last executing test programs: 33m29.024083732s ago: executing program 0 (id=1193): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r2, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_io_uring_setup(0x1765, &(0x7f0000000180)={0x0, 0x5792, 0x4, 0x2, 0x112}, &(0x7f0000000100), &(0x7f0000000240)) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 33m27.165601127s ago: executing program 0 (id=1196): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002940)=ANY=[]) mount$fuse(0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x8002, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x7, 0x0, 0x120, 0x4000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r1) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x388, 0x0, 0x1c4, 0x1c4, 0x2a8, 0x2a8, 0x2a8, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @loopback, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x101, 0x10, 0x7, 0x3, 0x101, 'ipvlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0xa}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c4}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x12ed}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r7, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) mount$9p_rdma(&(0x7f00000013c0), 0x0, &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=rdm000000000004e24,\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)={'security\x00', 0x0, [0x5, 0xffffb7f7, 0x20000004, 0x3, 0x10000c]}, 0x0) 33m26.427959925s ago: executing program 0 (id=1199): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="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", 0xb73, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r1, 0x0, 0x7) r2 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 33m22.981313967s ago: executing program 0 (id=1210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001a80)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f00000000c0)="199169f5e287cc4da2f7cf19b57f7adfb822f67daad335a12a14e5d37a40bad46964fdbdea186025e41ea390b167d8d4d995893e3c", &(0x7f0000000240)=""/48}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(r3, &(0x7f0000000080)='./file0\x00', r3, 0x0, 0x140) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000005c0)="0800080724d3bcaf", 0x8}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x18}, 0x4008814) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000140001800600010002000a0008000300ac1414aa"], 0x28}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 33m22.895849995s ago: executing program 0 (id=1211): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd27, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) r7 = userfaultfd(0x80001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 33m20.816430559s ago: executing program 0 (id=1217): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x1, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000000c0)={0x4, 0x15000}) 33m20.733202004s ago: executing program 32 (id=1217): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x1, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f00000000c0)={0x4, 0x15000}) 25m22.1701701s ago: executing program 4 (id=2766): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) syz_usb_connect$cdc_ncm(0x1, 0xd1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000180)=@newtaction={0x290, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x27c, 0x1, [@m_mpls={0xe0, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5e39}]}, {0xac, 0x6, "4047d4363e0d80fc653befb70e0217a69358f1666275af213b7e660cddc0b5a1bf28b2f22359ca4d5788635de2ea347706cd55ca9e90eff41c359cf8638cebbddeb57b51090f79670fafe06ed109a6128af947cfb5f48fa63e4c6c443f023f2247f9194a7d20164a94392a93b644c2daf2268ec9e1d581b252a4ed4a698ebd523c43bada5ba830cb2acb9b6af638a728a4cca909a71537d785305459a3938cecbcde1adf9431ee22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xf4, 0xa, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x2, 0x6, 0x4}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xe60, 0x0, 0x5f, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbf42, 0x200, 0x7, 0x8, 0x9}, 0x7b}}]}, {0x71, 0x6, "b24cf42c24696089e066e31f8b46038e474fadf825b76c17b57d06f9da74defc4bd300bc201565085b050340877acd979788d6d353ad691b67dfbc193cb1469f127ac8a9ef16e475b87e940cb6dcf3b4132048c4e78742d25b4b4695fc5254a85b8ec0e266485e6cdb3e4bd011"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xa4, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1ff, 0x1, 0xe609, 0x7d02}}]}, {0x5d, 0x6, "9b55ff724d7856fb197f0e8356fd5ab4b8f9423b79d33a65b1453c09580bf121fcdcf4f8b7a1013c35912b311f997707dcbd9d9e2fcb7895f7fd514999a5cf88eeafb22f1cdc7863a087f93b10f2a8793d698b2b5f31942ccd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x290}}, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f00007ee000/0x2000)=nil, 0x2000}) r2 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, 0x0, "20853274b554fbe96e2f98b7f51a4b83cea14dd0bdb48093f90ae6cdd34bd9f4", 0x0, 0xfffffffa, 0x5e, 0xffffff7f}, 0x3c) 25m19.119392173s ago: executing program 4 (id=2777): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x1e00, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f0000000140)='./bus\x00') 25m18.102457243s ago: executing program 4 (id=2779): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x240083, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x2, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000680000fdffff7f0000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x134, 0x0, 0xffffffff, 0x360, 0x208, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hl={{0x24}, {0x0, 0x9}}, @common=@icmp6={{0x24}, {0xf, "85c7"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x11, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@rand_addr=0x64010100, @port=0x4e22, @port=0x4e23}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x0, 0x3}, {0xffffffffffffffff, 0x6}, 0xfffffff8}}}, {{@ipv6={@private0, @remote, [0x0, 0xff000000, 0x80, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'bond0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0xa, 0x4, 0x61}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hl={{0x24}, {0x1, 0x48}}, @common=@dst={{0x48}, {0x2, 0x4, 0x0, [0x3, 0x7, 0x5, 0x6, 0x6, 0x8000, 0x3686, 0x9, 0xbb, 0xf, 0x7ff, 0x4, 0x5, 0x4, 0x5, 0x9], 0xa}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv6=@remote, @port=0x4e24, @port=0x4e23}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@mh={{0x24}, {'9Q', 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv6=@local, @ipv6=@private0, @gre_key=0x800, @gre_key=0x200}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x594) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000700)={0xce, 0x0, r3}) fchdir(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 25m18.049055231s ago: executing program 4 (id=2780): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x1c, r1, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 25m16.20711585s ago: executing program 4 (id=2787): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000040)=""/95, &(0x7f00000000c0)=0x5f) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x4, 0x3}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x22, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e03, @empty}}, {{0x2, 0x4e22, @remote}}]}, 0x18c) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 25m16.105352478s ago: executing program 4 (id=2788): r0 = userfaultfd(0x80001) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0xfffffffffffffd22) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x7}, "f0eac5bee3ff2460", "425c0f7455dacda3a88b8de6f0a57564", "b0edec80", "0cc85b65b7746043"}, 0x28) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x0, {0xfffd}}) r3 = syz_io_uring_setup(0x407, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x3dc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f00000003c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x70, 0x30, 0xffff, 0x2, 0x25dfdbff, {}, [{0x5c, 0x1, [@m_mpls={0x58, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x23, 0x6, "f9961721f09e8daa60b441a6245000"/31}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 25m16.035467404s ago: executing program 33 (id=2788): r0 = userfaultfd(0x80001) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) msgctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0xfffffffffffffd22) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x7}, "f0eac5bee3ff2460", "425c0f7455dacda3a88b8de6f0a57564", "b0edec80", "0cc85b65b7746043"}, 0x28) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x0, {0xfffd}}) r3 = syz_io_uring_setup(0x407, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x3dc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vhost_vsock(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f00000003c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x70, 0x30, 0xffff, 0x2, 0x25dfdbff, {}, [{0x5c, 0x1, [@m_mpls={0x58, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2}]}, {0x23, 0x6, "f9961721f09e8daa60b441a6245000"/31}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 24m38.85452821s ago: executing program 2 (id=2924): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f00000001c0)='0', 0xfffffedd) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xe2a9, 0x10100, 0x0, 0xfffffffd, 0x0, r1}, &(0x7f00000000c0)=0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa2, 0x2, 0x5, 0x9, 0xffffffffffffffff}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff02, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0x40, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x2, 