1918.294467] ? find_get_entry+0x4cd/0x8a0 [ 1918.298624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1918.303501] alloc_pages_current+0x193/0x2a0 [ 1918.307916] filemap_fault+0x146e/0x2180 [ 1918.311991] ext4_filemap_fault+0x84/0xb0 [ 1918.316171] __do_fault+0x10b/0x4b0 [ 1918.319807] ? do_raw_spin_unlock+0x171/0x230 [ 1918.324313] __handle_mm_fault+0x273b/0x41c0 [ 1918.328735] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1918.333844] ? vm_insert_page+0x9c0/0x9c0 [ 1918.338011] ? check_preemption_disabled+0x41/0x280 [ 1918.343036] handle_mm_fault+0x436/0xb10 [ 1918.347105] __do_page_fault+0x68e/0xd60 [ 1918.351171] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1918.356197] ? spurious_fault+0x840/0x840 [ 1918.360345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1918.365204] ? page_fault+0x8/0x30 [ 1918.368749] page_fault+0x1e/0x30 [ 1918.372209] RIP: 0033:0x55c2a96c17ae [ 1918.375921] Code: Bad RIP value. [ 1918.379281] RSP: 002b:00007ffcae4bad70 EFLAGS: 00010246 [ 1918.384643] RAX: 0000000063b19f02 RBX: 0000000000000000 RCX: 00007fb983af2270 [ 1918.391908] RDX: 0000000000000001 RSI: 00007ffcae4bad90 RDI: 0000000000000000 [ 1918.399185] RBP: 00007ffcae4badc0 R08: 0000000000000001 R09: 0000000000000000 [ 1918.406456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1918.413724] R13: 00007ffcae4baee0 R14: 0000000000000000 R15: 0000000000000000 [ 1918.443651] Mem-Info: [ 1918.446107] active_anon:16950 inactive_anon:84008 isolated_anon:0 [ 1918.446107] active_file:15 inactive_file:13 isolated_file:0 [ 1918.446107] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1918.446107] slab_reclaimable:14727 slab_unreclaimable:126278 [ 1918.446107] mapped:22105 shmem:85047 pagetables:559 bounce:0 [ 1918.446107] free:25023 free_pcp:0 free_cma:0 [ 1918.491982] Node 0 active_anon:63480kB inactive_anon:26352kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1918.569551] Node 1 active_anon:4320kB inactive_anon:309680kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1918.645797] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.725602] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1918.735268] Node 0 DMA32 free:35756kB min:35996kB low:44992kB high:53988kB active_anon:59384kB inactive_anon:26352kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1992kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.835576] lowmem_reserve[]: 0 0 1 1 1 [ 1918.852552] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.889765] lowmem_reserve[]: 0 0 0 0 0 [ 1918.893822] Node 1 Normal free:53344kB min:53876kB low:67344kB high:80812kB active_anon:4320kB inactive_anon:309680kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1918.943572] lowmem_reserve[]: 0 0 0 0 0 [ 1918.947593] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10984kB [ 1918.974825] Node 0 DMA32: 1068*4kB (ME) 504*8kB (UME) 227*16kB (ME) 86*32kB (ME) 37*64kB (UME) 8*128kB (UM) 1*256kB (M) 1*512kB (U) 17*1024kB (UM) 0*2048kB 0*4096kB = 36256kB [ 1919.024777] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1919.058576] Node 1 Normal: 480*4kB (UME) 405*8kB (UME) 283*16kB (ME) 106*32kB (UME) 21*64kB (ME) 4*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53592kB [ 1919.085880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1919.097235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1919.136370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1919.190439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1919.199130] 85075 total pagecache pages [ 1919.233226] 0 pages in swap cache [ 1919.236718] Swap cache stats: add 0, delete 0, find 0/0 [ 1919.261962] Free swap = 0kB [ 1919.264986] Total swap = 0kB [ 1919.267998] 2097051 pages RAM [ 1919.286744] 0 pages HighMem/MovableOnly [ 1919.298811] 369649 pages reserved [ 1919.306448] 0 pages cma reserved [ 1919.318757] Unreclaimable slab info: [ 1919.341734] Name Used Total [ 1919.347309] pid_2 109KB 136KB [ 1919.364082] batadv_tl_cache 4KB 16KB [ 1919.369766] TIPC 10KB 22KB [ 1919.375147] SCTPv6 14KB 24KB [ 1919.399697] DCCPv6 17KB 30KB [ 1919.405180] DCCP 16KB 28KB [ 1919.448653] RXRPC 11KB 19KB [ 1919.472250] rxrpc_call_jar 78KB 110KB [ 1919.477634] bridge_fdb_cache 9KB 23KB [ 1919.535897] fib6_nodes 156KB 272KB [ 1919.559336] ip6_dst_cache 90KB 472KB [ 1919.564746] RAWv6 70KB 101KB [ 1919.592433] UDPv6 176KB 180KB [ 1919.597941] TCPv6 30KB 42KB [ 1919.625918] nf_conntrack 14KB 18KB [ 1919.637454] t10_alua_lu_gp_cache 0KB 3KB [ 1919.655516] sd_ext_cdb 0KB 7KB [ 1919.673625] scsi_sense_cache 1056KB 1060KB [ 1919.679008] virtio_scsi_cmd 16KB 16KB [ 1919.704953] sgpool-128 8KB 8KB [ 1919.732698] sgpool-64 4KB 12KB [ 1919.738375] sgpool-32 2KB 15KB [ 1919.783783] sgpool-16 1KB 7KB [ 1919.789189] sgpool-8 0KB 7KB [ 1919.809304] mqueue_inode_cache 10KB 30KB [ 1919.814787] bio_post_read_ctx 14KB 15KB [ 1919.854529] bio-2 14KB 15KB [ 1919.877733] jfs_mp 7KB 7KB [ 1919.900907] fuse_request 1KB 8KB [ 1919.906309] cifs_small_rq 15KB 16KB [ 1919.928933] cifs_request 67KB 67KB [ 1919.961878] cifs_mpx_ids 0KB 7KB [ 1919.967286] nfs_commit_data 3KB 14KB [ 1919.978608] nfs_write_data 34KB 44KB [ 1920.003543] ext4_system_zone 1KB 7KB [ 1920.030949] bio-1 1KB 7KB [ 1920.036352] pid_namespace 2KB 11KB [ 1920.071860] rpc_buffers 17KB 25KB [ 1920.077266] rpc_tasks 2KB 7KB [ 1920.103901] UNIX 292KB 363KB [ 1920.134926] tcp_bind_bucket 1KB 4KB [ 1920.149351] ip_fib_trie 23KB 47KB [ 1920.154764] ip_fib_alias 112KB 189KB [ 1920.185160] ip_dst_cache 4KB 24KB [ 1920.202854] RAW 42KB 67KB [ 1920.208237] UDP 38KB 67KB [ 1920.237933] TCP 25KB 28KB [ 1920.250933] hugetlbfs_inode_cache 3KB 15KB [ 1920.256669] fscache_cookie_jar 1KB 7KB [ 1920.287722] eventpoll_pwq 15KB 55KB [ 1920.302541] eventpoll_epi 29KB 66KB [ 1920.307936] inotify_inode_mark 26KB 35KB [ 1920.348972] request_queue 199KB 199KB [ 1920.369290] blkdev_requests 1KB 3KB [ 1920.375332] blkdev_ioc 17KB 38KB [ 1920.405561] bio-0 339KB 352KB [ 1920.428890] biovec-max 1353KB 1402KB [ 1920.465807] biovec-64 315KB 385KB [ 1920.489436] biovec-16 83KB 105KB [ 1920.494816] bio_integrity_payload 1KB 8KB [ 1920.538220] khugepaged_mm_slot 19KB 27KB [ 1920.563071] uid_cache 0KB 4KB [ 1920.568564] dmaengine-unmap-2 0KB 3KB [ 1920.591949] audit_buffer 0KB 3KB [ 1920.597341] skbuff_fclone_cache 489KB 498KB [ 1920.633824] skbuff_head_cache 3278KB 5572KB [ 1920.647796] configfs_dir_cache 3KB 7KB [ 1920.654134] file_lock_cache 140KB 170KB [ 1920.689148] file_lock_ctx 9KB 15KB [ 1920.697333] fsnotify_mark_connector 14KB 23KB [ 1920.715766] net_namespace 52KB 52KB [ 1920.724973] shmem_inode_cache 8385KB 8458KB [ 1920.732856] task_delay_info 240KB 359KB [ 1920.738216] taskstats 143KB 172KB [ 1920.757297] proc_dir_entry 695KB 843KB [ 1920.775836] pde_opener 8KB 46KB [ 1920.801675] seq_file 248KB 374KB [ 1920.807061] sigqueue 33KB 70KB [ 1920.845606] kernfs_node_cache 18265KB 18892KB [ 1920.865418] mnt_cache 194KB 240KB [ 1920.877008] filp 5857KB 8358KB [ 1920.892565] names_cache 153828KB 153867KB [ 1920.897959] iint_cache 28KB 51KB [ 1920.906556] key_jar 4KB 11KB [ 1920.914504] uts_namespace 2KB 11KB [ 1920.934355] nsproxy 2KB 7KB [ 1920.939820] vm_area_struct 3742KB 3940KB [ 1920.945184] mm_struct 726KB 806KB [ 1920.996989] fs_cache 149KB 292KB [ 1921.015874] files_cache 528KB 802KB [ 1921.041040] signal_cache 1131KB 1904KB [ 1921.046427] sighand_cache 552KB 617KB [ 1921.080676] task_struct 7840KB 7928KB [ 1921.098709] cred_jar 1207KB 2752KB [ 1921.104164] anon_vma_chain 1180KB 1484KB [ 1921.109626] anon_vma 134KB 292KB [ 1921.114986] pid 52KB 232KB [ 1921.120431] Acpi-Operand 156KB 198KB [ 1921.126859] Acpi-ParseExt 8KB 11KB [ 1921.150215] Acpi-Parse 41KB 47KB [ 1921.182320] Acpi-State 52KB 63KB [ 1921.187895] Acpi-Namespace 20KB 27KB [ 1921.215533] numa_policy 0KB 3KB [ 1921.228930] debug_objects_cache 1781KB 1883KB [ 1921.248519] trace_event_file 297KB 298KB [ 1921.262273] ftrace_event_field 398KB 401KB [ 1921.267741] pool_workqueue 121KB 148KB [ 1921.304791] page->ptl 791KB 956KB [ 1921.319584] kmalloc-2097152 2050KB 2050KB [ 1921.324984] kmalloc-524288 2056KB 2056KB [ 1921.349250] kmalloc-262144 1290KB 1290KB [ 1921.354637] kmalloc-131072 650KB 650KB [ 1921.384572] kmalloc-65536 1848KB 1914KB [ 1921.403715] kmalloc-32768 1650KB 1716KB [ 1921.416831] kmalloc-16384 973KB 1023KB [ 1921.433670] kmalloc-8192 4661KB 4702KB [ 1921.439073] kmalloc-4096 19273KB 19333KB [ 1921.456785] kmalloc-2048 11683KB 14343KB [ 1921.462306] kmalloc-1024 7769KB 13434KB [ 1921.467755] kmalloc-512 8030KB 12671KB [ 1921.515996] kmalloc-256 4002KB 6033KB [ 1921.533635] kmalloc-128 1012KB 1586KB [ 1921.555155] kmalloc-96 3188KB 4368KB [ 1921.580055] kmalloc-64 2926KB 3812KB [ 1921.585434] kmalloc-32 1926KB 2512KB [ 1921.608883] kmalloc-192 1667KB 2832KB [ 1921.614572] kmem_cache 177KB 183KB [ 1921.662270] Out of memory (oom_kill_allocating_task): Kill process 7750 (cron) score 0 or sacrifice child [ 1921.709948] Killed process 7750 (cron) total-vm:27996kB, anon-rss:244kB, file-rss:0kB, shmem-rss:0kB [ 1921.748518] oom_reaper: reaped process 7750 (cron), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1921.918713] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1921.985792] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1922.001857] CPU: 1 PID: 9580 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1922.009337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1922.018698] Call Trace: [ 1922.022167] dump_stack+0x1fc/0x2ef [ 1922.025820] dump_header+0x15d/0xc3f [ 1922.029537] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1922.034641] ? ___ratelimit+0x319/0x590 [ 1922.038618] oom_kill_process.cold+0x10/0x692 [ 1922.043111] ? check_preemption_disabled+0x41/0x280 [ 1922.048120] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1922.053377] out_of_memory+0x1072/0x1390 [ 1922.057513] ? oom_killer_disable+0x270/0x270 [ 1922.062163] ? mutex_trylock+0x15f/0x1a0 [ 1922.066205] __alloc_pages_nodemask+0x23a2/0x2890 [ 1922.071050] ? find_get_entry+0x4cd/0x8a0 [ 1922.075183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1922.080032] alloc_pages_current+0x193/0x2a0 [ 1922.084420] filemap_fault+0x146e/0x2180 [ 1922.088469] ext4_filemap_fault+0x84/0xb0 [ 1922.092619] __do_fault+0x10b/0x4b0 [ 1922.096235] __handle_mm_fault+0x273b/0x41c0 [ 1922.100648] ? vm_insert_page+0x9c0/0x9c0 [ 1922.104782] ? __fget+0x356/0x510 [ 1922.108224] ? check_preemption_disabled+0x41/0x280 [ 1922.113243] handle_mm_fault+0x436/0xb10 [ 1922.117316] __do_page_fault+0x68e/0xd60 [ 1922.121375] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1922.126378] ? spurious_fault+0x840/0x840 [ 1922.130509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1922.135338] ? page_fault+0x8/0x30 [ 1922.138860] page_fault+0x1e/0x30 [ 1922.142292] RIP: 0033:0x43c2ce [ 1922.145489] Code: Bad RIP value. [ 1922.148836] RSP: 002b:000000c0000a9e50 EFLAGS: 00010206 [ 1922.154269] RAX: 0000000001f4d098 RBX: 000000c00003404c RCX: 0000000000000000 [ 1922.161521] RDX: 0000000001f4d0d8 RSI: 00000000fffffffd RDI: 0000000000000000 [ 1922.169385] RBP: 000000c0000a9f30 R08: 0000000000000000 R09: 000001eca9beee56 [ 1922.176888] R10: 000766198112adff R11: 0000000000000001 R12: 000000c0000a9e30 [ 1922.184293] R13: 0000000000000000 R14: 000000c0008d1860 R15: 0000000000000000 [ 1922.195812] Mem-Info: [ 1922.198250] active_anon:16900 inactive_anon:84008 isolated_anon:0 [ 1922.198250] active_file:33 inactive_file:3 isolated_file:0 [ 1922.198250] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1922.198250] slab_reclaimable:14702 slab_unreclaimable:125964 [ 1922.198250] mapped:22107 shmem:85047 pagetables:559 bounce:0 [ 1922.198250] free:25071 free_pcp:39 free_cma:0 [ 1922.236788] Node 0 active_anon:63236kB inactive_anon:26352kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60304kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.265158] Node 1 active_anon:4320kB inactive_anon:309680kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1922.297193] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.323712] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1922.328775] Node 0 DMA32 free:36120kB min:35996kB low:44992kB high:53988kB active_anon:59140kB inactive_anon:26352kB active_file:596kB inactive_file:792kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7520kB pagetables:1920kB bounce:0kB free_pcp:1140kB local_pcp:260kB free_cma:0kB [ 1922.358540] lowmem_reserve[]: 0 0 1 1 1 [ 1922.362670] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.388630] lowmem_reserve[]: 0 0 0 0 0 [ 1922.392829] Node 1 Normal free:53592kB min:53876kB low:67344kB high:80812kB active_anon:4320kB inactive_anon:309680kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1922.423743] lowmem_reserve[]: 0 0 0 0 0 [ 1922.427754] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10984kB [ 1922.484193] Node 0 DMA32: 947*4kB (UME) 670*8kB (UME) 238*16kB (UME) 86*32kB (ME) 36*64kB (ME) 7*128kB (M) 1*256kB (M) 0*512kB 17*1024kB (UM) 0*2048kB 0*4096kB = 36572kB [ 1922.508997] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1922.527664] Node 1 Normal: 478*4kB (UME) 402*8kB (UME) 280*16kB (ME) 109*32kB (UME) 21*64kB (ME) 4*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53608kB [ 1922.573888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.596603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1922.617475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1922.626446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1922.640082] 85087 total pagecache pages [ 1922.644115] 0 pages in swap cache [ 1922.647565] Swap cache stats: add 0, delete 0, find 0/0 [ 1922.656575] Free swap = 0kB [ 1922.661507] Total swap = 0kB [ 1922.664527] 2097051 pages RAM [ 1922.667620] 0 pages HighMem/MovableOnly [ 1922.674963] 369649 pages reserved [ 1922.678409] 0 pages cma reserved [ 1922.684985] Unreclaimable slab info: [ 1922.688703] Name Used Total [ 1922.697620] pid_2 106KB 136KB [ 1922.707231] batadv_tl_cache 4KB 16KB [ 1922.725423] TIPC 10KB 22KB [ 1922.756421] SCTPv6 14KB 24KB [ 1922.785059] DCCPv6 17KB 30KB [ 1922.816319] DCCP 16KB 28KB [ 1922.837826] RXRPC 11KB 19KB [ 1922.862292] rxrpc_call_jar 78KB 110KB [ 1922.867694] bridge_fdb_cache 9KB 23KB [ 1922.878486] fib6_nodes 156KB 272KB [ 1922.899844] ip6_dst_cache 90KB 472KB [ 1922.907913] RAWv6 70KB 101KB [ 1922.913385] UDPv6 176KB 180KB [ 1922.918746] TCPv6 30KB 42KB [ 1922.925033] nf_conntrack 14KB 18KB [ 1922.934664] t10_alua_lu_gp_cache 0KB 3KB [ 1922.941223] sd_ext_cdb 0KB 7KB [ 1922.946588] scsi_sense_cache 1056KB 1060KB [ 1922.956170] virtio_scsi_cmd 16KB 16KB [ 1922.962422] sgpool-128 8KB 8KB [ 1922.967767] sgpool-64 4KB 12KB [ 1922.975223] sgpool-32 2KB 15KB [ 1922.981454] sgpool-16 1KB 7KB [ 1922.986812] sgpool-8 0KB 7KB [ 1922.996354] mqueue_inode_cache 10KB 30KB [ 1923.002727] bio_post_read_ctx 14KB 15KB [ 1923.009232] Bluetooth: hci1: command 0x0406 tx timeout [ 1923.009269] Bluetooth: hci4: command 0x0406 tx timeout [ 1923.009286] Bluetooth: hci5: command 0x0406 tx timeout [ 1923.103434] bio-2 14KB 15KB [ 1923.108829] jfs_mp 7KB 7KB [ 1923.148692] fuse_request 1KB 8KB [ 1923.169017] cifs_small_rq 15KB 16KB [ 1923.200684] cifs_request 67KB 67KB [ 1923.206074] cifs_mpx_ids 0KB 7KB [ 1923.255069] nfs_commit_data 3KB 14KB [ 1923.268055] nfs_write_data 34KB 44KB [ 1923.287963] ext4_system_zone 1KB 7KB [ 1923.301616] bio-1 1KB 7KB [ 1923.306994] pid_namespace 2KB 11KB [ 1923.335095] rpc_buffers 17KB 25KB [ 1923.350561] rpc_tasks 2KB 7KB [ 1923.355957] UNIX 292KB 363KB [ 1923.367675] tcp_bind_bucket 1KB 4KB [ 1923.390601] ip_fib_trie 23KB 47KB [ 1923.396341] ip_fib_alias 112KB 189KB [ 1923.421525] ip_dst_cache 4KB 24KB [ 1923.426918] RAW 42KB 67KB [ 1923.437611] UDP 38KB 67KB [ 1923.443054] TCP 25KB 28KB [ 1923.448675] hugetlbfs_inode_cache 3KB 15KB [ 1923.472590] fscache_cookie_jar 1KB 7KB [ 1923.478062] eventpoll_pwq 14KB 55KB [ 1923.492264] eventpoll_epi 27KB 66KB [ 1923.497642] inotify_inode_mark 26KB 35KB [ 1923.503117] request_queue 199KB 199KB [ 1923.508459] blkdev_requests 1KB 3KB [ 1923.520194] blkdev_ioc 17KB 38KB [ 1923.525564] bio-0 388KB 401KB [ 1923.559072] biovec-max 1353KB 1402KB [ 1923.564457] biovec-64 352KB 393KB [ 1923.598651] biovec-16 90KB 105KB [ 1923.624543] bio_integrity_payload 1KB 8KB [ 1923.647862] khugepaged_mm_slot 19KB 27KB [ 1923.672252] uid_cache 0KB 4KB [ 1923.682390] dmaengine-unmap-2 0KB 3KB [ 1923.687850] audit_buffer 0KB 3KB [ 1923.727123] skbuff_fclone_cache 486KB 498KB [ 1923.742486] skbuff_head_cache 3531KB 5572KB [ 1923.748722] configfs_dir_cache 3KB 7KB [ 1923.804684] file_lock_cache 133KB 170KB [ 1923.832873] file_lock_ctx 9KB 15KB [ 1923.838281] fsnotify_mark_connector 14KB 23KB [ 1923.879914] net_namespace 52KB 52KB [ 1923.885313] shmem_inode_cache 8370KB 8458KB [ 1923.924378] task_delay_info 231KB 359KB [ 1923.946933] taskstats 141KB 172KB [ 1923.969532] proc_dir_entry 695KB 843KB [ 1923.975007] pde_opener 8KB 46KB [ 1924.015378] seq_file 239KB 370KB [ 1924.049883] sigqueue 32KB 70KB [ 1924.055284] kernfs_node_cache 18265KB 18892KB [ 1924.060693] mnt_cache 193KB 240KB [ 1924.066041] filp 5816KB 8343KB [ 1924.071464] names_cache 152392KB 152430KB [ 1924.076820] iint_cache 35KB 51KB [ 1924.082208] key_jar 4KB 11KB [ 1924.087550] uts_namespace 2KB 11KB [ 1924.092971] nsproxy 2KB 7KB [ 1924.098445] vm_area_struct 3711KB 3940KB [ 1924.103852] mm_struct 713KB 806KB [ 1924.109419] fs_cache 141KB 292KB [ 1924.114788] files_cache 513KB 802KB [ 1924.120373] signal_cache 1093KB 1897KB [ 1924.125815] sighand_cache 531KB 617KB [ 1924.131608] task_struct 7777KB 7865KB [ 1924.136968] cred_jar 1199KB 2748KB [ 1924.142474] anon_vma_chain 1164KB 1484KB [ 1924.147820] anon_vma 120KB 292KB [ 1924.153235] pid 51KB 232KB [ 1924.158695] Acpi-Operand 156KB 198KB [ 1924.164085] Acpi-ParseExt 8KB 11KB [ 1924.177975] Acpi-Parse 41KB 47KB [ 1924.183548] Acpi-State 52KB 63KB [ 1924.188909] Acpi-Namespace 20KB 27KB [ 1924.194312] numa_policy 0KB 3KB [ 1924.199741] debug_objects_cache 1781KB 1883KB [ 1924.205279] trace_event_file 297KB 298KB [ 1924.210724] ftrace_event_field 398KB 401KB [ 1924.216684] pool_workqueue 121KB 148KB [ 1924.222112] page->ptl 779KB 956KB [ 1924.227483] kmalloc-2097152 2050KB 2050KB [ 1924.232903] kmalloc-524288 2056KB 2056KB [ 1924.239471] kmalloc-262144 1290KB 1290KB [ 1924.244929] kmalloc-131072 650KB 650KB [ 1924.250470] kmalloc-65536 1848KB 1914KB [ 1924.255948] kmalloc-32768 1650KB 1716KB [ 1924.261490] kmalloc-16384 973KB 1023KB [ 1924.266839] kmalloc-8192 4661KB 4702KB [ 1924.272290] kmalloc-4096 19231KB 19290KB [ 1924.277647] kmalloc-2048 11664KB 14337KB [ 1924.283057] kmalloc-1024 7863KB 13434KB [ 1924.288409] kmalloc-512 8435KB 12671KB [ 1924.297759] kmalloc-256 4011KB 6033KB [ 1924.303214] kmalloc-128 1003KB 1582KB [ 1924.308588] kmalloc-96 3218KB 4368KB [ 1924.316299] kmalloc-64 2914KB 3812KB [ 1924.321926] kmalloc-32 1926KB 2512KB [ 1924.327382] kmalloc-192 1642KB 2828KB [ 1924.332826] kmem_cache 177KB 183KB [ 1924.338189] Out of memory (oom_kill_allocating_task): Kill process 9580 (syz-fuzzer) score 0 or sacrifice child [ 1924.350089] Killed process 23288 (syz-executor.4) total-vm:48512kB, anon-rss:440kB, file-rss:0kB, shmem-rss:0kB [ 1924.360908] oom_reaper: reaped process 23288 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1924.720419] in:imklog invoked oom-killer: gfp_mask=0x6280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1924.793485] in:imklog cpuset=/ mems_allowed=0-1 [ 1924.798365] CPU: 1 PID: 27270 Comm: in:imklog Not tainted 4.19.211-syzkaller #0 [ 1924.805897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1924.815244] Call Trace: [ 1924.817824] dump_stack+0x1fc/0x2ef [ 1924.821435] dump_header+0x15d/0xc3f [ 1924.825134] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1924.830237] ? ___ratelimit+0x319/0x590 [ 1924.834214] oom_kill_process.cold+0x10/0x692 [ 1924.838696] ? check_preemption_disabled+0x41/0x280 [ 1924.843800] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1924.849061] out_of_memory+0x1072/0x1390 [ 1924.853113] ? oom_killer_disable+0x270/0x270 [ 1924.857594] ? mutex_trylock+0x15f/0x1a0 [ 1924.861638] __alloc_pages_nodemask+0x23a2/0x2890 [ 1924.866991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1924.871820] ? __lock_acquire+0x6de/0x3ff0 [ 1924.876103] ? task_numa_fault+0x1520/0x3240 [ 1924.880497] alloc_pages_vma+0xf2/0x780 [ 1924.884452] do_anonymous_page+0x7c2/0x1be0 [ 1924.888757] ? __pte_alloc+0x340/0x340 [ 1924.892627] ? mark_held_locks+0xf0/0xf0 [ 1924.896703] __handle_mm_fault+0x227a/0x41c0 [ 1924.901117] ? vm_insert_page+0x9c0/0x9c0 [ 1924.905430] ? lock_downgrade+0x720/0x720 [ 1924.909573] ? check_preemption_disabled+0x41/0x280 [ 1924.914667] handle_mm_fault+0x436/0xb10 [ 1924.918721] __do_page_fault+0x68e/0xd60 [ 1924.922785] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1924.927807] ? spurious_fault+0x840/0x840 [ 1924.931943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1924.936782] ? page_fault+0x8/0x30 [ 1924.940331] page_fault+0x1e/0x30 [ 1924.943766] RIP: 0033:0x7f7badb7e525 [ 1924.947504] Code: Bad RIP value. [ 1924.950867] RSP: 002b:00007f7bac475320 EFLAGS: 00010202 [ 1924.956218] RAX: 0000000000000dd1 RBX: 00007f7b98000020 RCX: 0000000000000004 [ 1924.963477] RDX: 00007f7b98022fc0 RSI: 00007f7b98023230 RDI: 00007f7bade9fb00 [ 1924.970813] RBP: 0000000000000275 R08: 00007f7b98000000 R09: 0000000000023000 [ 1924.978063] R10: 00007f7b98023000 R11: 00007f7bac475301 R12: 0000000000000040 [ 1924.985313] R13: 00007f7b98022fc0 R14: 0000000000001000 R15: 0000000000000290 [ 1924.994843] Mem-Info: [ 1924.998420] active_anon:16790 inactive_anon:84008 isolated_anon:0 [ 1924.998420] active_file:31 inactive_file:34 isolated_file:0 [ 1924.998420] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1924.998420] slab_reclaimable:14693 slab_unreclaimable:125249 [ 1924.998420] mapped:18530 shmem:85047 pagetables:542 bounce:0 [ 1924.998420] free:25286 free_pcp:211 free_cma:0 [ 1925.048356] Node 0 active_anon:62840kB inactive_anon:26352kB active_file:72kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46004kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1925.077735] Node 1 active_anon:4320kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1925.105309] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.131965] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1925.137214] Node 0 DMA32 free:35788kB min:35996kB low:44992kB high:53988kB active_anon:58632kB inactive_anon:26352kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7456kB