last executing test programs: 21m4.659766577s ago: executing program 32 (id=2578): syz_open_dev$cec(0x0, 0x0, 0x2002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@private2, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000001540)=0xe4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wpan0\x00'}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001780)=ANY=[@ANYRESDEC, @ANYBLOB=',fowner=', @ANYRESHEX=r0, @ANYBLOB=',context=']) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000003380)) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) 20m13.072569285s ago: executing program 4 (id=2907): syz_open_dev$cec(0x0, 0x0, 0x2002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@private2, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000001540)=0xe4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0xfd}, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001780)=ANY=[@ANYRESDEC, @ANYBLOB=',fowner=', @ANYBLOB=',context=']) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000003380)) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000001c0)={0x0, r8}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000000)={0x0, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 19m58.061999987s ago: executing program 33 (id=2907): syz_open_dev$cec(0x0, 0x0, 0x2002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@private2, @in=@remote}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000001540)=0xe4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001500)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0xffffffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0xfd}, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001780)=ANY=[@ANYRESDEC, @ANYBLOB=',fowner=', @ANYBLOB=',context=']) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000003380)) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f00000001c0)={0x0, r8}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000000)={0x0, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 14m7.779221937s ago: executing program 34 (id=4583): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="7d01543c7ef0f001816ad5e83bf41c36018596b7", @ANYRES32, @ANYRES8, @ANYRES8=0x0, @ANYRES8], &(0x7f00000002c0)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x2149a2, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x2000c084}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="00000000422200042c00128008000100677265002000028008000500bb7e00000800040006"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r8 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000100)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 12m45.046024354s ago: executing program 35 (id=5062): r0 = syz_clone3(0x0, 0x0) syz_pidfd_open(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000001040)={0x0, 0x2000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000011c0)={0x6000, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg0\x00'}) getrlimit(0x4, &(0x7f00000001c0)) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0xe00, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x12000, 0x0) 12m34.966951753s ago: executing program 36 (id=5109): syz_usbip_server_init(0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/67, 0x43}}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be05009a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02351eb6064c24f1ad325e0325fc473c3aeaf6709e5227bca1f7ba283d381d4f64e01fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b17d0c25efbf1c56feb59cbcb63f4683c026aa765bea9ba310000", 0x8d}, {&(0x7f0000000940)="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", 0x120}, {&(0x7f0000000400)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce90807958457", 0x93}, {&(0x7f00000017c0)}, {&(0x7f0000000a80)="e3fbc9f7e155a6e294f68078cb808c435b48612e93b0d69d1f21fd5564a9f18f996475fb64e12884979b5882a07d51ec37cab390561644521d18773068ad0fc0f6f8df2bb545c05fbfda35eefcf88a020063a2bf6468b302b9831678e59677adb2ec28d0caf29931cf5993e1ce3ba4cf655cf53218d9887589289e133b54050621892724d74ce07d912407878f2a4ec7a10be378467499f110fe42cfa93c4883db8d2c5155a0d94b828405a9de0e8ffae65c255df6ee1e807dd8fa8d384184f735fbc4e62d27f288c6c9c94477590c7ff4eb93131ebb0d6d5dfa82dbafd6a6bd0cc56bc8d7af7e4246389c34a239b98ec85073c76da59b1fe73f14c72c5fa25e77ce2d5849ad97c74e15826752d1d571e6d9377fe1dd1c794795216f2614d25d9a2a019c3f88b59dc971df962e0250e89263a6c3cbaa9f2b0c5d83cffd423c89b83783109d05b53831ba44e31971b5a5444e816b19e16ad69106d8d7339ed0b5707218728ea071db4f59aea059410e48dc0c210eb84552eaa5ff6aa127c9dc3312a6e0bd4eb3eac8bf7b9c4e158fcc69d371246d807fbeabcfb33e9268025d3dd4cdfbdb0e178cdb63493251915b8fcf933b9ac872818fc255fcc6e4d9fcd7cc6e5071928e7f1a5738321897b0d277f0bb661ea6d25d7f6f2b38273561593d62fc363cc77de0352ea0bee8b98ca55474fa1c69d476adb25ae2ab5357008d03c236294544f79039057a5b30d130c2149e755f2b61907e1cd54a56dc53e3c8471e81f83f5e8d97a5474015d24ec97a074394afa27408a73b8e765b79faf100ea3dd0c98fbfa3d113ffe56c0ffd1a30415e82b34cce8289eb6d01ed59fe6a6b0c99a00e4563c0c0c4fecd127fa357c0e12bfed2a1ac23643d91fd4daf12494bd0a8ac520886efe0caea86fe820b1e79b614fec63737d4930508e037ac05fb254fc362b39cd9b341df7d8504a13b8af2055ea1778c6043c119465f79c118e8080941bcbc0c65ba0cb25e1be8de94207dcb3d2863828a6b17f5a37fd64553ecb6d99879e38af6f3b2da109433c0b75faf20de6ee0ae823b17d1462de38d91f6d5292f02276dbf744ff835dee75532659087e91e5c873b321511b7dd74e86813b4ba4a99394559898206e29f149a53acf0483c0a150c5d1a9a050341c3f1822470381408ff787a2486ea81c6128f1b33ab8fb38e4491fd643ef1fb3efa333b5dbc8fb92daf0b957c19513a838355abcf40ddf272d88e2740dc390b94ee82a5b72a1e7c55ff6ee034d8010702dce3de159a34620b5216d3308e0cd64709cd7f4d5b026f4b81d7d43d8acb36c2251ac576b0ca9411e41eb6ba1d1871845ddcd4d95aa876d0baea1a00b59d68a00e191b59f751e54edecbc4aa0df7585e868a055efdb1dee40921d13d55dfb51f1b245ae2b91fad099e510b75b25daac3d2c529b9bdecf5ab6abcbc99c8f2358f60341eec86a4bd6a9cf0df4004124e31a4cc2e2e3c5cf53a90ee16bb4c6c49e9f50c993a8aa575b0b8e018b608f2321bc64afbace952457246dc8a3e4fc9a6c12a7d7d2779e4333072d4ef27d6e0cc2d1a6990a8376dc5dcd488888d9e436b566ecc63fe715b051859119b1399ef9c905fd63874175e5eeab2361bbfe6247921663c4c20bf6db22bf87477886f6778627bd6d5deffd7042c9b12b9a5448ef2425607e7b08fb984239750595e29f8cc241b238531824a6ba35747df767f1ce58403013394ba85a74871660d7e3e479ab54f2163662a9ffd385764bba475f87d56e191a87e1512afa51b41f664425dc0eccb202080327c8160a677054d5430e2af640d4f1bbf1c8e6d38ca007db30e52ae51781d27f5c760797601abecf3622e370f39edacfa7a8559bd1a5a2db1f0eb202f49f84f14231f593baed4ca91188665dc7daaaacdc8c02520c918a10f95f6894fbc735350a8e75b9e31493f200bbfb3824cce202f218c216310bb9d9e5621e03fd6df18b8bbf43f5eb29a1e1a7b8eb12bb28228bc536973f70f50b6c4e9663c12e861bc58d376b2a47298fd72f12e8af2970a806db26649be9876f7963fcdec769265a44048e6332e2dcd73b0637b5079c7f3c50e74bc43317f87bcb08bb0d307a9b85eb236dba7b7529be680454a76992d36fd9a8dab504f2a954ab14b40872460df0480845e307df07e80307920e5079196d14bc68e657f5d322265c6b4408b39e6a9c435ed485752cbb51a1bae60c86dd11579db163f453bacb9e34bc1b4c11498ea5dd95e8e7b8e57af0c66100745892cb16ec12dbdaa462487273bdb582a05376797c2732be2dc63e094442556be6ea8faf70e12834b7e724d516e3d6480b07b0b7c255b1c1079cb0809e84017ecd8116abe2d6cad207669a2104c9754fb265f6c7b01c5af50814d9f7f6bab90ba9010daa18c04e886939a6fde3e1e49f3823f41ee338f3ad24625143b01963bb9da90d60045604045ca4066634cf4da26b13b0a246d5f6e7a4d3e6de02aac171053c978cb6562d31b2eda0a4df9a8c54d6f0c35d59fba466208d0d9d8a38e968f0c116ebe05a7f681d74fa778fc9d3b098cc3181bb66ae6ac5ed3b13f4a4ab741bfcea12f6b7e5faf64d109fdb5d1fe812cd3fbb477146da300e021b161a1a2456993adfc0c7e7acf71f39a0dcc53dc27660a5e2ef022d334af9478b70aeb40667a20f6842630acf5e25a16efe6f377cedc969ec158878985f76a65af80a54c9d6d5d7585017f18376aa67cf8f5086f60e527268ddd87a75bf440fabb97b273d2a5d12c343c27e67968225d3575f4fa4c2de3618388e7a21acfd2ba7a9df2a195c2a36f627a55f34a8de4c46b5ce2d61298f34892f584bef2dfe95ae2f1fd1f8ca9daf85d8de0567eca0303574667bfff7210224b42180646b32b4cfc7c839b5d58f07ae83ce978ded9006619a5900428f4b051b6a539d6234e4aff0bf34c1602fc52d18dd8fa9b65341a843cef1e5160fa1d80d80a1236b14a4b524f472c6b2bb8296e8960c76398394a916df1e9c503256e14325b3dfc6a4ef123132db25a6dbe375525bc56a13067d2f93f6b4b767a4c24e52c716f87fec09875329d47bce4a0f10f7ad897cdc432b04eb1713466613657ba4fe490faa78f1ab3e309fc4ef98c9696e7bb9b32ee7f7c683697efdd78090d68efa86709c3dd49b7a25bccb368f527db6f950c33208c1c2428b702725211cd2094be97656d1695edacab73cfae2403b176fea2a4345b82f9a77946f945eb1555fa233d30d8cc6a836e02d721500f4cb1ae4f2a9e9ae0220a8b1ac5771e9c99dead7877bbbe04ee3b68b0e149deb9cbb09717e57ea163b5ad4cffcd73c83e06773fed4775e8a3a2fbaee8062ea42a72e9e63bde2d648c55984bf80d79da38eeff0e43a62a6c68122235fb8879d114932c19d951bfd3b9f56a20b069bbe630d7530c8fa203000418114489238d3648ee5350abd01eecd0ca952a049bc9e8b89ca6868f453bcda45462af52137ad0bec88b426848112b9a2a288036e524b403ebc5860a8ed0e282f8337321d855579900918f1f545cec1df3389e96d39a8ffe94e934f71f922a8af2cca5ce04a0e0af87532114d7cfd014938ee3b51ad3b4d64a918ffda6fe9975563e9159ed189e161849922109b799fa29a0f963fd244f3371cf3995f1446e6d9b9da87ebb5b39c10bfc59036bc248a2c859974a86f3e2d1015ea61bd6d75e8abe979f4a1e5a1ca23763041f44c53feca6f94215a806a0b54cbe2bfe4225e190d85115ce936ad1cab3d63bf7bb84046cce2cc8c5ffb16d82664ad152b0740e1db9005d6dc76cb73902642b072b07371a89540162da838754c9c75e63e18169372219dc576fc781122725064df2dd741736c1549918179f3e0815af04cac9ae5dbe3d55329053e2eb581181dcabbf37b47c379ebe9852a27b7e2d02fea7531d849326d6e552b83b810d0fc1cbc4e3c4dbd8a33eda3465d63869d638b20e7e5eeac77697df0313604b6d324c2a2f947d15de8cd580376522ac7f08f2f92bcc94e2b2ccfcc516661a770fe06546c911d18b92c455aaf10d6c06e1a0baf069d8d8de9075050a1a3518e683775d48c00b33e0846611e643634632f8318642501c92aa6f15fc1937f816ed66fb0d569ddc06049a646cda45b2066ba9604fb2b27989f2a837dca90fde6a3933fd61b6d052d8c3cb05002be18fabbdb04152737c14abda16373d08907fadfa3eaf023c91450dbfd06e11ead04a006f113568ac785f45873a6bbcdc12ea2b336a21ef01c39d83a4c7dfeebfed7784b93f65a124dfabc44fc6c0c1c24cce9a91cfcfd8d31c9423", 0xbf2}, {&(0x7f00000004c0)="54ade827a0c1fccd5257d5ed616cc842df40d3b3ba74a4282e4e67a304fd80dcaf5a00ec62bcd84a42b9ad25709d52229070f05d75dafd3888b56423148b085d175297", 0x43}, {&(0x7f0000002340)="574378aa32314b84ca1609000000b59ecf60bdc6c7651186b73de87fdd7b0cea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef821a06044", 0x45}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 12m15.71240624s ago: executing program 37 (id=5211): syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x94, 0x30, 0x400, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x50, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0xf, 0x6, "75888c61ac2c9b4d57ca33"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d47901", 0xcc}, {&(0x7f0000000d80)="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", 0x3a2}, {&(0x7f0000000540)="d805d6a36cce59e7ed5a1f89dd32d02bfe653c", 0x13}], 0x3, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r5, 0x2008002) sendfile(r3, r5, 0x0, 0x80000001) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) 12m13.199520325s ago: executing program 38 (id=5222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "8f2ce6feffffffe2ff554a"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 12m4.765736701s ago: executing program 39 (id=5242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930e0b6f397ee7a964d6dbf627acb2d9426f6a9b00bee1bf4eb68838680", 0x2b}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5", 0xa7}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0xac}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x7}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="0600120000000000040013000a000600080211000001000006001000a70600000500e40000000000"], 0x44}}, 0x0) 12m3.293867079s ago: executing program 40 (id=5250): syz_usbip_server_init(0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/67, 0x43}}], 0x1, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be05009a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02351eb6064c24f1ad325e0325fc473c3aeaf6709e5227bca1f7ba283d381d4f64e01fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41", 0x65}, {&(0x7f0000000940)="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", 0x11e}, {&(0x7f0000000400)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf9ff4df9c2c6ce908079584", 0x92}, {&(0x7f00000017c0)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5a", 0xc8}, {&(0x7f0000000a80)="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", 0xbf1}, {0x0}, {&(0x7f0000002340)="574378aa32314b84ca1609000000b59ecf60bdc6c7651186b73de87fdd7b0cea4e3e6ab15eeac94cdeeabbcf0607e15313d633acf7b576ff32900bf1accfa18ef8", 0x41}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r4, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 11m59.184871533s ago: executing program 2 (id=5260): socket(0x2b, 0x80801, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000002280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) dup2(r6, r6) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) 11m57.497299784s ago: executing program 2 (id=5262): capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create1(0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 11m57.496795424s ago: executing program 2 (id=5263): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f00000004c0)={0x1, 0x1}) (fail_nth: 1) 11m57.348493981s ago: executing program 2 (id=5264): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 11m56.598305207s ago: executing program 4 (id=5243): socket(0x2b, 0x80801, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000002280)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) dup2(r6, r6) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) 11m56.465317999s ago: executing program 2 (id=5267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x401, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4044010) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68ae"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x26, &(0x7f0000000600)="61df192bc884fe0954a7a9a26e9bd62780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) syz_emit_vhci(&(0x7f0000000ec0)=ANY=[@ANYBLOB="040f0405001304"], 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x310, r8, 0x5, 0x80000000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x3ff, 0x5, 0x92d, 0xb7f, 0x8000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5c7, 0x0, 0x50, 0x2, 0xfff7, 0xa, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x48, 0x24, 0x30, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0x9}, {0x6, 0x6}, {0x6, 0x7}, {0x6, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {}, {0x1, 0x6}, {0x4, 0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x5}, {0x0, 0x2}, {0x7, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x0, 0x8, 0x6, 0x1000, 0x1, 0x39ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0x218, 0xff, 0x57, 0x0, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x328, 0x5, 0xc, 0x7, 0x0, 0x3ff, 0x41b, 0xfc6]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x5, 0x14, 0xc, 0x2, 0x1, 0x5, 0x3, 0x12, 0x1f, 0x24, 0x4, 0x36, 0x4, 0x9, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x3, 0x4, 0x10, 0xe, 0x7, 0x3, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x6, 0x9, 0x4, 0x8001, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x1, 0xfffa, 0xe, 0x9, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x8, 0x8, 0xfffb, 0x4, 0x3, 0xe0e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xeda, 0xe, 0xd, 0x3ee, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x2}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x6}, {0x4}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x7}, {0x5, 0x7}, {}, {0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x2}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf8, 0x7, 0x1, 0x8, 0x3, 0x6, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0xffff, 0x0, 0x8001, 0x7f, 0x3, 0xacd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x3, 0x8, 0x4, 0x2004, 0x1c, 0x4a]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0x7}, {0x3, 0x4}, {0x6}, {0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x1}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x7}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x6}, {0x4, 0x5}, {0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x4}, {0x7, 0x5}, {0x3, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x2}, {0x3, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbff, 0x6, 0x10, 0x7fff, 0x4, 0x2, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6c, 0x36, 0x3, 0x60, 0x36, 0x36, 0x0, 0x24, 0x1b, 0x12, 0x9, 0x48, 0x1, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x1}, {0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x7}, {0x7, 0x7}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x1}, {0x6, 0x2}, {0x1}, {0x3, 0x3}, {0x6, 0x7}, {0x6}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0xa}, {}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x45, 0x0, 0x1b, 0x3, 0x20, 0x12, 0x24, 0x18, 0x24, 0xc, 0x9, 0x3, 0x6c, 0x18, 0x9, 0x12, 0x12, 0x16, 0x24, 0x12, 0x0]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0x4, 0x36, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x5, 0x3, 0x3, 0x2, 0x6, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x6, 0x53, 0xf75, 0x1af, 0x1ff, 0x7, 0x411]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x310}}, 0x40010) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 11m55.927811129s ago: executing program 2 (id=5268): socket(0x2b, 0x80801, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000002280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) dup2(r6, r6) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) 11m55.885439884s ago: executing program 41 (id=5268): socket(0x2b, 0x80801, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f00000001c0)={0x0, 0x5, 0x8}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000002280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) dup2(r6, r6) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) 11m54.858049134s ago: executing program 4 (id=5273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 11m53.346785879s ago: executing program 4 (id=5277): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000240), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 11m53.332909028s ago: executing program 4 (id=5279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000003700)="da4c2d5a91a513f44a38ddfefd04808393", 0x11, 0x4004085, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/170}, {&(0x7f0000000180)=""/180}], 0x0, &(0x7f0000000240)=""/42}, 0x9}], 0x1, 0x41, 0x0) 11m51.739105548s ago: executing program 4 (id=5281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x40}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (fail_nth: 3) 11m51.603587267s ago: executing program 42 (id=5281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x40}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (fail_nth: 3) 11m44.077964068s ago: executing program 3 (id=5314): socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x2, &(0x7f0000000c80)=[0x0, 0xffffffffffffffff]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setresgid(r0, r0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0xffffffffffffff18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4087, 0xff7, 0x0, &(0x7f0000000000)=""/5, 0x5}, &(0x7f0000001340)=0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 11m43.173591578s ago: executing program 3 (id=5318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x4084, 0x100) 11m43.078226657s ago: executing program 3 (id=5319): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000004d40), 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000004000000002023000100000002000000"], 0x2a) 11m42.048013782s ago: executing program 3 (id=5323): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000240), 0x1003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 11m41.131528085s ago: executing program 3 (id=5328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x59}, 0x10) openat$6lowpan_control(0xffffff9c, &(0x7f0000002e40), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd70bffbdbdf251b000000060021003000"], 0x4c}}, 0x20002000) syz_io_uring_setup(0xd3e, &(0x7f00000003c0)={0x0, 0x8000000, 0x100, 0x0, 0x220}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x1, 0x2000000000903, 0x6, 0xffff, 0xffff}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f0000002d80)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)=""/148, 0x94}], 0x1, &(0x7f0000000500)=""/4, 0x4}, 0x5}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/66, 0x42}, {&(0x7f0000000640)=""/136, 0x88}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x4, &(0x7f00000019c0)=""/62, 0x3e}, 0x7b91116b}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/162, 0xa2}, {&(0x7f0000001b80)=""/242, 0xf2}, {&(0x7f0000001c80)=""/55, 0x37}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/49, 0x31}], 0x6, &(0x7f0000002d40)=""/58, 0x3a}, 0x80000001}], 0x3, 0x10020, &(0x7f0000002e00)={0x0, 0x3938700}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r7, &(0x7f0000002e80)="3948fa64c18805b49f5f9006ec84a29b60cec09e178adf69464f4498b0f4fd6c0b80f01a01fea6002370a35853b0acc62663e110cbefbab37b0f3bc7c9f481f31823b381e2c59d2795e705398a3c9b4bfafa34b23bb427a5a000c7141452526f095c6b86ccf26cd344b0d1a3e5fd02d288f9ab9556d70f262b7c4f35d9485ec2cb48c1a4fcadbc1ecb37f7d2", 0x8c) io_uring_setup(0x76c5, &(0x7f0000000100)={0x0, 0x6834, 0x2, 0x3, 0x3c6}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4}) mlock(&(0x7f0000ff7000/0x1000)=nil, 0x1000) 11m39.220291646s ago: executing program 3 (id=5332): connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x3, 0x7a}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvfrom$x25(r4, &(0x7f0000000180)=""/20, 0x14, 0x2, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11m38.965071912s ago: executing program 43 (id=5332): connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x3, 0x7a}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvfrom$x25(r4, &(0x7f0000000180)=""/20, 0x14, 0x2, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 10m56.357251366s ago: executing program 5 (id=5594): syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x21c}}, 0x4000041) 10m56.356984786s ago: executing program 5 (id=5595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) close(r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @empty, 