0x0, 0x101, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x4, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0xf8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x20000804) sendmsg$nl_route_sched(r8, 0x0, 0x20004804) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0xfffffffffffffdf8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa, 0x0, 0x0, 0x7fc00100}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 24m38.016381787s ago: executing program 2 (id=2929): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) socketpair(0x24, 0x3, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xde, 0x7e, 0x1, 0xc4ea}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@get={0x1, 0x0, 0x8000000000000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 24m37.026603865s ago: executing program 2 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$unix(r2, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4", 0x61, 0x20044801, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003410000001408000c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x7}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r4, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r9 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(r9, 0x0) recvmmsg(r8, &(0x7f0000005bc0)=[{{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000400)=""/144, 0x90}, 0x80000000}, {{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000005cc0)=""/4102, 0x1006}], 0x5, &(0x7f00000029c0)=""/231, 0xe7}, 0x4}, {{&(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000006c0)}, {&(0x7f0000003ac0)=""/163, 0xa3}, {&(0x7f0000003b80)=""/212, 0xd4}, {&(0x7f0000003c80)=""/243, 0xf3}, {&(0x7f0000003d80)=""/90, 0x5a}, {&(0x7f0000003e00)=""/2, 0x2}], 0x7, &(0x7f0000003e80)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f00)=""/202, 0xca}, {&(0x7f0000005000)=""/23, 0x17}], 0x2, &(0x7f0000005080)=""/59, 0x3b}, 0x1ff}, {{&(0x7f00000050c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)=""/237, 0xed}], 0x1}, 0x4}, {{&(0x7f0000005280)=@in, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005300)=""/191, 0xbf}, {&(0x7f00000053c0)=""/154, 0x9a}, {&(0x7f0000005480)=""/58, 0x3a}], 0x3}, 0xffff}, {{&(0x7f0000005500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, &(0x7f0000005600)=""/105, 0x69}, 0x63d}, {{&(0x7f0000005680)=@ethernet, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005700)}, {&(0x7f0000005740)=""/105, 0x69}, {&(0x7f00000057c0)=""/64, 0x40}, {&(0x7f0000005800)=""/98, 0x62}, {&(0x7f0000005880)=""/28, 0x1c}, {&(0x7f00000058c0)=""/202, 0xca}, {&(0x7f00000059c0)=""/144, 0x90}], 0x7, &(0x7f0000005ac0)=""/200, 0xc8}, 0x1}], 0x8, 0x2141, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x50d203, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 24m36.064029184s ago: executing program 2 (id=2936): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000380)={0x1, r4, r3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 24m35.70988029s ago: executing program 2 (id=2940): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="747261ec0000000001000000000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd090000841a000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) lremovexattr(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r2, 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x2c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c8000, 0x0) 24m35.573801036s ago: executing program 2 (id=2942): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r3, 0x82}], 0x1, 0x0, 0x0, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 24m20.448921122s ago: executing program 34 (id=2942): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r3, 0x82}], 0x1, 0x0, 0x0, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.187534328s ago: executing program 5 (id=8134): openat$pidfd(0xffffffffffffff9c, 0x0, 0x111000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m15.077785701s ago: executing program 5 (id=8135): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x2000}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x94, 0x94, 0x290, 0x1bc, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @empty, 0xffffff00, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0xfe}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x5, 0x7}}}, {{@ip={@remote, @remote, 0xffffff00, 0x0, 'veth0_virt_wifi\x00', 'pimreg1\x00', {0xff}, {}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x0, 0x1], 0x2, 0x3}}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffff8, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x9, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x818000, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @empty, 0x1}, 0x1c) getsockopt$inet6_mreq(r8, 0x29, 0x1, 0x0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000000)="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", 0xff, 0x1, 0xab, 0xf0}}, 0x1) 2m14.847763411s ago: executing program 5 (id=8138): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005500e5012abd7000ffffffff070000", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x4008850}, 0x0) (fail_nth: 4) 2m14.677220294s ago: executing program 5 (id=8140): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x3a}, @l2cap_cid_signaling={{0x36}, [@l2cap_info_req={{0xa, 0xf5, 0x2}, {0x4}}, @l2cap_move_chan_rsp={{0xf, 0xf8, 0x4}, {0x7, 0x800}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x1, 0x2}, {0xa4}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x8567, 0x9a}}, @l2cap_info_req={{0xa, 0xd, 0x2}, {0x7ff}}, @l2cap_conn_req={{0x2, 0xea, 0x4}, {0x4, 0x4}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x7, 0x4, 0x5d, 0x8}}]}}, 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x404c050}, 0x20000000) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c8208900850001000f030400ff7f07000b056d00090088002bb2db0c9b02d54e48f058db10f12c538f9a18ede36803990eb6581d59da02130cd7f6a91704d02ebe0efe7374a34a5dd6e40b8e4aca31279f07f7eddc126eb24277bcdff790c3ad62d875162d"], 0x8e) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RXATTRCREATE(r0, &(0x7f00000002c0)={0x7, 0x21, 0x1}, 0x7) 2m14.676443049s ago: executing program 5 (id=8142): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r3, r2], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) 2m14.58745402s ago: executing program 5 (id=8143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="040000000000000000001600000000002f94000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x104) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10001}, 0x1c) r2 = socket(0x1d, 0x2, 0xc97) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000002cc0)=""/67, 0x43}, {&(0x7f0000000540)=""/84, 0x54}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/41, 0x29}, {&(0x7f00000006c0)=""/105, 0x69}], 0x6, &(0x7f0000000780)=""/251, 0xfb}, 0x2}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/231, 0xe7}, {&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000001040)=""/57, 0x39}], 0x6, &(0x7f0000000c80)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000d80)=@xdp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000e00)=""/244, 0xf4}, {&(0x7f0000000f00)=""/61, 0x3d}, {&(0x7f0000002c80)=""/54, 0x36}, {&(0x7f0000000f80)=""/79, 0x4f}, {&(0x7f0000001000)=""/1, 0x1}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000002d40)=""/213, 0xd5}, {&(0x7f0000002e40)=""/214, 0xd6}], 0x8, &(0x7f0000001080)=""/4096, 0x1000}, 0x800}, {{&(0x7f0000002080)=@phonet, 0x80, &(0x7f0000002480)=[{&(0x7f0000002140)=""/114, 0x72}, {&(0x7f00000021c0)=""/169, 0xa9}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000002380)=""/1, 0x1}, {&(0x7f00000023c0)=""/77, 0x4d}, {&(0x7f0000002440)=""/4, 0x4}], 0x6, &(0x7f00000024c0)=""/61, 0x3d}, 0xffff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/26, 0x1a}, {&(0x7f0000002600)=""/232, 0xe8}, {&(0x7f0000002700)=""/236, 0xec}, {&(0x7f0000002800)=""/215, 0xd7}, {&(0x7f0000002900)=""/137, 0x89}, {&(0x7f00000029c0)=""/38, 0x26}, {&(0x7f0000002a00)=""/248, 0xf8}], 0x8, &(0x7f0000002b40)=""/78, 0x4e}, 0x6}], 0x5, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x16) sync() sync() sync() socket(0x1d, 0x3, 0xfffffffd) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008008, &(0x7f0000000040)=ANY=[@ANYBLOB='max=0000\t\x00\x00\x00\x00\x00\x00\x0000000001,\x00']) r4 = socket(0x25, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000280)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030000000000a0000000c00064000000000000000010003000000000000000000000900010073797aff0300000000170000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 1m59.192581259s ago: executing program 35 (id=8143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="040000000000000000001600000000002f94000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x104) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10001}, 0x1c) r2 = socket(0x1d, 0x2, 0xc97) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x3, 0x0, &(0x7f0000000180)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000002cc0)=""/67, 0x43}, {&(0x7f0000000540)=""/84, 0x54}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/41, 0x29}, {&(0x7f00000006c0)=""/105, 0x69}], 0x6, &(0x7f0000000780)=""/251, 0xfb}, 0x2}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/231, 0xe7}, {&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f0000000bc0)=""/9, 0x9}, {&(0x7f0000001040)=""/57, 0x39}], 0x6, &(0x7f0000000c80)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000d80)=@xdp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000e00)=""/244, 