pagetables:1832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.168893] lowmem_reserve[]: 0 0 1 1 1 [ 1925.172956] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.206650] lowmem_reserve[]: 0 0 0 0 0 [ 1925.210716] Node 1 Normal free:53608kB min:53876kB low:67344kB high:80812kB active_anon:4320kB inactive_anon:309680kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:320kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1925.284165] lowmem_reserve[]: 0 0 0 0 0 [ 1925.288182] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10984kB [ 1925.337878] Node 0 DMA32: 1096*4kB (UME) 535*8kB (UME) 231*16kB (ME) 92*32kB (MEH) 40*64kB (UMEH) 8*128kB (M) 1*256kB (M) 1*512kB (U) 16*1024kB (UM) 0*2048kB 0*4096kB = 36040kB [ 1925.375594] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1925.415745] Node 1 Normal: 478*4kB (UME) 402*8kB (UME) 280*16kB (ME) 109*32kB (UME) 21*64kB (ME) 4*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53608kB [ 1925.467774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.508637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.545081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1925.603356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1925.614332] 85081 total pagecache pages [ 1925.618347] 0 pages in swap cache [ 1925.645428] Swap cache stats: add 0, delete 0, find 0/0 [ 1925.658162] Free swap = 0kB [ 1925.696336] Total swap = 0kB [ 1925.754860] 2097051 pages RAM [ 1925.758019] 0 pages HighMem/MovableOnly [ 1925.804050] 369649 pages reserved [ 1925.807536] 0 pages cma reserved [ 1925.869027] Unreclaimable slab info: [ 1925.872760] Name Used Total [ 1925.948506] pid_2 106KB 136KB [ 1925.984232] batadv_tl_cache 4KB 16KB [ 1925.998466] TIPC 10KB 22KB [ 1926.036598] SCTPv6 14KB 24KB [ 1926.076134] DCCPv6 17KB 30KB [ 1926.136616] DCCP 16KB 28KB [ 1926.161962] RXRPC 11KB 19KB [ 1926.167359] rxrpc_call_jar 78KB 110KB [ 1926.177534] bridge_fdb_cache 9KB 23KB [ 1926.197000] fib6_nodes 156KB 272KB [ 1926.207368] ip6_dst_cache 90KB 472KB [ 1926.216609] RAWv6 70KB 101KB [ 1926.243671] UDPv6 176KB 180KB [ 1926.270819] TCPv6 30KB 42KB [ 1926.276212] nf_conntrack 14KB 18KB [ 1926.296755] t10_alua_lu_gp_cache 0KB 3KB [ 1926.322317] sd_ext_cdb 0KB 7KB [ 1926.327703] scsi_sense_cache 1056KB 1060KB [ 1926.338407] virtio_scsi_cmd 16KB 16KB [ 1926.363409] sgpool-128 8KB 8KB [ 1926.368800] sgpool-64 4KB 12KB [ 1926.400101] sgpool-32 2KB 15KB [ 1926.405496] sgpool-16 1KB 7KB [ 1926.437458] sgpool-8 0KB 7KB [ 1926.467970] mqueue_inode_cache 10KB 30KB [ 1926.495579] bio_post_read_ctx 14KB 15KB [ 1926.527569] bio-2 14KB 15KB [ 1926.535839] jfs_mp 7KB 7KB [ 1926.561539] fuse_request 1KB 8KB [ 1926.566951] cifs_small_rq 15KB 16KB [ 1926.596668] cifs_request 67KB 67KB [ 1926.608266] cifs_mpx_ids 0KB 7KB [ 1926.644170] nfs_commit_data 3KB 14KB [ 1926.658241] nfs_write_data 34KB 44KB [ 1926.696156] ext4_system_zone 1KB 7KB [ 1926.716938] bio-1 1KB 7KB [ 1926.736156] pid_namespace 2KB 11KB [ 1926.741652] rpc_buffers 17KB 25KB [ 1926.747061] rpc_tasks 2KB 7KB [ 1926.757045] UNIX 300KB 371KB [ 1926.768229] tcp_bind_bucket 1KB 4KB [ 1926.775186] ip_fib_trie 23KB 47KB [ 1926.784868] ip_fib_alias 112KB 189KB [ 1926.807826] ip_dst_cache 4KB 24KB [ 1926.832125] RAW 42KB 67KB [ 1926.837520] UDP 38KB 67KB [ 1926.842956] TCP 25KB 28KB [ 1926.848325] hugetlbfs_inode_cache 3KB 15KB [ 1926.877466] fscache_cookie_jar 1KB 7KB [ 1926.906707] eventpoll_pwq 14KB 55KB [ 1926.942720] eventpoll_epi 27KB 66KB [ 1926.948119] inotify_inode_mark 26KB 35KB [ 1926.975685] request_queue 199KB 199KB [ 1926.986287] blkdev_requests 1KB 3KB [ 1927.013288] blkdev_ioc 17KB 38KB [ 1927.018672] bio-0 437KB 450KB [ 1927.048157] biovec-max 1353KB 1402KB [ 1927.078995] biovec-64 450KB 456KB [ 1927.084425] biovec-16 97KB 112KB [ 1927.105921] bio_integrity_payload 1KB 8KB [ 1927.154879] khugepaged_mm_slot 19KB 27KB [ 1927.167768] uid_cache 0KB 4KB [ 1927.181105] dmaengine-unmap-2 0KB 3KB [ 1927.186501] audit_buffer 0KB 3KB [ 1927.223563] skbuff_fclone_cache 486KB 498KB [ 1927.252041] skbuff_head_cache 3852KB 5572KB [ 1927.257435] configfs_dir_cache 3KB 7KB [ 1927.267817] file_lock_cache 133KB 170KB [ 1927.275780] file_lock_ctx 9KB 15KB [ 1927.286219] fsnotify_mark_connector 14KB 23KB [ 1927.298170] net_namespace 52KB 52KB [ 1927.305725] shmem_inode_cache 8370KB 8458KB [ 1927.314450] task_delay_info 231KB 359KB [ 1927.343339] taskstats 141KB 172KB [ 1927.348729] proc_dir_entry 695KB 843KB [ 1927.405794] pde_opener 8KB 46KB [ 1927.439480] seq_file 239KB 370KB [ 1927.444876] sigqueue 32KB 70KB [ 1927.459107] kernfs_node_cache 18265KB 18892KB [ 1927.464496] mnt_cache 193KB 240KB [ 1927.475296] filp 5816KB 8343KB [ 1927.484619] names_cache 151036KB 151074KB [ 1927.494941] iint_cache 35KB 51KB [ 1927.505021] key_jar 4KB 11KB [ 1927.515914] uts_namespace 2KB 11KB [ 1927.525329] nsproxy 2KB 7KB [ 1927.535636] vm_area_struct 3677KB 3940KB [ 1927.544983] mm_struct 713KB 806KB [ 1927.555909] fs_cache 141KB 292KB [ 1927.580016] files_cache 513KB 802KB [ 1927.585413] signal_cache 1111KB 1897KB [ 1927.626308] sighand_cache 559KB 617KB [ 1927.658039] task_struct 7701KB 7789KB [ 1927.667344] cred_jar 1199KB 2748KB [ 1927.704690] anon_vma_chain 1164KB 1484KB [ 1927.738363] anon_vma 120KB 292KB [ 1927.777615] pid 51KB 232KB [ 1927.798264] Acpi-Operand 156KB 198KB [ 1927.862836] Acpi-ParseExt 8KB 11KB [ 1927.868235] Acpi-Parse 41KB 47KB [ 1927.894307] Acpi-State 52KB 63KB [ 1927.931203] Acpi-Namespace 20KB 27KB [ 1927.936605] numa_policy 0KB 3KB [ 1927.974539] debug_objects_cache 1781KB 1883KB [ 1928.011926] trace_event_file 297KB 298KB [ 1928.017319] ftrace_event_field 398KB 401KB [ 1928.048674] pool_workqueue 121KB 148KB [ 1928.054476] page->ptl 779KB 956KB [ 1928.082262] kmalloc-2097152 2050KB 2050KB [ 1928.087660] kmalloc-524288 2056KB 2056KB [ 1928.096947] kmalloc-262144 1290KB 1290KB [ 1928.119010] Bluetooth: hci3: command 0x0406 tx timeout [ 1928.136947] kmalloc-131072 650KB 650KB [ 1928.182365] kmalloc-65536 1848KB 1914KB [ 1928.187758] kmalloc-32768 1650KB 1716KB [ 1928.271062] kmalloc-16384 973KB 1023KB [ 1928.276468] kmalloc-8192 4661KB 4702KB [ 1928.373442] kmalloc-4096 19197KB 19239KB [ 1928.417516] kmalloc-2048 11664KB 14337KB [ 1928.442533] kmalloc-1024 8066KB 13434KB [ 1928.447927] kmalloc-512 9060KB 12671KB [ 1928.471863] kmalloc-256 4028KB 6033KB [ 1928.477257] kmalloc-128 1003KB 1582KB [ 1928.500274] kmalloc-96 3270KB 4368KB [ 1928.505663] kmalloc-64 2914KB 3812KB [ 1928.518414] kmalloc-32 1926KB 2512KB [ 1928.545105] kmalloc-192 1642KB 2828KB [ 1928.558344] kmem_cache 177KB 183KB [ 1928.582044] Out of memory (oom_kill_allocating_task): Kill process 27270 (in:imklog) score 0 or sacrifice child [ 1928.593105] Killed process 27268 (rsyslogd) total-vm:254332kB, anon-rss:2800kB, file-rss:0kB, shmem-rss:0kB [ 1928.636888] oom_reaper: reaped process 27268 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1929.586627] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1929.685351] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1929.703738] CPU: 1 PID: 8084 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1929.711302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1929.720649] Call Trace: [ 1929.723253] dump_stack+0x1fc/0x2ef [ 1929.726879] dump_header+0x15d/0xc3f [ 1929.730593] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1929.735691] ? ___ratelimit+0x319/0x590 [ 1929.739665] oom_kill_process.cold+0x10/0x692 [ 1929.744157] ? check_preemption_disabled+0x41/0x280 [ 1929.749174] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1929.754525] out_of_memory+0x1072/0x1390 [ 1929.758571] ? oom_killer_disable+0x270/0x270 [ 1929.763158] ? mutex_trylock+0x15f/0x1a0 [ 1929.767212] __alloc_pages_nodemask+0x23a2/0x2890 [ 1929.772047] ? find_get_entry+0x4cd/0x8a0 [ 1929.776204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1929.781081] alloc_pages_current+0x193/0x2a0 [ 1929.785481] filemap_fault+0x146e/0x2180 [ 1929.789535] ext4_filemap_fault+0x84/0xb0 [ 1929.793668] __do_fault+0x10b/0x4b0 [ 1929.797276] __handle_mm_fault+0x273b/0x41c0 [ 1929.802458] ? vm_insert_page+0x9c0/0x9c0 [ 1929.806595] ? check_preemption_disabled+0x41/0x280 [ 1929.811608] handle_mm_fault+0x436/0xb10 [ 1929.815652] __do_page_fault+0x68e/0xd60 [ 1929.819698] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1929.824693] ? spurious_fault+0x840/0x840 [ 1929.828819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1929.833644] ? page_fault+0x8/0x30 [ 1929.837163] page_fault+0x1e/0x30 [ 1929.840603] RIP: 0033:0x40b400 [ 1929.843778] Code: Bad RIP value. [ 1929.847118] RSP: 002b:00007ffea43f3cf8 EFLAGS: 00010246 [ 1929.852456] RAX: 0000000001f4d098 RBX: 000000c0008d1520 RCX: 000000c0008d1520 [ 1929.859709] RDX: 000000c0008d1500 RSI: 0000000000000001 RDI: 000000c0008d1520 [ 1929.866970] RBP: 00007ffea43f3d20 R08: 0000000000000001 R09: 0000000000000000 [ 1929.874226] R10: 0000000001000004 R11: 0000000000000202 R12: 000000000043f080 [ 1929.881477] R13: 0000000000000000 R14: 0000000001f4b640 R15: 000000000000009b [ 1929.894341] Mem-Info: [ 1929.896797] active_anon:16040 inactive_anon:84008 isolated_anon:0 [ 1929.896797] active_file:3 inactive_file:15 isolated_file:24 [ 1929.896797] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1929.896797] slab_reclaimable:14693 slab_unreclaimable:124572 [ 1929.896797] mapped:18547 shmem:85047 pagetables:492 bounce:0 [ 1929.896797] free:25031 free_pcp:0 free_cma:0 [ 1929.929972] Node 0 active_anon:59844kB inactive_anon:26352kB active_file:12kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:46072kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1929.957759] Node 1 active_anon:4316kB inactive_anon:309680kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1929.986513] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.016246] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1930.021372] Node 0 DMA32 free:35500kB min:35996kB low:44992kB high:53988kB active_anon:57784kB inactive_anon:26352kB active_file:48kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.050695] lowmem_reserve[]: 0 0 1 1 1 [ 1930.054687] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.083161] lowmem_reserve[]: 0 0 0 0 0 [ 1930.087163] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:4316kB inactive_anon:309680kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1930.115776] lowmem_reserve[]: 0 0 0 0 0 [ 1930.119806] Node 0 DMA: 4*4kB (UM) 3*8kB (M) 4*16kB (UM) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 1*512kB (U) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 10984kB [ 1930.168771] Node 0 DMA32: 1289*4kB (ME) 535*8kB (UME) 233*16kB (UME) 92*32kB (MEH) 40*64kB (UMEH) 8*128kB (M) 2*256kB (UM) 0*512kB 15*1024kB (UM) 0*2048kB 0*4096kB = 35564kB [ 1930.226978] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1930.305056] Node 1 Normal: 477*4kB (UME) 403*8kB (UME) 280*16kB (ME) 110*32kB (UME) 21*64kB (ME) 4*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53644kB [ 1930.405372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1930.462328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1930.508338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1930.537761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1930.549564] 85181 total