0x7fffffff}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000400)="0788280028b85c72ec68e7d6292a9577fb899b130b927441705b6eb85e2fc0587d787cdf9a5864bcc34dfbdf65448da55560115382538c62484ef0a74a692ba951b03bfa06cf435215e063d4ef6555f8321f244d17944173a91a8e81e76758d6d9672f6d0da99885ec7fba6715344eccc79b26d42b4ca50c6b5a247f2d54f079e3aeca93194d7efc7402da54538ad6bf6a087576ffb85a7c5551ab022f844d93de605da4076ecdb83b9b708ebacef586d9b73bf9c348968cb9d6e00c81"}, {&(0x7f00000004c0)="0e53599cc11409521c4a95fe3fa21e13c769970ece3b93a1710be3889950f81adb5cf8a4c2c82be64eab66660d95ef9a802019dc20f62c5540b0e8581a8aa2ba10a017024bd2a1377ddeb3d00b2188ec7d1416f240702879e3875f342c71c7b83ba69a6afdeb9595936cbadf4746bd1239ff5e107ee5581d0c9d7ab448d18f4fa966c9d6419f10e92ab2fd4a4d18818727a393d8023c2bffc74a2be5"}, {&(0x7f0000000240)="05d89cd78f086db3cf1ce400ab5d594940ac9508370b3af9ef49c4d7ebf03ea98e690960437e02ec98"}, {&(0x7f0000000580)="ee8f8ddf247c66a957deca874442f4c5599fecbb8b9bdaf7f861dc8e550375055679f926b93ac3f09654b6799e2b6856f309dceb598554b534ed78b989fe022a535c1a6a56f4d588d7e8865ed6be486f6758bb4e76d440692d4908f2274a32c8c109269783fcdede47b8d4d913585094f25e77cfaa778df8f07e257bf4f92fdaf1623c40395dc41e7b8664d5e884ccf43f185e4253288579"}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) 10m55.438199442s ago: executing program 5 (id=5607): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000fc000000000000000200000085200000050000001801000020696c2500000000bfa100400b00000000000000f8ffffffb702000008000000b703000002000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000040605000000000001000000001000020500010007000000a0a83faa2ae5f5108029a8bea648fe86fb16b0484c39f31152491406406a0091921d6a96382a665bacd10427095b6b1d17a677580c78f0a4"], 0x1c}, 0x1, 0xffff0000, 0x0, 0x20000080}, 0x80) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 10m54.506833594s ago: executing program 5 (id=5613): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) shutdown(r0, 0x1) mkdir(&(0x7f0000000100)='./file1\x00', 0x8b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x434a00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffca5) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) getdents64(r3, 0x0, 0x11) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x10}, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) openat$full(0xffffff9c, &(0x7f0000000040), 0x54540, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x8}, 0xc) poll(&(0x7f0000000080)=[{r0, 0x5310}, {r7, 0x8628}, {r7, 0x2210}], 0x3, 0x62b) 10m54.147595868s ago: executing program 5 (id=5617): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000001100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0180000008000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb00001c00128009000100766c616e000000000c0002800600010001000000"], 0x5c}}, 0x0) syz_clone3(&(0x7f0000000440)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r3, 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) getsockopt$MRT(r0, 0x0, 0xce, 0x0, 0x0) 10m53.87787453s ago: executing program 5 (id=5619): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0x4, 0x70bd2b, 0x0, {}, [{0x70, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x81, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x70) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r3}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) r7 = memfd_create(&(0x7f00000003c0)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r3}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) r7 = memfd_create(&(0x7f00000003c0)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@deltfilter={0x14e4, 0x2d, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xf, 0x6}, {0xe, 0xc}, {0xfff1, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x74}}, @filter_kind_options=@f_flow={{0x9}, {0x14a4, 0x2, [@TCA_FLOW_POLICE={0x14a0, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x93bf, 0x8, 0xfffffff9, 0x1, 0xff, {0x4, 0x1, 0x8, 0x7f, 0xfff9, 0x2e55}, {0x5, 0x2, 0x6, 0xc0b5, 0x3}, 0x100, 0x3, 0x53d2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x3, 0x8001, 0x8037, 0xcfeb, 0x33d9, 0x0, 0x4, 0x7, 0x14b, 0x8, 0x6, 0x6a4, 0x6, 0xd68b, 0x4, 0x7, 0xcd5, 0x5, 0x401, 0x5, 0x0, 0x6, 0xb2, 0xde, 0x2, 0x67, 0x10, 0x6, 0xffdffeff, 0x2, 0x11, 0x8, 0x9, 0x4, 0x0, 0xb, 0xd715, 0x3ff, 0x2d0, 0x2, 0x1000, 0x7f, 0x5, 0x1, 0x210, 0x3, 0x9, 0x3, 0x2, 0x1, 0x3, 0x1, 0x5, 0x4, 0x6, 0x9, 0x485, 0x7, 0x1, 0xfe5c, 0xffffffff, 0xb4c, 0xffffffff, 0x5, 0xa9eb, 0xe579, 0xa33, 0xd, 0x1, 0x3, 0xf8000000, 0x9, 0x9, 0x6, 0x4, 0x1, 0x3, 0x8000, 0x1, 0x0, 0x6, 0x10, 0x8000, 0xffffff01, 0x0, 0x10001, 0xfffffffe, 0x3, 0x1, 0x8001, 0x7, 0x8, 0x1, 0x2, 0x3333e4fb, 0x6, 0x4, 0xffffffff, 0x8, 0x4, 0xfff, 0x8, 0x9, 0x10001, 0x200, 0xfffffff8, 0x6, 0x1, 0x2, 0x5, 0x5, 0x8, 0x10, 0x2766, 0x0, 0x4, 0xfff, 0x8, 0x6, 0x2000, 0x9, 0x7eb3, 0x1, 0x8, 0x7, 0x33, 0x6, 0x8, 0x0, 0x9, 0xd4e, 0x5, 0x7, 0x1, 0x7046402a, 0x3, 0xfffffffa, 0x7ff, 0x3bc00000, 0x80000001, 0x1, 0x6, 0x1000, 0x90, 0x1, 0xa1, 0x8, 0x6, 0x3, 0xe, 0x2, 0x207, 0x2, 0xfffffff7, 0x5, 0x2, 0x8, 0x9, 0x8, 0x0, 0x1, 0x5, 0x10001, 0x8, 0x1, 0x1, 0x400, 0x9, 0xf0b18829, 0x0, 0x7, 0x100, 0x2, 0x4, 0x2, 0x10000, 0x7, 0x8, 0x0, 0xe, 0xf430, 0x8, 0x6, 0x800, 0x80, 0x0, 0x7, 0x1, 0x8, 0x70fe3436, 0xf, 0x1, 0x9, 0x5, 0x7, 0x2, 0x8, 0x9, 0x5, 0x81, 0xf, 0x4, 0x3224, 0x6, 0x9, 0x2, 0xfff, 0xccd, 0x5, 0x5, 0x3, 0x80000000, 0x7, 0x9, 0x1000, 0xf8, 0x4, 0x2, 0x3, 0xf, 0x7ff, 0x80000000, 0x8, 0x100, 0x0, 0x187, 0xa, 0x51, 0x2, 0x4, 0x800, 0x1, 0x7, 0x83c0, 0x0, 0x7, 0x455b, 0x3, 0x9, 0x3b3, 0x1, 0x9, 0x8, 0x9, 0x2b65, 0x8, 0x5, 0x8, 0x9, 0xffffff88, 0x8263, 0x5, 0x9, 0x23, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x3, 0x2, 0x0, 0x8, 0x9, 0x8, 0x7, 0x1c00000, 0x0, 0xffffffff, 0x788c, 0x8, 0x1, 0x3, 0x5, 0x7, 0x8, 0x98d, 0x1, 0x2, 0xc, 0x40, 0x8, 0x7ff, 0x7, 0x80000000, 0x6, 0x2, 0x9, 0xf, 0x0, 0x8, 0x4, 0x29, 0x1, 0x4, 0x1, 0x1, 0x7fff, 0x5, 0x76d1a578, 0x3, 0x8, 0x1000, 0xe0000000, 0x6, 0x7, 0xe, 0x2, 0x7, 0x8, 0x2, 0x6, 0xfffff800, 0x7, 0xffffffff, 0x1, 0x7, 0xd72, 0x8, 0x2, 0x2e25, 0x3, 0x2, 0x7, 0x5, 0x7fff, 0x9, 0xf2c, 0x8, 0x7, 0x3d4, 0x2, 0x7, 0x7ff, 0xd, 0x80a5, 0x1, 0x1, 0x7, 0x0, 0x6, 0x80000000, 0x1, 0x10, 0x1, 0xffff65fb, 0x3, 0x1, 0x8, 0x5, 0x5, 0x6, 0x8, 0x5, 0x7fff, 0x3, 0x4, 0x40, 0x9, 0x5, 0x0, 0x2, 0xfffffff7, 0x9, 0x2, 0x2, 0x10, 0x3, 0x0, 0x882a, 0x0, 0x52b9ce99, 0x20000, 0x5, 0x5, 0x8, 0x1, 0x8, 0x1, 0xfcb, 0x1000, 0xc09a, 0xd, 0xc170, 0x66e248d4, 0x7fffffff, 0x1, 0xfffffffb, 0x7fffffff, 0x5, 0x1, 0x2d545df1, 0x5d, 0x5, 0xd, 0xffff, 0x5, 0x6, 0x4, 0x2, 0x40, 0x5, 0xa, 0x0, 0x0, 0x4, 0x0, 0xe802, 0x8d94, 0xffffffff, 0x8001, 0x2, 0xfff, 0x8, 0x1765, 0x8, 0x1, 0x81, 0x5, 0x9, 0x3, 0xfff, 0x7f, 0x2, 0x7ff, 0x2, 0xc6c5, 0x80fd, 0x1, 0x8f1, 0x0, 0x6, 0x0, 0x1, 0x7, 0x6, 0x80, 0x8, 0x7ff, 0x3, 0x0, 0x9, 0x7, 0x2, 0x7ff, 0x2, 0x8, 0x1, 0x100, 0x9, 0x4, 0x793, 0x1, 0x9, 0x8, 0xffffffff, 0x5, 0x6, 0x75a, 0x8, 0x10, 0x9, 0x5c, 0xd07, 0x9, 0x40c1, 0x6, 0xd80, 0x4, 0x2eca, 0xffff, 0x8, 0x5, 0x5, 0x7fff, 0x8, 0x9, 0x800000, 0x4, 0xf631, 0x5206, 0x5, 0x6, 0x2, 0x6, 0x7, 0x2, 0x8000, 0xffffffff, 0x1, 0x4, 0x7, 0x9, 0x4, 0x88, 0x4, 0x400, 0x0, 0x2, 0x8, 0x9, 0x1, 0x4, 0x3, 0x9, 0xb, 0xfae, 0xfff, 0xd3, 0x1, 0xe, 0x7, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x5, 0x6, 0x8000, 0xa9b2, 0x401, 0x4, 0x6, 0x5, 0x3, 0x81, 0xfffffff7, 0x2, 0x5, 0xfffffffa, 0x8, 0x1, 0x3, 0x8, 0x9, 0x3, 0x8, 0x200, 0x0, 0x4, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x7, 0x3, 0x1, 0x9, 0x2, 0x3ff, 0x3, 0x9, 0x5, 0x9, 0xa, 0x7, 0x401, 0x0, 0x800000, 0x6, 0x1e3, 0xe, 0x9, 0x8, 0x80000001, 0x68, 0x9, 0x8, 0x7, 0x400000, 0x10000, 0xfffffff8, 0x9, 0x8, 0x5, 0x66, 0x8, 0x10, 0x0, 0x5, 0x6, 0x101, 0x9, 0x6e2, 0x9, 0x6, 0xb, 0x100, 0x2, 0x6, 0x0, 0x4, 0x2, 0xe27, 0x5, 0x4, 0x9, 0xe, 0x2, 0x3c6b, 0x0, 0x0, 0x0, 0x80000000, 0x6, 0x8, 0xfffffeff, 0x1, 0x2, 0xf, 0x0, 0x0, 0x4d9, 0xfffff8de, 0x7fff, 0x0, 0x9, 0x48000000, 0x2, 0x9, 0x5, 0x7, 0xa65, 0x7f, 0x36b, 0x3, 0x265, 0x1, 0x9, 0x6f80, 0xc00000, 0x100, 0x4, 0x2, 0x2, 0x9, 0x4, 0x1, 0x1c00000, 0x200, 0x6, 0xff, 0xfffffffd, 0x7fff, 0x7, 0xc6d5, 0x5, 0x0, 0x8, 0x7, 0x9dc, 0x7fffffff, 0xb, 0xfffffffe, 0x7ff, 0x2, 0x5, 0x81, 0x4, 0x40, 0x1, 0xb1, 0x0, 0x8, 0x7, 0x8001, 0x8, 0xa9d3, 0x28, 0x3, 0xc, 0x8, 0x6961, 0x1, 0x3, 0x7fff, 0x5, 0x60c9, 0x6, 0x7, 0x3, 0x3, 0x8000, 0x1, 0xdb9c, 0x5, 0x8, 0x6, 0x5, 0x2, 0x401, 0x2, 0x334, 0x0, 0x4000000, 0xffff, 0x80, 0x7, 0xfffffffd, 0x7f0, 0x5, 0x400, 0x0, 0x8, 0x8, 0x0, 0xfffffff8, 0x0, 0x8, 0xfffffffe, 0x1d6f, 0x9, 0x3ff, 0xffff, 0x7, 0xe, 0xfffffff7, 0x6, 0xffff, 0xc9ec, 0x100, 0x0, 0x4, 0x4, 0x7, 0x2, 0x8, 0xf295, 0x0, 0x7, 0x4, 0x2fbb6826, 0x3, 0x5, 0x1, 0x2, 0xc, 0x7, 0x2, 0x7c7d, 0x8, 0x2, 0x1, 0x0, 0x800, 0x7, 0x5, 0x1, 0xa73, 0x2a400000, 0x1, 0x6, 0xf1a9, 0xbf7, 0x8000, 0xcfc, 0x401, 0x1ff, 0x7fff, 0x4, 0x3, 0x7, 0x5, 0x6, 0x2f, 0x3, 0x5, 0x9, 0x2, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8, 0x62c, 0x7, 0xfffff001, 0x10001, 0x9, 0x0, 0x10, 0x7, 0x3d, 0xc95b, 0x2, 0x6bc, 0x2000, 0x1ff, 0x2, 0x6, 0x1000, 0x5, 0xfffffff7, 0x11, 0x10000, 0x4, 0x6, 0x9, 0x6, 0x1, 0x99, 0x1, 0x4, 0x6, 0x4, 0xe69, 0x6, 0x6, 0x1, 0xc5, 0xc58, 0xfffffffc, 0x40, 0x80, 0x9, 0x6, 0xd, 0x6, 0x5, 0x8, 0x4, 0x5, 0x8, 0x8, 0xfffffff7, 0xb5, 0x9, 0x7fffffff, 0x3, 0x2, 0x6, 0x7, 0x4, 0x8, 0xfffff484, 0xe00, 0xd0, 0x80000000, 0xf, 0x80000000, 0xffff, 0x3f5, 0x1c00000, 0x10000, 0x7, 0x101, 0x3, 0x7fff, 0xa9a1, 0x5, 0x3, 0x1, 0x1, 0x1, 0xffff, 0x3, 0x401, 0x0, 0x7ff, 0x3, 0x3, 0x3, 0xffff, 0xfffffff2, 0x9, 0x0, 0x7f, 0x9, 0x7, 0x7, 0xccc3, 0x9, 0x2c55, 0x81, 0x5, 0x7, 0xf, 0x237, 0xffffffff, 0x787, 0xf8, 0x80000001, 0x7, 0x5, 0x8, 0x9, 0x3, 0x7a27, 0x6763, 0x5, 0x7, 0xfffffff8, 0x9, 0x6, 0x8, 0x9b82, 0x941, 0x1, 0x5, 0x40, 0x7, 0x6eb1, 0x5, 0x0, 0x8001, 0x401, 0x400, 0x81, 0x80000000, 0xffffffff, 0xffff137c, 0x1, 0x3, 0x8, 0x3d68, 0xfff, 0xe1, 0x5, 0x0, 0x8, 0x9, 0x5, 0x6, 0xeef, 0xcee, 0xfffff801, 0x7, 0x9, 0x5, 0x6, 0x1, 0x401, 0xa, 0x7fffffff, 0x0, 0x1, 0x9, 0x7, 0x6731, 0xd, 0xd, 0x4, 0x3, 0x4, 0x3, 0x7, 0x7, 0x9, 0xcf9, 0xb, 0x7, 0x216, 0x2, 0xfffffffc, 0xfda, 0x0, 0x5, 0x6, 0x7, 0xfff, 0x0, 0xe8, 0xc908, 0xe6, 0x6, 0x1f9b, 0x241, 0xfffffff9, 0x8, 0x4, 0x6, 0x4, 0x4, 0x9, 0x2, 0x5cc, 0x5, 0x5, 0x1000, 0x96d, 0x3, 0x1, 0x7, 0x10001, 0x4, 0xd, 0x5, 0x40, 0x7, 0x5, 0x40, 0x801, 0x4, 0x3, 0x4, 0x8, 0xffffffff, 0x0, 0xbd, 0x8000, 0x2, 0xffffffc0, 0xb651, 0x10001, 0x2, 0x0, 0x6, 0x5, 0x0, 0x3, 0x81, 0x4, 0xfffffff9, 0x3, 0x14, 0xffffc113, 0x9, 0x8, 0x2, 0x7ff, 0x9, 0xc000, 0x392, 0x1, 0x0, 0xffff0213, 0xfffffc01, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x3, 0x9, 0xa, 0x9, 0x2, 0xfffffffb, 0x8, 0x2, 0x62d, 0x6, 0x6, 0x6b, 0x5, 0x0, 0x5, 0xffff, 0x2, 0x4, 0x1, 0x3, 0x401, 0xbd, 0x800, 0x0, 0x3, 0x4, 0x6, 0x0, 0xfffffff8, 0x6a8, 0xffffffff, 0x3ff, 0x2, 0x6, 0x4, 0x4, 0x7fff, 0x800, 0x3, 0x3ff, 0x5, 0xca6c, 0x3, 0x9, 0x8, 0x5, 0xbf1, 0x3, 0x6, 0x3, 0xfffffff6, 0x8001, 0x3, 0x77, 0x80, 0x4, 0x1, 0x5, 0x1, 0x41d, 0x40, 0x6, 0x80000000, 0x89, 0x5, 0x5, 0x4, 0x3, 0xffffff31, 0x0, 0x2, 0x3, 0xbb, 0x741, 0x4, 0x5, 0x4b00000, 0x2, 0x5832, 0x0, 0x963e270e, 0x10001, 0x8, 0x5, 0x3, 0x4, 0xfffffffa, 0x6, 0x8, 0x3, 0xfffffffb, 0x2, 0x7, 0x9, 0x2, 0x4, 0x8, 0x3, 0x1, 0xffc9, 0x6, 0x2, 0x8, 0xa, 0x7, 0xb, 0x7, 0x9, 0xd69, 0x401, 0x1, 0x130b732b, 0x4, 0x5, 0x7, 0x101, 0x4, 0x8, 0x1, 0x4, 0x8, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1000, 0xfff, 0x9, 0x8, 0x8, 0x8001, 0x400, 0x80000000, 0xd, 0x5, 0x3, 0xffffffaf, 0x2, 0x1, 0x3, 0xfffffffb, 0x3, 0x7fffffff, 0x8, 0x6, 0x800, 0x4, 0x8, 0x4af, 0x9, 0x10, 0x0, 0xb63, 0x7fff, 0x1, 0x1, 0x6, 0x3, 0x7, 0xffff, 0x1, 0x8000, 0x58000000, 0x6, 0x8, 0x7, 0x8, 0x7f, 0x6, 0xb6, 0xfffffffe, 0xfffff801, 0x8, 0x1, 0x0, 0x8, 0x3, 0xa, 0x6, 0x9, 0x7, 0x9, 0xe, 0xb, 0x9, 0x8, 0x4, 0x1, 0x2, 0x4, 0x9609, 0x8, 0x3, 0x7, 0x8, 0x6, 0x97, 0x0, 0x6, 0x9, 0x5ba3, 0x3, 0x2, 0x3, 0x80000000, 0x6f03, 0x9, 0x401, 0x7a, 0x2d48, 0x0, 0x5, 0x5d, 0x800, 0x68a9, 0xd86, 0x401, 0xfff, 0xd4b1, 0xc, 0x3, 0x7, 0x1, 0x0, 0x6f, 0x8ca, 0xffff, 0xe5, 0x80000000, 0x6, 0x1bc, 0x1, 0x3, 0x2d3f, 0xa, 0x8, 0x686, 0x8, 0x5, 0x2, 0x218814b1, 0x390f, 0x1000, 0xf, 0x9, 0x6ed, 0xfffff801, 0x3, 0x4, 0x10000, 0x1, 0x101, 0x679]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffeffffffa, 0x5, 0xffff, 0x5, {0x9a, 0x0, 0x7, 0x73b, 0x1, 0x6}, {0x4, 0x0, 0x0, 0x1, 0x2, 0x2}, 0x6, 0x7, 0x7}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x14e4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)=@ethtool_cmd={0x34, 0x3, 0x9, 0x9, 0x0, 0x4, 0x1, 0xa, 0x2, 0x76, 0x5, 0x36e7, 0x3, 0xfb, 0xb0, 0x9, [0x5, 0x7ffffffe]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001f5ffffff00000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b400000000034000480200001800d00010073796e70726f7879000000000c0002800500020000000000100001800700010072740000040002800900010073797a3000000000000000000a00"/208], 0xd0}}, 0x40000) 3m58.403977981s ago: executing program 1 (id=8228): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r0) r1 = dup(0xffffffffffffffff) r2 = msgget$private(0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001000)) msgrcv(r2, &(0x7f00000004c0)={0x0, ""/71}, 0x4f, 0xda72ed5a9dc29567, 0x800) 3m57.013799976s ago: executing program 1 (id=8238): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 3m57.013320398s ago: executing program 1 (id=8239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x1c, 0x84, 0x2, {0x0, 0x241}}], 0x1c}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x1c, 0x84, 0x2, {0x0, 0x241}}], 0x1c}], 0x1, 0x0) (async) 3m56.915221609s ago: executing program 1 (id=8240): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="d1fe4dde32ba4146c5cee18701eca5987e57fa9c6f9f04cf10a1aee65dce5e871e799d71f58759fe7e4e04cf25d2942dafd2e8adc9e0382142aa52b70f495f25ca8f42d42b92975eeb8cd335c6e1e9cc60c4ca1622eab0756ea8fa6503863a3550275a35d5cd2094dc16a9b1385e588724bbb43a11276875a6966ec2cd29535522ea837c2831551184237e96c92a30265997583c25ffff0000c4b957b21dc55ef76be4c6e7b4bba1de7934cb8083c9fcda60ac91076c735726f7f32bd9cf23e395cb4f7969ab00"}) 3m56.552621286s ago: executing program 1 (id=8241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0xfffffff4}, &(0x7f0000000500)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd=r2, 0xffffffffffff0001, 0x0, 0x0, 0x16, 0x41997105304e9ca4}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffff, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x200020, 0x0, 0x0, 0x1000, 0x400]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}, 0x0, {[0x3]}}, 0x5c) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0xc) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0xfffffffe, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3]}}, 0x5c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000480)={r7, 0x9}, &(0x7f00000004c0)=0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d3000000bf09000000000000b6090400003cc40065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b7000000000000009500000000000000213fc15b2f04d73953e311364542c956ff4f57481cd64db096e807ba70c1e62af1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000090001007379"], 0x34}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3m56.552392396s ago: executing program 45 (id=8241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r3 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0xfffffff4}, &(0x7f0000000500)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd=r2, 0xffffffffffff0001, 0x0, 0x0, 0x16, 0x41997105304e9ca4}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0xffff, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x200020, 0x0, 0x0, 0x1000, 0x400]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}, 0x0, {[0x3]}}, 0x5c) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0xc) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0xfffffffe, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3]}}, 0x5c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000480)={r7, 0x9}, &(0x7f00000004c0)=0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d3000000bf09000000000000b6090400003cc40065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b7000000000000009500000000000000213fc15b2f04d73953e311364542c956ff4f57481cd64db096e807ba70c1e62af1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000090001007379"], 0x34}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3m41.183654484s ago: executing program 9 (id=8353): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="a9bff09f8f2cd5cec5d622976424d6ac95d083bbddd4adbeca505a9d4930911eb95b1bcc5ec57801a0d32026bd5c1229427fed48e14c7974897c1040feccd3025aef", 0x42, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xd, 0x800) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newtaction={0x78, 0x30, 0x1, 0xbabd, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m40.155031728s ago: executing program 9 (id=8363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0xf5ffffff, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 3m40.063870941s ago: executing program 9 (id=8364): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043e1301", @ANYRES16], 0x16) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030307030303030103030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="75aea5d624ab815f696e6f64655f686172646c6aef9be4b28195132c003a7ec55c5847969425401f2637ae1d2148969e6d45fe0000008000000000a5b65d5e9b9ac5dee71dffae5ceb1b91ed5f"]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x4000, 0x0, 0xfffffdc5) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x24}}, 0x50) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m40.063590534s ago: executing program 9 (id=8365): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x5872a4d6c3edc95e, 0x4) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @private=0xa010100}, 0x8) 3m40.013256332s ago: executing program 9 (id=8366): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup(r1) r3 = msgget$private(0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001000)) msgrcv(r3, &(0x7f00000004c0)={0x0, ""/71}, 0x4f, 0xda72ed5a9dc29567, 0x800) 3m39.283407428s ago: executing program 9 (id=8371): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42042, 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x1, 0x1) ioctl$TIOCCBRK(r0, 0x5428) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) lseek(r4, 0xe, 0x4) 3m24.183246785s ago: executing program 46 (id=8371): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42042, 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x1, 0x1) ioctl$TIOCCBRK(r0, 0x5428) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$netlink(r2, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r10, {0x4, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) lseek(r4, 0xe, 0x4) 6.934386322s ago: executing program 7 (id=9970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324151, 0x0, 0xb, [{0x0, 0x10000000}, {0xffffffff}, {}, {0x80}, {}, {}, {}, {0x9}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000840) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x700) 5.628101341s ago: executing program 7 (id=9980): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0xa, 0x1, 0x1, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="9f30052809aa4df2853c471eb5f32f5143ecc2044850e0f92dffe8445bb571b42250de67e0dac1af63918d814a8f2cb1e4e3c2219111e9c66e055d4b1b0f8c4bbf2269bfc0b6d29c9dd8e323d1f414593eac4b0681c1a517981e29273abc8f24569896f3c5a6b19f011c0cf29d906da3642e4daaa165ff6f3c9dc77f831129fef8619496d71fa41edcfd188894d11cbff878271cbfde456ad608d266c747dffe220ab545e7a011d9d1330a580487a2f9c542d2ff482fd1b0df3f5ce5d2b54464e0889fadb82efc625a8e561edcdb345a34e5752e4938c3be21fb8811845419cebd566202747733b9d806362792e6", @ANYBLOB="0023ef0d858269173bfdc4f16e29d4104edbeba0efe784fd539f06171960347fd566b6", @ANYBLOB, @ANYRES64=r2], 0x20) r4 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080), 0x6) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r9}) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, &(0x7f0000000280)='4', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r11) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000e00)={0x1, r10, r8}) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r13, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r15, 0x0, 0xd4, 0x0, 0x0) 5.609023385s ago: executing program 0 (id=9981): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x30c001, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000fdb8bf45d300", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x40) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xe10, 0x870, 0x1, 0x3, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r9 = openat$rtc(0xffffff9c, &(0x7f0000000140), 0x40481, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f0000000180)={0x22, 0x0, 0x11, 0x8, 0xb, 0x3, 0x4, 0x14e, 0xffffffffffffffff}) connect(r1, &(0x7f0000000000)=@ethernet={0x300, @broadcast}, 0x80) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 5.309125094s ago: executing program 0 (id=9983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) close(r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @empty, 0x7fffffff}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x5, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f00000004c0)="0e53599cc11409521c4a95fe3fa21e13c769970ece3b93a1710be3889950f81adb5cf8a4c2c82be64eab66660d95ef9a802019dc20f62c5540b0e8581a8aa2ba10a017024bd2a1377ddeb3d00b2188ec7d1416f240702879e3875f342c71c7b83ba69a6afdeb9595936cbadf4746bd1239ff5e107ee5581d0c9d7ab448d18f4fa966c9d6419f10e92ab2fd4a4d18818727a393d8023c2bffc74a2be5", 0x9c}, {&(0x7f0000000240)="05d89cd78f086db3cf1ce400ab5d594940ac9508370b3af9ef49c4d7ebf03ea98e690960437e02ec98", 0x29}, {&(0x7f0000000580)="ee8f8ddf247c66a957deca874442f4c5599fecbb8b9bdaf7f861dc8e550375055679f926b93ac3f09654b6799e2b6856f309dceb598554b534ed78b989fe022a535c1a6a56f4d588d7e8865ed6be486f6758bb4e76d440692d4908f2274a32c8c109269783fcdede47b8d4d913585094f25e77cfaa778df8f07e257bf4f92fdaf1623c40395dc41e7b8664d5e884ccf43f185e4253288579", 0x98}], 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) 4.135134721s ago: executing program 7 (id=9986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x6, 0x8}, {0xd, 0x1, 0x6, 0xfffc}}}}, 