0xf4}, {&(0x7f0000000f00)=""/61, 0x3d}, {&(0x7f0000002c80)=""/54, 0x36}, {&(0x7f0000000f80)=""/79, 0x4f}, {&(0x7f0000001000)=""/1, 0x1}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000002d40)=""/213, 0xd5}, {&(0x7f0000002e40)=""/214, 0xd6}], 0x8, &(0x7f0000001080)=""/4096, 0x1000}, 0x800}, {{&(0x7f0000002080)=@phonet, 0x80, &(0x7f0000002480)=[{&(0x7f0000002140)=""/114, 0x72}, {&(0x7f00000021c0)=""/169, 0xa9}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000002380)=""/1, 0x1}, {&(0x7f00000023c0)=""/77, 0x4d}, {&(0x7f0000002440)=""/4, 0x4}], 0x6, &(0x7f00000024c0)=""/61, 0x3d}, 0xffff}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/26, 0x1a}, {&(0x7f0000002600)=""/232, 0xe8}, {&(0x7f0000002700)=""/236, 0xec}, {&(0x7f0000002800)=""/215, 0xd7}, {&(0x7f0000002900)=""/137, 0x89}, {&(0x7f00000029c0)=""/38, 0x26}, {&(0x7f0000002a00)=""/248, 0xf8}], 0x8, &(0x7f0000002b40)=""/78, 0x4e}, 0x6}], 0x5, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x16) sync() sync() sync() socket(0x1d, 0x3, 0xfffffffd) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008008, &(0x7f0000000040)=ANY=[@ANYBLOB='max=0000\t\x00\x00\x00\x00\x00\x00\x0000000001,\x00']) r4 = socket(0x25, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000280)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000030000000000a0000000c00064000000000000000010003000000000000000000000900010073797aff0300000000170000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 55.086888634s ago: executing program 7 (id=8483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x3, 0x0, 0x4, 0x80000, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x40010021, 0x0, 0xfe6c) sendmsg$802154_dgram(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x24044055}, 0x40408c0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x90, 0x7}, {0xc, 0x90, 0x8000000000000001}}]}, 0x54}}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xcc, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0x68}}}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b3f602aac66c03a50b2788201f"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "51a46326"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "11ebb1"}]}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dc63220020"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ffbe2653fd6b0d8ba855a95ef"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 54.223206742s ago: executing program 7 (id=8491): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) 54.12569217s ago: executing program 7 (id=8492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x20) lseek(r4, 0x1, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x28}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_names='macvtap0\x00'}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a01f700000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000810}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 52.987170868s ago: executing program 7 (id=8496): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x1000000, 0x7}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000380)={0xd, 0x7ff, 0x4}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001040)="1afa930cacb9483ba427fdebe35364652f11c890067ca57a50fcdad0b85702e5cc0b945016028a3cc74937f47b829ffb57197295d7a2d38761146d9d4c35dbef7bf484deb62ddaa8dcf89ed8b8ad859bbcbb4593668e5953f537a33f9a56eabd738803eb8c0b864dc8fcdae1d0f715c660d6d3f06789efb0d8b12fe29792fde455e9b5438ece90f64f47cb446e9bfb07c2e67799b96d7d4fb2f171a6e31a178fac90050470d75d8cf04b7c144928d9eff3058b39af2fe86bbeec1d595fa1d6a4767179d8f3ffd772c6b2c81a2e2b2ff16eee04798a5da71a36d642135c012a1889c8f54c6fa79fd700850aa0a242da0de1db416effebacf50b70745155816f6c1c4cea841ad36f624202e0c04da611f1d60ee3f3c8b92e9abb5433232844aa1baaba03981599e43f2ded4df3168a4dde0dc57bde58aff3e2984c686c311e47874a28b0ef899f990a98abc002b90719ea82620c66b8db5c964c996523e7bd798477dd4f25cb30f5a52c8ea87ac7829c72cf5c48f422fd402945e26cc4aa6faa11b43de6c9307dc67c9af69db6977f6d20c0c97e8e4df718cf554b0bfd516f445514316824e974ef5166910bbd3b080b764e12f5542ff11ff67250a3c078306dfed88764473ece74350e5113ea49a7a19add306b9ff3709eec943b0e8680c8eea9741dd23e3f377ef0e9d59efee73803e7293e1a870a2e46e2765c304350aa7ba907d4ad344f542919aea5fc25f9b3446b66436b4600e7b1a58d3ba1d06d0c9576e40c54caaa7a35a9f16dd6a2b49097ef76dcc41de089c4ab2763aefcdf5ed8aab0675f0bc68d908538b129632ca82871f8e165e442bef0e306e391bb53507434e4166fb91f001601be498448774c23a996406d55a170aa45a2065e61d2c967687e64ac5ff6ad3907727cd6e7474a6a022b26d2bd6b040528910794eaeb726ee91545a734bc289ff5c7f323c3abd70b001159c5ceb242c7e4880ad0a61426c67ffe52fd8160b53fe8f34c3174b88ef7ced5ab77cbd12e7f4de73d33aa7c478bf7839373f96d8367ee34607f7c227bd0b18fecb68bacbd8631e25b7b8119fec8af772f428b5f67bb362df271796b2a996faf920d5c6338c0e805ccff5cc7d057badcdf1b5f46d75a77585556cffb9cfd0364e885de2752956b80338132a3dea920b76b2834c47f61c5313203503eb96cb985f1d55ef673829cf5ad027fe49c1545bde3657fb8b12132e6e6a3df6165424b43c80938724e9ad255f16cac8c2168cd6399d883ee86afd833f0f974eb1fa8742efa42050fea8fd254dbe908058ed2b52bdb155c5c050e9dd451094df2055df14c21ab600f19beeb8e2c160b81245b83de617f91fea8e8f37231849728b19996db4746207fa0de84ca5f11dce363a0ab0bbc74a84998ab194384f4ca29ea684cc00122c1f08653bc393f5ed0ec66d1e4e2f7109fff9b0eedc2ed18b78a257516c26d83717d7e5e2d86d1b3eaaad92872f713d94c2ad76ece3a18b64803686a35eb487f0ed0e4c3efb267dcd698ea4672203627c415a5427e411e32686ba6c5d35ed2f333630a62d721627554fbba63738d322625b2208c3042f2d2fc3229077b88292965676957ae6d88b711ebf6db27579792b4b2a7f88b402c93203d2410dfaa28b6b90db232d73be2edd8d3c4c958dc8d050992a070c8847e3e15b12effcb9690c0571b4de91581660c5d9e663a4207bbdacb60261a7c3513758d58a4cef1c34bb62002a8ed8bfad19257618f1917fa88a73dcdb9a85101a14758274e65cbd1dd79e0ad4ec03c21d86ee03d98d37d916836dee9907b1bb05d0209a8f867e33da8c5c3e1c78097f792942cdd51a47469bfefe327bc66527ab8456c78a1a7fe1d6edfab7aa924550c6dc332908f5feec95f42ec9237d2f75032e4ff52689bd65ed7c2d3829cd624d9bda04c6633563d02a15e529b1e4190ca93dce17e952a12059b8e8a5e730892fc414f99cd8ae3e45ba488703dc1e1af04c358b3aee9fa3f0fdc76b906471378bfc15f37ffe644c84bd25c7b396e7764093e322c923f7d4e4ab1ecfb7c153c667587fd23b2c774bcaefb1079093c80d0fc24456ec2e1b17d0a11f44d19fbf8706ea1c002afc172318b9ccfa5a7b181217cf3467e76090448123d8eb6285d8cfc2deaaa4ce7fa0391a7e63ad6e6bbec958e2b2660e59a89209f3cc945f7a87c0a48c669842e037b4544bc39c36bcabaf3c87c29bcdd76e880bbb0e06f84054131b18b9529cf184cb2ba9217284326c368da0038ed1df8db20f0eb203273e6f40c37ae03d066234c7ecd6f76c26f90899812f2742a71db4a18ab8513dbd0f94cc7617d7d86baa6072126dfe7b962cc4143abb28a530237c0ce2ddbb3585401b19316e19af09df45c1b7636a18b5e48c65596f229caddc5b9a39b3e06c0869b4599c67e922ee6f5b20b8170d79e1b09457e594884304cb943fde6d86177e360ebed58b33631649d0809159cc5a6f41287399d01c2fd26c0a01c594255dc57d988bc0369cc19423f62e0d6174620569825117a6b005c7be6c59922683e5523cfd06dfb9b88c5c720dc91dc7a07296b1225b11ebd54c229fcf53f91fbdd3b6c5956b4c55bd38b4cf78ee20863edae292c5642d3f8e4bd7735e41d903473c4770463e44148e07586f1756d8926c90ac3ef01a4693ab7abc9cd078a2793325889ef27812aa61f517c1650b3d89b693a98374cc780a7e9f62762a52590058a626287224eb06ee51ae36126892e6fc7459026f801c6fae0ec5839cabbf2380a2328356da012363e90fd3403bc45fa90a1dfc72b0f2ca25f10c31108b7a60ffb3511249c42bfa8e151bb309e9fa16e489e39c40ff0b1b066e41b5edd18e68b56cbee088a47fafc38c2e46b89ebefb6be8e4bcf3e92fa36955f59c08eac92c213c33692ff9b98788fb223f0a3739532e14792a3a0cc9240094ba6799ee6a2d0c7212564829353debf03839b2d81dc60a084eded7bd2a80cd949945140a1209619150bb528832d7d45cbb77bc68c04cb0a5a806399f10f67a9c60f0f1114a9526bc1b23ff9496bd3bee6af45134b4761579e2343e3f0fd5463fcc865960c63b80aed40d969fd5315d1b90f731460b7a82dcd8825f0fc4ee95b0212be8216754ea13b2b853330afc9cb4610a5b7982a68fb79b4b2cd80928661b06c474caf4259d5619b2b8f8d8daa291ab7ca332e978ec95d02536747f54afce4897bffcb7a54c79c9fea5826d14ca004d8777a544f8716b414b45d213923c716889e0e242af576442a906904108d647c540bcc101d69612fcc7b1158e31da8dc6c66ed894bf6a9c4a87e91f880c8726de9ae82b3836776bc33ac9d1f9415dce5c324b787c3323df85e76aa7e3b75261c89f63216b966b770ae30c6a3ef2ddac1b27c14e9f443202e2951d0948c982c71e6eca1ed8fb17bd7d3d7f01806bf95e7e2a485a446249dc4f879f8a94bd1dfb0f457489e6f5067331a971c3cf637d349eef391a5942b6da5d1ec0a31452f5ee2f4882c0b3c3f59652a2d2a9d6a67759514172fdf2b5dc18469dc34f826b1d8dec6bcfb244aab936d99e7f30f3577a0507c5defc43321f02be525a118b5da64df45af052d3a419a58c398eb1e21b238f93da2326c8c59ab3fea82546f5878b3c54b8b5a541ebb97550c56a096a76f9e288d5cc3731f189f735368bed001c56e630c0a068ef89495e389b86e43a8e6ac8eccc7c7683ed93264c4bef3981ccdd8c0504c10a73d81c188c89c08a5b4d1d47fdc18a3c5d8cc29ed03adcc5f1b7fe0feb156f0a91bd68bb3d2c91d62d596e3d2ea84d243bd56d2a13c556a43f6c6c219830f256105e7a98ab1734ba0b5251b740134f86834896672e9421b4aba3c038ac4b58095709f85ed086add1998eff56ef2059dd65da8000ba424769570284d24da2763774083fbe4c74ccd324d8aaea1435cc85edd5499d44702e546250630afc490bda76c61ef7951d521f00111dd779ec7c57a7cdc7dc6ddf7c89ae8edf9489ff53b5dd587d260f1b702e7f6b9281f0d973a9cadf41c32819be32e40d08956f2c18a5a01e976a1c6bbb0b31bfda9f8df0cd680e3bf3134cde1df408f49eb8505471b16f0558e471921df2dbbe3e4605f5f713a9cb3c6eb1931a11932194d298aa828c02e3afbf6681406af7cc45b4c659ee03ca0c59b333264c29d2a4803cd816c3756aa3412064eda75ff59d2ab863d3b96e99342df08015cf18716db41a56b344bb1ceecf915a3b0e50a7894feb607d89e74d891ceaf3ed8ff6ab2c460dc5b93f32c87d97fd4e3953c7d5406102fc85fccaa9bdd47f35dc0f619032c3aa3f88bfb37af4488b36b643edc7ef8501fa3553651d3da06c1655c06671f60f3d100cad302bad541a7f3079433025d820e60ced466ba960c3b3c25b02898cf98efdb08bc85484162b51a74ab19a5e02106b3e285be7bf1145bc668d3658e7fddeea8e53910