pagecache pages [ 1930.555237] 0 pages in swap cache [ 1930.561119] Swap cache stats: add 0, delete 0, find 0/0 [ 1930.566736] Free swap = 0kB [ 1930.569806] Total swap = 0kB [ 1930.572822] 2097051 pages RAM [ 1930.576054] 0 pages HighMem/MovableOnly [ 1930.580792] 369649 pages reserved [ 1930.607837] 0 pages cma reserved [ 1930.616543] Unreclaimable slab info: [ 1930.644727] Name Used Total [ 1930.652840] pid_2 102KB 136KB [ 1930.703761] batadv_tl_cache 4KB 16KB [ 1930.754285] TIPC 10KB 22KB [ 1930.791158] SCTPv6 14KB 24KB [ 1930.796561] DCCPv6 17KB 30KB [ 1930.832661] DCCP 16KB 28KB [ 1930.838083] RXRPC 11KB 19KB [ 1930.844356] rxrpc_call_jar 78KB 110KB [ 1930.853898] bridge_fdb_cache 9KB 23KB [ 1930.860175] fib6_nodes 156KB 272KB [ 1930.865535] ip6_dst_cache 90KB 472KB [ 1930.875961] RAWv6 70KB 101KB [ 1930.882285] UDPv6 176KB 180KB [ 1930.887662] TCPv6 27KB 42KB [ 1930.897763] nf_conntrack 14KB 18KB [ 1930.904137] t10_alua_lu_gp_cache 0KB 3KB [ 1930.913940] sd_ext_cdb 0KB 7KB [ 1930.928977] scsi_sense_cache 1056KB 1060KB [ 1930.934358] virtio_scsi_cmd 16KB 16KB [ 1931.024375] sgpool-128 8KB 8KB [ 1931.056946] sgpool-64 4KB 12KB [ 1931.086785] sgpool-32 2KB 15KB [ 1931.109336] sgpool-16 1KB 7KB [ 1931.134850] sgpool-8 0KB 7KB [ 1931.178455] mqueue_inode_cache 10KB 30KB [ 1931.257691] bio_post_read_ctx 14KB 15KB [ 1931.282346] bio-2 14KB 15KB [ 1931.287748] jfs_mp 7KB 7KB [ 1931.352288] fuse_request 1KB 8KB [ 1931.357705] cifs_small_rq 15KB 16KB [ 1931.399185] cifs_request 67KB 67KB [ 1931.404561] cifs_mpx_ids 0KB 7KB [ 1931.460694] nfs_commit_data 3KB 14KB [ 1931.466089] nfs_write_data 34KB 44KB [ 1931.550493] ext4_system_zone 1KB 7KB [ 1931.555917] bio-1 1KB 7KB [ 1931.635488] pid_namespace 2KB 11KB [ 1931.674550] rpc_buffers 17KB 25KB [ 1931.715307] rpc_tasks 2KB 7KB [ 1931.754129] UNIX 300KB 371KB [ 1931.795856] tcp_bind_bucket 1KB 4KB [ 1931.835991] ip_fib_trie 23KB 47KB [ 1931.882998] ip_fib_alias 112KB 189KB [ 1931.888398] ip_dst_cache 4KB 24KB [ 1931.976491] RAW 42KB 67KB [ 1932.015499] UDP 38KB 67KB [ 1932.074511] TCP 25KB 28KB [ 1932.112710] hugetlbfs_inode_cache 3KB 15KB [ 1932.118489] fscache_cookie_jar 1KB 7KB [ 1932.139146] eventpoll_pwq 14KB 55KB [ 1932.144541] eventpoll_epi 26KB 66KB [ 1932.154521] inotify_inode_mark 25KB 35KB [ 1932.160881] request_queue 199KB 199KB [ 1932.166238] blkdev_requests 1KB 3KB [ 1932.171843] blkdev_ioc 17KB 38KB [ 1932.177249] bio-0 556KB 566KB [ 1932.183082] biovec-max 1402KB 1402KB [ 1932.188477] biovec-64 598KB 598KB [ 1932.193936] biovec-16 113KB 127KB [ 1932.199380] bio_integrity_payload 1KB 8KB [ 1932.205083] khugepaged_mm_slot 19KB 27KB [ 1932.210682] uid_cache 0KB 4KB [ 1932.216233] dmaengine-unmap-2 0KB 3KB [ 1932.221759] audit_buffer 0KB 3KB [ 1932.228289] skbuff_fclone_cache 485KB 498KB [ 1932.233943] skbuff_head_cache 4299KB 5572KB [ 1932.239666] configfs_dir_cache 3KB 7KB [ 1932.245142] file_lock_cache 129KB 170KB [ 1932.252098] file_lock_ctx 9KB 15KB [ 1932.257463] fsnotify_mark_connector 14KB 23KB [ 1932.263428] net_namespace 52KB 52KB [ 1932.270920] shmem_inode_cache 8359KB 8454KB [ 1932.276301] task_delay_info 227KB 359KB [ 1932.282512] taskstats 139KB 172KB [ 1932.287893] proc_dir_entry 695KB 843KB [ 1932.293387] pde_opener 8KB 46KB [ 1932.298814] seq_file 236KB 370KB [ 1932.304178] sigqueue 31KB 70KB [ 1932.309599] kernfs_node_cache 18084KB 18825KB [ 1932.314954] mnt_cache 191KB 236KB [ 1932.320391] filp 5788KB 8340KB [ 1932.325758] names_cache 148703KB 148724KB [ 1932.331187] iint_cache 39KB 51KB [ 1932.336535] key_jar 4KB 11KB [ 1932.342006] uts_namespace 2KB 11KB [ 1932.347373] nsproxy 2KB 7KB [ 1932.353012] vm_area_struct 3644KB 3940KB [ 1932.358366] mm_struct 711KB 806KB [ 1932.364141] fs_cache 139KB 288KB [ 1932.371975] files_cache 503KB 791KB [ 1932.377370] signal_cache 1104KB 1897KB [ 1932.386438] sighand_cache 548KB 617KB [ 1932.392581] task_struct 7625KB 7713KB [ 1932.397932] cred_jar 1199KB 2748KB [ 1932.407395] anon_vma_chain 1153KB 1484KB [ 1932.413663] anon_vma 118KB 292KB [ 1932.423172] pid 51KB 232KB [ 1932.430625] Acpi-Operand 156KB 198KB [ 1932.435996] Acpi-ParseExt 8KB 11KB [ 1932.442315] Acpi-Parse 41KB 47KB [ 1932.447681] Acpi-State 52KB 63KB [ 1932.453161] Acpi-Namespace 20KB 27KB [ 1932.458507] numa_policy 0KB 3KB [ 1932.465831] debug_objects_cache 1781KB 1883KB [ 1932.471433] trace_event_file 297KB 298KB [ 1932.476787] ftrace_event_field 398KB 401KB [ 1932.484808] pool_workqueue 121KB 148KB [ 1932.492409] page->ptl 771KB 956KB [ 1932.497813] kmalloc-2097152 2050KB 2050KB [ 1932.518164] kmalloc-524288 2056KB 2056KB [ 1932.546401] kmalloc-262144 1290KB 1290KB [ 1932.558235] kmalloc-131072 650KB 650KB [ 1932.598055] kmalloc-65536 1848KB 1914KB [ 1932.626839] kmalloc-32768 1650KB 1716KB [ 1932.636006] kmalloc-16384 973KB 1023KB [ 1932.644829] kmalloc-8192 4661KB 4702KB [ 1932.665111] kmalloc-4096 19171KB 19171KB [ 1932.705428] kmalloc-2048 11664KB 14337KB [ 1932.713507] kmalloc-1024 8295KB 13434KB [ 1932.732024] kmalloc-512 9667KB 12671KB [ 1932.737416] kmalloc-256 4053KB 6033KB [ 1932.787671] kmalloc-128 1002KB 1582KB [ 1932.805234] kmalloc-96 3315KB 4368KB [ 1932.815553] kmalloc-64 2902KB 3812KB [ 1932.822469] kmalloc-32 1926KB 2512KB [ 1932.827843] kmalloc-192 1657KB 2828KB [ 1932.874613] kmem_cache 177KB 183KB [ 1932.888048] Out of memory (oom_kill_allocating_task): Kill process 8084 (syz-fuzzer) score 0 or sacrifice child [ 1932.925031] Killed process 23322 (syz-executor.5) total-vm:48512kB, anon-rss:440kB, file-rss:4kB, shmem-rss:0kB [ 1932.966072] systemd-cgroups invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1933.001679] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1933.006917] CPU: 1 PID: 27419 Comm: systemd-cgroups Not tainted 4.19.211-syzkaller #0 [ 1933.014894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1933.024248] Call Trace: [ 1933.026844] dump_stack+0x1fc/0x2ef [ 1933.030479] dump_header+0x15d/0xc3f [ 1933.034292] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1933.039401] ? ___ratelimit+0x319/0x590 [ 1933.043388] oom_kill_process.cold+0x10/0x692 [ 1933.047878] ? check_preemption_disabled+0x41/0x280 [ 1933.052883] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1933.058263] out_of_memory+0x1072/0x1390 [ 1933.062320] ? oom_killer_disable+0x270/0x270 [ 1933.066815] ? mutex_trylock+0x15f/0x1a0 [ 1933.070869] __alloc_pages_nodemask+0x23a2/0x2890 [ 1933.075707] ? find_get_entry+0x4cd/0x8a0 [ 1933.079854] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1933.084704] alloc_pages_current+0x193/0x2a0 [ 1933.089106] filemap_fault+0x146e/0x2180 [ 1933.093157] ext4_filemap_fault+0x84/0xb0 [ 1933.097287] __do_fault+0x10b/0x4b0 [ 1933.100899] __handle_mm_fault+0x273b/0x41c0 [ 1933.105291] ? do_mmap+0x59c/0x1080 [ 1933.108902] ? vm_insert_page+0x9c0/0x9c0 [ 1933.113061] ? check_preemption_disabled+0x41/0x280 [ 1933.118062] handle_mm_fault+0x436/0xb10 [ 1933.122106] __do_page_fault+0x68e/0xd60 [ 1933.126156] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1933.131181] ? spurious_fault+0x840/0x840 [ 1933.135310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1933.140138] ? page_fault+0x8/0x30 [ 1933.143666] page_fault+0x1e/0x30 [ 1933.147104] RIP: 0033:0x7f95f9346ec0 [ 1933.150803] Code: Bad RIP value. [ 1933.154150] RSP: 002b:00007fffe7775938 EFLAGS: 00010246 [ 1933.159491] RAX: 00007f95f954d2b8 RBX: 0000000000000018 RCX: 00007f95f9551428 [ 1933.166742] RDX: 000000000000002f RSI: 0000000000000001 RDI: 00007f95f9551de0 [ 1933.173991] RBP: 0000000000000000 R08: ffffffffffffffff R09: 0000000000000000 [ 1933.181241] R10: 00007f95f954d470 R11: 0000000000000246 R12: 0000000000000001 [ 1933.188489] R13: 00007f95f9551170 R14: 00007f95f954d000 R15: 0000000000000000 [ 1933.208688] Mem-Info: [ 1933.211155] active_anon:15923 inactive_anon:84008 isolated_anon:0 [ 1933.211155] active_file:25 inactive_file:354 isolated_file:0 [ 1933.211155] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1933.211155] slab_reclaimable:14668 slab_unreclaimable:123793 [ 1933.211155] mapped:15121 shmem:85047 pagetables:456 bounce:0 [ 1933.211155] free:25457 free_pcp:427 free_cma:0 [ 1933.219988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1933.252789] Node 0 active_anon:59376kB inactive_anon:26352kB active_file:464kB inactive_file:560kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32468kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1933.307097] Node 1 active_anon:4308kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1933.343171] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.371964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1933.384900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1933.391757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1933.400349] device bridge_slave_1 left promiscuous mode [ 1933.405847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1933.412538] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1933.417571] Node 0 DMA32 free:36608kB min:35996kB low:44992kB high:53988kB active_anon:57288kB inactive_anon:26352kB active_file:688kB inactive_file:1308kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1612kB bounce:0kB free_pcp:500kB local_pcp:60kB free_cma:0kB [ 1933.456676] lowmem_reserve[]: 0 0 1 1 1 [ 1933.456866] device bridge_slave_0 left promiscuous mode [ 1933.460768] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.472812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.492256] lowmem_reserve[]: 0 0 0 0 0 [ 1933.509000] Node 1 Normal free:53644kB min:53876kB low:67344kB high:80812kB active_anon:4308kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1933.542549] lowmem_reserve[]: 0 0 0 0 0 [ 1933.546588] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 3*16kB (M) 4*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 1*512kB (U) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 10984kB [ 1933.561914] device veth1_macvtap left promiscuous mode [ 1933.561944] device veth0_macvtap left promiscuous mode [ 1933.561996] device veth1_vlan left promiscuous mode [ 1933.562036] device veth0_vlan left promiscuous mode [ 1933.638788] Node 0 DMA32: 882*4kB (UME) 744*8kB (UME) 251*16kB (UME) 101*32kB (UME) 42*64kB (UME) 9*128kB (UM) 1*256kB (M) 0*512kB 15*1024kB (UM) 0*2048kB 0*4096kB = 36184kB [ 1933.698636] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1933.743796] Node 1 Normal: 480*4kB (UME) 399*8kB (UME) 280*16kB (ME) 108*32kB (UME) 21*64kB (ME) 5*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53688kB [ 1933.869240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1933.878111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1933.941382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1933.951706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1933.960316] 85051 total pagecache pages [ 1933.964290] 0 pages in swap cache [ 1933.967738] Swap cache stats: add 0, delete 0, find 0/0 [ 1933.976727] Free swap = 0kB [ 1933.979788] Total swap = 0kB [ 1933.982803] 2097051 pages RAM [ 1933.985917] 0 pages HighMem/MovableOnly [ 1933.993460] 369649 pages reserved [ 1933.996924] 0 pages cma reserved [ 1934.000345] Unreclaimable slab info: [ 1934.004050] Name Used Total [ 1934.013170] pid_2 102KB 136KB [ 1934.018686] batadv_tt_change_cache 1KB 3KB [ 