0x15) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="26000000220057010500000700000000000029c2e5551f00724a51f0ee83376c3400b017ca5b", 0x26) connect$netlink(r2, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r2, &(0x7f0000000000)='\"', 0xfdef) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x5, 0x1, 0xa2, 0x8, 0x81, 0x6, 0x3, [{0x1, 0xd2d6, 0x34, 0x81c}]}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40) 4.131903896s ago: executing program 8 (id=9994): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x5452, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/image_size', 0xa44c2, 0x3) write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) 3.051925968s ago: executing program 8 (id=9987): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x3ec0, 0x0, 0x0, 0x0) 2.919676842s ago: executing program 0 (id=9988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324151, 0x0, 0xb, [{0x0, 0x10000000}, {0xffffffff}, {}, {0x80}, {}, {}, {}, {0x9}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000840) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x700) 2.65163269s ago: executing program 8 (id=9989): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x5, 0x19509, 0x1, 0x20}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) 2.379070859s ago: executing program 8 (id=9990): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000840), 0x20042, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x8, &(0x7f0000000300)={0x21, "33e1bcc8514934e94b17e9a46de77c36d2712c0e2401a00505e49c1df7c1853cfb"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) write$UHID_INPUT(r5, 0x0, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x541b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x66) openat$fb1(0xffffff9c, &(0x7f0000000080), 0x400001, 0x0) 1.551805771s ago: executing program 0 (id=9995): r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x77a3, 0x12, 0x3, 0x104}) fanotify_init(0x200, 0x101000) socket(0xa, 0x3, 0x3a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x800000000009, 0x0, 0x2, 0x100007fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.551439799s ago: executing program 6 (id=9996): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="041c0580380c0603"], 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r1, 0x11e, 0x2, 0x0, &(0x7f0000000040)=0xffffffffffffff84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.433381137s ago: executing program 6 (id=9997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd, 0x3]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0xcabc258ba52e7b, 0x48080) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r6, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) close(r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @empty, 0x7fffffff}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x5, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f00000004c0)="0e53599cc11409521c4a95fe3fa21e13c769970ece3b93a1710be3889950f81adb5cf8a4c2c82be64eab66660d95ef9a802019dc20f62c5540b0e8581a8aa2ba10a017024bd2a1377ddeb3d00b2188ec7d1416f240702879e3875f342c71c7b83ba69a6afdeb9595936cbadf4746bd1239ff5e107ee5581d0c9d7ab448d18f4fa966c9d6419f10e92ab2fd4a4d18818727a393d8023c2bffc74a2be5", 0x9c}, {&(0x7f0000000240)="05d89cd78f086db3cf1ce400ab5d594940ac9508370b3af9ef49c4d7ebf03ea98e690960437e02ec98", 0x29}, {&(0x7f0000000580)="ee8f8ddf247c66a957deca874442f4c5599fecbb8b9bdaf7f861dc8e550375055679f926b93ac3f09654b6799e2b6856f309dceb598554b534ed78b989fe022a535c1a6a56f4d588d7e8865ed6be486f6758bb4e76d440692d4908f2274a32c8c109269783fcdede47b8d4d913585094f25e77cfaa778df8f07e257bf4f92fdaf1623c40395dc41e7b8664d5e884ccf43f185e4253288579", 0x98}], 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80) 1.361697606s ago: executing program 8 (id=9998): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x5452, 0x0) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/image_size', 0xa44c2, 0x3) write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080)=0x6c, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x8000000, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) 1.189502854s ago: executing program 7 (id=9999): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000160, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0xd) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a80), 0x3f50cb9d0755139a, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r4, 0x5, &(0x7f0000000140)=0x8) r5 = dup(r3) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000240)={0x10000001}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x6, 0x9, 0x3, 0x3, 0x2}) 969.090442ms ago: executing program 0 (id=10000): mkdir(&(0x7f0000000580)='./bus\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x250, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x220, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_ACT={0x1e8, 0x9, 0x0, 0x1, [@m_xt={0x8c, 0x9, 0x0, 0x0, {{0x7}, {0x4}, {0x62, 0x6, "3a7e1567ecedab9e21520a55a3f0e918dbedf4733c1144700b1350884e0a489c8499f7cfae80a2c7be8d2611df141ccc7bcc14a57e176965e89f27fd99bd65b398d8da1b23c3a44f8a31d78a8d0aac3295111ba5db8567face7b95d400eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x158, 0x16, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xfffffffd, 0x100, 0x0, 0x4, 0x5}, 0x10}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4, 0x8, 0x6, 0x4, 0x28000}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @TCA_SKBMOD_DMAC={0xa}]}, {0xbc, 0x6, "07b2b01d2e41d7f25947d80af13ffab68f118a0a59dd34d4fcdc9e5abdcb38b9e7c951f7b3da384cae43c07e073f4aad8166499e94aa09e0554a38751ff421cc4cbb15b71547dd35b1fa77a0e0376458e955878095121c2fc71927ec7f05a5576148ba09950a3b42304c93c9430375be52940715caa07914157858ae2689fddb0a56d04334d4a555094cf64dd683bf40a406fce874ffa6046ade5398fcd0272fd36e25e2558c1e0be8ef3a19af28e9554e8d8c02ca4ba80e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x250}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) 907.677606ms ago: executing program 7 (id=10001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="ca9f2c2f8322", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3ff, 0x8}]}}}}}}}}, 0x0) 831.763123ms ago: executing program 7 (id=10002): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x158, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x8, 0x6, 0x19bf1695, 0x0, 0x2, 0x0, 0x6}}, {0x10, 0x2, [0x6, 0xc443, 0x8, 0x1, 0x8, 0xcd1]}}, {{0x1c, 0x1, {0x9, 0x57, 0x7, 0x4, 0x0, 0x7, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xff, 0xb, 0x1, 0xffff, 0x0, 0xc, 0x7, 0x2}}, {0x8, 0x2, [0x7, 0x5]}}, {{0x1c, 0x1, {0x78, 0x4, 0x5, 0x80, 0x2, 0x8, 0x7fff, 0x7}}, {0x12, 0x2, [0x7ff, 0xfff4, 0x2, 0xd6, 0x8000, 0x7, 0xb]}}, {{0x1c, 0x1, {0x1, 0xa0, 0xffff, 0x9, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x2, 0x7, 0xf, 0x0, 0x8]}}, {{0x1c, 0x1, {0x2, 0xde, 0x1, 0x6, 0x2, 0x10, 0x4, 0xa}}, {0x18, 0x2, [0x92, 0xffff, 0x3ff, 0x9, 0xd, 0x0, 0x2, 0x8c, 0x2, 0x7ff]}}, {{0x1c, 0x1, {0x2, 0x37, 0x8, 0x7ff, 0x1, 0xd, 0x80, 0x6}}, {0x10, 0x2, [0x0, 0xfffd, 0x6, 0xc, 0xef, 0x0]}}]}]}, 0x158}}, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000800)="0021f022a33b51d8960241f55d7c95b61c28c7db475b", 0x16}], 0x1, 0x9, 0x1) finit_module(0xffffffffffffffff, 0x0, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xfc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) 368.366803ms ago: executing program 8 (id=10003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8, @ANYBLOB, @ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324151, 0x0, 0xb, [{0x0, 0x10000000}, {0xffffffff}, {}, {0x80}, {}, {}, {}, {0x9}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000840) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x700) 280.064412ms ago: executing program 6 (id=10004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="ca9f2c2f8322", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3ff, 0x8}]}}}}}}}}, 0x0) (fail_nth: 1) 221.193036ms ago: executing program 6 (id=10005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaca9f2c2f832286dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000007800033cb9d37b99c6d53d9c395879e65ff783c2c7e7c5c1"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x90a2, 0x2, &(0x7f0000006680)) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x127c, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x105100) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={'\x00', 0x80, 0x1000, 0x5, 0x4, 0x8000000000000000, r2}) 220.968931ms ago: executing program 6 (id=10006): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x60000480) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) 2.772641ms ago: executing program 6 (id=10007): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0xa, 0x1, 0x1, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="9f30052809aa4df2853c471eb5f32f5143ecc2044850e0f92dffe8445bb571b42250de67e0dac1af63918d814a8f2cb1e4e3c2219111e9c66e055d4b1b0f8c4bbf2269bfc0b6d29c9dd8e323d1f414593eac4b0681c1a517981e29273abc8f24569896f3c5a6b19f011c0cf29d906da3642e4daaa165ff6f3c9dc77f831129fef8619496d71fa41edcfd188894d11cbff878271cbfde456ad608d266c747dffe220ab545e7a011d9d1330a580487a2f9c542d2ff482fd1b0df3f5ce5d2b54464e0889fadb82efc625a8e561edcdb345a34e5752e4938c3be21fb8811845419cebd566202747733b9d806362792e6", @ANYBLOB="0023ef0d858269173bfdc4f16e29d4104edbeba0efe784fd539f06171960347fd566b6", @ANYBLOB, @ANYRES64=r2], 0x20) r4 = socket$inet(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080), 0x6) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r9}) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r12, &(0x7f0000000280)='4', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r11) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000e00)={0x1, r10, r8}) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r13, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r15, 0x0, 0xd4, 0x0, 0x0) 0s ago: executing program 0 (id=10008): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) kernel console output (not intermixed with test programs): ffer I/O error on dev loop6, logical block 0, async page read [ 1630.871820][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 1631.530858][ T7330] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 1631.703369][ T7330] usb 12-1: Using ep0 maxpacket: 32 [ 1631.711985][ T7330] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 1631.715022][ T7330] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1631.718816][ T7330] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1631.730941][ T7330] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1631.740927][ T7330] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1631.746900][ T7330] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1631.749792][ T7330] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1631.755783][ T7330] usb 12-1: Product: syz [ 1631.757212][ T7330] usb 12-1: Manufacturer: syz [ 1631.758751][ T7330] usb 12-1: SerialNumber: syz [ 1631.767067][ T7330] usb 12-1: config 0 descriptor?? [ 1631.779185][ T7330] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1631.786660][ T7330] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1631.986533][ T7330] usb 12-1: USB disconnect, device number 21 [ 1631.989930][ T7330] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 1632.204222][T12285] syz.0.9615: attempt to access beyond end of device [ 1632.204222][T12285] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1632.403643][ T39] audit: type=1800 audit(2000003174.937:58416): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9616" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1632.659530][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9616'. [ 1632.701371][T12297] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9617'. [ 1632.710320][T12297] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1632.809885][T12302] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1632.813108][T12302] 1·: renamed from 70· (while UP) [ 1632.817759][T12302] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1632.824574][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9618'. [ 1632.885642][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1633.693352][T12313] 9pnet_virtio: no channels available for device syz [ 1633.698586][T12313] random: crng reseeded on system resumption [ 1633.704645][T12315] 9pnet_virtio: no channels available for device syz [ 1634.484578][T12331] netlink: 'syz.7.9628': attribute type 4 has an invalid length. [ 1634.494405][T12331] netlink: 'syz.7.9628': attribute type 4 has an invalid length. [ 1634.499037][T12331] tmpfs: Bad value for 'mpol' [ 1634.538233][T12333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9629'. [ 1634.547313][T12334] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:32: iget: checksum invalid [ 1634.551737][T12337] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:32: iget: checksum invalid [ 1634.557627][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9629'. [ 1634.558684][T12336] kAFS: unparsable volume name [ 1634.581062][T12320] x86/PAT: syz.6.9624:12320 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 1634.661078][ T836] vhci_hcd: vhci_device speed not set [ 1634.745376][ T5985] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 1634.833518][T12352] syz.0.9635: attempt to access beyond end of device [ 1634.833518][T12352] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1634.960809][ T5985] usb 13-1: Using ep0 maxpacket: 32 [ 1634.963722][ T5985] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 1634.966123][ T5985] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1634.968699][ T5985] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1634.971819][ T5985] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1634.974735][ T5985] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1634.977577][ T5985] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1634.981589][ T5985] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1634.984338][ T5985] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.990010][ T5985] usb 13-1: config 0 descriptor?? [ 1635.011972][T12358] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9632'. [ 1635.014819][T12358] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9632'. [ 1637.307140][T12390] FAULT_INJECTION: forcing a failure. [ 1637.307140][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.311572][T12390] CPU: 3 UID: 0 PID: 12390 Comm: syz.6.9645 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1637.311588][T12390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1637.311596][T12390] Call Trace: [ 1637.311599][T12390] [ 1637.311604][T12390] dump_stack_lvl+0x16c/0x1f0 [ 1637.311650][T12390] should_fail_ex+0x50a/0x650 [ 1637.311670][T12390] ? fs_reclaim_acquire+0xae/0x150 [ 1637.311693][T12390] ? usbdev_open+0x9e/0x8c0 [ 1637.311724][T12390] should_failslab+0xc2/0x120 [ 1637.311736][T12390] __kmalloc_cache_noprof+0x68/0x410 [ 1637.311752][T12390] ? lock_acquire.part.0+0x11b/0x380 [ 1637.311769][T12390] ? find_held_lock+0x2d/0x110 [ 1637.311782][T12390] usbdev_open+0x9e/0x8c0 [ 1637.311798][T12390] ? __pfx_lock_release+0x10/0x10 [ 1637.311812][T12390] ? kobject_get_unless_zero+0x157/0x1e0 [ 1637.311838][T12390] ? __pfx_usbdev_open+0x10/0x10 [ 1637.311855][T12390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1637.311865][T12390] ? lock_acquire+0x2f/0xb0 [ 1637.311879][T12390] ? chrdev_open+0x80/0x6a0 [ 1637.311897][T12390] ? __pfx_usbdev_open+0x10/0x10 [ 1637.311913][T12390] chrdev_open+0x237/0x6a0 [ 1637.311930][T12390] ? __pfx_apparmor_file_open+0x10/0x10 [ 1637.311946][T12390] ? __pfx_chrdev_open+0x10/0x10 [ 1637.311964][T12390] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1637.311981][T12390] do_dentry_open+0x735/0x1c40 [ 1637.311997][T12390] ? __pfx_chrdev_open+0x10/0x10 [ 1637.312014][T12390] ? inode_permission+0xdd/0x5f0 [ 1637.312028][T12390] vfs_open+0x82/0x3f0 [ 1637.312038][T12390] ? may_open+0x1f2/0x400 [ 1637.312051][T12390] path_openat+0x1e88/0x2d80 [ 1637.312071][T12390] ? __pfx_path_openat+0x10/0x10 [ 1637.312087][T12390] ? __pfx___lock_acquire+0x10/0x10 [ 1637.312101][T12390] ? lock_acquire.part.0+0x11b/0x380 [ 1637.312116][T12390] ? find_held_lock+0x2d/0x110 [ 1637.312129][T12390] do_filp_open+0x20c/0x470 [ 1637.312144][T12390] ? __pfx_do_filp_open+0x10/0x10 [ 1637.312159][T12390] ? find_held_lock+0x2d/0x110 [ 1637.312179][T12390] ? alloc_fd+0x41f/0x760 [ 1637.312197][T12390] do_sys_openat2+0x17a/0x1e0 [ 1637.312209][T12390] ? __pfx_do_sys_openat2+0x10/0x10 [ 1637.312221][T12390] ? __fget_files+0x206/0x3a0 [ 1637.312238][T12390] __ia32_compat_sys_openat+0x16e/0x210 [ 1637.312251][T12390] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1637.312263][T12390] ? ksys_write+0x1ba/0x250 [ 1637.312282][T12390] __do_fast_syscall_32+0x73/0x120 [ 1637.312299][T12390] do_fast_syscall_32+0x32/0x80 [ 1637.312312][T12390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1637.312331][T12390] RIP: 0023:0xf7f86579 [ 1637.312341][T12390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1637.312352][T12390] RSP: 002b:00000000f50a6100 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 1637.312363][T12390] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50a6150 [ 1637.312370][T12390] RDX: 0000000000004001 RSI: 0000000000000000 RDI: 00000000f740cff4 [ 1637.312376][T12390] RBP: 0000000000004001 R08: 0000000000000000 R09: 0000000000000000 [ 1637.312382][T12390] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1637.312388][T12390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1637.312401][T12390] [ 1637.773629][ T5985] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1637.785423][ T5985] usb 13-1: USB disconnect, device number 30 [ 1637.790967][ T5985] usblp0: removed [ 1637.813770][T12397] netlink: 14 bytes leftover after parsing attributes in process `syz.7.9648'. [ 1638.142061][T12397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.159572][T12397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.166458][T12397] bond0 (unregistering): Released all slaves [ 1638.301041][ T5986] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1638.353707][T12410] netlink: 'syz.6.9651': attribute type 1 has an invalid length. [ 1638.356293][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9651'. [ 1638.460937][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 1638.464035][ T5986] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1638.467274][ T5986] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1638.471074][ T5986] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1638.474293][ T5986] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1638.477942][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1638.481359][ T5986] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1638.484044][ T5986] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1638.486558][ T5986] usb 5-1: Product: syz [ 1638.487982][ T5986] usb 5-1: Manufacturer: syz [ 1638.489284][ T5986] usb 5-1: SerialNumber: syz [ 1638.493028][ T5986] usb 5-1: config 0 descriptor?? [ 1638.495864][ T5986] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1638.499935][ T5986] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1638.704454][ T5986] usb 5-1: USB disconnect, device number 30 [ 1638.708447][ T5986] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1638.925151][T12422] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9654'. [ 1640.070642][T12460] syz.7.9668: attempt to access beyond end of device [ 1640.070642][T12460] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1640.522895][T12472] syz.8.9671: vmalloc error: size 1847640064, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1640.530708][T12472] CPU: 2 UID: 0 PID: 12472 Comm: syz.8.9671 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1640.530739][T12472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1640.530748][T12472] Call Trace: [ 1640.530753][T12472] [ 1640.530758][T12472] dump_stack_lvl+0x16c/0x1f0 [ 1640.530782][T12472] warn_alloc+0x24d/0x3a0 [ 1640.530803][T12472] ? __pfx_warn_alloc+0x10/0x10 [ 1640.530819][T12472] ? __pfx_stack_trace_save+0x10/0x10 [ 1640.530838][T12472] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1640.530856][T12472] ? kasan_save_stack+0x42/0x60 [ 1640.530876][T12472] ? kasan_save_stack+0x33/0x60 [ 1640.530891][T12472] ? kasan_save_track+0x14/0x30 [ 1640.530905][T12472] ? __kasan_kmalloc+0xaa/0xb0 [ 1640.530920][T12472] ? vb2_vmalloc_alloc+0xe2/0x3d0 [ 1640.530935][T12472] ? vb2_core_create_bufs+0x55d/0xab0 [ 1640.530951][T12472] ? vb2_create_bufs+0x566/0x780 [ 1640.530964][T12472] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 1640.530982][T12472] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 1640.531003][T12472] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1640.531021][T12472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1640.531040][T12472] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1640.531055][T12472] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1640.531070][T12472] vmalloc_user_noprof+0x6b/0x90 [ 1640.531085][T12472] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1640.531101][T12472] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1640.531118][T12472] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1640.531132][T12472] __vb2_queue_alloc+0x896/0x1230 [ 1640.531151][T12472] ? vbi_out_queue_setup+0x1e3/0x2b0 [ 1640.531170][T12472] vb2_core_create_bufs+0x55d/0xab0 [ 1640.531187][T12472] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1640.531204][T12472] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1640.531224][T12472] vb2_create_bufs+0x566/0x780 [ 1640.531239][T12472] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1640.531254][T12472] ? __video_do_ioctl+0x4a2/0xf00 [ 1640.531268][T12472] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1640.531283][T12472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1640.531301][T12472] vidioc_create_bufs+0x7d/0xf0 [ 1640.531315][T12472] v4l_create_bufs+0x156/0x270 [ 1640.531334][T12472] __video_do_ioctl+0xaf0/0xf00 [ 1640.531347][T12472] ? __pfx___video_do_ioctl+0x10/0x10 [ 1640.531360][T12472] ? __kmalloc_noprof+0x23b/0x510 [ 1640.531377][T12472] ? __pfx___sanitizer_cov_trace_const_cmp2+0x1/0x10 [ 