c17d17f5cdb8ff00f3c843292838b3a86f9c9478c96d9137a56fa82fecbab390f53409d241b9c74889d141db864e1b48d9cdad4f5f27e50774eb2768576b2dd8d035a824eba1a76b84d7d6d09448d5762fdd99d6c4427291cd3193fbd24ee2d46a54cba7a50a01a659ea5b1ebd0ef9237ef8d9fdc36f0f018a5892af0cf782ba4b6445a0795c3bd50095974a612ed6b1825a7abc2a4dd83343171f933feec0d2914568f966a960ab3e1ea03bd8f1f330c016b671f686aef918818214d523eba7f058c70f2c43759f5615cfe5d79da030aabbe0e6cb6a9c045b4f815d36c34615e9b67ad4880a57fdb34770db4ba46699d9e215aab800bbd020d68fe597708af11f6b6b6631e859d5776bf77bb66e60b5ed3f44f5ec9653e8eeed11e21e6396892f42fc8630cb5587f1cd8fb5c72756618512668a6e25e707191327349c11a81d314f6f740a0fda00051de407752deb1098016a7505cae237b4705cdc17af5fc5cbbe25b2f8a36f2e75b191f25b44887f883140e4d9462434c0a614e6c7e6ce285e7aef4211c91f8cc5e6a5f74eec33227fe69777043bfa661d046319b7998481e59560c8969f4d3205ef9d5dced6d75415714d69555831778780c40b7023a3c21cba2b5a21dc91278d17378aed7397c438be0706e82bae2764b7f22a78cac928092a8fc47b08e8f10b6c7f49bc026de1f231aad8947e235b29edea696747db15dd6295810ef7dc39c870f6323bcdc15dcb262cd1c2374f79356b3df74689701a8b2ee637fc80c9554571fb71b1f3ca50203c7d39ace0f4ed5689bc6bbe83ac9fa2e7c881ff193e8de73a19da1722cf240e46ab35ddde756880e20c8cecae3ead8eb0f6372e05cbd5fff8998415cb57ce625f36ee2089db149e1ee17eac0ed57eb39104819ea08fad0502829a34e22ea7f50bc94e69f6d19377ed4efc637cc50458280a8318aca67f3df3d5f7628d0fb35f7f6c240a09311a6399eb70abb0aa42a9e018f27456fe8a61e29f811a694721baf5b7efc931dd1b7f20c644816f2ee2287d5f81632300afbdfc0153584f7b4c8284e6b911543b2b082a00be377dd5ff275a2a1181f52a617aca29c25b5a779c2b94d38c07bdf0f5ba4b84cb552774b2b59335581438d7a68f04501594e6ba1bd56b15b2a2998525a4c6ce3235f708b4079b10064304dda735c765080f241c8681b8918081bae95e647720b04aa113", 0xfbf}], 0x1, 0x0, 0x0, 0x40001}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @pic={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x5997, 0x1000, 0x2, 0x200003bd}) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x4) recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r6, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00>\x00\a'], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008f000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000649500000000000000bf91000000000000b702000003000000850000002a000000b70000000000001895"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r9}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ptrace(0x10, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0100001700010024bd700000000000ff010000000000000000000000000001000000006c000000fe8000000000000000000000000000bb640101000000000000000000000000006401010200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640000600000000000ac1414fde93f00000000020000200000000000000000000001200100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000b86b6e0000000100feffffffea0a0000000000000000000044000800fe8000000000000000000000000000bb000004d60000000000000000ac1414bb00"/192], 0x16c}}, 0x4004040) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) 52.595433292s ago: executing program 7 (id=8497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r3 = syz_io_uring_setup(0x245e, &(0x7f0000000840)={0x0, 0xdfef, 0x10100, 0x0, 0x40388, 0x0, r2}, &(0x7f0000000380)=0x0, &(0x7f0000002100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc04c5609, &(0x7f00000001c0)={0x8, 0x3, 0x4, 0x800, 0x3, {0x77359400}, {0x3, 0x8, 0x5, 0x0, 0xc7, 0x4, "c391f960"}, 0x98, 0x4, {}, 0x5}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x858e84eccc084a7f, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2ac, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x66, 0x6, "166c536a710a883ecf51b8aae1b7fd01a0483048f044c9333e900135fdeef681c7331450ce30e1e7dea7de1e3987d9b76eb16fd8e249f53953cdd91c78d921d9ac2595c42936edbbbc9181c4a2e04ff34dc8183c3d8eee5670f6d92e4947c7b3dee2"}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "b818b96aa435118ab9c27db4d7d0d3b9cacdb3bf63b7add8ec7d67c52a716bae437b6fe7ea7a73af3f816f6516df16eb6f3b94860600e75bff6ad7657ae000cf0156a9cd878f2b0f8e0472cd2f7181a4d985169a5af47a8575e5e6b078280a8a613753501742d65fc4bf7c482de3d4335f82d86006b3359cec6a860580276a16bb653c5922404f79abef6ef0db6f6272477d29846e933e9db466578bebfec545b0b50d51a2ff4636495e9db5b5f34ef6c16a615ff81c646f2e214c18bf88b4295dea243605ffde984cbd7eab9c64c84367b61c566a9ef878129a75544450290c3d9fb397"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "9083d531061226fb082c846d807f61aa88ad92bea7a1f6dbe9f810933f86574514ec3bb396d91c7c5bd453220a9d66d172c3d125946845a71aa70a89b03e00e04b7dfbd30a8909a4d670e891a087e209ac8ba6acfffaa807026c47fbff56e4e05d07aecf7f1c3298b4a886d088c038f30e6a2f00736086d9ae96a73aa59f0426588ac26b7d30e96b2a550755e54078f5f8d1541c52febf57"}, @NFTA_TABLE_USERDATA={0x90, 0x6, "687f5d8b52b27e49ca3ee0a967e7c3872cf8eb394a0aa498fc9aba4e9b2ca105e2afd826bdf188294529f08b990af90a4bfacb98d108d2308c2e106f8978d80e64817328dd1bab8d98c5841b44d73c5dec1a90ae404c7f03edc6cf8f4276927fff1d506f09e1b9690f349146746865caf8a131cb057af757f02f47bd86a37d6e572b50e0a60e76d2d8c3c79f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x137fe15c5c0f2319, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x52, 0x6, "c442e96c4679dd53d1bff3b878a05869fe1f9523911a948feb90c47fadba4ce2b92e7d821e7ba77d601e31ba1dc007241b85ee7db948b90f9ce63a39b60d1a5c500d726a00bd8197b802570e5258"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0xf, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x26}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x434}, 0x1, 0x0, 0x0, 0x20040014}, 0x4) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) 52.328459134s ago: executing program 7 (id=8500): r0 = syz_io_uring_setup(0x4f61, &(0x7f0000000100)={0x0, 0x1875, 0x800, 0x3, 0xd5}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000300)={0x0}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x1, 0x141921) r2 = dup(r1) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0xffffffff, 0xe) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x1) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x1725, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, 0x0, &(0x7f0000000100)) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) 52.260203121s ago: executing program 36 (id=8500): r0 = syz_io_uring_setup(0x4f61, &(0x7f0000000100)={0x0, 0x1875, 0x800, 0x3, 0xd5}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000300)={0x0}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x1, 0x141921) r2 = dup(r1) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0xffffffff, 0xe) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x1}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000080)=0x1) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x1725, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, 0x0, &(0x7f0000000100)) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) 7.256544137s ago: executing program 1 (id=8756): mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffbe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_buf(r4, 0x1, 0x48, 0x0, &(0x7f0000000040)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000126bd7000fcdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000002000500830001000000"], 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r2, &(0x7f00000004c0)='./file0/file0\x00') recvfrom$inet(r5, 0x0, 0x0, 0x100, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r5, 0x2, 0x3, 0xb}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x1004cc80, 0x44, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r12, 0x4d13, 0x0) 6.388038752s ago: executing program 1 (id=8755): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x200, 0xfffffffc, @local, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x1}, 0x1c) write(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x11f) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x439, 0x20000, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x44}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) 6.005170733s ago: executing program 6 (id=8759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0xa4}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x4}}, '.\x00'}) ioctl$CDROM_SELECT_SPEED(r10, 0x5322, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 5.806456963s ago: executing program 8 (id=8762): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653e, 0x0, 0x0, 0x28e, 0x0, r5}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001000000", @ANYRES32, @ANYBLOB="030000000000000000000c00000000009918468e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) unlink(&(0x7f0000000380)='./file0\x00') socket$inet(0x2, 0x3, 0x2) 5.446262297s ago: executing program 1 (id=8763): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d740109730773396000000010902"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x25212191, 0x0, 0x63, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) 5.096578754s ago: executing program 6 (id=8764): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x1000}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) 5.096063409s ago: executing program 3 (id=8765): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffffff, 0x0, 0xa629a24beed625ae) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff00c}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000680)={'ipvlan0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x4, 0x10000, 0x29, 0xc, 0x6, 0xfffff001, 0x8, 0x2, 0xe70c, 0xf, 0x6ed4, 0x2, 0x1000, 0xfff, 0x34b, 0x25, 0x1, 0x6, 0x7, 0x1, 0x11, 0x0, 0x1, 0xfff, 0x6, 0x8, 0x3, 0x6, 0x5, 0xc4, 0x1e000000, 0x8, 0xfffffe32, 0x8, 0x575, 0x101, 