1934.024512] batadv_tl_cache 4KB 16KB [ 1934.033567] TIPC 10KB 22KB [ 1934.039297] SCTPv6 14KB 24KB [ 1934.044772] DCCPv6 17KB 30KB [ 1934.162159] DCCP 16KB 28KB [ 1934.167593] RXRPC 11KB 19KB [ 1934.226818] rxrpc_call_jar 78KB 110KB [ 1934.254557] bridge_fdb_cache 9KB 23KB [ 1934.281818] fib6_nodes 156KB 272KB [ 1934.287221] ip6_dst_cache 90KB 472KB [ 1934.307889] RAWv6 70KB 101KB [ 1934.313329] UDPv6 176KB 180KB [ 1934.344637] TCPv6 27KB 42KB [ 1934.384213] nf_conntrack 18KB 18KB [ 1934.422185] t10_alua_lu_gp_cache 0KB 3KB [ 1934.427841] sd_ext_cdb 0KB 7KB [ 1934.497573] scsi_sense_cache 1056KB 1060KB [ 1934.537501] virtio_scsi_cmd 16KB 16KB [ 1934.565660] sgpool-128 8KB 8KB [ 1934.604195] sgpool-64 4KB 12KB [ 1934.627588] sgpool-32 2KB 15KB [ 1934.661129] sgpool-16 1KB 7KB [ 1934.666523] sgpool-8 0KB 7KB [ 1934.714176] mqueue_inode_cache 10KB 30KB [ 1934.752685] bio_post_read_ctx 14KB 15KB [ 1934.758143] bio-2 14KB 15KB [ 1934.822122] jfs_mp 7KB 7KB [ 1934.827545] fuse_request 1KB 8KB [ 1934.887668] cifs_small_rq 15KB 16KB [ 1934.920847] cifs_request 67KB 67KB [ 1934.926251] cifs_mpx_ids 0KB 7KB [ 1934.985332] nfs_commit_data 3KB 14KB [ 1935.028578] nfs_write_data 34KB 44KB [ 1935.034003] ext4_system_zone 1KB 7KB [ 1935.081672] bio-1 1KB 7KB [ 1935.087075] pid_namespace 2KB 11KB [ 1935.148613] rpc_buffers 17KB 25KB [ 1935.154097] rpc_tasks 2KB 7KB [ 1935.204685] UNIX 300KB 371KB [ 1935.232912] tcp_bind_bucket 1KB 4KB [ 1935.238307] ip_fib_trie 23KB 47KB [ 1935.291334] ip_fib_alias 112KB 189KB [ 1935.325156] ip_dst_cache 4KB 24KB [ 1935.353298] RAW 42KB 67KB [ 1935.394348] UDP 38KB 67KB [ 1935.408235] TCP 25KB 28KB [ 1935.413698] hugetlbfs_inode_cache 3KB 15KB [ 1935.462123] fscache_cookie_jar 1KB 7KB [ 1935.467615] eventpoll_pwq 14KB 55KB [ 1935.528244] eventpoll_epi 26KB 66KB [ 1935.556973] inotify_inode_mark 25KB 35KB [ 1935.592758] request_queue 199KB 199KB [ 1935.598157] blkdev_requests 1KB 3KB [ 1935.657582] blkdev_ioc 17KB 38KB [ 1935.693952] bio-0 665KB 675KB [ 1935.707483] biovec-max 1402KB 1402KB [ 1935.738535] biovec-64 771KB 771KB [ 1935.743916] biovec-16 120KB 135KB [ 1935.764399] bio_integrity_payload 1KB 8KB [ 1935.797987] khugepaged_mm_slot 19KB 27KB [ 1935.832658] uid_cache 0KB 4KB [ 1935.838050] dmaengine-unmap-2 0KB 3KB [ 1935.900761] audit_buffer 0KB 3KB [ 1935.907064] skbuff_fclone_cache 485KB 498KB [ 1935.948555] skbuff_head_cache 4569KB 5572KB [ 1935.953943] configfs_dir_cache 3KB 7KB [ 1936.006525] file_lock_cache 129KB 170KB [ 1936.047313] file_lock_ctx 9KB 15KB [ 1936.085046] fsnotify_mark_connector 14KB 23KB [ 1936.115116] net_namespace 52KB 52KB [ 1936.164239] shmem_inode_cache 8359KB 8454KB [ 1936.194992] task_delay_info 227KB 359KB [ 1936.242039] taskstats 139KB 172KB [ 1936.247435] proc_dir_entry 695KB 843KB [ 1936.294534] pde_opener 8KB 46KB [ 1936.318337] seq_file 236KB 370KB [ 1936.346530] sigqueue 31KB 70KB [ 1936.362927] kernfs_node_cache 18044KB 18793KB [ 1936.368318] mnt_cache 191KB 236KB [ 1936.442373] filp 5755KB 8328KB [ 1936.450537] names_cache 147377KB 147381KB [ 1936.455912] iint_cache 39KB 51KB [ 1936.509449] key_jar 4KB 11KB [ 1936.514855] uts_namespace 2KB 11KB [ 1936.553014] nsproxy 2KB 7KB [ 1936.583388] vm_area_struct 3603KB 3940KB [ 1936.618004] mm_struct 711KB 806KB [ 1936.647515] fs_cache 139KB 288KB [ 1936.676371] files_cache 503KB 791KB [ 1936.711258] signal_cache 1104KB 1897KB [ 1936.716658] sighand_cache 575KB 617KB [ 1936.782692] task_struct 7625KB 7713KB [ 1936.788071] cred_jar 1199KB 2748KB [ 1936.884705] anon_vma_chain 1140KB 1480KB [ 1936.913667] anon_vma 118KB 292KB [ 1936.953077] pid 58KB 232KB [ 1936.983317] Acpi-Operand 156KB 198KB [ 1937.015730] Acpi-ParseExt 8KB 11KB [ 1937.046532] Acpi-Parse 41KB 47KB [ 1937.072976] Acpi-State 52KB 63KB [ 1937.078374] Acpi-Namespace 20KB 27KB [ 1937.150276] numa_policy 0KB 3KB [ 1937.156041] debug_objects_cache 1781KB 1883KB [ 1937.220724] trace_event_file 297KB 298KB [ 1937.226133] ftrace_event_field 398KB 401KB [ 1937.298677] pool_workqueue 121KB 148KB [ 1937.304182] page->ptl 771KB 956KB [ 1937.367688] kmalloc-2097152 2050KB 2050KB [ 1937.398124] kmalloc-524288 2056KB 2056KB [ 1937.425167] kmalloc-262144 1290KB 1290KB [ 1937.459674] kmalloc-131072 650KB 650KB [ 1937.465069] kmalloc-65536 1848KB 1914KB [ 1937.515293] kmalloc-32768 1650KB 1716KB [ 1937.539713] kmalloc-16384 973KB 1023KB [ 1937.545100] kmalloc-8192 4661KB 4702KB [ 1937.612454] kmalloc-4096 19197KB 19197KB [ 1937.617871] kmalloc-2048 11664KB 14337KB [ 1937.683310] kmalloc-1024 8484KB 13434KB [ 1937.725785] kmalloc-512 10291KB 12671KB [ 1937.767648] kmalloc-256 4078KB 6033KB [ 1937.798449] kmalloc-128 1002KB 1582KB [ 1937.830434] kmalloc-96 3368KB 4368KB [ 1937.849712] kmalloc-64 2902KB 3812KB [ 1937.856699] kmalloc-32 1930KB 2512KB [ 1937.903517] kmalloc-192 1657KB 2828KB [ 1937.934317] kmem_cache 177KB 183KB [ 1937.956121] Out of memory (oom_kill_allocating_task): Kill process 27419 (systemd-cgroups) score 0 or sacrifice child [ 1938.023564] Killed process 27419 (systemd-cgroups) total-vm:324kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1938.068220] oom_reaper: reaped process 27419 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1938.069060] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1938.121394] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1938.127572] CPU: 1 PID: 9580 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1938.135031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1938.144732] Call Trace: [ 1938.147315] dump_stack+0x1fc/0x2ef [ 1938.150944] dump_header+0x15d/0xc3f [ 1938.154650] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1938.159739] ? ___ratelimit+0x319/0x590 [ 1938.163705] oom_kill_process.cold+0x10/0x692 [ 1938.168193] ? check_preemption_disabled+0x41/0x280 [ 1938.173199] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1938.178468] out_of_memory+0x1072/0x1390 [ 1938.182528] ? oom_killer_disable+0x270/0x270 [ 1938.187021] ? mutex_trylock+0x15f/0x1a0 [ 1938.191073] __alloc_pages_nodemask+0x23a2/0x2890 [ 1938.195909] ? find_get_entry+0x4cd/0x8a0 [ 1938.200053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1938.204904] alloc_pages_current+0x193/0x2a0 [ 1938.209299] filemap_fault+0x146e/0x2180 [ 1938.213360] ext4_filemap_fault+0x84/0xb0 [ 1938.217500] __do_fault+0x10b/0x4b0 [ 1938.221117] __handle_mm_fault+0x273b/0x41c0 [ 1938.225540] ? vm_insert_page+0x9c0/0x9c0 [ 1938.229696] ? check_preemption_disabled+0x41/0x280 [ 1938.234725] handle_mm_fault+0x436/0xb10 [ 1938.238789] __do_page_fault+0x68e/0xd60 [ 1938.242855] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1938.247869] ? spurious_fault+0x840/0x840 [ 1938.252007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1938.256844] ? page_fault+0x8/0x30 [ 1938.260373] page_fault+0x1e/0x30 [ 1938.263822] RIP: 0033:0x40b220 [ 1938.267005] Code: Bad RIP value. [ 1938.270355] RSP: 002b:000000c0000a9ea8 EFLAGS: 00010216 [ 1938.275716] RAX: 000000c000042ed8 RBX: 000001c2d0d7a980 RCX: 000000c000042ed8 [ 1938.282985] RDX: 000000000e400980 RSI: 000001c13559d9d4 RDI: 000000c0000a9e5c [ 1938.290247] RBP: 000000c0000a9ee8 R08: 00007ffea43fa000 R09: 000001f0c234d33f [ 1938.297507] R10: 00072004c0087522 R11: 0000000000000001 R12: 000000c0000a9e90 [ 1938.304762] R13: 0000000000000000 R14: 000000c0008d1860 R15: 0000000000000000 [ 1938.332958] Mem-Info: [ 1938.339841] active_anon:15914 inactive_anon:84008 isolated_anon:0 [ 1938.339841] active_file:47 inactive_file:28 isolated_file:29 [ 1938.339841] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1938.339841] slab_reclaimable:14615 slab_unreclaimable:122902 [ 1938.339841] mapped:14962 shmem:85047 pagetables:470 bounce:0 [ 1938.339841] free:25392 free_pcp:207 free_cma:0 [ 1938.375302] Node 0 active_anon:59384kB inactive_anon:26352kB active_file:184kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:31732kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1938.404047] Node 1 active_anon:4272kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1938.432219] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.460305] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1938.465939] Node 0 DMA32 free:36228kB min:35996kB low:44992kB high:53988kB active_anon:57332kB inactive_anon:26352kB active_file:0kB inactive_file:572kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7360kB pagetables:1628kB bounce:0kB free_pcp:1024kB local_pcp:196kB free_cma:0kB [ 1938.497400] lowmem_reserve[]: 0 0 1 1 1 [ 1938.501769] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.528203] lowmem_reserve[]: 0 0 0 0 0 [ 1938.533845] Node 1 Normal free:53688kB min:53876kB low:67344kB high:80812kB active_anon:4272kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1938.575721] lowmem_reserve[]: 0 0 0 0 0 [ 1938.580407] Node 0 DMA: 3*4kB (M) 2*8kB (UM) 3*16kB (UM) 2*32kB (U) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 11020kB [ 1938.595865] Node 0 DMA32: 889*4kB (ME) 628*8kB (UME) 273*16kB (UME) 101*32kB (UME) 42*64kB (UME) 9*128kB (UM) 1*256kB (M) 0*512kB 15*1024kB (UM) 0*2048kB 0*4096kB = 35636kB [ 1938.611629] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1938.622896] Node 1 Normal: 481*4kB (UME) 399*8kB (UME) 280*16kB (ME) 108*32kB (UME) 21*64kB (ME) 5*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53692kB [ 1938.642296] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1938.653841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1938.662923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1938.672428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1938.683200] 85119 total pagecache pages [ 1938.687186] 0 pages in swap cache [ 1938.723722] Swap cache stats: add 0, delete 0, find 0/0 [ 1938.748381] Free swap = 0kB [ 1938.751412] Total swap = 0kB [ 1938.754425] 2097051 pages RAM [ 1938.757521] 0 pages HighMem/MovableOnly [ 1938.788407] 369649 pages reserved [ 1938.791882] 0 pages cma reserved [ 1938.795252] Unreclaimable slab info: [ 1938.858146] Name Used Total [ 1938.891923] pid_2 98KB 136KB [ 1938.897385] batadv_tt_change_cache 1KB 3KB [ 1938.963459] batadv_tl_cache 4KB 16KB [ 1938.993831] TIPC 10KB 22KB [ 1939.032618] SCTPv6 14KB 24KB [ 1939.038020] DCCPv6 17KB 30KB [ 1939.079434] DCCP 16KB 28KB [ 1939.084968] RXRPC 11KB 19KB [ 1939.147897] rxrpc_call_jar 78KB 110KB [ 1939.195574] bridge_fdb_cache 9KB 23KB [ 1939.225874] fib6_nodes 156KB 272KB [ 1939.251130] ip6_dst_cache 98KB 472KB [ 1939.256535] RAWv6 70KB 101KB [ 1939.305364] UDPv6 176KB 180KB [ 1939.344095] TCPv6 27KB 42KB [ 1939.361461] nf_conntrack 18KB 18KB [ 1939.366906] t10_alua_lu_gp_cache 0KB 3KB [ 1939.397857] sd_ext_cdb 0KB 7KB [ 1939.439037] scsi_sense_cache 1056KB 1060KB [ 1939.444434] virtio_scsi_cmd 16KB 16KB [ 1939.495812] sgpool-128 8KB 8KB [ 1939.528228] sgpool-64 4KB 12KB [ 1939.553507] sgpool-32 2KB 15KB [ 1939.578412] sgpool-16 1KB 7KB [ 1939.583854] sgpool-8 0KB 7KB [ 1939.621295] mqueue_inode_cache 10KB 30KB [ 1939.626786] bio_post_read_ctx 14KB 15KB [ 1939.688037] bio-2 14KB 15KB [ 1939.727464] jfs_mp 7KB 7KB [ 1939.745208] fuse_request 1KB 8KB [ 1939.792024] cifs_small_rq 15KB 16KB [ 1939.797505] cifs_request 67KB 67KB [ 1939.848686] cifs_mpx_ids 0KB 7KB [ 1939.854110] nfs_commit_data 3KB 14KB [ 1939.916952] nfs_write_data 34KB 44KB [ 