1640.531395][T12472] video_usercopy+0x4d2/0x1620 [ 1640.531408][T12472] ? __pfx___video_do_ioctl+0x10/0x10 [ 1640.531421][T12472] ? __pfx_video_usercopy+0x10/0x10 [ 1640.531442][T12472] v4l2_ioctl+0x1ba/0x250 [ 1640.531452][T12472] ? __fget_files+0x171/0x3a0 [ 1640.531469][T12472] v4l2_compat_ioctl32+0x214/0x2c0 [ 1640.531486][T12472] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 1640.531502][T12472] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1640.531518][T12472] __do_fast_syscall_32+0x73/0x120 [ 1640.531534][T12472] do_fast_syscall_32+0x32/0x80 [ 1640.531549][T12472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1640.531567][T12472] RIP: 0023:0xf747e579 [ 1640.531595][T12472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1640.531609][T12472] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1640.531623][T12472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 1640.531629][T12472] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1640.531636][T12472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1640.531642][T12472] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1640.531648][T12472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1640.531661][T12472] [ 1640.672944][T12472] Mem-Info: [ 1640.674346][T12472] active_anon:3498 inactive_anon:183 isolated_anon:0 [ 1640.674346][T12472] active_file:1239 inactive_file:838 isolated_file:0 [ 1640.674346][T12472] unevictable:1767 dirty:289 writeback:0 [ 1640.674346][T12472] slab_reclaimable:6722 slab_unreclaimable:72084 [ 1640.674346][T12472] mapped:45424 shmem:4674 pagetables:1429 [ 1640.674346][T12472] sec_pagetables:333 bounce:0 [ 1640.674346][T12472] kernel_misc_reclaimable:0 [ 1640.674346][T12472] free:38724 free_pcp:5325 free_cma:0 [ 1640.692094][T12472] Node 0 active_anon:604kB inactive_anon:88kB active_file:1588kB inactive_file:36kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:2168kB dirty:40kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9180kB pagetables:1112kB sec_pagetables:1132kB all_unreclaimable? yes [ 1640.704532][ T836] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 1640.707661][T12472] Node 1 active_anon:13388kB inactive_anon:644kB active_file:3368kB inactive_file:3316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:179528kB dirty:1116kB writeback:0kB shmem:13876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4740kB pagetables:4604kB sec_pagetables:200kB all_unreclaimable? no [ 1640.722533][T12472] Node 0 DMA free:2000kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:40kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 1640.733546][T12472] lowmem_reserve[]: 0 294 0 0 0 [ 1640.735735][T12472] Node 0 DMA32 free:16660kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:0KB active_anon:564kB inactive_anon:72kB active_file:1588kB inactive_file:36kB unevictable:3532kB writepending:40kB present:1032196kB managed:301744kB mlocked:0kB bounce:0kB free_pcp:3268kB local_pcp:56kB free_cma:0kB [ 1640.747979][T12472] lowmem_reserve[]: 0 0 0 0 0 [ 1640.749875][T12472] Node 1 DMA32 free:133740kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:14288kB inactive_anon:644kB active_file:3368kB inactive_file:3316kB unevictable:3536kB writepending:1116kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:19032kB local_pcp:572kB free_cma:0kB [ 1640.759398][T12472] lowmem_reserve[]: 0 0 0 0 0 [ 1640.761128][T12472] Node 0 DMA: 84*4kB (U) 42*8kB (U) 33*16kB (U) 25*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2000kB [ 1640.765997][T12472] Node 0 DMA32: 213*4kB (UME) 106*8kB (UE) 49*16kB (UME) 115*32kB (UME) 64*64kB (UME) 26*128kB (UME) 8*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16660kB [ 1640.773011][T12472] Node 1 DMA32: 7*4kB (ME) 9*8kB (UE) 201*16kB (UME) 278*32kB (UME) 218*64kB (UM) 190*128kB (UM) 97*256kB (UM) 58*512kB (UM) 22*1024kB (UME) 0*2048kB 0*4096kB = 127540kB [ 1640.780045][T12472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.784578][T12472] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1640.787491][T12472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1640.790321][T12472] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1640.793146][T12472] 8854 total pagecache pages [ 1640.794520][T12472] 492 pages in swap cache [ 1640.795982][T12472] Free swap = 86096kB [ 1640.797229][T12472] Total swap = 124996kB [ 1640.798688][T12472] 524155 pages RAM [ 1640.800228][T12472] 0 pages HighMem/MovableOnly [ 1640.802181][T12472] 207816 pages reserved [ 1640.803894][T12472] 0 pages cma reserved [ 1640.860865][ T836] usb 11-1: Using ep0 maxpacket: 32 [ 1640.864099][ T836] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 1640.866716][ T836] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1640.870003][ T836] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1640.874685][ T836] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1640.877188][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9675'. [ 1640.879042][ T836] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1640.885729][ T836] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1640.888441][ T836] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1640.891249][ T836] usb 11-1: Product: syz [ 1640.892565][ T836] usb 11-1: Manufacturer: syz [ 1640.894118][ T836] usb 11-1: SerialNumber: syz [ 1640.897414][ T836] usb 11-1: config 0 descriptor?? [ 1640.900240][ T836] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1640.905232][ T836] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1641.107017][ T5986] usb 11-1: USB disconnect, device number 61 [ 1641.110824][ T5986] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 1641.233315][T12487] syz.7.9677: attempt to access beyond end of device [ 1641.233315][T12487] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1641.323730][T12482] 9pnet_virtio: no channels available for device syz [ 1641.515466][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9680'. [ 1641.815695][T12505] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1641.868108][T12509] syz.6.9686: attempt to access beyond end of device [ 1641.868108][T12509] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1641.905505][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9689'. [ 1641.953475][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1643.191810][T12540] vlan2: entered allmulticast mode [ 1643.326442][T12548] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1643.340876][ T836] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 1643.490906][ T836] usb 12-1: Using ep0 maxpacket: 32 [ 1643.493749][ T836] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 1643.496191][ T836] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1643.499771][ T836] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1643.504883][ T836] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1643.508878][ T836] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1643.514348][ T836] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1643.517135][ T836] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1643.519999][ T836] usb 12-1: Product: syz [ 1643.521946][ T836] usb 12-1: Manufacturer: syz [ 1643.523887][ T836] usb 12-1: SerialNumber: syz [ 1643.538867][T12557] overlayfs: failed to clone upperpath [ 1643.545995][T12557] kAFS: unable to lookup cell '·gâKÔ)ŒkJ¬L+ù˜«}ºŽ ²Tùˆ/pbΈ&õ½²åMíÇúK…µ(Þ÷„|F’kãqº2‡J”$Oæ-7Rè‰kÐE1þ Ñž‹LEB{ª®ÐNb+*ežRM´øšÙòcóÕ\Œj½mÆÔ©«éÔ¿ÁÈúèOŠóÎÀÿtÁ"Ú kêÄkïnèzÇHKuüø6ÆMySÍHIU»Ýo ÊÊIfô¯ÍõVš›Uó Œr&¯ÑÆcúN¡ô¢N§0‰NB£c5?¨ÞÌ7­Œc·#0*èkˆ‘»<ñ9¦mcëLå 0ð7²ëœ–ËÖCtÏ’ [ 1643.545995][T12557] jÕy¥Hao‹ 1.¢ºBó$ãµÍã&2²MË0Ì=À`;!ÇdφOëÐéJIìXç!‹ñšJ¨ËŸBvU_Rc?Ÿê' [ 1643.557624][ T836] usb 12-1: config 0 descriptor?? [ 1643.560614][T12562] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 1643.567635][ T836] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1643.601151][ T836] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1643.771246][ T836] usb 12-1: USB disconnect, device number 22 [ 1643.774105][ T836] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 1644.434372][T12583] syz.0.9711: attempt to access beyond end of device [ 1644.434372][T12583] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1644.679448][T12593] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 1644.686140][T12597] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:26: iget: checksum invalid [ 1645.046188][T12604] FAULT_INJECTION: forcing a failure. [ 1645.046188][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.049927][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.0.9717 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1645.049945][T12604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1645.049954][T12604] Call Trace: [ 1645.049958][T12604] [ 1645.049964][T12604] dump_stack_lvl+0x16c/0x1f0 [ 1645.049985][T12604] should_fail_ex+0x50a/0x650 [ 1645.050004][T12604] ? fs_reclaim_acquire+0xae/0x150 [ 1645.050032][T12604] should_failslab+0xc2/0x120 [ 1645.050044][T12604] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1645.050062][T12604] ? __alloc_skb+0x2b1/0x380 [ 1645.050081][T12604] __alloc_skb+0x2b1/0x380 [ 1645.050095][T12604] ? __pfx___alloc_skb+0x10/0x10 [ 1645.050111][T12604] ? ethnl_parse_header_dev_get+0x35e/0x9a0 [ 1645.050128][T12604] netlink_dump+0x699/0xd00 [ 1645.050144][T12604] ? __pfx_netlink_dump+0x10/0x10 [ 1645.050156][T12604] ? rcu_is_watching+0x12/0xc0 [ 1645.050175][T12604] ? ethnl_default_start+0x2dd/0x420 [ 1645.050188][T12604] ? __pfx_ethnl_default_start+0x10/0x10 [ 1645.050200][T12604] ? genl_start+0x67d/0x960 [ 1645.050218][T12604] __netlink_dump_start+0x6ca/0x970 [ 1645.050234][T12604] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 1645.050252][T12604] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1645.050274][T12604] ? __pfx_genl_get_cmd+0x10/0x10 [ 1645.050288][T12604] ? __pfx_genl_start+0x10/0x10 [ 1645.050303][T12604] ? __pfx_genl_dumpit+0x10/0x10 [ 1645.050318][T12604] ? __pfx_genl_done+0x10/0x10 [ 1645.050336][T12604] ? __radix_tree_lookup+0x21f/0x2c0 [ 1645.050351][T12604] genl_rcv_msg+0x470/0x800 [ 1645.050369][T12604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.050386][T12604] ? __pfx_ethnl_default_start+0x10/0x10 [ 1645.050398][T12604] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1645.050410][T12604] ? __pfx_ethnl_default_done+0x10/0x10 [ 1645.050423][T12604] ? __pfx___lock_acquire+0x10/0x10 [ 1645.050442][T12604] netlink_rcv_skb+0x16b/0x440 [ 1645.050456][T12604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.050474][T12604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.050494][T12604] ? down_read+0xc9/0x330 [ 1645.050509][T12604] ? __pfx_down_read+0x10/0x10 [ 1645.050524][T12604] ? netlink_deliver_tap+0x1ae/0xd30 [ 1645.050544][T12604] genl_rcv+0x28/0x40 [ 1645.050559][T12604] netlink_unicast+0x53c/0x7f0 [ 1645.050575][T12604] ? __pfx_netlink_unicast+0x10/0x10 [ 1645.050590][T12604] ? __phys_addr_symbol+0x30/0x80 [ 1645.050602][T12604] ? __check_object_size+0x488/0x710 [ 1645.050616][T12604] netlink_sendmsg+0x8b8/0xd70 [ 1645.050633][T12604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.050652][T12604] ____sys_sendmsg+0xaaf/0xc90 [ 1645.050666][T12604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.050677][T12604] ? get_compat_msghdr+0x11b/0x170 [ 1645.050698][T12604] ___sys_sendmsg+0x135/0x1e0 [ 1645.050715][T12604] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.050746][T12604] ? __pfx_lock_release+0x10/0x10 [ 1645.050762][T12604] ? trace_lock_acquire+0x14e/0x1f0 [ 1645.050779][T12604] ? __fget_files+0x206/0x3a0 [ 1645.050799][T12604] __sys_sendmsg+0x16e/0x220 [ 1645.050815][T12604] ? __pfx___sys_sendmsg+0x10/0x10 [ 1645.050840][T12604] __do_fast_syscall_32+0x73/0x120 [ 1645.050856][T12604] do_fast_syscall_32+0x32/0x80 [ 1645.050870][T12604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1645.050889][T12604] RIP: 0023:0xf7f96579 [ 1645.050898][T12604] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1645.050909][T12604] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1645.050920][T12604] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1645.050927][T12604] RDX: 0000000040048820 RSI: 0000000000000000 RDI: 0000000000000000 [ 1645.050933][T12604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1645.050939][T12604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1645.050945][T12604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1645.050959][T12604] [ 1645.180593][ C1] vkms_vblank_simulate: vblank timer overrun [ 1645.566527][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9719'. [ 1646.061218][ T836] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1646.062000][ T5986] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 1646.210887][ T5986] usb 13-1: Using ep0 maxpacket: 32 [ 1646.214672][ T5986] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 1646.217691][ T5986] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1646.221127][ T5986] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1646.224416][ T5986] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1646.228238][ T5986] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1646.230924][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 1646.235503][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.236723][ T5986] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1646.239319][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.242315][ T5986] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1646.245181][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1646.248077][ T5986] usb 13-1: Product: syz [ 1646.252655][ T836] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1646.253768][ T5986] usb 13-1: Manufacturer: syz [ 1646.256536][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.258183][ T5986] usb 13-1: SerialNumber: syz [ 1646.262150][ T836] usb 5-1: config 0 descriptor?? [ 1646.265523][ T5986] usb 13-1: config 0 descriptor?? [ 1646.272034][ T5986] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1646.277526][ T5986] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1646.473914][ T5986] usb 13-1: USB disconnect, device number 31 [ 1646.477022][ T5986] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 1646.675789][ T836] shield 0003:0955:7214.007C: unknown main item tag 0x0 [ 1646.677988][ T836] shield 0003:0955:7214.007C: unknown main item tag 0x0 [ 1646.680030][ T836] shield 0003:0955:7214.007C: unknown main item tag 0x0 [ 1646.682054][ T836] shield 0003:0955:7214.007C: unknown main item tag 0x0 [ 1646.684106][ T836] shield 0003:0955:7214.007C: unknown main item tag 0x0 [ 1646.686991][ T836] input: HID 0955:7214 Haptics as /devices/virtual/input/input413 [ 1646.692240][ T836] shield 0003:0955:7214.007C: Registered Thunderstrike controller [ 1646.694629][ T836] shield 0003:0955:7214.007C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1646.877845][T24397] shield 0003:0955:7214.007C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1646.878412][ T7242] usb 5-1: USB disconnect, device number 31 [ 1646.881147][T24397] shield 0003:0955:7214.007C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1646.886188][T24397] shield 0003:0955:7214.007C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1646.889289][T24397] shield 0003:0955:7214.007C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1647.229055][T12641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1647.648480][T12649] syz.8.9733: attempt to access beyond end of device [ 1647.648480][T12649] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1647.723332][T12652] FAULT_INJECTION: forcing a failure. [ 1647.723332][T12652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1647.727087][T12652] CPU: 2 UID: 0 PID: 12652 Comm: syz.7.9734 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1647.727103][T12652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1647.727112][T12652] Call Trace: [ 1647.727116][T12652] [ 1647.727125][T12652] dump_stack_lvl+0x16c/0x1f0 [ 1647.727147][T12652] should_fail_ex+0x50a/0x650 [ 1647.727170][T12652] _copy_to_user+0x32/0xd0 [ 1647.727184][T12652] simple_read_from_buffer+0xd0/0x160 [ 1647.727203][T12652] proc_fail_nth_read+0x198/0x270 [ 1647.727217][T12652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1647.727231][T12652] ? rw_verify_area+0xcf/0x680 [ 1647.727245][T12652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1647.727258][T12652] vfs_read+0x1df/0xbf0 [ 1647.727273][T12652] ? __fget_files+0x1fc/0x3a0 [ 1647.727290][T12652] ? __pfx___mutex_lock+0x10/0x10 [ 1647.727305][T12652] ? __pfx_vfs_read+0x10/0x10 [ 1647.727323][T12652] ? __fget_files+0x206/0x3a0 [ 1647.727342][T12652] ksys_read+0x12b/0x250 [ 1647.727356][T12652] ? __pfx_ksys_read+0x10/0x10 [ 1647.727375][T12652] __do_fast_syscall_32+0x73/0x120 [ 1647.727390][T12652] do_fast_syscall_32+0x32/0x80 [ 1647.727405][T12652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1647.727426][T12652] RIP: 0023:0xf7f26579 [ 1647.727440][T12652] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1647.727455][T12652] RSP: 002b:00000000f5046590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1647.727471][T12652] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5046620 [ 1647.727477][T12652] RDX: 000000000000000f RSI: 00000000f73acff4 RDI: 0000000000000000 [ 1647.727484][T12652] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1647.727490][T12652] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1647.727496][T12652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1647.727510][T12652] [ 1647.925116][T12660] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.9737'. [ 1648.238859][T12675] /dev/nullb0: Can't lookup blockdev [ 1648.261328][T24397] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 1648.321334][T12679] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.9746'. [ 1648.420873][T24397] usb 13-1: Using ep0 maxpacket: 32 [ 1648.424320][T24397] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 1648.427332][T24397] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1648.431484][T24397] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1648.435582][T24397] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1648.439915][T24397] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1648.440584][ T7242] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 1648.452689][T24397] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1648.456119][T24397] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1648.459214][T24397] usb 13-1: Product: syz [ 1648.461221][T24397] usb 13-1: Manufacturer: syz [ 1648.463055][T24397] usb 13-1: SerialNumber: syz [ 1648.466397][T24397] usb 13-1: config 0 descriptor?? [ 1648.470208][T24397] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1648.474874][T24397] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1648.595832][ T7242] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.599860][ T7242] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1648.603274][ T7242] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1648.605911][ T7242] usb 12-1: SerialNumber: syz [ 1648.673199][ T7330] usb 13-1: USB disconnect, device number 32 [ 1648.676749][ T7330] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 1648.833527][T12688] wireguard0: entered promiscuous mode [ 1648.835252][T12688] wireguard0: entered allmulticast mode [ 1648.895623][T12685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1648.898786][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.901644][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.905325][ T7330] usb 12-1: USB disconnect, device number 23 [ 1648.929252][T12690] netlink: 100 bytes leftover after parsing attributes in process `syz.6.9748'. [ 1648.932901][T12690] netlink: 100 bytes leftover after parsing attributes in process `syz.6.9748'. [ 1648.935583][T12690] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9748'. [ 1648.955082][T12694] overlayfs: missing 'workdir' [ 1648.964024][T12694] afs: Unknown parameter 'dynacopy' [ 1649.450352][T12705] vcan0 speed is unknown, defaulting to 1000 [ 1649.745135][T12710] syz.7.9754: attempt to access beyond end of device [ 1649.745135][T12710] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1650.178568][T12717] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9756'. [ 1650.187932][ T39] audit: type=1326 audit(2000003199.721:58417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.7.9755" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x0 [ 1650.682157][T29115] Bluetooth: hci3: command 0x0406 tx timeout [ 1650.723379][T12733] 9pnet_virtio: no channels available for device syz [ 1650.944792][T12736] syz.7.9763: attempt to access beyond end of device [ 1650.944792][T12736] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1651.375983][T12751] 9pnet_virtio: no channels available for device syz [ 1651.386658][T12750] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.9767'. [ 1651.956601][T12765] FAULT_INJECTION: forcing a failure. [ 1651.956601][T12765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.964502][T12765] CPU: 2 UID: 0 PID: 12765 Comm: syz.0.9772 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1651.964532][T12765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1651.964544][T12765] Call Trace: [ 1651.964551][T12765] [ 1651.964559][T12765] dump_stack_lvl+0x16c/0x1f0 [ 1651.964590][T12765] should_fail_ex+0x50a/0x650 [ 1651.964623][T12765] _copy_to_user+0x32/0xd0 [ 1651.964645][T12765] simple_read_from_buffer+0xd0/0x160 [ 1651.964671][T12765] proc_fail_nth_read+0x198/0x270 [ 1651.964694][T12765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1651.964716][T12765] ? rw_verify_area+0xcf/0x680 [ 1651.964743][T12765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1651.964763][T12765] vfs_read+0x1df/0xbf0 [ 1651.964787][T12765] ? __fget_files+0x1fc/0x3a0 [ 1651.964812][T12765] ? __pfx___mutex_lock+0x10/0x10 [ 1651.964835][T12765] ? __pfx_vfs_read+0x10/0x10 [ 1651.964864][T12765] ? __fget_files+0x206/0x3a0 [ 1651.964895][T12765] ksys_read+0x12b/0x250 [ 1651.964917][T12765] ? __pfx_ksys_read+0x10/0x10 [ 1651.964946][T12765] __do_fast_syscall_32+0x73/0x120 [ 1651.964970][T12765] do_fast_syscall_32+0x32/0x80 [ 