0x2, 0x6cc, 0x0, 0x3, 0x101, 0x4, 0x6, 0x7, 0x3d, 0xd7, 0x9, 0x3, 0x8001, 0x3ff, 0x6b61, 0x7, 0x8f20, 0x7f, 0x6, 0x0, 0x3, 0xfffff5d0, 0x2, 0x800, 0x5, 0x8001, 0x5, 0xffff, 0xffff, 0x80, 0x5, 0x932, 0xfffffff7, 0x7699, 0x34f, 0x22, 0x200, 0x1, 0xfffffffd, 0x6, 0x2, 0x0, 0xbd6, 0xffffffff, 0x7, 0x4, 0x7ff, 0xfffffffc, 0x5, 0x8, 0x5, 0x9, 0xff, 0x10000, 0x3, 0x4, 0x5, 0x8, 0x401, 0xe, 0x1, 0xfe000000, 0x613, 0x9, 0x0, 0xfffffff7, 0x6, 0x7, 0x7, 0x4d, 0x9, 0xa, 0x2, 0xc7, 0xd, 0x5, 0x9, 0x4, 0x3, 0x1, 0x800, 0x4, 0x8001, 0x3, 0x9, 0x0, 0xbc4, 0x8a, 0x0, 0x2d, 0xfffffff9]}}) sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x408c0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="e1083f0904221f0001ffffffffffe6f0c78febbe67"], 0x22) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xdd) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\f\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250200000006001d00eb00000008001800e00000020500050000000000060001000400000005001200080000000500050000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0xc001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x50}}, 0x8004) 4.854546893s ago: executing program 8 (id=8766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000006000000060000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c41b74dd554a057c23027122bf64a8742a649735238196d79f07b7caddd4f4f2fc574342347eedf41069ec4e62ef1d0e06f5ef48f9ac797009a4b5bf2b1b9f3d1f1cf1e37acff35f1294e4980997ff7dd082561503d49c40323d721c17c51ec0ed5f7107d860525351ffba63c4636bbb171c229d4b37e64d9c54820fd2777370d52b8573095c4ad3a31c905660ce3017876d04cc26556c9ba207f7f5878ec4d5c21e1b90ce0482d86"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x200401c0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x5, 0x2, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000140)={'\x00', 0xc, 0xfffffffa, 0x10000, 0xffffffff, 0x5, 0xffffffffffffffff}) r9 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "1364e75a1a0eb8e9c8bbdb75d9960e6720a3001df0a239a0e360bce0fc361698fce0194309f1f60b330df217b1bce248d6eaa5d9d8665c06d5f1bc756537068d", 0x10}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0x0, 0xffffffffffffffff) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f00000000c0)={@hyper}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000001600)={0x20000000}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r10, 0x7ab, &(0x7f0000000040)={&(0x7f0000000340)={{@any, 0x80}, {@any, 0x1}, 0x400, "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"}, 0x418}) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1, r8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x284, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x1, 0x0, 0x200, '\x00', 'syz1\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'veth0_macvtap\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x1, 0x1, 0xfd, 0x4}}, @inet=@rpfilter={{0x24}, {0x18}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x7, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x5, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) sendmsg$nl_route(r11, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x2, 0xff, 0x65, 0xfffffffa}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) eventfd2(0xe5c, 0x80000) 4.736642361s ago: executing program 8 (id=8767): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x6, 0x0, [{0x98, 0x37, 0x2, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0xa, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x9}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdf8}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000006680)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/207) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x2000, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1a) 4.076864503s ago: executing program 3 (id=8768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r2 = syz_open_dev$video(&(0x7f0000000280), 0x3, 0xc2a25) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x36c2, 0x9, 0x1, 0x0, 0x1}) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10000, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 4.006688306s ago: executing program 8 (id=8769): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r1, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x400) r4 = dup3(r3, r2, 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff0000ff, 0xff], [0xff000000, 0xff, 0xff], 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x40, 0x6}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@hl={{0x24}, {0x2, 0xf2}}, @common=@inet=@hashlimit2={{0x150}, {'gretap0\x00', {0x0, 0x2, 0x2, 0x0, 0x3, 0x7, 0x5, 0x78, 0x90}, {0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x7, 0x4, 0x9, 'syz1\x00', 'syz1\x00', {0xfffffffc}}}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x40, 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xf, 0x4, 0x942, 'snmp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) 3.748345118s ago: executing program 6 (id=8770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0xfffffffe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a00", 0x22}, {&(0x7f0000000600)="efbfb3335ea1", 0x6}], 0x2}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) 3.682936134s ago: executing program 6 (id=8771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x2, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x60000, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1, 0x400000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000001680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x19c, 0x65, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x160, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0x148, 0x7, [@m_csum={0x118, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0x8, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7a, 0x10000000, 0x5, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0x3, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x4, 0x9, 0xb}, 0x77}}]}, {0x41, 0x6, "fd94c06764f37d74e02e47d2112b5242809e2419a3cf7f21e0a41fd7d83b6df9e9c285b3a976c4ebcd91e46a33997be265aa1e90d10cac810d688759de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) mlock2(&(0x7f000006e000/0x1000)=nil, 0x1000, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff00000000800000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='afs_make_fs_call2\x00', r7}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x2f) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100677470000c00028008000300ff070000"], 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 3.216269077s ago: executing program 3 (id=8772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r7 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0xa4}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x4}}, '.\x00'}) ioctl$CDROM_SELECT_SPEED(r10, 0x5322, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 3.162247117s ago: executing program 8 (id=8773): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000816000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, 0xffffffffffffffff, 0xc7f37000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000ff00000004000000c8300000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001a00"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000198000000000000058f9968bb439b2afadc3ece2310298397150903fc5a1e5fe65b0f05c954e5315a916c77152d2232fe70b64c12dd52d88c20270641a81cab0f218c7a861c59f9d427798e10f493d559a41b6c62c4b5e1ea1afa56b0829df3055eef00c322521c5fee61010423fbe1009ca8ea20f2fa42fc279"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000015ed667e3a2a0f7c7d667f64fc2ce9d68244d5d059b46ffc16d2f00be843705dd05d03031b93d5f70931984ed4ab9caa12ce629584d6e4e0cf3de61565d7414ad0080248a3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020200000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000002bc1000000000000560800000200000005000000070000ce04000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x9000, 0x30000, 0x10, 0x0, 0x4, 0x2, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xc000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x0, 0xeeee8000, 0xd, 0x8, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}, {0xc000, 0xd000, 0x0, 0xa, 0x0, 0x0, 0xff, 0x5, 0x0, 0x4, 0x4}, {0xeeedfffa, 0x4, 0x9, 0x0, 0x2, 0x4, 0x0, 0x24, 0x0, 0x3c, 0x6}, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x3, 0x1, 0x10, 0xa, 0x26, 0x3}, {0x80ac000, 0xfffe}, {0xffff1000}, 0xddf8ffdb, 0x0, 0x4000, 0xf0, 0x9, 0xdd00, 0x0, [0x6, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c00028008000340000000640900010073797a30000000000900020000001100010000000000000000000000000a00"/116], 0x74}}, 0x0) 2.681567733s ago: executing program 6 (id=8774): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) io_setup(0x20004, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x8008064) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x0, 0x100, 0x400, 0x7fffffff, 0x401, 0x5, 0x7}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.316315307s ago: executing program 1 (id=8775): syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000340)=""/254, 0xfe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="89", 0x1}, {&(0x7f0000000200)="787b7a7785a1809ff5d1a9185deb4287c8315c56a1f3d6ae0f6a2963b495e69291123eaeb02bfc7e1a988c2d4a26284f968a127112c0f43a3d90102eec21cdda747a5fc92ed8233526dbcd978ca5594b091378d1357a241deeb8167952e80ddc9598", 0x62}, {&(0x7f00000012c0)="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", 0x4ae}], 0x3}}], 0x2, 0x40000d0) 2.315483663s ago: executing program 3 (id=8776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r8 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0xa4}, 0x90) sendmsg$NFT_BATCH(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) 836.281224ms ago: executing program 8 (id=8777): io_setup(0x20004, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$kcm(0x2, 0x7, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x8008064) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000340)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x30}}, 0x4040885) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4, 0x4}}], 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x2, 0x1, 0x0, 0x7}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 649.457752ms ago: executing program 3 (id=8778): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="0500110102000600e8d7b2558d9aa7df25d59c2757ed64d9dec6d9f1ee5c05b22320639f9f1a64243bb03471a6aed0c83f3b5654a97833afdf5dca955055cccb02e7d506168aad33e012fae18df74f8877a20ce29391c46a42eee8d67df92565aa1023a7aacde2b86e62485dcc53d5585fd777be9516fc2c79e5789190bb4750ee4ba92b58521db900de211ccc70956ce0b385e4e9650ae8c1fdf9d21f42e148cd05f62b273e5743bc5fe2e16b1fe656c187ec8c0489195bb3e1bf6aed1d814453282399d0a5776b4f70aa618fa8e24545d97384e9db985869a48d"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="0500110102000600e8d7b2558d9aa7df25d59c2757ed64d9dec6d9f1ee5c05b22320639f9f1a64243bb03471a6aed0c83f3b5654a97833afdf5dca955055cccb02e7d506168aad33e012fae18df74f8877a20ce29391c46a42eee8d67df92565aa1023a7aacde2b86e62485dcc53d5585fd777be9516fc2c79e5789190bb4750ee4ba92b58521db900de211ccc70956ce0b385e4e9650ae8c1fdf9d21f42e148cd05f62b273e5743bc5fe2e16b1fe656c187ec8c0489195bb3e1bf6aed1d814453282399d0a5776b4f70aa618fa8e24545d97384e9db985869a48d"], 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8006}, 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0x1c2a, 0x20000, 0x2, 0x303, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3], 0x3c}}, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) (async) unshare(0x2040400) signalfd4(r9, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x5, 0xfffffff8, &(0x7f0000000080)="89004d8095653cb36f4231c2e171799cb15dc186b50b2cf2cb88cb2ad9eab81ecd73b0e6c34f57f36b635c3d8dcf0d9d66fbacb1bb680891771b6731"}) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 436.682479ms ago: executing program 1 (id=8779): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x22}}, './file1\x00'}) set_mempolicy(0x2, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) r6 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) tkill(r6, 0x21) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000200850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 186.726726ms ago: executing program 6 (id=8780): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2000000000000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48e, 0x0, 0x1000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87", 0x0, 0x10, 0x0, 0x0, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000002c0)) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000180)) r8 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x2000, 0x5}, &(0x7f0000010080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x14, 0x1, 0x100006, 0xff, 0x14e28, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x0, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 95.62352ms ago: executing program 3 (id=8781): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000081c0)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x1, 0x4400, 0x98, &(0x7f00000004c0)={0xfffffffffffffffd, 0x20003, 0x12}}) (fail_nth: 8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000046110180000000000d454000010000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 0s ago: executing program 1 (id=8782): socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000381203aaa8af319000000000002002004440000030000008f880544000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) fcntl$dupfd(r1, 0x406, r1) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73656375f466c648"]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 0x332/0x420 [ 2258.702946][ T7080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2258.702964][ T7080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2258.702984][ T7080] ? netlink_deliver_tap+0x1ae/0xd30 [ 2258.703002][ T7080] netlink_unicast+0x5aa/0x870 [ 2258.703020][ T7080] ? __pfx_netlink_unicast+0x10/0x10 [ 2258.703041][ T7080] netlink_sendmsg+0x8c8/0xdd0 [ 2258.703059][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2258.703076][ T7080] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2258.703098][ T7080] ____sys_sendmsg+0xa5d/0xc30 [ 2258.703117][ T7080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2258.703134][ T7080] ? get_compat_msghdr+0x11a/0x170 [ 2258.703155][ T7080] ___sys_sendmsg+0x134/0x1d0 [ 2258.703170][ T7080] ? __pfx____sys_sendmsg+0x10/0x10 [ 2258.703190][ T7080] ? find_held_lock+0x2b/0x80 [ 2258.703225][ T7080] __sys_sendmsg+0x16d/0x220 [ 2258.703249][ T7080] ? __pfx___sys_sendmsg+0x10/0x10 [ 2258.703280][ T7080] ? do_user_addr_fault+0x843/0x1370 [ 2258.703298][ T7080] __do_fast_syscall_32+0xe8/0x680 [ 2258.703319][ T7080] do_fast_syscall_32+0x32/0x80 [ 2258.703337][ T7080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2258.703351][ T7080] RIP: 0023:0xf701d579 [ 2258.703361][ T7080] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2258.703372][ T7080] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2258.703384][ T7080] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 2258.703391][ T7080] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2258.703397][ T7080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2258.703403][ T7080] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2258.703410][ T7080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2258.703424][ T7080] [ 2258.815161][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8216'. [ 2258.936580][ T7086] ceph: No mds server is up or the cluster is laggy [ 2259.139727][ T7097] input: syz1 as /devices/virtual/input/input284 [ 2259.587758][ T7109] __nla_validate_parse: 1 callbacks suppressed [ 2259.587803][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8223'. [ 2259.625901][ T7109] input: syz1 as /devices/virtual/input/input285 [ 2259.660105][ T7113] FAULT_INJECTION: forcing a failure. [ 2259.660105][ T7113] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.664591][ T7113] CPU: 3 UID: 0 PID: 7113 Comm: syz.6.8226 Tainted: G L syzkaller #0 PREEMPT(full) [ 2259.664617][ T7113] Tainted: [L]=SOFTLOCKUP [ 2259.664623][ T7113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2259.664634][ T7113] Call Trace: [ 2259.664641][ T7113] [ 2259.664648][ T7113] dump_stack_lvl+0x16c/0x1f0 [ 2259.664676][ T7113] should_fail_ex+0x512/0x640 [ 2259.664694][ T7113] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2259.664717][ T7113] should_failslab+0xc2/0x120 [ 2259.664744][ T7113] kmem_cache_alloc_noprof+0x83/0x770 [ 2259.664765][ T7113] ? alloc_empty_file+0x55/0x1e0 [ 2259.664788][ T7113] ? alloc_empty_file+0x55/0x1e0 [ 2259.664805][ T7113] alloc_empty_file+0x55/0x1e0 [ 2259.664823][ T7113] alloc_file_pseudo+0x13a/0x230 [ 2259.664843][ T7113] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2259.664860][ T7113] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2259.664889][ T7113] create_pipe_files+0x36d/0x9a0 [ 2259.664917][ T7113] io_pipe+0xb3/0xab0 [ 2259.664944][ T7113] ? __pfx_io_pipe+0x10/0x10 [ 2259.664971][ T7113] ? __io_alloc_req_refill+0x33a/0x5e0 [ 2259.664995][ T7113] __io_issue_sqe+0xe8/0x7c0 [ 2259.665015][ T7113] io_issue_sqe+0x85/0x1410 [ 2259.665040][ T7113] io_submit_sqes+0xb24/0x28e0 [ 2259.665088][ T7113] __do_sys_io_uring_enter+0xd6b/0x1630 [ 2259.665114][ T7113] ? __fget_files+0x20e/0x3c0 [ 2259.665137][ T7113] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2259.665163][ T7113] ? fput+0x70/0xf0 [ 2259.665179][ T7113] ? ksys_write+0x1ac/0x250 [ 2259.665202][ T7113] ? __pfx_ksys_write+0x10/0x10 [ 2259.665250][ T7113] ? do_user_addr_fault+0x843/0x1370 [ 2259.665282][ T7113] __do_fast_syscall_32+0xe8/0x680 [ 2259.665306][ T7113] do_fast_syscall_32+0x32/0x80 [ 2259.665324][ T7113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2259.665339][ T7113] RIP: 0023:0xf7f44579 [ 2259.665348][ T7113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2259.665359][ T7113] RSP: 002b:00000000f53f455c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2259.665369][ T7113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000003516 [ 2259.665376][ T7113] RDX: 000000000000c2de RSI: 0000000000000008 RDI: 0000000000000000 [ 2259.665383][ T7113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2259.665389][ T7113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2259.665396][ T7113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2259.665409][ T7113] [ 2260.063608][ T7117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8227'. [ 2260.071584][ T7117] input: syz1 as /devices/virtual/input/input286 [ 2260.594910][ T7122] tipc: Enabled bearer , priority 0 [ 2261.720009][ T1289] tipc: Node number set to 869985630 [ 2261.908358][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8238'. [ 2262.024096][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8237'. [ 2262.032186][ T7162] input: syz1 as /devices/virtual/input/input287 [ 2262.133494][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8239'. [ 2263.368450][ T7192] random: crng reseeded on system resumption [ 