1939.955518] ext4_system_zone 1KB 7KB [ 1939.990378] bio-1 1KB 7KB [ 1939.995773] pid_namespace 2KB 11KB [ 1940.060762] rpc_buffers 17KB 25KB [ 1940.066159] rpc_tasks 2KB 7KB [ 1940.104200] UNIX 296KB 371KB [ 1940.138096] tcp_bind_bucket 1KB 4KB [ 1940.169161] ip_fib_trie 23KB 47KB [ 1940.174549] ip_fib_alias 112KB 189KB [ 1940.224722] ip_dst_cache 4KB 24KB [ 1940.259311] RAW 42KB 67KB [ 1940.264702] UDP 38KB 67KB [ 1940.322768] TCP 25KB 28KB [ 1940.328167] hugetlbfs_inode_cache 3KB 15KB [ 1940.376556] fscache_cookie_jar 1KB 7KB [ 1940.400087] eventpoll_pwq 14KB 55KB [ 1940.405482] eventpoll_epi 26KB 66KB [ 1940.460531] inotify_inode_mark 25KB 35KB [ 1940.466014] request_queue 199KB 199KB [ 1940.513739] blkdev_requests 1KB 3KB [ 1940.550554] blkdev_ioc 17KB 38KB [ 1940.556134] bio-0 718KB 727KB [ 1940.627180] biovec-max 1402KB 1402KB [ 1940.654482] biovec-64 795KB 795KB [ 1940.682583] biovec-16 124KB 138KB [ 1940.687977] bio_integrity_payload 1KB 8KB [ 1940.738582] khugepaged_mm_slot 18KB 27KB [ 1940.744086] uid_cache 0KB 4KB [ 1940.795237] dmaengine-unmap-2 0KB 3KB [ 1940.825907] audit_buffer 0KB 3KB [ 1940.842482] skbuff_fclone_cache 475KB 498KB [ 1940.863709] skbuff_head_cache 4923KB 5572KB [ 1940.881806] configfs_dir_cache 3KB 7KB [ 1940.887283] file_lock_cache 126KB 170KB [ 1940.923057] file_lock_ctx 9KB 15KB [ 1940.964353] fsnotify_mark_connector 13KB 23KB [ 1940.990845] net_namespace 52KB 52KB [ 1940.996245] shmem_inode_cache 8355KB 8454KB [ 1941.048325] task_delay_info 227KB 359KB [ 1941.053722] taskstats 136KB 172KB [ 1941.130880] proc_dir_entry 695KB 843KB [ 1941.136285] pde_opener 7KB 46KB [ 1941.185469] seq_file 231KB 370KB [ 1941.222398] sigqueue 31KB 70KB [ 1941.227796] kernfs_node_cache 18013KB 18785KB [ 1941.257921] mnt_cache 190KB 232KB [ 1941.288824] filp 5710KB 8321KB [ 1941.294206] names_cache 145949KB 145987KB [ 1941.355786] iint_cache 36KB 51KB [ 1941.388315] key_jar 4KB 11KB [ 1941.393713] uts_namespace 2KB 11KB [ 1941.448286] nsproxy 2KB 7KB [ 1941.453683] vm_area_struct 3550KB 3936KB [ 1941.498308] mm_struct 693KB 806KB [ 1941.503698] fs_cache 133KB 288KB [ 1941.559574] files_cache 503KB 791KB [ 1941.565015] signal_cache 1104KB 1897KB [ 1941.617040] sighand_cache 575KB 617KB [ 1941.633503] task_struct 7524KB 7612KB [ 1941.658306] cred_jar 1199KB 2748KB [ 1941.666122] anon_vma_chain 1130KB 1480KB [ 1941.703664] anon_vma 117KB 292KB [ 1941.728921] pid 58KB 232KB [ 1941.734308] Acpi-Operand 156KB 198KB [ 1941.785561] Acpi-ParseExt 8KB 11KB [ 1941.827709] Acpi-Parse 41KB 47KB [ 1941.851644] Acpi-State 52KB 63KB [ 1941.857044] Acpi-Namespace 20KB 27KB [ 1941.901178] numa_policy 0KB 3KB [ 1941.906654] debug_objects_cache 1781KB 1883KB [ 1941.963860] trace_event_file 297KB 298KB [ 1941.993562] ftrace_event_field 398KB 401KB [ 1942.036811] pool_workqueue 121KB 148KB [ 1942.063420] page->ptl 762KB 956KB [ 1942.097019] kmalloc-2097152 2050KB 2050KB [ 1942.123322] kmalloc-524288 2056KB 2056KB [ 1942.144329] kmalloc-262144 1290KB 1290KB [ 1942.183036] kmalloc-131072 650KB 650KB [ 1942.218630] kmalloc-65536 1848KB 1914KB [ 1942.232166] kmalloc-32768 1650KB 1716KB [ 1942.237562] kmalloc-16384 973KB 1023KB [ 1942.280956] kmalloc-8192 4661KB 4702KB [ 1942.286392] kmalloc-4096 19184KB 19201KB [ 1942.340356] kmalloc-2048 11664KB 14337KB [ 1942.345929] kmalloc-1024 8687KB 13434KB [ 1942.397416] kmalloc-512 10865KB 12671KB [ 1942.425786] kmalloc-256 4104KB 6033KB [ 1942.452032] kmalloc-128 1001KB 1582KB [ 1942.457597] kmalloc-96 3413KB 4368KB [ 1942.528414] kmalloc-64 2890KB 3812KB [ 1942.533803] kmalloc-32 1938KB 2512KB [ 1942.584503] kmalloc-192 1657KB 2828KB [ 1942.621052] kmem_cache 177KB 183KB [ 1942.626465] Out of memory (oom_kill_allocating_task): Kill process 9580 (syz-fuzzer) score 0 or sacrifice child [ 1942.703971] Killed process 23286 (syz-executor.1) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1942.733016] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1942.763535] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1942.787121] CPU: 1 PID: 9580 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1942.794590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1942.804112] Call Trace: [ 1942.806703] dump_stack+0x1fc/0x2ef [ 1942.810359] dump_header+0x15d/0xc3f [ 1942.814076] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1942.819175] ? ___ratelimit+0x319/0x590 [ 1942.823150] oom_kill_process.cold+0x10/0x692 [ 1942.827642] ? check_preemption_disabled+0x41/0x280 [ 1942.832671] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1942.837953] out_of_memory+0x1072/0x1390 [ 1942.842017] ? oom_killer_disable+0x270/0x270 [ 1942.846510] ? mutex_trylock+0x15f/0x1a0 [ 1942.850572] __alloc_pages_nodemask+0x23a2/0x2890 [ 1942.855422] ? find_get_entry+0x4cd/0x8a0 [ 1942.859572] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1942.864452] alloc_pages_current+0x193/0x2a0 [ 1942.868887] filemap_fault+0x146e/0x2180 [ 1942.872965] ext4_filemap_fault+0x84/0xb0 [ 1942.877120] __do_fault+0x10b/0x4b0 [ 1942.880763] __handle_mm_fault+0x273b/0x41c0 [ 1942.885171] ? vm_insert_page+0x9c0/0x9c0 [ 1942.889332] ? check_preemption_disabled+0x41/0x280 [ 1942.894872] handle_mm_fault+0x436/0xb10 [ 1942.898935] __do_page_fault+0x68e/0xd60 [ 1942.903013] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1942.908024] ? spurious_fault+0x840/0x840 [ 1942.912169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1942.917009] ? page_fault+0x8/0x30 [ 1942.920545] page_fault+0x1e/0x30 [ 1942.923989] RIP: 0033:0x40b220 [ 1942.927178] Code: Bad RIP value. [ 1942.930536] RSP: 002b:000000c0000a9ea8 EFLAGS: 00010216 [ 1942.935897] RAX: 000000c000042ed8 RBX: 000001c2d0d7a980 RCX: 000000c000042ed8 [ 1942.943169] RDX: 000000000e400980 RSI: 000001c13559d9d4 RDI: 000000c0000a9e5c [ 1942.950454] RBP: 000000c0000a9ee8 R08: 00007ffea43fa000 R09: 000001f0c234d33f [ 1942.957724] R10: 00072004c0087522 R11: 0000000000000001 R12: 000000c0000a9e90 [ 1942.965181] R13: 0000000000000000 R14: 000000c0008d1860 R15: 0000000000000000 [ 1942.978924] Mem-Info: [ 1942.981374] active_anon:15914 inactive_anon:84008 isolated_anon:0 [ 1942.981374] active_file:17 inactive_file:7 isolated_file:0 [ 1942.981374] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1942.981374] slab_reclaimable:14609 slab_unreclaimable:122566 [ 1942.981374] mapped:14937 shmem:85047 pagetables:466 bounce:0 [ 1942.981374] free:25082 free_pcp:195 free_cma:0 [ 1943.018659] Node 0 active_anon:59388kB inactive_anon:26352kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:31632kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.049920] Node 1 active_anon:4268kB inactive_anon:309680kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1943.082450] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.113401] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1943.123390] Node 0 DMA32 free:35692kB min:35996kB low:44992kB high:53988kB active_anon:57216kB inactive_anon:26352kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1512kB bounce:0kB free_pcp:780kB local_pcp:388kB free_cma:0kB [ 1943.162304] lowmem_reserve[]: 0 0 1 1 1 [ 1943.166315] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.197852] lowmem_reserve[]: 0 0 0 0 0 [ 1943.201923] Node 1 Normal free:53692kB min:53876kB low:67344kB high:80812kB active_anon:4268kB inactive_anon:309680kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1943.233915] lowmem_reserve[]: 0 0 0 0 0 [ 1943.237909] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 10968kB [ 1943.260154] Node 0 DMA32: 1307*4kB (ME) 552*8kB (UME) 246*16kB (UME) 101*32kB (UME) 41*64kB (ME) 9*128kB (UM) 1*256kB (M) 1*512kB (U) 14*1024kB (UM) 0*2048kB 0*4096kB = 35692kB [ 1943.284801] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1943.295927] Node 1 Normal: 481*4kB (UME) 399*8kB (UME) 280*16kB (ME) 108*32kB (UME) 21*64kB (ME) 5*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53692kB [ 1943.319682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.328586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.337158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1943.353203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1943.361868] 85081 total pagecache pages [ 1943.365845] 0 pages in swap cache [ 1943.376410] Swap cache stats: add 0, delete 0, find 0/0 [ 1943.381822] Free swap = 0kB [ 1943.386767] Total swap = 0kB [ 1943.396820] 2097051 pages RAM [ 1943.399976] 0 pages HighMem/MovableOnly [ 1943.403941] 369649 pages reserved [ 1943.407381] 0 pages cma reserved [ 1943.417921] Unreclaimable slab info: [ 1943.421722] Name Used Total [ 1943.427260] pid_2 98KB 136KB [ 1943.440151] batadv_tt_change_cache 1KB 3KB [ 1943.445979] batadv_tl_cache 4KB 16KB [ 1943.451430] TIPC 10KB 22KB [ 1943.456807] SCTPv6 14KB 24KB [ 1943.469266] DCCPv6 17KB 30KB [ 1943.474651] DCCP 16KB 28KB [ 1943.480152] RXRPC 11KB 19KB [ 1943.485509] rxrpc_call_jar 78KB 110KB [ 1943.499447] bridge_fdb_cache 9KB 23KB [ 1943.504830] fib6_nodes 156KB 272KB [ 1943.513772] ip6_dst_cache 106KB 472KB [ 1943.522826] RAWv6 70KB 101KB [ 1943.556507] UDPv6 176KB 180KB [ 1943.594194] TCPv6 27KB 42KB [ 1943.627319] nf_conntrack 18KB 18KB [ 1943.664775] t10_alua_lu_gp_cache 0KB 3KB [ 1943.674888] sd_ext_cdb 0KB 7KB [ 1943.684331] scsi_sense_cache 1056KB 1060KB [ 1943.707390] virtio_scsi_cmd 16KB 16KB [ 1943.716447] sgpool-128 8KB 8KB [ 1943.743886] sgpool-64 4KB 12KB [ 1943.753005] sgpool-32 2KB 15KB [ 1943.763665] sgpool-16 1KB 7KB [ 1943.777493] sgpool-8 0KB 7KB [ 1943.814541] mqueue_inode_cache 10KB 30KB [ 1943.824786] bio_post_read_ctx 14KB 15KB [ 1943.845407] bio-2 14KB 15KB [ 1943.852987] jfs_mp 7KB 7KB [ 1943.862655] fuse_request 1KB 8KB [ 1943.868056] cifs_small_rq 15KB 16KB [ 1943.916465] cifs_request 67KB 67KB [ 1943.942796] cifs_mpx_ids 0KB 7KB [ 1943.969607] nfs_commit_data 3KB 14KB [ 1943.975001] nfs_write_data 34KB 44KB [ 1944.006758] ext4_system_zone 1KB 7KB [ 1944.012289] bio-1 1KB 7KB [ 1944.017653] pid_namespace 2KB 11KB [ 1944.053727] rpc_buffers 17KB 25KB [ 1944.074734] rpc_tasks 2KB 7KB [ 1944.087065] UNIX 296KB 371KB [ 1944.122324] tcp_bind_bucket 1KB 4KB [ 1944.127725] ip_fib_trie 23KB 47KB [ 1944.156928] ip_fib_alias 112KB 189KB [ 1944.162493] ip_dst_cache 4KB 24KB [ 1944.167855] RAW 42KB 67KB [ 1944.196617] UDP 38KB 67KB [ 1944.202059] TCP 25KB 28KB [ 1944.236361] hugetlbfs_inode_cache 3KB 15KB [ 1944.246544] fscache_cookie_jar 1KB 7KB [ 1944.272864] eventpoll_pwq 14KB 55KB [ 1944.282641] eventpoll_epi 26KB 66KB [ 1944.310182] inotify_inode_mark 25KB 35KB [ 1944.315661] request_queue 199KB 199KB [ 1944.347187] blkdev_requests 1KB 3KB [ 1944.352779] blkdev_ioc 17KB 38KB [ 1944.377814] bio-0 725KB 735KB [ 1944.406107] biovec-max 1402KB 1402KB [ 1944.413627] biovec-64 811KB 811KB [ 1944.431273] biovec-16 128KB 142KB [ 1944.436663] bio_integrity_payload 1KB 8KB [ 1944.456207] khugepaged_mm_slot 18KB 27KB [ 1944.465083] uid_cache 0KB 4KB [ 1944.482618] dmaengine-unmap-2 0KB 3KB [ 1944.487998] audit_buffer 0KB 3KB [ 1944.495332] skbuff_fclone_cache 475KB 498KB [ 1944.515239] skbuff_head_cache 5219KB 5572KB [ 1944.524759] configfs_dir_cache 3KB 7KB [ 1944.547310] file_lock_cache 126KB 170KB [ 1944.554431] file_lock_ctx 9KB 15KB [ 1944.572191] fsnotify_mark_connector 13KB 23KB [ 1944.585431] net_namespace 