1651.964992][T12765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1651.965020][T12765] RIP: 0023:0xf7f96579 [ 1651.965035][T12765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1651.965052][T12765] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1651.965070][T12765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50b6620 [ 1651.965080][T12765] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 1651.965090][T12765] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1651.965099][T12765] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1651.965110][T12765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1651.965133][T12765] [ 1652.097557][T12767] syz.0.9773: attempt to access beyond end of device [ 1652.097557][T12767] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1652.198025][T12770] vcan0 speed is unknown, defaulting to 1000 [ 1652.702465][T12778] 9pnet_virtio: no channels available for device syz [ 1652.840316][T12778] 9pnet_virtio: no channels available for device [ 1652.877636][T12781] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.9776'. [ 1653.010868][ T5952] Bluetooth: hci3: command 0x0406 tx timeout [ 1653.304108][T12795] syz.0.9782: attempt to access beyond end of device [ 1653.304108][T12795] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1653.310888][T24397] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 1653.463408][T24397] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1653.467937][T24397] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1653.471439][T24397] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1653.475570][T24397] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1653.479673][T24397] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1653.482429][T12799] fuse: Bad value for 'rootmode' [ 1653.484151][T24397] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.489553][T24397] usb 12-1: config 0 descriptor?? [ 1653.492080][T12789] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1653.534985][T12801] 9pnet_virtio: no channels available for device syz [ 1653.668781][T12807] vcan0 speed is unknown, defaulting to 1000 [ 1653.674519][T12811] random: crng reseeded on system resumption [ 1653.878428][T12820] FAULT_INJECTION: forcing a failure. [ 1653.878428][T12820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.884375][T12820] CPU: 3 UID: 0 PID: 12820 Comm: syz.0.9790 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1653.884403][T12820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1653.884411][T12820] Call Trace: [ 1653.884415][T12820] [ 1653.884421][T12820] dump_stack_lvl+0x16c/0x1f0 [ 1653.884444][T12820] should_fail_ex+0x50a/0x650 [ 1653.884467][T12820] _copy_to_user+0x32/0xd0 [ 1653.884481][T12820] simple_read_from_buffer+0xd0/0x160 [ 1653.884499][T12820] proc_fail_nth_read+0x198/0x270 [ 1653.884513][T12820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1653.884527][T12820] ? rw_verify_area+0xcf/0x680 [ 1653.884542][T12820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1653.884555][T12820] vfs_read+0x1df/0xbf0 [ 1653.884570][T12820] ? __fget_files+0x1fc/0x3a0 [ 1653.884587][T12820] ? __pfx___mutex_lock+0x10/0x10 [ 1653.884602][T12820] ? __pfx_vfs_read+0x10/0x10 [ 1653.884621][T12820] ? __fget_files+0x206/0x3a0 [ 1653.884640][T12820] ksys_read+0x12b/0x250 [ 1653.884655][T12820] ? __pfx_ksys_read+0x10/0x10 [ 1653.884674][T12820] __do_fast_syscall_32+0x73/0x120 [ 1653.884689][T12820] do_fast_syscall_32+0x32/0x80 [ 1653.884704][T12820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1653.884724][T12820] RIP: 0023:0xf7f96579 [ 1653.884733][T12820] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1653.884744][T12820] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1653.884755][T12820] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50b6620 [ 1653.884762][T12820] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 1653.884768][T12820] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1653.884780][T12820] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1653.884786][T12820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1653.884799][T12820] [ 1653.948536][T24397] plantronics 0003:047F:FFFF.007D: unknown main item tag 0xd [ 1653.952287][T24397] plantronics 0003:047F:FFFF.007D: No inputs registered, leaving [ 1653.955698][T24397] plantronics 0003:047F:FFFF.007D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1654.184575][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9799'. [ 1654.188630][T12841] netlink: 'syz.8.9798': attribute type 2 has an invalid length. [ 1654.197681][T12841] netlink: 'syz.8.9798': attribute type 1 has an invalid length. [ 1654.218095][T12841] netlink: 'syz.8.9798': attribute type 1 has an invalid length. [ 1654.235314][T12841] loop7: detected capacity change from 0 to 16384 [ 1654.391542][T12845] loop7: detected capacity change from 16384 to 16383 [ 1654.956512][T12850] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9800'. [ 1655.192521][T12856] FAULT_INJECTION: forcing a failure. [ 1655.192521][T12856] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.196624][T12856] CPU: 1 UID: 0 PID: 12856 Comm: syz.8.9803 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1655.196646][T12856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1655.196657][T12856] Call Trace: [ 1655.196663][T12856] [ 1655.196671][T12856] dump_stack_lvl+0x16c/0x1f0 [ 1655.196700][T12856] should_fail_ex+0x50a/0x650 [ 1655.196724][T12856] ? fs_reclaim_acquire+0xae/0x150 [ 1655.196741][T12856] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1655.196760][T12856] should_failslab+0xc2/0x120 [ 1655.196771][T12856] __kmalloc_noprof+0xcb/0x510 [ 1655.196788][T12856] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1655.196811][T12856] tomoyo_realpath_from_path+0xb9/0x720 [ 1655.196832][T12856] ? tomoyo_path_number_perm+0x235/0x590 [ 1655.196852][T12856] ? tomoyo_path_number_perm+0x235/0x590 [ 1655.196873][T12856] tomoyo_path_number_perm+0x248/0x590 [ 1655.196886][T12856] ? tomoyo_path_number_perm+0x235/0x590 [ 1655.196900][T12856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1655.196936][T12856] ? __pfx_lock_release+0x10/0x10 [ 1655.196956][T12856] ? trace_lock_acquire+0x14e/0x1f0 [ 1655.196978][T12856] ? lock_acquire+0x2f/0xb0 [ 1655.196997][T12856] ? __fget_files+0x40/0x3a0 [ 1655.197023][T12856] ? __fget_files+0x206/0x3a0 [ 1655.197049][T12856] security_file_ioctl_compat+0x9b/0x240 [ 1655.197073][T12856] __do_compat_sys_ioctl+0x4e/0x2c0 [ 1655.197096][T12856] __do_fast_syscall_32+0x73/0x120 [ 1655.197119][T12856] do_fast_syscall_32+0x32/0x80 [ 1655.197139][T12856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1655.197166][T12856] RIP: 0023:0xf747e579 [ 1655.197180][T12856] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1655.197196][T12856] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1655.197212][T12856] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000008914 [ 1655.197219][T12856] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1655.197226][T12856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1655.197232][T12856] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1655.197241][T12856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1655.197262][T12856] [ 1655.197269][T12856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1655.748576][T12866] syz.7.9804: attempt to access beyond end of device [ 1655.748576][T12866] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1655.804638][T12860] wireguard0: entered promiscuous mode [ 1655.806514][T12860] wireguard0: entered allmulticast mode [ 1655.913758][T12871] veth0_vlan: left promiscuous mode [ 1655.917525][T12871] veth0_vlan: entered promiscuous mode [ 1656.530957][ T5986] usb 12-1: reset high-speed USB device number 24 using dummy_hcd [ 1656.540223][ T5986] usb 12-1: device reset changed ep0 maxpacket size! [ 1656.544723][ T7330] usb 12-1: USB disconnect, device number 24 [ 1656.680887][ T7330] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 1656.831050][ T7330] usb 12-1: Using ep0 maxpacket: 32 [ 1656.833926][ T7330] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 1656.836370][ T7330] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1656.839617][ T7330] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1656.842930][ T7330] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1656.846751][ T7330] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1656.850206][ T7330] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1656.852999][ T7330] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1656.855582][ T7330] usb 12-1: Product: syz [ 1656.857079][ T7330] usb 12-1: Manufacturer: syz [ 1656.858817][ T7330] usb 12-1: SerialNumber: syz [ 1656.861128][ T7330] usb 12-1: config 0 descriptor?? [ 1656.864106][ T7330] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1656.867390][ T7330] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1657.070598][ T7330] usb 12-1: USB disconnect, device number 25 [ 1657.075159][ T7330] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 1657.804380][T12897] FAULT_INJECTION: forcing a failure. [ 1657.804380][T12897] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.808186][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.8.9815 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1657.808202][T12897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1657.808211][T12897] Call Trace: [ 1657.808215][T12897] [ 1657.808220][T12897] dump_stack_lvl+0x16c/0x1f0 [ 1657.808242][T12897] should_fail_ex+0x50a/0x650 [ 1657.808262][T12897] ? fs_reclaim_acquire+0xae/0x150 [ 1657.808279][T12897] should_failslab+0xc2/0x120 [ 1657.808291][T12897] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1657.808309][T12897] ? __pmd_alloc+0xc3/0x870 [ 1657.808326][T12897] __pmd_alloc+0xc3/0x870 [ 1657.808341][T12897] __handle_mm_fault+0x9fb/0x2c60 [ 1657.808361][T12897] ? __pfx___handle_mm_fault+0x10/0x10 [ 1657.808377][T12897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1657.808403][T12897] ? find_vma+0xc0/0x140 [ 1657.808416][T12897] ? __pfx_find_vma+0x10/0x10 [ 1657.808430][T12897] handle_mm_fault+0x3fa/0xaa0 [ 1657.808453][T12897] do_user_addr_fault+0x7a3/0x13f0 [ 1657.808473][T12897] exc_page_fault+0x5c/0xc0 [ 1657.808487][T12897] asm_exc_page_fault+0x26/0x30 [ 1657.808503][T12897] RIP: 0010:__get_user_4+0x18/0x30 [ 1657.808514][T12897] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 [ 1657.808526][T12897] RSP: 0018:ffffc900219a7cd8 EFLAGS: 00050287 [ 1657.808536][T12897] RAX: 00000000800000c0 RBX: 0000000000000006 RCX: ffffc900219a7c40 [ 1657.808543][T12897] RDX: 00007ffffffff000 RSI: ffffffff8a42dc28 RDI: ffffffff8bd345c0 [ 1657.808550][T12897] RBP: 00000000800000c0 R08: 0000000000000000 R09: fffffbfff20c4ee2 [ 1657.808557][T12897] R10: ffffffff90627717 R11: 0000000000000000 R12: 0000000000000104 [ 1657.808564][T12897] R13: 1ffff92004334f9d R14: dffffc0000000000 R15: ffff88801258e000 [ 1657.808575][T12897] ? rose_getsockopt+0xc8/0x420 [ 1657.808590][T12897] rose_getsockopt+0xd0/0x420 [ 1657.808601][T12897] ? __pfx_rose_getsockopt+0x10/0x10 [ 1657.808611][T12897] ? find_held_lock+0x2d/0x110 [ 1657.808625][T12897] ? __pfx_rose_getsockopt+0x10/0x10 [ 1657.808636][T12897] do_sock_getsockopt+0x3fe/0x800 [ 1657.808651][T12897] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1657.808662][T12897] ? lock_acquire+0x2f/0xb0 [ 1657.808676][T12897] ? __fget_files+0x40/0x3a0 [ 1657.808695][T12897] ? __fget_files+0x206/0x3a0 [ 1657.808714][T12897] __sys_getsockopt+0x12f/0x260 [ 1657.808732][T12897] __ia32_sys_getsockopt+0xbc/0x160 [ 1657.808747][T12897] ? lockdep_hardirqs_on+0x7c/0x110 [ 1657.808760][T12897] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1657.808774][T12897] __do_fast_syscall_32+0x73/0x120 [ 1657.808790][T12897] do_fast_syscall_32+0x32/0x80 [ 1657.808804][T12897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.808822][T12897] RIP: 0023:0xf747e579 [ 1657.808830][T12897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1657.808840][T12897] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 1657.808850][T12897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000104 [ 1657.808856][T12897] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 00000000800000c0 [ 1657.808862][T12897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1657.808868][T12897] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1657.808874][T12897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.808887][T12897] [ 1657.836949][T12899] syz.7.9816: attempt to access beyond end of device [ 1657.836949][T12899] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1657.980321][T12907] netlink: 'syz.0.9814': attribute type 2 has an invalid length. [ 1657.983923][T12907] netlink: 'syz.0.9814': attribute type 1 has an invalid length. [ 1657.987134][T12907] netlink: 'syz.0.9814': attribute type 1 has an invalid length. [ 1657.994066][T12907] loop7: detected capacity change from 0 to 16384 [ 1658.240947][T12914] loop7: detected capacity change from 16384 to 16383 [ 1659.540938][ T7330] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 1659.691103][ T7330] usb 12-1: Using ep0 maxpacket: 32 [ 1659.694983][ T7330] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 1659.700888][ T7330] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1659.710962][ T7330] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1659.718877][ T7330] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1659.724759][ T7330] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1659.734150][ T7330] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1659.738292][ T7330] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1659.742757][ T7330] usb 12-1: Product: syz [ 1659.744722][ T7330] usb 12-1: Manufacturer: syz [ 1659.746865][ T7330] usb 12-1: SerialNumber: syz [ 1659.750247][ T7330] usb 12-1: config 0 descriptor?? [ 1659.754923][ T7330] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1659.758813][T12945] netlink: 'syz.6.9829': attribute type 21 has an invalid length. [ 1659.759496][T12943] FAULT_INJECTION: forcing a failure. [ 1659.759496][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.759516][T12943] CPU: 0 UID: 0 PID: 12943 Comm: syz.8.9830 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1659.759530][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1659.759537][T12943] Call Trace: [ 1659.759541][T12943] [ 1659.759545][T12943] dump_stack_lvl+0x16c/0x1f0 [ 1659.759568][T12943] should_fail_ex+0x50a/0x650 [ 1659.759591][T12943] _copy_to_user+0x32/0xd0 [ 1659.759605][T12943] simple_read_from_buffer+0xd0/0x160 [ 1659.759623][T12943] proc_fail_nth_read+0x198/0x270 [ 1659.759638][T12943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1659.759652][T12943] ? rw_verify_area+0xcf/0x680 [ 1659.759665][T12943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1659.759678][T12943] vfs_read+0x1df/0xbf0 [ 1659.759694][T12943] ? __fget_files+0x1fc/0x3a0 [ 1659.759710][T12943] ? __pfx___mutex_lock+0x10/0x10 [ 1659.759731][T12943] ? __pfx_vfs_read+0x10/0x10 [ 1659.759749][T12943] ? __fget_files+0x206/0x3a0 [ 1659.759768][T12943] ksys_read+0x12b/0x250 [ 1659.759783][T12943] ? __pfx_ksys_read+0x10/0x10 [ 1659.759801][T12943] __do_fast_syscall_32+0x73/0x120 [ 1659.759817][T12943] do_fast_syscall_32+0x32/0x80 [ 1659.759832][T12943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1659.759852][T12943] RIP: 0023:0xf747e579 [ 1659.759861][T12943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1659.759872][T12943] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1659.759883][T12943] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 1659.759890][T12943] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 1659.759907][T12943] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1659.759913][T12943] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1659.759919][T12943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1659.759932][T12943] [ 1659.762808][ T7330] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1659.767628][T12945] netlink: 'syz.6.9829': attribute type 20 has an invalid length. [ 1659.957009][ T7330] usb 12-1: USB disconnect, device number 26 [ 1659.965269][ T7330] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 1660.504207][ T836] libceph: connect (1)[c::]:6789 error -101 [ 1660.506817][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 1660.771006][ T836] libceph: connect (1)[c::]:6789 error -101 [ 1660.772933][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 1661.281056][ T836] libceph: connect (1)[c::]:6789 error -101 [ 1661.285040][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 1661.348649][T12963] ceph: No mds server is up or the cluster is laggy [ 1661.523335][T12994] ieee802154 phy0 wpan0: encryption failed: -22 [ 1661.531197][T12997] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1661.537621][T12999] IPVS: stopping master sync thread 6742 ... [ 1661.810907][ T7330] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1661.980868][ T7330] usb 5-1: Using ep0 maxpacket: 32 [ 1661.983868][ T7330] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1661.986335][ T7330] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1661.989526][ T7330] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1662.000802][ T7330] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1662.004619][ T7330] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1662.008272][ T7330] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1662.012375][ T7330] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1662.014860][ T7330] usb 5-1: Product: syz [ 1662.016120][ T7330] usb 5-1: Manufacturer: syz [ 1662.017540][ T7330] usb 5-1: SerialNumber: syz [ 1662.023326][ T7330] usb 5-1: config 0 descriptor?? [ 1662.027258][ T7330] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1662.041639][ T7330] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1662.227938][ T836] usb 5-1: USB disconnect, device number 32 [ 1662.230976][ T836] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1662.740614][T13037] netlink: 'syz.7.9861': attribute type 1 has an invalid length. [ 1662.761877][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9861'. [ 1662.780678][T13037] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1662.790648][T13037] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 1663.901173][T13069] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 1663.905079][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9871'. [ 1663.907905][T13068] bridge0: port 2(bridge_slave_1) entered learning state [ 1664.177989][T13075] fuse: Bad value for 'fd' [ 1664.871716][T13083] netlink: 'syz.6.9876': attribute type 1 has an invalid length. [ 1664.921195][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9876'. [ 1665.052626][T13101] fuse: Bad value for 'group_id' [ 1665.054138][T13101] fuse: Bad value for 'group_id' [ 1665.130911][ T5985] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 1665.290853][ T5985] usb 13-1: Using ep0 maxpacket: 32 [ 1665.397758][ T5985] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 1665.449573][ T5985] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1665.524293][ T5985] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1665.528443][ T5985] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1665.580880][ T5985] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1665.588027][ T5985] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1665.591276][ T5985] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1665.594183][ T5985] usb 13-1: Product: syz [ 1665.595840][ T5985] usb 13-1: Manufacturer: syz [ 1665.597753][ T5985] usb 13-1: SerialNumber: syz [ 1665.611308][ T5985] usb 13-1: config 0 descriptor?? [ 1665.614781][ T5985] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1665.618600][ T5985] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1665.778161][T13115] netlink: 'syz.6.9886': attribute type 4 has an invalid length. [ 1665.786880][T13115] netlink: 'syz.6.9886': attribute type 4 has an invalid length. [ 1665.823396][ T5986] usb 13-1: USB disconnect, device number 33 [ 1665.826631][ T5986] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 1666.455626][T13127] FAULT_INJECTION: forcing a failure. [ 1666.455626][T13127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.460654][T13127] CPU: 2 UID: 0 PID: 13127 Comm: syz.0.9893 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1666.460677][T13127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1666.460687][T13127] Call Trace: [ 1666.460693][T13127] [ 1666.460700][T13127] dump_stack_lvl+0x16c/0x1f0 [ 1666.460746][T13127] should_fail_ex+0x50a/0x650 [ 1666.460779][T13127] _copy_from_user+0x2e/0xd0 [ 1666.460797][T13127] kstrtouint_from_user+0xd7/0x1c0 [ 1666.460818][T13127] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1666.460847][T13127] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1666.460872][T13127] proc_fail_nth_write+0x84/0x250 [ 1666.460893][T13127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1666.460925][T13127] ? ksys_write+0x12b/0x250 [ 1666.460953][T13127] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1666.460970][T13127] vfs_write+0x24c/0x1150 [ 1666.460993][T13127] ? __fget_files+0x1fc/0x3a0 [ 1666.461020][T13127] ? __pfx___mutex_lock+0x10/0x10 [ 1666.461043][T13127] ? __pfx_vfs_write+0x10/0x10 [ 1666.461075][T13127] ? __fget_files+0x206/0x3a0 [ 1666.461107][T13127] ksys_write+0x12b/0x250 [ 1666.461130][T13127] ? __pfx_ksys_write+0x10/0x10 [ 1666.461162][T13127] __do_fast_syscall_32+0x73/0x120 [ 1666.461187][T13127] do_fast_syscall_32+0x32/0x80 [ 1666.461210][T13127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1666.461238][T13127] RIP: 0023:0xf7f96579 [ 1666.461254][T13127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1666.461270][T13127] RSP: 002b:00000000f50b6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1666.461289][T13127] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50b6620 [ 1666.461300][T13127] RDX: 0000000000000001 RSI: 00000000f741cff4 RDI: 0000000000000000 [ 1666.461311][T13127] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1666.461321][T13127] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1666.461331][T13127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1666.461355][T13127] [ 