52KB 52KB [ 1944.596002] shmem_inode_cache 8355KB 8454KB [ 1944.617639] task_delay_info 227KB 359KB [ 1944.635348] taskstats 136KB 172KB [ 1944.642492] proc_dir_entry 695KB 843KB [ 1944.647862] pde_opener 7KB 46KB [ 1944.665707] seq_file 231KB 370KB [ 1944.674448] sigqueue 31KB 70KB [ 1944.694361] kernfs_node_cache 18013KB 18785KB [ 1944.701455] mnt_cache 190KB 232KB [ 1944.706822] filp 5693KB 8321KB [ 1944.726571] names_cache 145150KB 145188KB [ 1944.733690] iint_cache 36KB 51KB [ 1944.751514] key_jar 4KB 11KB [ 1944.756902] uts_namespace 2KB 11KB [ 1944.776689] nsproxy 2KB 7KB [ 1944.784679] vm_area_struct 3543KB 3936KB [ 1944.802268] mm_struct 693KB 806KB [ 1944.807657] fs_cache 133KB 288KB [ 1944.815589] files_cache 503KB 791KB [ 1944.835167] signal_cache 1104KB 1897KB [ 1944.846005] sighand_cache 575KB 617KB [ 1944.863852] task_struct 7499KB 7587KB [ 1944.871535] cred_jar 1199KB 2748KB [ 1944.876914] anon_vma_chain 1130KB 1480KB [ 1944.904994] anon_vma 117KB 292KB [ 1944.931338] pid 58KB 232KB [ 1944.936738] Acpi-Operand 156KB 198KB [ 1944.963346] Acpi-ParseExt 8KB 11KB [ 1944.975889] Acpi-Parse 41KB 47KB [ 1945.005743] Acpi-State 52KB 63KB [ 1945.011200] Acpi-Namespace 20KB 27KB [ 1945.016567] numa_policy 0KB 3KB [ 1945.043088] debug_objects_cache 1781KB 1883KB [ 1945.052230] trace_event_file 297KB 298KB [ 1945.057601] ftrace_event_field 398KB 401KB [ 1945.073043] pool_workqueue 121KB 148KB [ 1945.094207] page->ptl 762KB 956KB [ 1945.107003] kmalloc-2097152 2050KB 2050KB [ 1945.117382] kmalloc-524288 2056KB 2056KB [ 1945.137345] kmalloc-262144 1290KB 1290KB [ 1945.142801] kmalloc-131072 650KB 650KB [ 1945.161791] kmalloc-65536 1848KB 1914KB [ 1945.167181] kmalloc-32768 1650KB 1716KB [ 1945.177641] kmalloc-16384 973KB 1023KB [ 1945.195439] kmalloc-8192 4661KB 4702KB [ 1945.200867] kmalloc-4096 19167KB 19201KB [ 1945.206231] kmalloc-2048 11689KB 14337KB [ 1945.223970] kmalloc-1024 8822KB 13434KB [ 1945.233062] kmalloc-512 11236KB 12671KB [ 1945.250857] kmalloc-256 4120KB 6033KB [ 1945.256237] kmalloc-128 1001KB 1582KB [ 1945.264974] kmalloc-96 3450KB 4368KB [ 1945.283149] kmalloc-64 2890KB 3812KB [ 1945.290273] kmalloc-32 1949KB 2512KB [ 1945.295663] kmalloc-192 1657KB 2828KB [ 1945.313343] kmem_cache 177KB 183KB [ 1945.322062] Out of memory (oom_kill_allocating_task): Kill process 9580 (syz-fuzzer) score 0 or sacrifice child [ 1945.346811] Killed process 23287 (syz-executor.2) total-vm:48512kB, anon-rss:428kB, file-rss:0kB, shmem-rss:0kB [ 1945.374018] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1945.418337] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1945.424520] CPU: 1 PID: 9580 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1945.431980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1945.441337] Call Trace: [ 1945.443930] dump_stack+0x1fc/0x2ef [ 1945.447559] dump_header+0x15d/0xc3f [ 1945.451285] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1945.456386] ? ___ratelimit+0x319/0x590 [ 1945.460363] oom_kill_process.cold+0x10/0x692 [ 1945.464864] ? check_preemption_disabled+0x41/0x280 [ 1945.469881] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1945.475156] out_of_memory+0x1072/0x1390 [ 1945.479220] ? oom_killer_disable+0x270/0x270 [ 1945.483716] ? mutex_trylock+0x15f/0x1a0 [ 1945.487807] __alloc_pages_nodemask+0x23a2/0x2890 [ 1945.492670] ? find_get_entry+0x4cd/0x8a0 [ 1945.496838] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1945.501704] alloc_pages_current+0x193/0x2a0 [ 1945.506110] filemap_fault+0x146e/0x2180 [ 1945.510188] ext4_filemap_fault+0x84/0xb0 [ 1945.514338] __do_fault+0x10b/0x4b0 [ 1945.517971] __handle_mm_fault+0x273b/0x41c0 [ 1945.522389] ? vm_insert_page+0x9c0/0x9c0 [ 1945.526579] ? check_preemption_disabled+0x41/0x280 [ 1945.531597] handle_mm_fault+0x436/0xb10 [ 1945.535665] __do_page_fault+0x68e/0xd60 [ 1945.539729] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1945.544742] ? spurious_fault+0x840/0x840 [ 1945.548887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1945.553734] ? page_fault+0x8/0x30 [ 1945.557271] page_fault+0x1e/0x30 [ 1945.560720] RIP: 0033:0x40b220 [ 1945.563912] Code: e8 e5 07 00 00 48 8b 6c 24 10 48 83 c4 18 c3 48 89 44 24 08 e8 51 86 05 00 48 8b 44 24 08 eb ca cc cc cc cc cc cc cc cc cc cc <49> 3b 66 10 0f 86 80 01 00 00 48 83 ec 40 48 89 6c 24 38 48 8d 6c [ 1945.582904] RSP: 002b:000000c0000a9ea8 EFLAGS: 00010216 [ 1945.588266] RAX: 000000c000042ed8 RBX: 000001c2d0d7a980 RCX: 000000c000042ed8 [ 1945.595536] RDX: 000000000e400980 RSI: 000001c13559d9d4 RDI: 000000c0000a9e5c [ 1945.602809] RBP: 000000c0000a9ee8 R08: 00007ffea43fa000 R09: 000001f0c234d33f [ 1945.610093] R10: 00072004c0087522 R11: 0000000000000001 R12: 000000c0000a9e90 [ 1945.617358] R13: 0000000000000000 R14: 000000c0008d1860 R15: 0000000000000000 [ 1945.667854] Mem-Info: [ 1945.670790] active_anon:15784 inactive_anon:84008 isolated_anon:0 [ 1945.670790] active_file:258 inactive_file:253 isolated_file:32 [ 1945.670790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1945.670790] slab_reclaimable:14609 slab_unreclaimable:121801 [ 1945.670790] mapped:11712 shmem:85047 pagetables:439 bounce:0 [ 1945.670790] free:25141 free_pcp:218 free_cma:0 [ 1945.727850] Node 0 active_anon:58868kB inactive_anon:26352kB active_file:136kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:17432kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1945.843558] Node 1 active_anon:4268kB inactive_anon:309680kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28116kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1945.925575] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1945.961399] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1945.971514] Node 0 DMA32 free:36032kB min:35996kB low:44992kB high:53988kB active_anon:56816kB inactive_anon:26352kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7424kB pagetables:1512kB bounce:0kB free_pcp:448kB local_pcp:288kB free_cma:0kB [ 1946.068141] lowmem_reserve[]: 0 0 1 1 1 [ 1946.072156] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.170524] lowmem_reserve[]: 0 0 0 0 0 [ 1946.174540] Node 1 Normal free:53704kB min:53876kB low:67344kB high:80812kB active_anon:4256kB inactive_anon:309680kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:288kB pagetables:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1946.386823] lowmem_reserve[]: 0 0 0 0 0 [ 1946.406900] Node 0 DMA: 5*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 10980kB [ 1946.535309] Node 0 DMA32: 1307*4kB (UME) 568*8kB (UME) 253*16kB (UME) 104*32kB (UME) 44*64kB (UME) 10*128kB (UM) 2*256kB (UM) 1*512kB (U) 14*1024kB (UM) 0*2048kB 0*4096kB = 36604kB [ 1946.574315] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1946.614209] Node 1 Normal: 480*4kB (UME) 399*8kB (UME) 281*16kB (ME) 108*32kB (UME) 21*64kB (ME) 5*128kB (UME) 5*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 53704kB [ 1946.698038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.706899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.814803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1946.878039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1946.886653] 85085 total pagecache pages [ 1946.932925] 0 pages in swap cache [ 1946.936404] Swap cache stats: add 0, delete 0, find 0/0 [ 1947.005546] Free swap = 0kB [ 1947.020459] Total swap = 0kB [ 1947.023512] 2097051 pages RAM [ 1947.026621] 0 pages HighMem/MovableOnly [ 1947.107999] 369649 pages reserved [ 1947.108004] 0 pages cma reserved [ 1947.108010] Unreclaimable slab info: [ 1947.108014] Name Used Total [ 1947.108023] pid_2 96KB 136KB [ 1947.108090] batadv_tt_change_cache 0KB 3KB [ 1947.108103] batadv_tl_cache 4KB 16KB [ 1947.108127] TIPC 10KB 22KB [ 1947.330816] SCTPv6 14KB 24KB [ 1947.336217] DCCPv6 17KB 30KB [ 1947.403240] DCCP 16KB 28KB [ 1947.440895] RXRPC 11KB 19KB [ 1947.446290] rxrpc_call_jar 78KB 110KB [ 1947.512899] bridge_fdb_cache 9KB 23KB [ 1947.533584] fib6_nodes 156KB 272KB [ 1947.578310] ip6_dst_cache 115KB 472KB [ 1947.619917] RAWv6 70KB 101KB [ 1947.625325] UDPv6 176KB 180KB [ 1947.690088] TCPv6 27KB 42KB [ 1947.695490] nf_conntrack 14KB 18KB [ 1947.757519] t10_alua_lu_gp_cache 0KB 3KB [ 1947.791993] sd_ext_cdb 0KB 7KB [ 1947.797390] scsi_sense_cache 1056KB 1060KB [ 1947.856962] virtio_scsi_cmd 16KB 16KB [ 1947.911881] sgpool-128 8KB 8KB [ 1947.917541] sgpool-64 4KB 12KB [ 1947.938145] sgpool-32 2KB 15KB [ 1947.958793] sgpool-16 1KB 7KB [ 1947.964777] sgpool-8 0KB 7KB [ 1947.984221] mqueue_inode_cache 10KB 30KB [ 1948.022978] bio_post_read_ctx 14KB 15KB [ 1948.030090] bio-2 14KB 15KB [ 1948.037195] jfs_mp 7KB 7KB [ 1948.062941] fuse_request 1KB 8KB [ 1948.068450] cifs_small_rq 15KB 16KB [ 1948.073805] cifs_request 67KB 67KB [ 1948.096152] cifs_mpx_ids 0KB 7KB [ 1948.118098] nfs_commit_data 3KB 14KB [ 1948.123491] nfs_write_data 34KB 44KB [ 1948.128959] ext4_system_zone 1KB 7KB [ 1948.134357] bio-1 1KB 7KB [ 1948.139807] pid_namespace 2KB 11KB [ 1948.145185] rpc_buffers 17KB 25KB [ 1948.153862] rpc_tasks 2KB 7KB [ 1948.159386] UNIX 296KB 371KB [ 1948.164763] tcp_bind_bucket 1KB 4KB [ 1948.170633] ip_fib_trie 23KB 47KB [ 1948.175997] ip_fib_alias 112KB 189KB [ 1948.181411] ip_dst_cache 4KB 24KB [ 1948.186772] RAW 42KB 67KB [ 1948.192227] UDP 38KB 67KB [ 1948.197603] TCP 25KB 28KB [ 1948.203079] hugetlbfs_inode_cache 3KB 15KB [ 1948.208864] fscache_cookie_jar 1KB 7KB [ 1948.214308] eventpoll_pwq 14KB 55KB [ 1948.219728] eventpoll_epi 26KB 66KB [ 1948.225089] inotify_inode_mark 25KB 35KB [ 1948.231031] request_queue 199KB 199KB [ 1948.236391] blkdev_requests 1KB 3KB [ 1948.241799] blkdev_ioc 27KB 38KB [ 1948.247158] bio-0 838KB 847KB [ 1948.252608] biovec-max 1402KB 1402KB [ 1948.258029] biovec-64 984KB 984KB [ 1948.263386] biovec-16 135KB 150KB [ 1948.271711] bio_integrity_payload 1KB 8KB [ 1948.277425] khugepaged_mm_slot 18KB 27KB [ 1948.282924] uid_cache 0KB 4KB [ 1948.288667] dmaengine-unmap-2 0KB 3KB [ 1948.294032] audit_buffer 0KB 3KB [ 1948.299440] skbuff_fclone_cache 461KB 498KB [ 1948.304997] skbuff_head_cache 5505KB 5572KB [ 1948.310433] configfs_dir_cache 3KB 7KB [ 1948.315876] file_lock_cache 124KB 170KB [ 1948.326237] file_lock_ctx 9KB 15KB [ 1948.331687] fsnotify_mark_connector 13KB 23KB [ 1948.337568] net_namespace 52KB 52KB [ 1948.350238] shmem_inode_cache 8347KB 8450KB [ 1948.355612] task_delay_info 227KB 359KB [ 1948.365752] taskstats 130KB 172KB [ 1948.372047] proc_dir_entry 695KB 843KB [ 1948.377446] pde_opener 7KB 46KB [ 1948.387182] seq_file 227KB 370KB [ 1948.396348] sigqueue 31KB 70KB [ 1948.405830] kernfs_node_cache 17981KB 18762KB [ 1948.412778] mnt_cache 189KB 232KB [ 1948.422457] filp 5649KB 8313KB [ 1948.427833] names_cache 143756KB 143794KB [ 1948.434118] iint_cache 30KB 51KB [ 1948.444071] key_jar 4KB 11KB [ 1948.450336] uts_namespace 2KB 11KB [ 1948.455702] nsproxy 2KB 7KB [ 1948.465272] vm_area_struct 3526KB 3936KB [ 1948.471869] mm_struct 685KB 806KB [ 1948.477243] fs_cache 133KB 288KB [ 1948.486956] files_cache 503KB 791KB [ 1948.493305] signal_cache 1104KB 1897KB [ 1948.502831] sighand_cache 575KB 617KB [ 1948.511783] task_struct 7423KB 7511KB [ 1948.517160] cred_jar 1199KB 2748KB [ 1948.522635] anon_vma_chain 1120KB 1480KB [ 1948.528363] anon_vma 114KB 292KB [ 1948.533723] pid 