1666.669595][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9895'. [ 1666.673355][T13136] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:32: iget: checksum invalid [ 1666.680931][T13137] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:32: iget: checksum invalid [ 1667.446811][T13152] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9899'. [ 1668.362147][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.364117][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.502821][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9909'. [ 1668.600238][T13180] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.9912'. [ 1668.631424][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9913'. [ 1668.664564][T13184] syz.7.9914: attempt to access beyond end of device [ 1668.664564][T13184] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1668.895662][T13201] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.9921'. [ 1669.068426][T29115] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1669.110836][T24397] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1669.194660][T13210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1669.240026][T13214] 9pnet_virtio: no channels available for device syz [ 1669.259787][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9925'. [ 1669.270888][T24397] usb 5-1: Using ep0 maxpacket: 32 [ 1669.275270][T24397] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1669.277916][T24397] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1669.282382][T24397] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1669.285758][T24397] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1669.289740][T24397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1669.296823][T24397] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1669.297233][T13217] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:2: iget: checksum invalid [ 1669.299700][T24397] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1669.309763][T24397] usb 5-1: Product: syz [ 1669.311430][T24397] usb 5-1: Manufacturer: syz [ 1669.313011][T24397] usb 5-1: SerialNumber: syz [ 1669.319846][T24397] usb 5-1: config 0 descriptor?? [ 1669.322511][T24397] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1669.323032][T24397] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1669.528239][T13225] syz.8.9928: attempt to access beyond end of device [ 1669.528239][T13225] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1669.536277][T24397] usb 5-1: USB disconnect, device number 33 [ 1669.539155][T24397] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1670.286109][T13249] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9936'. [ 1670.288791][T13249] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9936'. [ 1670.292587][T13249] FAULT_INJECTION: forcing a failure. [ 1670.292587][T13249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.311812][T13252] 9pnet_virtio: no channels available for device syz [ 1670.316839][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.8.9936 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1670.316857][T13249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1670.316865][T13249] Call Trace: [ 1670.316870][T13249] [ 1670.316875][T13249] dump_stack_lvl+0x16c/0x1f0 [ 1670.316899][T13249] should_fail_ex+0x50a/0x650 [ 1670.316934][T13249] _copy_from_user+0x2e/0xd0 [ 1670.316948][T13249] kstrtouint_from_user+0xd7/0x1c0 [ 1670.316964][T13249] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1670.316983][T13249] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1670.317002][T13249] proc_fail_nth_write+0x84/0x250 [ 1670.317018][T13249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1670.317031][T13249] ? ksys_write+0x12b/0x250 [ 1670.317049][T13249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1670.317062][T13249] vfs_write+0x24c/0x1150 [ 1670.317078][T13249] ? __fget_files+0x1fc/0x3a0 [ 1670.317095][T13249] ? __pfx___mutex_lock+0x10/0x10 [ 1670.317110][T13249] ? __pfx_vfs_write+0x10/0x10 [ 1670.317129][T13249] ? __fget_files+0x206/0x3a0 [ 1670.317148][T13249] ksys_write+0x12b/0x250 [ 1670.317163][T13249] ? __pfx_ksys_write+0x10/0x10 [ 1670.317182][T13249] __do_fast_syscall_32+0x73/0x120 [ 1670.317197][T13249] do_fast_syscall_32+0x32/0x80 [ 1670.317211][T13249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1670.317231][T13249] RIP: 0023:0xf747e579 [ 1670.317241][T13249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1670.317252][T13249] RSP: 002b:00000000f5106590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1670.317264][T13249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5106620 [ 1670.317271][T13249] RDX: 0000000000000001 RSI: 00000000f746cff4 RDI: 0000000000000000 [ 1670.317277][T13249] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1670.317283][T13249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1670.317289][T13249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1670.317302][T13249] [ 1670.335923][T13253] syz.7.9937: attempt to access beyond end of device [ 1670.335923][T13253] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1670.515507][T13252] team0: Port device vlan0 removed [ 1670.531327][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9943'. [ 1670.604419][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9940'. [ 1670.837163][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.843609][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.867229][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.870550][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.873848][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.877102][ T1] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1906: comm init: iget: checksum invalid [ 1670.920914][T13252] team0 (unregistering): Port device geneve0 removed [ 1671.050851][ T5985] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 1671.240224][T13252] syz.0.9943 (13252) used greatest stack depth: 18896 bytes left [ 1671.260831][ T5985] usb 13-1: Using ep0 maxpacket: 32 [ 1671.300681][ T5985] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 1671.303166][ T5985] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1671.306436][ T5985] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1671.309619][ T5985] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1671.324521][ T5985] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1671.326765][ T2826] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.371222][ T5985] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1671.374983][ T5985] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1671.377801][ T5985] usb 13-1: Product: syz [ 1671.379637][ T5985] usb 13-1: Manufacturer: syz [ 1671.393839][ T5985] usb 13-1: SerialNumber: syz [ 1671.398424][ T5985] usb 13-1: config 0 descriptor?? [ 1671.448857][ T5985] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1671.452117][ T5985] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1671.516802][ T2826] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.578950][T13245] syz.7.9933: page allocation failure: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1671.583575][T13281] syz.0.9948 invoked oom-killer: gfp_mask=0x502dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 1671.590002][T13281] CPU: 2 UID: 0 PID: 13281 Comm: syz.0.9948 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1671.590026][T13281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1671.590037][T13281] Call Trace: [ 1671.590044][T13281] [ 1671.590053][T13281] dump_stack_lvl+0x16c/0x1f0 [ 1671.590083][T13281] dump_header+0x101/0x930 [ 1671.590108][T13281] oom_kill_process+0x270/0xa60 [ 1671.590126][T13281] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 1671.590148][T13281] out_of_memory+0x1407/0x1700 [ 1671.590171][T13281] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1671.590196][T13281] ? __pfx_out_of_memory+0x10/0x10 [ 1671.590216][T13281] ? lock_acquire+0x2f/0xb0 [ 1671.590235][T13281] ? __alloc_frozen_pages_noprof+0xcc5/0x2470 [ 1671.590265][T13281] __alloc_frozen_pages_noprof+0x1d66/0x2470 [ 1671.590293][T13281] ? is_bpf_text_address+0x94/0x1a0 [ 1671.590318][T13281] ? unwind_get_return_address+0x59/0xa0 [ 1671.590344][T13281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1671.590376][T13281] ? stack_trace_save+0x95/0xd0 [ 1671.590394][T13281] ? __pfx_stack_trace_save+0x10/0x10 [ 1671.590418][T13281] ? kasan_save_stack+0x42/0x60 [ 1671.590443][T13281] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 1671.590465][T13281] ? bpf_prog_load+0x1a00/0x2480 [ 1671.590486][T13281] ? __sys_bpf+0x4043/0x49c0 [ 1671.590506][T13281] ? __ia32_sys_bpf+0x76/0xe0 [ 1671.590520][T13281] ? __do_fast_syscall_32+0x73/0x120 [ 1671.590540][T13281] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1671.590572][T13281] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1671.590602][T13281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1671.590636][T13281] ? policy_nodemask+0xea/0x4e0 [ 1671.590663][T13281] alloc_pages_bulk_mempolicy_noprof+0x245/0x1200 [ 1671.590689][T13281] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 1671.590708][T13281] ? rcu_is_watching+0x12/0xc0 [ 1671.590745][T13281] ? trace_kmalloc+0x2d/0xd0 [ 1671.590764][T13281] ? __kmalloc_node_noprof+0x23d/0x510 [ 1671.590788][T13281] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 1671.590813][T13281] __vmalloc_node_range_noprof+0x514/0x1530 [ 1671.590843][T13281] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1671.590869][T13281] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1671.590892][T13281] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1671.590911][T13281] ? rcu_is_watching+0x12/0xc0 [ 1671.590927][T13281] ? trace_cap_capable+0x1a2/0x210 [ 1671.590944][T13281] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1671.590963][T13281] __vmalloc_noprof+0x6d/0x90 [ 1671.590983][T13281] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 1671.591003][T13281] bpf_prog_alloc_no_stats+0x54/0x630 [ 1671.591020][T13281] ? security_capable+0x7e/0x260 [ 1671.591047][T13281] bpf_prog_alloc+0x3b/0x230 [ 1671.591064][T13281] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1671.591088][T13281] bpf_prog_load+0x1a00/0x2480 [ 1671.591116][T13281] ? __pfx_bpf_prog_load+0x10/0x10 [ 1671.591138][T13281] ? find_held_lock+0x2d/0x110 [ 1671.591158][T13281] ? __might_fault+0x13b/0x190 [ 1671.591183][T13281] ? __might_fault+0xe3/0x190 [ 1671.591205][T13281] __sys_bpf+0x4043/0x49c0 [ 1671.591230][T13281] ? __pfx___sys_bpf+0x10/0x10 [ 1671.591251][T13281] ? lock_acquire.part.0+0x11b/0x380 [ 1671.591271][T13281] ? find_held_lock+0x2d/0x110 [ 1671.591317][T13281] ? do_futex+0x123/0x350 [ 1671.591342][T13281] ? __pfx_do_futex+0x10/0x10 [ 1671.591372][T13281] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1671.591392][T13281] ? rcu_is_watching+0x12/0xc0 [ 1671.591413][T13281] __ia32_sys_bpf+0x76/0xe0 [ 1671.591429][T13281] __do_fast_syscall_32+0x73/0x120 [ 1671.591451][T13281] do_fast_syscall_32+0x32/0x80 [ 1671.591471][T13281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1671.591495][T13281] RIP: 0023:0xf7f96579 [ 1671.591509][T13281] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1671.591525][T13281] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1671.591541][T13281] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 1671.591551][T13281] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.591560][T13281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1671.591569][T13281] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1671.591578][T13281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.591599][T13281] [ 1671.599585][T13245] CPU: 3 UID: 0 PID: 13245 Comm: syz.7.9933 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1671.599605][T13245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1671.599612][T13245] Call Trace: [ 1671.599616][T13245] [ 1671.599620][T13245] dump_stack_lvl+0x16c/0x1f0 [ 1671.599650][T13245] warn_alloc+0x24d/0x3a0 [ 1671.599671][T13245] ? __pfx_warn_alloc+0x10/0x10 [ 1671.599687][T13245] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1671.599705][T13245] ? trace_lock_acquire+0x14e/0x1f0 [ 1671.599720][T13245] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1671.599736][T13245] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1671.599753][T13245] ? __alloc_frozen_pages_noprof+0xcc5/0x2470 [ 1671.599774][T13245] __alloc_frozen_pages_noprof+0xf2f/0x2470 [ 1671.599794][T13245] ? lock_acquire.part.0+0x11b/0x380 [ 1671.599812][T13245] ? __lock_acquire+0x15a9/0x3c40 [ 1671.599827][T13245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1671.599854][T13245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1671.599873][T13245] ? policy_nodemask+0xea/0x4e0 [ 1671.599893][T13245] alloc_pages_mpol+0x1fc/0x540 [ 1671.599905][T13245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1671.599915][T13245] ? find_held_lock+0x2d/0x110 [ 1671.599929][T13245] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1671.599943][T13245] shmem_alloc_folio+0x135/0x160 [ 1671.599963][T13245] shmem_alloc_and_add_folio+0x48e/0xc10 [ 1671.599978][T13245] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1671.599990][T13245] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1671.600004][T13245] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1671.600020][T13245] shmem_get_folio_gfp+0x689/0x1530 [ 1671.600036][T13245] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1671.600049][T13245] ? find_held_lock+0x2d/0x110 [ 1671.600063][T13245] shmem_write_begin+0x161/0x300 [ 1671.600078][T13245] ? __pfx_shmem_write_begin+0x10/0x10 [ 1671.600090][T13245] ? timestamp_truncate+0x21f/0x2e0 [ 1671.600110][T13245] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 1671.600132][T13245] generic_perform_write+0x2ba/0x920 [ 1671.600149][T13245] ? __pfx_generic_perform_write+0x10/0x10 [ 1671.600163][T13245] ? inode_needs_update_time.part.0+0x191/0x270 [ 1671.600184][T13245] shmem_file_write_iter+0x10e/0x140 [ 1671.600201][T13245] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1671.600215][T13245] __kernel_write_iter+0x318/0xa90 [ 1671.600233][T13245] ? __pfx___kernel_write_iter+0x10/0x10 [ 1671.600248][T13245] ? get_dump_page+0x15b/0x230 [ 1671.600266][T13245] ? __pfx___might_resched+0x10/0x10 [ 1671.600287][T13245] dump_user_range+0x389/0x8c0 [ 1671.600304][T13245] ? __pfx_dump_user_range+0x10/0x10 [ 1671.600318][T13245] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1671.600338][T13245] ? __pfx_writenote+0x10/0x10 [ 1671.600356][T13245] elf_core_dump+0x2c2c/0x4000 [ 1671.600379][T13245] ? __pfx_elf_core_dump+0x10/0x10 [ 1671.600392][T13245] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1671.600406][T13245] ? do_coredump+0x17a8/0x4400 [ 1671.600418][T13245] ? get_signal+0x230b/0x26c0 [ 1671.600434][T13245] ? arch_do_signal_or_restart+0x90/0x7e0 [ 1671.600446][T13245] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1671.600464][T13245] ? hlock_class+0x4e/0x130 [ 1671.600491][T13245] ? rcu_is_watching+0x12/0xc0 [ 1671.600504][T13245] ? trace_lock_acquire+0x14e/0x1f0 [ 1671.600515][T13245] ? __pfx_sort+0x10/0x10 [ 1671.600528][T13245] ? get_signal+0x230b/0x26c0 [ 1671.600547][T13245] ? do_coredump+0x3134/0x4400 [ 1671.600559][T13245] do_coredump+0x3134/0x4400 [ 1671.600576][T13245] ? __pfx_do_coredump+0x10/0x10 [ 1671.600590][T13245] ? stack_trace_save+0x95/0xd0 [ 1671.600615][T13245] ? __pfx_stack_trace_save+0x10/0x10 [ 1671.600633][T13245] ? hlock_class+0x4e/0x130 [ 1671.600644][T13245] ? stack_depot_save_flags+0x28/0x9c0 [ 1671.600668][T13245] ? kmem_cache_free+0x2e2/0x4d0 [ 1671.600684][T13245] ? __sigqueue_free+0xba/0x2a0 [ 1671.600695][T13245] ? get_signal+0xcbc/0x26c0 [ 1671.600711][T13245] ? arch_do_signal_or_restart+0x90/0x7e0 [ 1671.600722][T13245] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1671.600751][T13245] ? find_held_lock+0x2d/0x110 [ 1671.600765][T13245] ? proc_coredump_connector+0x2d2/0x4f0 [ 1671.600870][T13245] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1671.600894][T13245] get_signal+0x230b/0x26c0 [ 1671.600913][T13245] ? force_sig_fault+0xc5/0x110 [ 1671.600930][T13245] ? __pfx_get_signal+0x10/0x10 [ 1671.600951][T13245] arch_do_signal_or_restart+0x90/0x7e0 [ 1671.600964][T13245] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1671.600976][T13245] ? __bad_area_nosemaphore+0x334/0x6a0 [ 1671.600995][T13245] ? do_user_addr_fault+0x920/0x13f0 [ 1671.601013][T13245] irqentry_exit_to_user_mode+0x13f/0x280 [ 1671.601029][T13245] asm_exc_page_fault+0x26/0x30 [ 1671.601045][T13245] RIP: 0023:0x9bbc [ 1671.601060][T13245] Code: Unable to access opcode bytes at 0x9b92. [ 1671.601065][T13245] RSP: 002b:0000000080000170 EFLAGS: 00010246 [ 1671.601075][T13245] RAX: 0000000000000000 RBX: 0000000001800000 RCX: 0000000078b764a8 [ 1671.601081][T13245] RDX: 00000000d60884ce RSI: 0000000080000180 RDI: 00000000800001c0 [ 1671.601088][T13245] RBP: 000000002611b3cc R08: 0000000000000000 R09: 0000000000000000 [ 1671.601094][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.601100][T13245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.601113][T13245] [ 1671.602795][T13245] Mem-Info: [ 1671.638463][T13281] Mem-Info: [ 1671.651543][T13245] active_anon:7146 inactive_anon:13458 isolated_anon:0 [ 1671.651543][T13245] active_file:690 inactive_file:694 isolated_file:0 [ 1671.651543][T13245] unevictable:1767 dirty:16 writeback:0 [ 1671.651543][T13245] slab_reclaimable:6874 slab_unreclaimable:72843 [ 1671.651543][T13245] mapped:39591 shmem:21241 pagetables:1451 [ 1671.651543][T13245] sec_pagetables:334 bounce:0 [ 1671.651543][T13245] kernel_misc_reclaimable:0 [ 1671.651543][T13245] free:34183 free_pcp:950 free_cma:0 [ 1671.652304][T13281] active_anon:7171 inactive_anon:13458 isolated_anon:0 [ 1671.652304][T13281] active_file:690 inactive_file:694 isolated_file:0 [ 1671.652304][T13281] unevictable:1767 dirty:16 writeback:0 [ 1671.652304][T13281] slab_reclaimable:6874 slab_unreclaimable:72843 [ 1671.652304][T13281] mapped:39591 shmem:21241 pagetables:1451 [ 1671.652304][T13281] sec_pagetables:334 bounce:0 [ 1671.652304][T13281] kernel_misc_reclaimable:0 [ 1671.652304][T13281] free:34183 free_pcp:916 free_cma:0 [ 1671.653760][T13245] Node 0 active_anon:1272kB inactive_anon:3140kB active_file:0kB inactive_file:60kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:1932kB dirty:48kB writeback:0kB shmem:9088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9136kB pagetables:1244kB sec_pagetables:1132kB all_unreclaimable? no [ 1671.655638][T13281] Node 0 active_anon:1272kB inactive_anon:3140kB active_file:0kB inactive_file:60kB unevictable:3532kB isolated(anon):0kB isolated(file):0kB mapped:1932kB dirty:48kB writeback:0kB shmem:9088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9136kB pagetables:1244kB sec_pagetables:1132kB all_unreclaimable? no [ 1671.655673][T13281] Node 1 active_anon:28012kB inactive_anon:50692kB active_file:2872kB inactive_file:2716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:156432kB dirty:16kB writeback:0kB shmem:76476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4784kB pagetables:4560kB sec_pagetables:204kB all_unreclaimable? no [ 1671.657538][T13245] Node 1 active_anon:28312kB inactive_anon:50692kB active_file:2872kB inactive_file:2716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:156432kB dirty:16kB writeback:0kB shmem:76776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4784kB pagetables:4560kB sec_pagetables:204kB all_unreclaimable? no [ 1671.659094][T13281] Node 0 [ 1671.661110][T13245] Node 0 [ 1671.672708][T13281] DMA free:776kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:96kB inactive_anon:40kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:8kB free_cma:0kB [ 1671.694486][T13245] DMA free:776kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:96kB inactive_anon:40kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:392kB local_pcp:240kB free_cma:0kB [ 1671.698480][T13281] lowmem_reserve[]: 0 294 [ 1671.701508][ T5985] usb 13-1: USB disconnect, device number 34 [ 1671.701927][T13281] 0 [ 1671.704789][ T5985] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 1671.706043][T13281] 0 [ 1671.720828][T13245] lowmem_reserve[]: [ 1671.723237][T13281] 0 [ 1671.723445][T13245] 0 [ 1671.725800][T13281] [ 1671.726730][T13245] 294 0 0 0 [ 1671.729876][T13281] Node 0 DMA32 free:12320kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:0KB active_anon:1336kB inactive_anon:2796kB active_file:68kB inactive_file:144kB unevictable:3532kB writepending:48kB present:1032196kB managed:301744kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:76kB free_cma:0kB [ 1671.729914][T13281] lowmem_reserve[]: 0 [ 1671.762797][T13245] Node 0 [ 1671.763227][T13281] 0 [ 1671.765189][T13245] DMA32 free:12320kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:0KB active_anon:1336kB inactive_anon:2796kB active_file:68kB inactive_file:144kB unevictable:3532kB writepending:48kB present:1032196kB managed:301744kB mlocked:0kB bounce:0kB free_pcp:2436kB local_pcp:212kB free_cma:0kB [ 1671.766742][T13281] 0 [ 1671.769061][T13245] lowmem_reserve[]: 0 [ 1671.769711][ T2826] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.770852][T13281] 0 0 [ 1671.770867][T13281] Node 1 DMA32 free:100276kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:40312kB inactive_anon:44992kB active_file:9172kB inactive_file:2716kB unevictable:3536kB writepending:16kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:12668kB local_pcp:800kB free_cma:0kB [ 1671.770898][T13281] lowmem_reserve[]: 0 0 0 0 0 [ 1671.770920][T13281] Node 0 DMA: 0*4kB 1*8kB (U) 25*16kB (U) 12*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB [ 1671.773722][T13245] 0 [ 1671.775451][T13281] 0*2048kB [ 1671.777431][T13245] 0 0 [ 1671.784733][T13281] 0*4096kB [ 1671.796614][T13245] 0 [ 1671.808332][T13281] = 792kB [ 1671.830921][T13245] [ 1671.830933][T13245] Node 1 DMA32 free:96920kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:41812kB inactive_anon:43092kB active_file:10972kB inactive_file:2716kB unevictable:3536kB writepending:16kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:15068kB local_pcp:7560kB free_cma:0kB [ 1671.830965][T13245] lowmem_reserve[]: 0 0 0 [ 1671.832563][T13281] Node 0 [ 1671.833715][T13245] 0 [ 1671.835335][T13281] DMA32: [ 1671.837162][T13245] 0 [ 1671.837176][T13245] Node 0 DMA: 0*4kB 1*8kB (U) 25*16kB (U) 13*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 824kB [ 1671.837250][T13245] Node 0 DMA32: 5*4kB (UME) 10*8kB (UME) 29*16kB (UM) 40*32kB (UM) 65*64kB (UM) 30*128kB (UM) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 12148kB [ 1671.837352][T13245] Node 1 DMA32: 1*4kB (M) 195*8kB (UM) 332*16kB (U) 845*32kB (UM) 353*64kB (UM) 121*128kB (UM) 77*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 96316kB [ 1671.837452][T13245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.837461][T13245] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1671.837470][T13245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.837479][T13245] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1671.837487][T13245] 27095 total pagecache pages [ 1671.837493][T13245] 637 pages in swap cache [ 1671.837497][T13245] Free swap = 10984kB [ 1671.837502][T13245] Total swap = 124996kB [ 1671.837507][T13245] 524155 pages RAM [ 1671.837511][T13245] 0 pages HighMem/MovableOnly [ 1671.837521][T13245] 207816 pages reserved [ 1671.837525][T13245] 0 pages cma reserved [ 1671.881735][ T7242] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 1671.891717][T13281] 5*4kB (UME) 10*8kB (UME) 29*16kB (UM) 40*32kB (UM) 65*64kB (UM) 30*128kB (UM) 7*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 12148kB [ 1671.891805][T13281] Node 1 DMA32: 0*4kB 195*8kB (UM) 317*16kB (U) 790*32kB (UM) 353*64kB (UM) 121*128kB (UM) 77*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 94312kB [ 1671.891891][T13281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.891901][T13281] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1671.891909][T13281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1671.891918][T13281] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1671.891926][T13281] 26570 total pagecache pages [ 1671.891931][T13281] 637 pages in swap cache [ 1671.891936][T13281] Free swap = 16616kB [ 1671.891941][T13281] Total swap = 124996kB [ 1671.891946][T13281] 524155 pages RAM [ 1671.891950][T13281] 0 pages HighMem/MovableOnly [ 1671.891954][T13281] 207816 pages reserved [ 1671.891958][T13281] 0 pages cma reserved [ 1671.891963][T13281] Unreclaimable slab info: [ 1671.898341][T13288] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9950'. [ 1671.903243][T13281] Name Used Total [ 1672.041071][ T7242] usb 12-1: Using ep0 maxpacket: 16 [ 1672.047524][T13281] pid_3 31KB 31KB [ 1672.055926][ T7242] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.060594][T13281] pid_2 139KB 161KB [ 1672.069533][ T7242] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.071223][T13281] bio-360 7KB 7KB [ 1672.074968][ T7242] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1672.075801][T13281] bio-424 8KB 8KB [ 1672.077067][ T7242] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1672.078365][T13281] bio-440 8KB 8KB [ 1672.079427][ T7242] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.080673][T13281] bio-536 15KB 15KB [ 1672.083108][ T7242] usb 12-1: config 0 descriptor?? [ 1672.083158][T13281] afs_inode_cache 92KB 92KB [ 1672.155222][T13281] z3fold_handle 1625KB 1626KB [ 1672.157030][T13281] zswap_entry 1533KB 1537KB [ 1672.158738][ T2826] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.158810][T13281] AF_VSOCK 245KB 245KB [ 1672.164713][T13281] sw_flow_stats 16KB 16KB [ 1672.166529][T13281] sw_flow 61KB 61KB [ 1672.168448][T13281] batadv_tt_change_cache 16KB 16KB [ 1672.170359][T13281] batadv_tl_cache 16KB 16KB [ 1672.173872][T13281] ceph_osd_request 127KB 127KB [ 1672.175732][T13281] ceph_msg 30KB 30KB [ 1672.177533][T13281] IEEE-802.15.4-MAC 126KB 126KB [ 1672.179337][T13281] IEEE-802.15.4-RAW 126KB 126KB [ 1672.181202][T13281] p9_req_t 63KB 63KB [ 1672.183026][T13281] SMC6 126KB 126KB [ 1672.184859][T13281] SMC 126KB 126KB [ 1672.186670][T13281] TIPC 126KB 126KB [ 1672.188479][T13281] rds_tcp_incoming 110KB 190KB [ 1672.193027][T13281] rds_tcp_connection 63KB 63KB [ 1672.194900][T13281] RDS 192KB 192KB [ 1672.196715][T13281] rds_connection 30KB 30KB [ 1672.198518][T13281] SCTPv6 180KB 180KB [ 1672.200328][T13281] SCTP 255KB 255KB [ 1672.202316][T13281] sctp_chunk 93KB 171KB [ 1672.204146][T13281] sctp_bind_bucket 16KB 16KB [ 1672.205993][T13281] tw_sock_DCCPv6 15KB 15KB [ 1672.207807][T13281] DCCPv6 121KB 121KB [ 1672.209596][T13281] tw_sock_DCCP 31KB 31KB [ 1672.211719][T13281] request_sock_DCCP 30KB 30KB [ 1672.213740][T13281] DCCP 126KB 126KB [ 1672.215622][T13281] ccid3_hc_tx_sock 8KB 8KB [ 1672.217405][T13281] ccid3_hc_rx_sock 8KB 8KB [ 1672.217868][T13291] 9pnet_fd: Insufficient options for proto=fd [ 1672.219177][T13281] ccid2_hc_tx_sock 126KB 126KB [ 1672.219191][T13281] ccid2_hc_rx_sock 15KB 15KB [ 1672.225469][T13281] tfrc_rxh_cache 8KB 8KB [ 1672.227282][T13281] tfrc_tx_hist 4KB 4KB [ 1672.229103][T13281] dccp_ackvec_record 36KB 52KB [ 1672.231717][T13281] dccp_ackvec 63KB 63KB [ 1672.233906][T13281] dccp_bind2_bucket 16KB 16KB [ 1672.236034][T13281] dccp_bind_bucket 16KB 16KB [ 1672.238025][T13281] PNPIPE 123KB 123KB [ 1672.239827][T13281] PHONET 63KB 63KB [ 1672.241957][T13281] L2TP/IPv6 127KB 127KB [ 1672.243767][T13281] L2TP/IP 121KB 121KB [ 1672.245540][T13281] KCM 95KB 95KB [ 1672.247685][T13281] kcm_mux 47KB 47KB [ 1672.249467][T13281] RXRPC 127KB 127KB [ 1672.251384][T13281] rxrpc_call_jar 401KB 446KB [ 1672.253197][T13281] can_receiver 15KB 15KB [ 1672.255007][T13281] net_bridge_fdb_entry 129KB 129KB [ 1672.256876][T13281] nf-frags 7KB 7KB [ 1672.258663][T13281] xfrm6_tunnel_spi 12KB 12KB [ 1672.260484][T13281] MPTCPv6 127KB 127KB [ 1672.262359][T13281] fib6_node 132KB 148KB [ 1672.264181][T13281] ip6_dst_cache 181KB 234KB [ 1672.268511][T13281] mfc6_cache 8KB 8KB [ 1672.270345][T13281] PINGv6 223KB 223KB [ 1672.276571][T13281] RAWv6 255KB 255KB [ 1672.278415][T13281] UDPLITEv6 191KB 191KB [ 1672.280202][T13281] UDPv6 318KB 318KB [ 1672.282053][T13281] tw_sock_TCPv6 31KB 31KB [ 1672.283915][T13281] request_sock_TCPv6 31KB 31KB [ 1672.285731][T13281] TCPv6 462KB 516KB [ 1672.290804][T13281] nf_conntrack 55KB 55KB [ 1672.293617][T13281] fq_flow_cache 3KB 3KB [ 1672.295484][T13281] wg_peer 216KB 216KB [ 1672.295747][ T2826] bridge_slave_1: left allmulticast mode [ 1672.297245][T13281] allowedips_node 27KB 27KB [ 1672.299220][ T2826] bridge_slave_1: left promiscuous mode [ 1672.301578][T13281] t10_alua_lu_gp_cache 7KB 7KB [ 1672.302955][ T2826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.304744][T13281] scsi_sense_cache 48KB 48KB [ 1672.304758][T13281] virtio_scsi_cmd 16KB 16KB [ 1672.304770][T13281] bio-136 84KB 84KB [ 1672.304794][T13281] io_buffer 28KB 48KB [ 1672.314375][T13281] io_kiocb 147KB 187KB [ 1672.316226][T13281] bio-264 94KB 94KB [ 1672.316562][ T2826] bridge_slave_0: left allmulticast mode [ 1672.318000][T13281] mqueue_inode_cache 121KB 121KB [ 1672.319721][ T2826] bridge_slave_0: left promiscuous mode [ 1672.321833][T13281] f2fs_bio_post_read_ctx 23KB 23KB [ 1672.325746][T13281] jfs_mp 7KB 7KB [ 1672.326469][ T2826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.327853][T13281] fuse_request 79KB 119KB [ 1672.331594][T13281] cifs_small_rq 16KB 16KB [ 1672.333422][T13281] cifs_request 67KB 67KB [ 1672.335274][T13281] cifs_mpx_ids 4KB 4KB [ 1672.337712][T13281] cifs_io_subrequest 39KB 39KB [ 1672.339582][T13281] cifs_io_request 95KB 95KB [ 1672.341553][T13281] nfs_commit_data 15KB 15KB [ 1672.343856][T13281] nfs_write_data 63KB 63KB [ 1672.345813][T13281] ecryptfs_sb_cache 23KB 23KB [ 1672.347645][T13281] jbd2_inode 11KB 11KB [ 1672.349631][T13281] ext4_system_zone 3KB 3KB [ 1672.352978][T13281] ext4_io_end_vec 15KB 15KB [ 1672.354975][T13281] kioctx 127KB 127KB [ 1672.357456][T13281] aio_kiocb 31KB 31KB [ 1672.359261][T13281] userfaultfd_ctx_cache 94KB 94KB [ 1672.361513][T13281] fanotify_mark 7KB 7KB [ 1672.363498][T13281] dnotify_mark 15KB 15KB [ 1672.365421][T13281] dnotify_struct 15KB 15KB [ 1672.367394][T13281] fasync_cache 15KB 15KB [ 1672.369285][T13281] pid_namespace 30KB 30KB [ 1672.371324][T13281] posix_timers_cache 31KB 31KB [ 1672.373225][T13281] kvm_vcpu 247KB 247KB [ 1672.375113][T13281] kvm_mmu_page_header 124KB 143KB [ 1672.377023][T13281] pte_list_desc 133KB 133KB [ 1672.378857][T13281] x86_emulator 120KB 120KB [ 1672.380705][T13281] rpc_buffers 159KB 159KB [ 1672.382583][T13281] rpc_tasks 31KB 31KB [ 1672.391368][T13281] UNIX-STREAM 290KB 495KB [ 1672.393837][T13281] UNIX 356KB 649KB [ 1672.396321][T13281] ip4-frags 86KB 158KB [ 1672.398709][T13281] mfc_cache 12KB 12KB [ 1672.400818][T13281] UDP-Lite 124KB 124KB [ 1672.402728][T13281] MPTCP 240KB 240KB [ 1672.404551][T13281] request_sock_subflow_v6 7KB 7KB [ 1672.410884][T13281] request_sock_subflow_v4 23KB 23KB [ 1672.412858][T13281] tcp_bind2_bucket 16KB 16KB [ 1672.415024][T13281] tcp_bind_bucket 16KB 16KB [ 1672.416921][T13281] inet_peer 16KB 16KB [ 1672.418769][T13281] xfrm_dst 31KB 31KB [ 1672.420560][T13281] xfrm_state 159KB 159KB [ 1672.436099][T13281] ip_fib_trie 43KB 64KB [ 1672.438224][T13281] ip_fib_alias 99KB 114KB [ 1672.440079][T13281] rtable 59KB 144KB [ 1672.441969][T13281] PING 121KB 121KB [ 1672.443807][T13281] RAW 151KB 151KB [ 1672.445730][T13281] UDP 186KB 186KB [ 1672.447608][T13281] tw_sock_TCP 31KB 31KB [ 1672.449876][T13281] request_sock_TCP 23KB 23KB [ 1672.452359][T13281] TCP 682KB 828KB [ 1672.454146][T13281] hugetlbfs_inode_cache 126KB 126KB [ 1672.456089][T13281] fscache_cookie_jar 30KB 30KB [ 1672.457937][T13281] netfs_subrequest 125KB 195KB [ 1672.459804][T13281] netfs_request 141KB 141KB [ 1672.461658][T13281] bio-256 15KB 15KB [ 1672.463425][T13281] ep_head 16KB 16KB [ 1672.465218][T13281] eventpoll_pwq 19KB 19KB [ 1672.467007][T13281] eventpoll_epi 86KB 86KB [ 1672.468833][T13281] inotify_inode_mark 23KB 23KB [ 1672.470961][T13281] sgpool-128 29KB 29KB [ 1672.474068][T13281] sgpool-64 31KB 31KB [ 1672.475875][T13281] sgpool-32 220KB 220KB [ 1672.477646][T13281] sgpool-16 78KB 78KB [ 1672.479426][T13281] sgpool-8 70KB 70KB [ 1672.482402][T13281] bio_crypt_ctx 7KB 7KB [ 1672.484580][T13281] request_queue 238KB 238KB [ 1672.486523][T13281] blkdev_ioc 31KB 31KB [ 1672.488453][T13281] bio-200 164KB 179KB [ 1672.490264][T13281] biovec-max 667KB 833KB [ 1672.492430][T13281] biovec-64 220KB 378KB [ 1672.494315][T13281] biovec-16 70KB 70KB [ 1672.496196][T13281] bio_integrity_payload 7KB 7KB [ 1672.496956][ T7242] shield 0003:0955:7214.007E: unknown main item tag 0x0 [ 1672.498161][T13281] khugepaged_mm_slot 15KB 15KB [ 1672.498188][T13281] ksm_mm_slot 12KB 12KB [ 1672.500059][ T7242] shield 0003:0955:7214.007E: unknown main item tag 0x0 [ 1672.501972][T13281] user_namespace 31KB 31KB [ 1672.501985][T13281] uid_cache 31KB 31KB [ 1672.505773][ T7242] shield 0003:0955:7214.007E: unknown main item tag 0x0 [ 1672.507508][T13281] iommu_iova_magazine 1084KB 1102KB [ 1672.509102][ T7242] shield 0003:0955:7214.007E: unknown main item tag 0x0 [ 1672.509120][ T7242] shield 0003:0955:7214.007E: unknown main item tag 0x0 [ 1672.512042][T13281] iommu_iova 264KB 264KB [ 1672.519011][T13281] dmaengine-unmap-256 30KB 30KB [ 1672.520997][T13281] dmaengine-unmap-128 30KB 30KB [ 1672.522935][T13281] dmaengine-unmap-16 4KB 4KB [ 1672.523136][ T7242] input: HID 0955:7214 Haptics as /devices/virtual/input/input415 [ 1672.525036][T13281] dmaengine-unmap-2 4KB 4KB [ 1672.532460][T13281] QIPCRTR 126KB 126KB [ 1672.534556][T13281] audit_buffer 43KB 79KB [ 1672.536519][T13281] skbuff_ext_cache 72KB 92KB [ 1672.537992][ T7242] shield 0003:0955:7214.007E: Registered Thunderstrike controller [ 1672.538441][T13281] skbuff_small_head 1175KB 1219KB [ 1672.541774][ T7242] shield 0003:0955:7214.007E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 1672.554009][T13281] skbuff_fclone_cache 243KB 312KB [ 1672.556227][T13281] skbuff_head_cache 1170KB 1289KB [ 1672.558111][T13281] configfs_dir_cache 16KB 16KB [ 1672.561511][T13281] file_lease_cache 47KB 47KB [ 1672.563704][T13281] file_lock_cache 87KB 158KB [ 1672.565791][T13281] file_lock_ctx 27KB 27KB [ 1672.567689][T13281] fsnotify_mark_connector 15KB 15KB [ 1672.569736][T13281] taskstats 61KB 61KB [ 1672.571617][T13281] proc_dir_entry 738KB 843KB [ 1672.573450][T13281] pde_opener 15KB 15KB [ 1672.575317][T13281] seq_file 85KB 156KB [ 1672.577194][T13281] sigqueue 47KB 78KB [ 1672.579162][T13281] shmem_inode_cache 8005KB 8190KB [ 1672.581135][T13281] kernfs_iattrs_cache 15KB 15KB [ 1672.583031][T13281] kernfs_node_cache 34393KB 34393KB [ 1672.584987][T13281] mnt_cache 126KB 189KB [ 1672.586803][T13281] bfilp 31KB 31KB [ 1672.588749][T13281] filp 333KB 700KB [ 1672.590576][T13281] names_cache 3557KB 3778KB [ 1672.592743][T13281] net_namespace 211KB 211KB [ 1672.594594][T13281] ima_iint_cache 55KB 55KB [ 1672.596496][T13281] lsm_inode_cache 1593KB 1697KB [ 1672.598344][T13281] lsm_file_cache 137KB 240KB [ 1672.600296][T13281] key_jar 39KB 39KB [ 1672.602901][T13281] uts_namespace 31KB 31KB [ 1672.604816][T13281] nsproxy 23KB 23KB [ 1672.606664][T13281] vma_lock 873KB 945KB [ 1672.608624][T13281] vm_area_struct 1002KB 1081KB [ 1672.610663][T13281] fs_cache 78KB 88KB [ 1672.621044][T29115] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1672.621848][T13281] files_cache 259KB 350KB [ 1672.626827][T13281] signal_cache 879KB 1670KB [ 1672.629561][T13281] sighand_cache 1202KB 1773KB [ 1672.663127][T13281] task_struct 4821KB 5138KB [ 1672.664951][T13281] cred 184KB 304KB [ 1672.666779][T13281] anon_vma_chain 454KB 535KB [ 1672.668772][T13281] anon_vma 435KB 589KB [ 1672.670566][T13281] pid 217KB 370KB [ 1672.672435][T13281] Acpi-Operand 275KB 388KB [ 1672.674352][T13281] Acpi-ParseExt 63KB 78KB [ 1672.676154][T13281] Acpi-Parse 83KB 102KB [ 1672.677939][T13281] Acpi-State 82KB 122KB [ 1672.679628][T13281] Acpi-Namespace 52KB 52KB [ 1672.682336][T13281] shared_policy_node 16KB 16KB [ 1672.684258][T13281] numa_policy 15KB 15KB [ 1672.686125][T13281] perf_event 30KB 30KB [ 1672.687929][T13281] trace_event_file 536KB 536KB [ 1672.690128][T13281] ftrace_event_field 988KB 988KB [ 1672.692068][T13281] pool_workqueue 1979KB 2048KB [ 1672.693875][T13281] maple_node 683KB 1272KB [ 1672.696229][T13281] task_group 46KB 46KB [ 1672.698224][T13281] mm_struct 470KB 660KB [ 1672.698599][T13284] FAULT_INJECTION: forcing a failure. [ 1672.698599][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.700059][T13281] vmap_area 1004KB 1275KB [ 1672.700133][T13281] debug_objects_cache 3886KB 4103KB [ 1672.705976][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.7.9947 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1672.706003][T13284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1672.706012][T13284] Call Trace: [ 1672.706025][T13284] [ 1672.706031][T13284] dump_stack_lvl+0x16c/0x1f0 [ 1672.706054][T13284] should_fail_ex+0x50a/0x650 [ 1672.706074][T13284] ? fs_reclaim_acquire+0xae/0x150 [ 1672.706092][T13284] should_failslab+0xc2/0x120 [ 1672.706103][T13284] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1672.706121][T13284] ? __alloc_skb+0x2b1/0x380 [ 1672.706140][T13284] __alloc_skb+0x2b1/0x380 [ 1672.706154][T13284] ? __pfx___alloc_skb+0x10/0x10 [ 1672.706172][T13284] ? __pfx___nla_validate_parse+0x10/0x10 [ 1672.706187][T13284] thermal_genl_cmd_doit+0x10b/0x4b0 [ 1672.706204][T13284] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 1672.706223][T13284] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1672.706242][T13284] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1672.706263][T13284] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1672.706281][T13284] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1672.706298][T13284] ? genl_get_cmd+0x195/0x580 [ 1672.706322][T13284] ? __radix_tree_lookup+0x21f/0x2c0 [ 1672.706338][T13284] genl_rcv_msg+0x565/0x800 [ 1672.706356][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1672.706373][T13284] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 1672.706389][T13284] ? __pfx___lock_acquire+0x10/0x10 [ 1672.706409][T13284] netlink_rcv_skb+0x16b/0x440 [ 1672.706423][T13284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1672.706440][T13284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1672.706461][T13284] ? down_read+0xc9/0x330 [ 1672.706476][T13284] ? __pfx_down_read+0x10/0x10 [ 1672.706491][T13284] ? netlink_deliver_tap+0x1ae/0xd30 [ 1672.706507][T13284] genl_rcv+0x28/0x40 [ 1672.706522][T13284] netlink_unicast+0x53c/0x7f0 [ 1672.706538][T13284] ? __pfx_netlink_unicast+0x10/0x10 [ 1672.706553][T13284] ? __phys_addr_symbol+0x30/0x80 [ 1672.706566][T13284] ? __check_object_size+0x488/0x710 [ 1672.706579][T13284] netlink_sendmsg+0x8b8/0xd70 [ 1672.706596][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1672.706616][T13284] ____sys_sendmsg+0xaaf/0xc90 [ 1672.706630][T13284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1672.706642][T13284] ? get_compat_msghdr+0x11b/0x170 [ 1672.706661][T13284] ___sys_sendmsg+0x135/0x1e0 [ 1672.706679][T13284] ? __pfx____sys_sendmsg+0x10/0x10 [ 1672.706700][T13284] ? __pfx_lock_release+0x10/0x10 [ 1672.706714][T13284] ? trace_lock_acquire+0x14e/0x1f0 [ 1672.706733][T13284] ? __fget_files+0x206/0x3a0 [ 1672.706753][T13284] __sys_sendmsg+0x16e/0x220 [ 1672.706769][T13284] ? __pfx___sys_sendmsg+0x10/0x10 [ 1672.706794][T13284] __do_fast_syscall_32+0x73/0x120 [ 1672.706809][T13284] do_fast_syscall_32+0x32/0x80 [ 1672.706824][T13284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1672.706843][T13284] RIP: 0023:0xf7f26579 [ 1672.706853][T13284] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1672.706864][T13284] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1672.706875][T13284] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800001c0 [ 1672.706882][T13284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1672.706888][T13284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1672.706894][T13284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1672.706900][T13284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.706913][T13284] [ 1672.710861][T25588] shield 0003:0955:7214.007E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1672.711419][T13281] page->ptl 192KB 228KB [ 1672.715833][ T9] usb 12-1: USB disconnect, device number 27 [ 1672.716528][T13281] kmalloc-cg-8k 4352KB 4608KB [ 1672.719528][T25588] shield 0003:0955:7214.007E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1672.720869][T13281] kmalloc-cg-4k 15928KB 17632KB [ 1672.720898][T13281] kmalloc-cg-2k 12116KB 13536KB [ 1672.720913][T13281] kmalloc-cg-1k 2620KB 3040KB [ 1672.722329][T25588] shield 0003:0955:7214.007E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1672.724015][T13281] kmalloc-cg-512 1289KB 1648KB [ 1672.725415][T25588] shield 0003:0955:7214.007E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1672.726767][T13281] kmalloc-cg-256 373KB 432KB [ 1672.726782][T13281] kmalloc-cg-128 299KB 328KB [ 1672.726793][T13281] kmalloc-cg-64 48KB 88KB [ 1672.726802][T13281] kmalloc-cg-32 65KB 100KB [ 1672.849286][T13281] kmalloc-cg-16 45KB 112KB [ 1672.851132][T13281] kmalloc-cg-8 32KB 52KB [ 1672.852919][T13281] kmalloc-cg-192 198KB 228KB [ 1672.854702][T13281] kmalloc-cg-96 49KB 64KB [ 1672.856507][T13281] kmalloc-8k 6192KB 6368KB [ 1672.858288][T13281] kmalloc-4k 24184KB 25784KB [ 1672.860070][T13281] kmalloc-2k 14408KB 15072KB [ 1672.861984][T13281] kmalloc-1k 8626KB 10848KB [ 1672.864113][T13281] kmalloc-512 9506KB 10288KB [ 1672.865897][T13281] kmalloc-256 3965KB 4384KB [ 1672.867668][T13281] kmalloc-128 1085KB 1260KB [ 1672.869449][T13281] kmalloc-64 3580KB 4072KB [ 1672.871398][T13281] kmalloc-32 2033KB 2496KB [ 1672.873525][T13281] kmalloc-16 648KB 672KB [ 1672.875358][T13281] kmalloc-8 1060KB 1104KB [ 1672.877140][T13281] kmalloc-192 2117KB 2228KB [ 1672.878916][T13281] kmalloc-96 1190KB 1340KB [ 1672.880697][T13281] kmem_cache_node 226KB 228KB [ 1672.882721][T13281] kmem_cache 195KB 195KB [ 1672.884500][T13281] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.9948,pid=13281,uid=0 [ 1672.889186][T13281] Out of memory (oom_kill_allocating_task): Killed process 13281 (syz.0.9948) total-vm:97896kB, anon-rss:0kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 1673.161551][ T2826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.168966][ T2826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.174642][ T2826] bond0 (unregistering): Released all slaves [ 1673.698546][ T2826] hsr_slave_0: left promiscuous mode [ 1673.700566][ T2826] hsr_slave_1: left promiscuous mode [ 1673.787594][ T2826] veth1_macvtap: left promiscuous mode [ 1673.789293][ T2826] veth0_macvtap: left promiscuous mode [ 1673.796969][ T2826] veth1_vlan: left promiscuous mode [ 1673.798604][ T2826] veth0_vlan: left promiscuous mode [ 1673.883263][T13322] autofs: Bad value for 'fd' [ 1674.119205][T13331] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 1674.136545][T13332] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:5: iget: checksum invalid [ 1674.183716][T13369] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 1674.331537][T13369] usb 13-1: Using ep0 maxpacket: 16 [ 1674.343441][T13369] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.347698][T13369] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.350584][T13369] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1674.365534][ T5986] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1674.368338][T13369] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1674.376954][T13369] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.391258][T13369] usb 13-1: config 0 descriptor?? [ 1674.533775][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 1674.550917][ T5986] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1674.553695][ T5986] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1674.557058][ T5986] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1674.572604][ T5986] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1674.577181][ T5986] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1674.614645][ T5986] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1674.617630][ T5986] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1674.620092][ T5986] usb 5-1: Product: syz [ 1674.621421][ T5986] usb 5-1: Manufacturer: syz [ 1674.622825][ T5986] usb 5-1: SerialNumber: syz [ 1674.625887][ T5986] usb 5-1: config 0 descriptor?? [ 1674.643283][ T5986] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1674.647578][ T5986] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1674.827211][T13369] shield 0003:0955:7214.007F: unknown main item tag 0x0 [ 1674.829999][T13369] shield 0003:0955:7214.007F: unknown main item tag 0x0 [ 1674.831710][ T7732] usb 5-1: USB disconnect, device number 34 [ 1674.836191][T13369] shield 0003:0955:7214.007F: unknown main item tag 0x0 [ 1674.838343][T13369] shield 0003:0955:7214.007F: unknown main item tag 0x0 [ 1674.840466][T13369] shield 0003:0955:7214.007F: unknown main item tag 0x0 [ 1674.844623][T13369] input: HID 0955:7214 Haptics as /devices/virtual/input/input416 [ 1674.851781][T13369] shield 0003:0955:7214.007F: Registered Thunderstrike controller [ 1674.855092][T13369] shield 0003:0955:7214.007F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 1674.861186][ T7732] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1674.884041][T13336] syz.7.9965: attempt to access beyond end of device [ 1674.884041][T13336] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1675.166243][T13343] ieee802154 phy0 wpan0: encryption failed: -90 [ 1675.876271][ T7330] shield 0003:0955:7214.007F: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1675.879854][ T7330] shield 0003:0955:7214.007F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1675.895514][ T7330] shield 0003:0955:7214.007F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1675.899104][ T7330] shield 0003:0955:7214.007F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1676.031002][T13369] usb 13-1: reset high-speed USB device number 35 using dummy_hcd [ 1676.077153][ T2826] team0 (unregistering): Port device team_slave_1 removed [ 1676.164002][T13369] usb 13-1: device descriptor read/64, error -32 [ 1676.404103][ T2826] team0 (unregistering): Port device team_slave_0 removed [ 1676.571295][T13369] usb 13-1: reset high-speed USB device number 35 using dummy_hcd [ 1676.701276][T13369] usb 13-1: device descriptor read/64, error -32 [ 1676.959599][T13369] usb 13-1: reset high-speed USB device number 35 using dummy_hcd [ 1677.009772][T13369] usb 13-1: device descriptor read/8, error -32 [ 1677.264619][T13369] usb 13-1: reset high-speed USB device number 35 using dummy_hcd [ 1677.305788][T13369] usb 13-1: device descriptor read/8, error -32 [ 1677.419846][T13369] raw-gadget.0 gadget.8: failed to queue suspend event [ 1677.438907][ T7330] usb 13-1: USB disconnect, device number 35 [ 1677.456298][ T7330] raw-gadget.0 gadget.8: failed to queue reset event [ 1677.544426][ T7330] raw-gadget.0 gadget.8: failed to queue resume event [ 1677.600955][ T7330] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 1677.605821][ C2] raw-gadget.0 gadget.8: ignoring, device is not running [ 1677.608809][ T7330] raw-gadget.0 gadget.8: failed to queue reset event [ 1677.680988][ T7330] raw-gadget.0 gadget.8: failed to queue resume event [ 1677.750858][ T7330] usb 13-1: device descriptor read/64, error -32 [ 1677.870896][ T7330] raw-gadget.0 gadget.8: failed to queue suspend event [ 1677.883943][T13319] raw-gadget.0 gadget.8: failed to queue disconnect event [ 1678.148745][T13373] syz.8.9975: attempt to access beyond end of device [ 1678.148745][T13373] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1679.229312][T13391] netlink: 'syz.0.9981': attribute type 1 has an invalid length. [ 1679.451219][ T7330] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 1679.614451][ T7330] usb 12-1: Using ep0 maxpacket: 32 [ 1679.618157][ T7330] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 1679.620599][ T7330] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1679.624027][ T7330] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1679.627383][ T7330] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1679.631498][ T7330] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1679.637234][ T7330] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1679.640067][ T7330] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1679.642586][ T7330] usb 12-1: Product: syz [ 1679.643858][ T7330] usb 12-1: Manufacturer: syz [ 1679.645310][ T7330] usb 12-1: SerialNumber: syz [ 1679.647661][ T7330] usb 12-1: config 0 descriptor?? [ 1679.650559][ T7330] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1679.655735][ T7330] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1679.882644][T24397] usb 12-1: USB disconnect, device number 28 [ 1679.885331][T24397] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 1682.471505][T13428] __nla_validate_parse: 1 callbacks suppressed [ 1682.471519][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9991'. [ 1682.475893][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9991'. [ 1682.726524][T13435] EXT4-fs error (device sda1): ext4_lookup:1813: inode #1200: comm kworker/u32:26: iget: checksum invalid [ 1682.731315][T13434] nvme_fabrics: missing parameter 'transport=%s' [ 1682.733240][T13434] nvme_fabrics: missing parameter 'nqn=%s' [ 1683.651989][T13453] [U] : [ 1683.653542][T13453] [U] [ 1683.654430][T13453] [U] [ 1683.655364][T13453] [U] [ 1683.656209][T13453] [U] [ 1683.657044][T13453] [U] [ 1683.657886][T13453] [U] [ 1683.658733][T13453] [U] [ 1683.659858][T13453] [U] [ 1683.660936][T13453] [U] [ 1683.662001][T13453] [U] [ 1683.663062][T13453] [U] [ 1683.664141][T13453] [U] [ 1683.665246][T13453] [U] [ 1683.666278][T13453] [U] [ 1683.667366][T13453] [U] [ 1683.669247][T13453] [U] [ 1683.670132][T13453] [U] [ 1683.670990][T13453] [U] [ 1683.671868][T13453] [U] [ 1683.672937][T13453] [U] [ 1683.673785][T13453] [U] [ 1683.674693][T13453] [U] [ 1683.675565][T13453] [U] [ 1683.676506][T13453] [U] [ 1683.677350][T13453] [U] [ 1683.678187][T13453] [U] [ 1683.679031][T13453] [U] [ 1683.679890][T13453] [U] [ 1683.680749][T13453] [U] [ 1683.681595][T13453] [U] [ 1683.682438][T13453] [U] [ 1683.683518][T13453] [U] [ 1683.684367][T13453] [U] [ 1683.685247][T13453] [U] [ 1683.686138][T13453] [U] [ 1683.686964][T13453] [U] [ 1683.687817][T13453] [U] [ 1683.688650][T13453] [U] [ 1683.689486][T13453] [U] [ 1683.690344][T13453] [U] [ 1683.691224][T13453] [U] [ 1683.692066][T13453] [U] [ 1683.692900][T13453] [U] [ 1683.693734][T13453] [U] [ 1683.694629][T13453] [U] [ 1683.695498][T13453] [U] [ 1683.696453][T13453] [U] [ 1683.697502][T13453] [U] [ 1683.698359][T13453] [U] [ 1683.699196][T13453] [U] [ 1683.700026][T13453] [U] [ 1683.700867][T13453] [U] [ 1683.701697][T13453] [U] [ 1683.702533][T13453] [U] [ 1683.703366][T13453] [U] [ 1683.704987][T13453] [U] [ 1683.705858][T13453] [U] [ 1683.706735][T13453] [U] [ 1683.707585][T13453] [U] [ 1683.708415][T13453] [U] [ 1683.709244][T13453] [U] [ 1683.710078][T13453] [U] [ 1683.710924][T13453] [U] [ 1683.712012][T13453] [U] [ 1683.712852][T13453] [U] [ 1683.713682][T13453] [U] [ 1683.714518][T13453] [U] [ 1683.715381][T13453] [U] [ 1683.716203][T13453] [U] [ 1683.717070][T13453] [U] [ 1683.717892][T13453] [U] [ 1683.718768][T13453] [U] [ 1683.719628][T13453] [U] [ 1683.720459][T13453] [U] [ 1683.721292][T13453] [U] [ 1683.722120][T13453] [U] [ 1683.722949][T13453] [U] [ 1683.723782][T13453] [U] [ 1683.724667][T13453] [U] [ 1683.742488][T13453] [U] [ 1683.742564][T13453] [U] [ 1683.742583][T13453] [U] [ 1683.742601][T13453] [U] [ 1683.742620][T13453] [U] [ 1683.742639][T13453] [U] [ 1683.742658][T13453] [U] [ 1683.742676][T13453] [U] [ 1683.742702][T13453] [U] [ 1683.742721][T13453] [U] [ 1683.742743][T13453] [U] [ 1683.742760][T13453] [U] [ 1683.742776][T13453] [U] [ 1683.742793][T13453] [U] [ 1683.742810][T13453] [U] [ 1683.742827][T13453] [U] [ 1683.742851][T13453] [U] [ 1683.742867][T13453] [U] [ 1683.742884][T13453] [U] [ 1683.742901][T13453] [U] [ 1683.742918][T13453] [U] [ 1683.742934][T13453] [U] [ 1683.742951][T13453] [U] [ 1683.742968][T13453] [U] [ 1683.742991][T13453] [U] [ 1683.743008][T13453] [U] [ 1683.743025][T13453] [U] [ 1683.743041][T13453] [U] [ 1683.743058][T13453] [U] [ 1683.743075][T13453] [U] [ 1683.743092][T13453] [U] [ 1683.743109][T13453] [U] [ 1683.743132][T13453] [U] [ 1683.743148][T13453] [U] [ 1683.743165][T13453] [U] [ 1683.743202][T13453] [U] [ 1683.743224][T13453] [U] [ 1683.743244][T13453] [U] [ 1683.743265][T13453] [U] [ 1683.743287][T13453] [U] [ 1683.743313][T13453] [U] [ 1683.743332][T13453] [U] [ 1683.743350][T13453] [U] [ 1683.743369][T13453] [U] [ 1683.743386][T13453] [U] [ 1683.743403][T13453] [U] [ 1683.743420][T13453] [U] [ 1683.897972][T13452] [U] [ 1684.175844][T13463] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1684.178821][T13463] overlayfs: overlapping lowerdir path [ 1684.210969][ T7330] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 1684.370869][ T7330] usb 12-1: Using ep0 maxpacket: 16 [ 1684.374306][ T7330] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1684.378325][ T7330] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1684.381970][ T7330] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1684.386778][ T7330] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1684.390058][ T7330] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1684.394435][ T7330] usb 12-1: config 0 descriptor?? [ 1684.671665][T13472] vcan0 speed is unknown, defaulting to 1000 [ 1684.676702][T13473] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 1684.803544][ T7330] shield 0003:0955:7214.0080: unknown main item tag 0x0 [ 1684.805650][ T7330] shield 0003:0955:7214.0080: unknown main item tag 0x0 [ 1684.807710][ T7330] shield 0003:0955:7214.0080: unknown main item tag 0x0 [ 1684.809793][ T7330] shield 0003:0955:7214.0080: unknown main item tag 0x0 [ 1684.811967][ T7330] shield 0003:0955:7214.0080: unknown main item tag 0x0 [ 1684.818626][ T7330] input: HID 0955:7214 Haptics as /devices/virtual/input/input417 [ 1684.829968][ T7330] shield 0003:0955:7214.0080: Registered Thunderstrike controller [ 1684.832773][ T7330] shield 0003:0955:7214.0080: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 1684.920353][T13478] [ 1684.921354][T13478] ====================================================== [ 1684.923989][T13478] WARNING: possible circular locking dependency detected [ 1684.926625][T13478] 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 Not tainted [ 1684.930267][T13478] ------------------------------------------------------ [ 1684.933143][T13478] syz.0.10008/13478 is trying to acquire lock: [ 1684.934962][T13478] ffff8880129cbb38 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: walk_component+0x342/0x5b0 [ 1684.938024][T13478] [ 1684.938024][T13478] but task is already holding lock: [ 1684.940210][T13478] ffff88805a52e488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1684.942934][T13478] [ 1684.942934][T13478] which lock already depends on the new lock. [ 1684.942934][T13478] [ 1684.945971][T13478] [ 1684.945971][T13478] the existing dependency chain (in reverse order) is: [ 1684.948630][T13478] [ 1684.948630][T13478] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1684.950774][T13478] __mutex_lock+0x19b/0xb10 [ 1684.952295][T13478] kernfs_fop_write_iter+0x27b/0x500 [ 1684.954023][T13478] iter_file_splice_write+0x90f/0x10b0 [ 1684.955835][T13478] do_splice+0x146a/0x1f70 [ 1684.957309][T13478] __do_splice+0x327/0x360 [ 1684.958779][T13478] __ia32_sys_splice+0x189/0x250 [ 1684.960418][T13478] __do_fast_syscall_32+0x73/0x120 [ 1684.962070][T13478] do_fast_syscall_32+0x32/0x80 [ 1684.963709][T13478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1684.965749][T13478] [ 1684.965749][T13478] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1684.967955][T13478] __mutex_lock+0x19b/0xb10 [ 1684.969462][T13478] pipe_lock+0x64/0x80 [ 1684.970854][T13478] iter_file_splice_write+0x1eb/0x10b0 [ 1684.972738][T13478] backing_file_splice_write+0x277/0x880 [ 1684.974567][T13478] ovl_splice_write+0x38e/0x630 [ 1684.976184][T13478] do_splice+0x146a/0x1f70 [ 1684.977667][T13478] __do_splice+0x327/0x360 [ 1684.979139][T13478] __ia32_sys_splice+0x189/0x250 [ 1684.980785][T13478] __do_fast_syscall_32+0x73/0x120 [ 1684.982456][T13478] do_fast_syscall_32+0x32/0x80 [ 1684.984066][T13478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1684.986086][T13478] [ 1684.986086][T13478] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 1684.988318][T13478] mnt_want_write+0x6f/0x450 [ 1684.989844][T13478] ovl_set_acl+0x39f/0x9f0 [ 1684.991346][T13478] set_posix_acl+0x25c/0x320 [ 1684.992861][T13478] vfs_set_acl+0x5a7/0x930 [ 1684.994371][T13478] do_set_acl+0xd9/0x1a0 [ 1684.995844][T13478] do_setxattr+0xe7/0x170 [ 1684.997286][T13478] file_setxattr+0x139/0x1b0 [ 1684.998802][T13478] path_setxattrat+0x233/0x290 [ 1685.000377][T13478] __ia32_sys_fsetxattr+0xc4/0x140 [ 1685.002022][T13478] __do_fast_syscall_32+0x73/0x120 [ 1685.003860][T13478] do_fast_syscall_32+0x32/0x80 [ 1685.005506][T13478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1685.007520][T13478] [ 1685.007520][T13478] -> #0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 1685.010096][T13478] __lock_acquire+0x249e/0x3c40 [ 1685.011721][T13478] lock_acquire.part.0+0x11b/0x380 [ 1685.013366][T13478] down_read+0x9a/0x330 [ 1685.014825][T13478] walk_component+0x342/0x5b0 [ 1685.016390][T13478] path_lookupat+0x17f/0x770 [ 1685.017920][T13478] filename_lookup+0x221/0x5f0 [ 1685.019503][T13478] kern_path+0x35/0x50 [ 1685.020052][T13461] random: crng reseeded on system resumption [ 1685.020866][T13478] lookup_bdev+0xd9/0x280 [ 1685.020902][T13478] resume_store+0x1d8/0x460 [ 1685.020913][T13478] kobj_attr_store+0x55/0x80 [ 1685.020929][T13478] sysfs_kf_write+0x117/0x170 [ 1685.020945][T13478] kernfs_fop_write_iter+0x33d/0x500 [ 1685.020958][T13478] vfs_write+0x5ae/0x1150 [ 1685.020973][T13478] ksys_write+0x12b/0x250 [ 1685.026040][T13461] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1685.027294][T13478] __do_fast_syscall_32+0x73/0x120 [ 1685.027318][T13478] do_fast_syscall_32+0x32/0x80 [ 1685.027331][T13478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1685.028987][T13461] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1685.030626][T13478] [ 1685.030626][T13478] other info that might help us debug this: [ 1685.030626][T13478] [ 1685.030634][T13478] Chain exists of: [ 1685.030634][T13478] &ovl_i_mutex_dir_key[depth]#2 --> &pipe->mutex --> &of->mutex [ 1685.030634][T13478] [ 1685.030660][T13478] Possible unsafe locking scenario: [ 1685.030660][T13478] [ 1685.030664][T13478] CPU0 CPU1 [ 1685.032214][T13461] PM: hibernation: Basic memory bitmaps created [ 1685.033548][T13478] ---- ---- [ 1685.033554][T13478] lock(&of->mutex); [ 1685.033564][T13478] lock(&pipe->mutex); [ 1685.033572][T13478] lock(&of->mutex); [ 1685.033580][T13478] rlock(&ovl_i_mutex_dir_key[depth]#2); [ 1685.033592][T13478] [ 1685.033592][T13478] *** DEADLOCK *** [ 1685.033592][T13478] [ 1685.066760][T13478] 4 locks held by syz.0.10008/13478: [ 1685.068310][T13478] #0: ffff8880217ea0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 1685.070924][T13478] #1: ffff88804d258420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1685.073514][T13478] #2: ffff88805a52e488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 1685.076363][T13478] #3: ffff888041689d28 (kn->active#74){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 1685.079228][T13478] [ 1685.079228][T13478] stack backtrace: [ 1685.080929][T13478] CPU: 3 UID: 0 PID: 13478 Comm: syz.0.10008 Not tainted 6.14.0-rc3-syzkaller-00267-gff202c5028a1 #0 [ 1685.080943][T13478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1685.080951][T13478] Call Trace: [ 1685.080955][T13478] [ 1685.080960][T13478] dump_stack_lvl+0x116/0x1f0 [ 1685.080978][T13478] print_circular_bug+0x490/0x760 [ 1685.080995][T13478] check_noncircular+0x31a/0x400 [ 1685.081009][T13478] ? stack_trace_save+0x95/0xd0 [ 1685.081023][T13478] ? __pfx_check_noncircular+0x10/0x10 [ 1685.081039][T13478] ? add_lock_to_list+0x17d/0x390 [ 1685.081053][T13478] __lock_acquire+0x249e/0x3c40 [ 1685.081071][T13478] ? __pfx___lock_acquire+0x10/0x10 [ 1685.081086][T13478] ? lock_acquire.part.0+0x11b/0x380 [ 1685.081101][T13478] ? find_held_lock+0x2d/0x110 [ 1685.081113][T13478] lock_acquire.part.0+0x11b/0x380 [ 1685.081128][T13478] ? walk_component+0x342/0x5b0 [ 1685.081142][T13478] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1685.081158][T13478] ? rcu_is_watching+0x12/0xc0 [ 1685.081170][T13478] ? trace_lock_acquire+0x14e/0x1f0 [ 1685.081185][T13478] ? do_raw_spin_unlock+0x172/0x230 [ 1685.081195][T13478] ? walk_component+0x342/0x5b0 [ 1685.081208][T13478] ? lock_acquire+0x2f/0xb0 [ 1685.081222][T13478] ? walk_component+0x342/0x5b0 [ 1685.081236][T13478] down_read+0x9a/0x330 [ 1685.081251][T13478] ? walk_component+0x342/0x5b0 [ 1685.081264][T13478] ? __pfx_down_read+0x10/0x10 [ 1685.081278][T13478] ? lookup_fast+0x153/0x5f0 [ 1685.081292][T13478] walk_component+0x342/0x5b0 [ 1685.081307][T13478] path_lookupat+0x17f/0x770 [ 1685.081322][T13478] filename_lookup+0x221/0x5f0 [ 1685.081338][T13478] ? __pfx_filename_lookup+0x10/0x10 [ 1685.081357][T13478] ? getname_kernel+0x52/0x370 [ 1685.081368][T13478] ? __asan_memcpy+0x3c/0x60 [ 1685.081384][T13478] kern_path+0x35/0x50 [ 1685.081398][T13478] lookup_bdev+0xd9/0x280 [ 1685.081411][T13478] ? __pfx_lookup_bdev+0x10/0x10 [ 1685.081421][T13478] ? __asan_memcpy+0x3c/0x60 [ 1685.081436][T13478] resume_store+0x1d8/0x460 [ 1685.081446][T13478] ? __pfx_resume_store+0x10/0x10 [ 1685.081457][T13478] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1685.081472][T13478] ? rcu_is_watching+0x12/0xc0 [ 1685.081484][T13478] ? __pfx_resume_store+0x10/0x10 [ 1685.081494][T13478] kobj_attr_store+0x55/0x80 [ 1685.081509][T13478] ? __pfx_kobj_attr_store+0x10/0x10 [ 1685.081522][T13478] sysfs_kf_write+0x117/0x170 [ 1685.081535][T13478] kernfs_fop_write_iter+0x33d/0x500 [ 1685.081545][T13478] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1685.081558][T13478] vfs_write+0x5ae/0x1150 [ 1685.081572][T13478] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1685.081584][T13478] ? __pfx___mutex_lock+0x10/0x10 [ 1685.081598][T13478] ? __pfx_vfs_write+0x10/0x10 [ 1685.081616][T13478] ksys_write+0x12b/0x250 [ 1685.081630][T13478] ? __pfx_ksys_write+0x10/0x10 [ 1685.081646][T13478] __do_fast_syscall_32+0x73/0x120 [ 1685.081661][T13478] do_fast_syscall_32+0x32/0x80 [ 1685.081675][T13478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1685.081694][T13478] RIP: 0023:0xf7f96579 [ 1685.081703][T13478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1685.081714][T13478] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1685.081725][T13478] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 1685.081732][T13478] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1685.081739][T13478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1685.081745][T13478] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1685.081752][T13478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.081761][T13478] [ 1685.197979][T13478] PM: Image not found (code -22) [ 1685.203414][T13460] PM: hibernation: Basic memory bitmaps freed [ 1685.273617][ T7732] usb 12-1: USB disconnect, device number 29 [ 1685.273762][T13369] shield 0003:0955:7214.0080: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1685.290909][T13369] shield 0003:0955:7214.0080: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1685.295246][T13369] shield 0003:0955:7214.0080: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1685.299013][T13369] shield 0003:0955:7214.0080: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV VM DIAGNOSIS: 17:29:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000003bf6ffc RBX=0000000000000000 RCX=ffffffff8b552469 RDX=ffffed1005686f86 RSI=ffffffff8bd34540 RDI=ffffffff81907289 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f735cf60 CR3=000000006f5f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000003fd38b540a4 RBX=ffff88802b528400 RCX=00000000000006e0 RDX=00000000000003fd RSI=ffff88802b528400 RDI=00000000001f31bd RBP=00000000001f31bd RSP=ffffc9000047fc30 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=ffff88802b52c700 RIP=ffffffff8166a025 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080028000 CR3=000000006f5f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000003fd37e2a144 RBX=ffff88802b628400 RCX=00000000000006e0 RDX=00000000000003fd RSI=ffff88802b628400 RDI=000000000000db21 RBP=000000000000db21 RSP=ffffc90000548ec0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000548ff8 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=0000018847aec498 RIP=ffffffff8166a025 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558897e9c000 CR3=0000000022f16000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba a22f4fbaa22f4fba ZMM22=f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 f594cf55f594cf55 ZMM23=2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec 2eb7d6ec2eb7d6ec ZMM24=66411b9766411b97 66411b9766411b97 66411b9766411b97 66411b9766411b97 66411b9766411b97 66411b9766411b97 66411b9766411b97 66411b9766411b97 ZMM25=be20f362be20f362 be20f362be20f362 be20f362be20f362 be20f362be20f362 be20f362be20f362 be20f362be20f362 be20f362be20f362 be20f362be20f362 ZMM26=123f599d123f599d 123f599d123f599d 123f599d123f599d 123f599d123f599d 123f599d123f599d 123f599d123f599d 123f599d123f599d 123f599d123f599d ZMM27=7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 7992efe77992efe7 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=163c0000163c0000 163c0000163c0000 163c0000163c0000 163c0000163c0000 163c0000163c0000 163c0000163c0000 163c0000163c0000 163c0000163c0000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e5875 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc900032bef38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9ab6ee20 R15=0000000000000000 RIP=ffffffff853e589f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7415498 CR3=00000000534c8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000