66KB 232KB [ 1948.539191] Acpi-Operand 156KB 198KB [ 1948.544548] Acpi-ParseExt 8KB 11KB [ 1948.549988] Acpi-Parse 41KB 47KB [ 1948.555349] Acpi-State 52KB 63KB [ 1948.560821] Acpi-Namespace 20KB 27KB [ 1948.566187] numa_policy 0KB 3KB [ 1948.571624] debug_objects_cache 1781KB 1883KB [ 1948.577155] trace_event_file 297KB 298KB [ 1948.582550] ftrace_event_field 398KB 401KB [ 1948.588841] pool_workqueue 121KB 148KB [ 1948.594205] page->ptl 752KB 956KB [ 1948.599654] kmalloc-2097152 2050KB 2050KB [ 1948.605015] kmalloc-524288 2056KB 2056KB [ 1948.610434] kmalloc-262144 1290KB 1290KB [ 1948.615793] kmalloc-131072 650KB 650KB [ 1948.621204] kmalloc-65536 1848KB 1914KB [ 1948.626561] kmalloc-32768 1650KB 1716KB [ 1948.634866] kmalloc-16384 973KB 1023KB [ 1948.640295] kmalloc-8192 4661KB 4702KB [ 1948.645654] kmalloc-4096 19150KB 19171KB [ 1948.651363] kmalloc-2048 11689KB 14337KB [ 1948.656723] kmalloc-1024 8984KB 13434KB [ 1948.662184] kmalloc-512 11658KB 12671KB [ 1948.667544] kmalloc-256 4137KB 6033KB [ 1948.672960] kmalloc-128 1001KB 1582KB [ 1948.678361] kmalloc-96 3480KB 4368KB [ 1948.683721] kmalloc-64 2878KB 3812KB [ 1948.689144] kmalloc-32 1953KB 2512KB [ 1948.694510] kmalloc-192 1651KB 2828KB [ 1948.699917] kmem_cache 177KB 183KB [ 1948.705277] Out of memory (oom_kill_allocating_task): Kill process 9580 (syz-fuzzer) score 0 or sacrifice child [ 1948.716343] Killed process 17403 (syz-executor.0) total-vm:48512kB, anon-rss:420kB, file-rss:0kB, shmem-rss:0kB [ 1948.726851] oom_reaper: reaped process 17403 (syz-executor.0), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 1949.888991] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1949.962221] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1949.967028] CPU: 0 PID: 9580 Comm: syz-fuzzer Not tainted 4.19.211-syzkaller #0 [ 1949.974473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1949.984008] Call Trace: [ 1949.986604] dump_stack+0x1fc/0x2ef [ 1949.990245] dump_header+0x15d/0xc3f [ 1949.993961] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1949.999063] ? ___ratelimit+0x319/0x590 [ 1950.003038] oom_kill_process.cold+0x10/0x692 [ 1950.007537] ? check_preemption_disabled+0x41/0x280 [ 1950.012559] ? has_intersects_mems_allowed+0x1d6/0x290 [ 1950.017853] out_of_memory+0x1072/0x1390 [ 1950.022023] ? oom_killer_disable+0x270/0x270 [ 1950.026529] ? mutex_trylock+0x15f/0x1a0 [ 1950.030606] __alloc_pages_nodemask+0x23a2/0x2890 [ 1950.035456] ? find_get_entry+0x4cd/0x8a0 [ 1950.039631] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1950.044505] alloc_pages_current+0x193/0x2a0 [ 1950.049099] filemap_fault+0x146e/0x2180 [ 1950.053199] ext4_filemap_fault+0x84/0xb0 [ 1950.057378] __do_fault+0x10b/0x4b0 [ 1950.061101] ? do_raw_spin_unlock+0x171/0x230 [ 1950.065606] __handle_mm_fault+0x273b/0x41c0 [ 1950.070022] ? vm_insert_page+0x9c0/0x9c0 [ 1950.074203] ? sync_mm_rss+0x97/0x1a0 [ 1950.078031] handle_mm_fault+0x436/0xb10 [ 1950.082117] __do_page_fault+0x68e/0xd60 [ 1950.086190] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1950.091207] ? spurious_fault+0x840/0x840 [ 1950.095354] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1950.100199] ? page_fault+0x8/0x30 [ 1950.103738] page_fault+0x1e/0x30 [ 1950.107194] RIP: 0033:0x4359e0 [ 1950.110382] Code: Bad RIP value. [ 1950.113739] RSP: 002b:000000c005dcd8e8 EFLAGS: 00010246 [ 1950.119096] RAX: 000000c0008d1520 RBX: 000000000040d174 RCX: 000000c000b35e80 [ 1950.126361] RDX: 000000c005dcdac0 RSI: 000000000040d174 RDI: 0000000000000000 [ 1950.133626] RBP: 000000c005dcd910 R08: 0000000001f7ce20 R09: 0000000000000000 [ 1950.140901] R10: 000000c000df6a20 R11: 0000000000000206 R12: 000000c005dcd9a0 [ 1950.148174] R13: 0000000000000001 R14: 000000c0008d16c0 R15: ffffffffffffffff [ 1950.168547] Mem-Info: [ 1950.172217] active_anon:15663 inactive_anon:84008 isolated_anon:0 [ 1950.172217] active_file:9 inactive_file:43 isolated_file:0 [ 1950.172217] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1950.172217] slab_reclaimable:14595 slab_unreclaimable:121310 [ 1950.172217] mapped:7769 shmem:85047 pagetables:418 bounce:0 [ 1950.172217] free:25260 free_pcp:232 free_cma:0 [ 1950.221189] Node 0 active_anon:58772kB inactive_anon:26352kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15248kB dirty:0kB writeback:0kB shmem:28184kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1950.248656] Node 1 active_anon:3880kB inactive_anon:309680kB active_file:132kB inactive_file:152kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:15928kB dirty:0kB writeback:0kB shmem:312004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1950.276283] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:2052kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.302962] lowmem_reserve[]: 0 2693 2695 2695 2695 [ 1950.308051] Node 0 DMA32 free:36988kB min:35996kB low:44992kB high:53988kB active_anon:56720kB inactive_anon:26352kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:7328kB pagetables:1460kB bounce:0kB free_pcp:764kB local_pcp:252kB free_cma:0kB [ 1950.336952] lowmem_reserve[]: 0 0 1 1 1 [ 1950.342364] Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.392257] lowmem_reserve[]: 0 0 0 0 0 [ 1950.396275] Node 1 Normal free:53568kB min:53876kB low:67344kB high:80812kB active_anon:3880kB inactive_anon:309680kB active_file:32kB inactive_file:136kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:256kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1950.430218] lowmem_reserve[]: 0 0 0 0 0 [ 1950.434233] Node 0 DMA: 5*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 1*4096kB (M) = 10980kB [ 1950.503229] Node 0 DMA32: 1137*4kB (ME) 574*8kB (UME) 246*16kB (UME) 103*32kB (UME) 44*64kB (UME) 10*128kB (UM) 2*256kB (UM) 1*512kB (U) 14*1024kB (UM) 0*2048kB 0*4096kB = 35828kB [ 1950.536048] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1950.554575] Node 1 Normal: 461*4kB (UME) 386*8kB (ME) 276*16kB (ME) 113*32kB (ME) 23*64kB (ME) 4*128kB (ME) 8*256kB (UME) 1*512kB (U) 0*1024kB 2*2048kB (UM) 8*4096kB (U) = 54372kB [ 1950.576230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.585902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.608158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1950.608168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1950.608174] 85089 total pagecache pages [ 1950.608187] 0 pages in swap cache [ 1950.608195] Swap cache stats: add 0, delete 0, find 0/0 [ 1950.608200] Free swap = 0kB [ 1950.608205] Total swap = 0kB [ 1950.608213] 2097051 pages RAM [ 1950.608218] 0 pages HighMem/MovableOnly [ 1950.608222] 369649 pages reserved [ 1950.608227] 0 pages cma reserved [ 1950.608233] Unreclaimable slab info: [ 1950.608239] Name Used Total [ 1950.608250] pid_2 94KB 136KB [ 1950.608323] batadv_tt_change_cache 0KB 3KB [ 1950.608337] batadv_tl_cache 4KB 16KB [ 1950.608364] TIPC 10KB 22KB [ 1950.608385] SCTPv6 14KB 24KB [ 1950.608404] DCCPv6 17KB 30KB [ 1950.608417] DCCP 16KB 28KB [ 1950.608459] RXRPC 11KB 19KB [ 1950.608469] rxrpc_call_jar 78KB 110KB [ 1950.608483] bridge_fdb_cache 9KB 23KB [ 1950.608499] fib6_nodes 156KB 272KB [ 1950.608508] ip6_dst_cache 115KB 472KB [ 1950.608522] RAWv6 70KB 101KB [ 1950.608533] UDPv6 176KB 180KB [ 1950.608546] TCPv6 27KB 42KB [ 1950.608565] nf_conntrack 14KB 18KB [ 1950.608639] t10_alua_lu_gp_cache 0KB 3KB [ 1950.608654] sd_ext_cdb 0KB 7KB [ 1950.608664] scsi_sense_cache 1056KB 1060KB [ 1950.608674] virtio_scsi_cmd 16KB 16KB [ 1950.608687] sgpool-128 8KB 8KB [ 1950.608697] sgpool-64 4KB 12KB [ 1950.608707] sgpool-32 2KB 15KB [ 1950.608717] sgpool-16 1KB 7KB [ 1950.608726] sgpool-8 0KB 7KB [ 1950.608744] mqueue_inode_cache 10KB 30KB [ 1950.608759] bio_post_read_ctx 14KB 15KB [ 1950.608834] bio-2 14KB 15KB [ 1950.608843] jfs_mp 7KB 7KB [ 1950.608857] fuse_request 1KB 8KB [ 1950.608891] cifs_small_rq 15KB 16KB [ 1950.608901] cifs_request 67KB 67KB [ 1950.608910] cifs_mpx_ids 0KB 7KB [ 1950.608940] nfs_commit_data 3KB 14KB [ 1950.608950] nfs_write_data 34KB 44KB [ 1950.608996] ext4_system_zone 1KB 7KB [ 1950.609028] bio-1 1KB 7KB [ 1950.609040] pid_namespace 2KB 11KB [ 1950.609060] rpc_buffers 17KB 25KB [ 1950.609069] rpc_tasks 2KB 7KB [ 1950.609078] UNIX 296KB 371KB [ 1950.609094] tcp_bind_bucket 1KB 4KB [ 1950.609112] ip_fib_trie 23KB 47KB [ 1950.609122] ip_fib_alias 112KB 189KB [ 1950.609132] ip_dst_cache 4KB 24KB [ 1950.609143] RAW 42KB 67KB [ 1950.609152] UDP 38KB 67KB [ 1950.609166] TCP 25KB 28KB [ 1950.609178] hugetlbfs_inode_cache 3KB 15KB [ 1950.609188] fscache_cookie_jar 1KB 7KB [ 1950.609198] eventpoll_pwq 15KB 55KB [ 1950.609208] eventpoll_epi 29KB 66KB [ 1950.609217] inotify_inode_mark 25KB 35KB [ 1950.609229] request_queue 199KB 199KB [ 1950.609239] blkdev_requests 1KB 3KB [ 1950.609248] blkdev_ioc 27KB 38KB [ 1950.609258] bio-0 972KB 975KB [ 1950.609268] biovec-max 1402KB 1402KB [ 1950.609279] biovec-64 1203KB 1204KB [ 1950.609289] biovec-16 166KB 180KB [ 1950.609298] bio_integrity_payload 1KB 8KB [ 1950.609308] khugepaged_mm_slot 17KB 27KB [ 1950.609326] uid_cache 0KB 4KB [ 1950.609336] dmaengine-unmap-2 0KB 3KB [ 1950.609345] audit_buffer 0KB 3KB [ 1950.609355] skbuff_fclone_cache 453KB 498KB [ 1950.609365] skbuff_head_cache 5677KB 5700KB [ 1950.609374] configfs_dir_cache 3KB 7KB [ 1950.609384] file_lock_cache 122KB 170KB [ 1950.609394] file_lock_ctx 9KB 15KB [ 1950.609404] fsnotify_mark_connector 13KB 23KB [ 1950.609413] net_namespace 52KB 52KB [ 1950.609423] shmem_inode_cache 8341KB 8446KB [ 1950.609433] task_delay_info 223KB 359KB [ 1950.609443] taskstats 129KB 172KB [ 1950.609452] proc_dir_entry 695KB 843KB [ 1950.609462] pde_opener 7KB 46KB [ 1950.609472] seq_file 225KB 370KB [ 1950.609481] sigqueue 42KB 70KB [ 1950.609491] kernfs_node_cache 17950KB 18734KB [ 1950.609501] mnt_cache 188KB 232KB [ 1950.609511] filp 5621KB 8302KB [ 1950.609520] names_cache 142226KB 142264KB [ 1950.609530] iint_cache 29KB 51KB [ 1950.609539] key_jar 4KB 11KB [ 1950.609549] uts_namespace 2KB 11KB [ 1950.609559] nsproxy 2KB 7KB [ 1950.609568] vm_area_struct 3508KB 3936KB [ 1950.609584] mm_struct 669KB 806KB [ 1950.609594] fs_cache 132KB 288KB [ 1950.609603] files_cache 493KB 783KB [ 1950.609613] signal_cache 1096KB 1897KB [ 1950.609622] sighand_cache 564KB 617KB [ 1950.609632] task_struct 7410KB 7499KB [ 1950.609642] cred_jar 1199KB 2748KB [ 1950.609652] anon_vma_chain 1110KB 1480KB [ 1950.609661] anon_vma 114KB 292KB [ 1950.609670] pid 63KB 232KB [ 1950.609679] Acpi-Operand 156KB 198KB [ 1950.609689] Acpi-ParseExt 8KB 11KB [ 1950.609698] Acpi-Parse 41KB 47KB [ 1950.609708] Acpi-State 52KB 63KB [ 1950.609718] Acpi-Namespace 20KB 27KB [ 1950.609729] numa_policy 0KB 3KB [ 1950.609739] debug_objects_cache 1781KB 1883KB [ 1950.609748] trace_event_file 297KB 298KB [ 1950.609758] ftrace_event_field 398KB 401KB [ 1950.609768] pool_workqueue 121KB 148KB [ 1950.609780] page->ptl 744KB 956KB [ 1950.609826] kmalloc-2097152 2050KB 2050KB [ 1950.609836] kmalloc-524288 2056KB 2056KB [ 1950.609846] kmalloc-262144 1290KB 1290KB [ 1950.609855] kmalloc-131072 650KB 650KB [ 1950.609864] kmalloc-65536 1848KB 1914KB [ 1950.609874] kmalloc-32768 1650KB 1716KB [ 1950.609883] kmalloc-16384 973KB 1023KB [ 1950.609892] kmalloc-8192 4661KB 4702KB [ 1950.609901] kmalloc-4096 19120KB 19159KB [ 1950.609911] kma