2263.414716][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8246'. [ 2264.955508][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8253'. [ 2264.971814][ T7219] input: syz1 as /devices/virtual/input/input288 [ 2265.308983][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8252'. [ 2265.314444][ T7204] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8250'. [ 2265.329880][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8252'. [ 2265.360776][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8252'. [ 2266.019375][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8257'. [ 2266.146116][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.149324][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.434321][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2266.450599][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2266.499447][ T7246] overlayfs: failed to resolve './file0': -2 [ 2266.701727][ T7246] input: syz0 as /devices/virtual/input/input289 [ 2266.704860][ T7246] input: failed to attach handler leds to device input289, error: -6 [ 2266.802998][T24698] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.817138][T24698] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.821423][T24698] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.825478][T24698] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.458693][ T7271] : left promiscuous mode [ 2267.461058][ T7271] : left allmulticast mode [ 2267.488124][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 2267.491211][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2267.649190][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2267.658582][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2267.754282][ T7271] bond1: left promiscuous mode [ 2267.755931][ T7271] dummy0: left promiscuous mode [ 2267.757699][ T7271] bond1: left allmulticast mode [ 2267.770596][ T7271] dummy0: left allmulticast mode [ 2267.780318][ T7271] vlan2: left promiscuous mode [ 2267.781966][ T7271] mac80211_hwsim hwsim57 wlan1: left promiscuous mode [ 2267.801776][ T5270] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.820765][ T5270] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.823900][ T5270] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.859597][ T5270] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2268.421404][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8269'. [ 2268.428332][ T7286] input: syz1 as /devices/virtual/input/input290 [ 2269.548924][ T7299] overlayfs: failed to resolve './file0': -2 [ 2269.579792][ T7304] FAULT_INJECTION: forcing a failure. [ 2269.579792][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2269.595156][ T7304] CPU: 3 UID: 0 PID: 7304 Comm: syz.1.8275 Tainted: G L syzkaller #0 PREEMPT(full) [ 2269.595186][ T7304] Tainted: [L]=SOFTLOCKUP [ 2269.595192][ T7304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2269.595203][ T7304] Call Trace: [ 2269.595209][ T7304] [ 2269.595216][ T7304] dump_stack_lvl+0x16c/0x1f0 [ 2269.595256][ T7304] should_fail_ex+0x512/0x640 [ 2269.595282][ T7304] _copy_to_user+0x32/0xd0 [ 2269.595304][ T7304] simple_read_from_buffer+0xcb/0x170 [ 2269.595331][ T7304] proc_fail_nth_read+0x197/0x240 [ 2269.595361][ T7304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2269.595393][ T7304] ? rw_verify_area+0xcf/0x6c0 [ 2269.595416][ T7304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2269.595445][ T7304] vfs_read+0x1e4/0xcf0 [ 2269.595470][ T7304] ? __pfx___mutex_lock+0x10/0x10 [ 2269.595500][ T7304] ? __pfx_vfs_read+0x10/0x10 [ 2269.595522][ T7304] ? find_held_lock+0x2b/0x80 [ 2269.595554][ T7304] ? __fget_files+0x20e/0x3c0 [ 2269.595588][ T7304] ksys_read+0x12a/0x250 [ 2269.595612][ T7304] ? __pfx_ksys_read+0x10/0x10 [ 2269.595644][ T7304] __do_fast_syscall_32+0xe8/0x680 [ 2269.595675][ T7304] do_fast_syscall_32+0x32/0x80 [ 2269.595703][ T7304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2269.595725][ T7304] RIP: 0023:0xf70dd579 [ 2269.595739][ T7304] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2269.595757][ T7304] RSP: 002b:00000000f54cd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2269.595774][ T7304] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54cd620 [ 2269.595785][ T7304] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 2269.595795][ T7304] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2269.595805][ T7304] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2269.595815][ T7304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.595838][ T7304] [ 2269.599556][T27115] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2269.642803][ T7309] FAULT_INJECTION: forcing a failure. [ 2269.642803][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.647857][T27115] Bluetooth: Wrong link type (-22) [ 2269.651674][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.6.8278 Tainted: G L syzkaller #0 PREEMPT(full) [ 2269.651694][ T7309] Tainted: [L]=SOFTLOCKUP [ 2269.651698][ T7309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2269.651705][ T7309] Call Trace: [ 2269.651709][ T7309] [ 2269.651714][ T7309] dump_stack_lvl+0x16c/0x1f0 [ 2269.651734][ T7309] should_fail_ex+0x512/0x640 [ 2269.651747][ T7309] ? fs_reclaim_acquire+0xae/0x150 [ 2269.651769][ T7309] should_failslab+0xc2/0x120 [ 2269.651786][ T7309] __kmalloc_noprof+0xeb/0x910 [ 2269.651799][ T7309] ? tomoyo_encode2+0x100/0x3e0 [ 2269.651816][ T7309] ? tomoyo_encode2+0x100/0x3e0 [ 2269.651830][ T7309] tomoyo_encode2+0x100/0x3e0 [ 2269.651846][ T7309] tomoyo_encode+0x29/0x50 [ 2269.651860][ T7309] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2269.651879][ T7309] tomoyo_path_number_perm+0x245/0x580 [ 2269.651892][ T7309] ? tomoyo_path_number_perm+0x237/0x580 [ 2269.651906][ T7309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2269.651932][ T7309] ? find_held_lock+0x2b/0x80 [ 2269.651947][ T7309] ? hook_file_ioctl_common+0x144/0x410 [ 2269.651964][ T7309] ? __fget_files+0x20e/0x3c0 [ 2269.651979][ T7309] ? fput+0x70/0xf0 [ 2269.651992][ T7309] security_file_ioctl_compat+0x9b/0x240 [ 2269.652007][ T7309] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2269.652023][ T7309] __do_fast_syscall_32+0xe8/0x680 [ 2269.652042][ T7309] do_fast_syscall_32+0x32/0x80 [ 2269.652060][ T7309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2269.652075][ T7309] RIP: 0023:0xf7f44579 [ 2269.652084][ T7309] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2269.652094][ T7309] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2269.652105][ T7309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 2269.652113][ T7309] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2269.652119][ T7309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2269.652126][ T7309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2269.652132][ T7309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.652146][ T7309] [ 2269.652156][ T7309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2269.653711][T27115] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 2269.671702][ T7310] input: syz0 as /devices/virtual/input/input291 [ 2269.674292][T27115] Bluetooth: Wrong link type (-22) [ 2269.676180][ T7310] input: failed to attach handler leds to device input291, error: -6 [ 2269.679692][T27115] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 2269.765052][T27115] Bluetooth: Wrong link type (-22) [ 2269.782268][ T7306] kAFS: No cell specified [ 2269.820250][T27115] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2269.822596][T27115] Bluetooth: Wrong link type (-22) [ 2270.328936][ T7320] /dev/nullb0: Can't open blockdev [ 2270.480272][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8281'. [ 2270.561017][ T7321] input: syz1 as /devices/virtual/input/input292 [ 2270.565014][ T7328] /dev/nullb0: Can't open blockdev [ 2270.617891][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8284'. [ 2270.955734][ T7337] 9p: Bad value for 'wfdno' [ 2271.888844][ T7358] overlayfs: failed to resolve './file0': -2 [ 2272.030922][ T7360] input: syz0 as /devices/virtual/input/input293 [ 2272.033390][ T7360] input: failed to attach handler leds to device input293, error: -6 [ 2272.912182][ T7368] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8296'. [ 2273.142718][T27115] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 2273.632012][ T7386] FAULT_INJECTION: forcing a failure. [ 2273.632012][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.637634][ T7386] CPU: 2 UID: 0 PID: 7386 Comm: syz.3.8300 Tainted: G L syzkaller #0 PREEMPT(full) [ 2273.637665][ T7386] Tainted: [L]=SOFTLOCKUP [ 2273.637672][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2273.637685][ T7386] Call Trace: [ 2273.637693][ T7386] [ 2273.637701][ T7386] dump_stack_lvl+0x16c/0x1f0 [ 2273.637734][ T7386] should_fail_ex+0x512/0x640 [ 2273.637758][ T7386] _copy_to_user+0x32/0xd0 [ 2273.637781][ T7386] simple_read_from_buffer+0xcb/0x170 [ 2273.637807][ T7386] proc_fail_nth_read+0x197/0x240 [ 2273.637837][ T7386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2273.637867][ T7386] ? rw_verify_area+0xcf/0x6c0 [ 2273.637890][ T7386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2273.637919][ T7386] vfs_read+0x1e4/0xcf0 [ 2273.637945][ T7386] ? __pfx___mutex_lock+0x10/0x10 [ 2273.637975][ T7386] ? __pfx_vfs_read+0x10/0x10 [ 2273.637998][ T7386] ? find_held_lock+0x2b/0x80 [ 2273.638027][ T7386] ? __fget_files+0x20e/0x3c0 [ 2273.638060][ T7386] ksys_read+0x12a/0x250 [ 2273.638085][ T7386] ? __pfx_ksys_read+0x10/0x10 [ 2273.638117][ T7386] __do_fast_syscall_32+0xe8/0x680 [ 2273.638149][ T7386] do_fast_syscall_32+0x32/0x80 [ 2273.638176][ T7386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2273.638205][ T7386] RIP: 0023:0xf709d579 [ 2273.638220][ T7386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2273.638238][ T7386] RSP: 002b:00000000f546c590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2273.638255][ T7386] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f546c620 [ 2273.638267][ T7386] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2273.638277][ T7386] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2273.638287][ T7386] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2273.638298][ T7386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2273.638322][ T7386] [ 2274.184135][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8302'. [ 2274.193066][ T7402] input: syz1 as /devices/virtual/input/input294 [ 2274.311120][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8304'. [ 2274.332164][ T7404] input: syz1 as /devices/virtual/input/input295 [ 2274.339946][T27115] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2274.345746][T27115] Bluetooth: hci1: Injecting HCI hardware error event [ 2274.351689][ T3841] Bluetooth: hci1: hardware error 0x00 [ 2275.065904][ T7419] netlink: 'syz.3.8309': attribute type 4 has an invalid length. [ 2275.239167][ T7421] FAULT_INJECTION: forcing a failure. [ 2275.239167][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.245905][ T7421] CPU: 2 UID: 0 PID: 7421 Comm: syz.7.8310 Tainted: G L syzkaller #0 PREEMPT(full) [ 2275.245947][ T7421] Tainted: [L]=SOFTLOCKUP [ 2275.245953][ T7421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2275.245963][ T7421] Call Trace: [ 2275.245970][ T7421] [ 2275.245978][ T7421] dump_stack_lvl+0x16c/0x1f0 [ 2275.246009][ T7421] should_fail_ex+0x512/0x640 [ 2275.246029][ T7421] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 2275.246054][ T7421] should_failslab+0xc2/0x120 [ 2275.246084][ T7421] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 2275.246107][ T7421] ? __d_lookup+0x25c/0x4a0 [ 2275.246127][ T7421] ? __d_alloc+0x35/0xa80 [ 2275.246157][ T7421] ? __d_alloc+0x35/0xa80 [ 2275.246173][ T7421] __d_alloc+0x35/0xa80 [ 2275.246193][ T7421] d_alloc+0x4a/0x1e0 [ 2275.246211][ T7421] lookup_one_qstr_excl+0x175/0x250 [ 2275.246235][ T7421] start_dirop+0x59/0xb0 [ 2275.246261][ T7421] simple_start_creating+0xf4/0x100 [ 2275.246286][ T7421] ? __pfx_simple_start_creating+0x10/0x10 [ 2275.246310][ T7421] ? do_raw_spin_unlock+0x172/0x230 [ 2275.246335][ T7421] ? simple_pin_fs+0xa3/0x190 [ 2275.246359][ T7421] debugfs_start_creating.part.0+0x86/0x1c0 [ 2275.246393][ T7421] debugfs_create_dir+0x72/0x470 [ 2275.246412][ T7421] ieee80211_debugfs_recreate_netdev+0x1d1/0x17a0 [ 2275.246442][ T7421] ? lockdep_init_map_type+0x5c/0x270 [ 2275.246461][ T7421] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 2275.246487][ T7421] ? __raw_spin_lock_init+0x3a/0x110 [ 2275.246510][ T7421] ? ieee80211_link_setup+0x5e/0x90 [ 2275.246536][ T7421] ? ieee80211_setup_sdata+0x5b5/0xcf0 [ 2275.246561][ T7421] ieee80211_if_change_type+0x2ba/0x7a0 [ 2275.246588][ T7421] ieee80211_change_iface+0xa5/0x500 [ 2275.246615][ T7421] cfg80211_change_iface+0x55d/0xce0 [ 2275.246648][ T7421] cfg80211_wext_siwmode+0x22c/0x2b0 [ 2275.246675][ T7421] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 2275.246701][ T7421] ? __mutex_lock+0x27b/0x1ca0 [ 2275.246734][ T7421] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 2275.246758][ T7421] ioctl_standard_call+0xb5/0x1d0 [ 2275.246790][ T7421] compat_standard_call+0xf2/0x350 [ 2275.246819][ T7421] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 2275.246859][ T7421] ? __pfx_compat_standard_call+0x10/0x10 [ 2275.246887][ T7421] ? full_name_hash+0xbc/0x110 [ 2275.246906][ T7421] ? netdev_name_node_lookup+0x127/0x180 [ 2275.246934][ T7421] ? __pfx_compat_standard_call+0x10/0x10 [ 2275.246960][ T7421] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 2275.246983][ T7421] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 2275.247018][ T7421] compat_wext_handle_ioctl+0x284/0x310 [ 2275.247048][ T7421] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 2275.247075][ T7421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2275.247108][ T7421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2275.247138][ T7421] ? unix_ioctl+0x9f/0x580 [ 2275.247173][ T7421] compat_sock_ioctl+0x320/0x730 [ 2275.247196][ T7421] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2275.247212][ T7421] ? hook_file_ioctl_common+0x144/0x410 [ 2275.247240][ T7421] ? __fget_files+0x20e/0x3c0 [ 2275.247264][ T7421] ? fput+0x70/0xf0 [ 2275.247290][ T7421] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2275.247306][ T7421] __ia32_compat_sys_ioctl+0x242/0x370 [ 2275.247335][ T7421] __do_fast_syscall_32+0xe8/0x680 [ 2275.247367][ T7421] do_fast_syscall_32+0x32/0x80 [ 2275.247396][ T7421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2275.247418][ T7421] RIP: 0023:0xf701d579 [ 2275.247433][ T7421] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2275.247452][ T7421] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2275.247468][ T7421] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008b06 [ 2275.247478][ T7421] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 2275.247491][ T7421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2275.247500][ T7421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2275.247510][ T7421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2275.247535][ T7421] [ 2276.490018][ T3841] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2276.883665][ T3841] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 2277.210054][ T3841] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2277.216120][ T3841] Bluetooth: hci2: Injecting HCI hardware error event [ 2277.222143][T27115] Bluetooth: hci2: hardware error 0x00 [ 2277.251260][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8318'. [ 2277.255959][ T7462] input: syz1 as /devices/virtual/input/input297 [ 2277.651615][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8322'. [ 2277.657041][ T7468] input: syz1 as /devices/virtual/input/input298 [ 2278.259411][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8323'. [ 2279.290163][T27115] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2280.041290][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 2280.052586][ T7513] input: syz1 as /devices/virtual/input/input299 [ 2280.408415][ T7520] bridge1: entered allmulticast mode [ 2280.431409][ T7520] ÿÿÿÿÿÿ: renamed from ip6gretap0 [ 2280.892062][T27115] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2280.898555][T27115] Bluetooth: hci3: Injecting HCI hardware error event [ 2280.903978][ T3841] Bluetooth: hci3: hardware error 0x00 [ 2281.210478][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8344'. [ 2281.215128][ T7528] input: syz1 as /devices/virtual/input/input300 [ 2281.254442][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8336'. [ 2281.297670][ T7536] input: syz1 as /devices/virtual/input/input301 [ 2282.386641][ T7552] netlink: 'syz.6.8343': attribute type 2 has an invalid length. [ 2282.395542][ T7554] FAULT_INJECTION: forcing a failure. [ 2282.395542][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.399704][ T7554] CPU: 3 UID: 0 PID: 7554 Comm: syz.3.8345 Tainted: G L syzkaller #0 PREEMPT(full) [ 2282.399723][ T7554] Tainted: [L]=SOFTLOCKUP [ 2282.399727][ T7554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2282.399734][ T7554] Call Trace: [ 2282.399739][ T7554] [ 2282.399745][ T7554] dump_stack_lvl+0x16c/0x1f0 [ 2282.399765][ T7554] should_fail_ex+0x512/0x640 [ 2282.399778][ T7554] ? __kmalloc_noprof+0xca/0x910 [ 2282.399792][ T7554] should_failslab+0xc2/0x120 [ 2282.399820][ T7554] __kmalloc_noprof+0xeb/0x910 [ 2282.399835][ T7554] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2282.399859][ T7554] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2282.399878][ T7554] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 2282.399910][ T7554] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 2282.399931][ T7554] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2282.399950][ T7554] ? genl_get_cmd+0x194/0x580 [ 2282.399970][ T7554] ? bpf_lsm_capable+0x9/0x10 [ 2282.399985][ T7554] ? security_capable+0x7e/0x260 [ 2282.400011][ T7554] genl_rcv_msg+0x55c/0x800 [ 2282.400024][ T7554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2282.400035][ T7554] ? __pfx_ieee802154_llsec_add_dev+0x10/0x10 [ 2282.400054][ T7554] ? __lock_acquire+0x436/0x2890 [ 2282.400071][ T7554] netlink_rcv_skb+0x158/0x420 [ 2282.400087][ T7554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2282.400099][ T7554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2282.400120][ T7554] ? netlink_deliver_tap+0x1ae/0xd30 [ 2282.400140][ T7554] genl_rcv+0x28/0x40 [ 2282.400156][ T7554] netlink_unicast+0x5aa/0x870 [ 2282.400174][ T7554] ? __pfx_netlink_unicast+0x10/0x10 [ 2282.400195][ T7554] netlink_sendmsg+0x8c8/0xdd0 [ 2282.400213][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2282.400231][ T7554] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2282.400252][ T7554] ____sys_sendmsg+0xa5d/0xc30 [ 2282.400272][ T7554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2282.400288][ T7554] ? get_compat_msghdr+0x11a/0x170 [ 2282.400309][ T7554] ___sys_sendmsg+0x134/0x1d0 [ 2282.400326][ T7554] ? __pfx____sys_sendmsg+0x10/0x10 [ 2282.400347][ T7554] ? find_held_lock+0x2b/0x80 [ 2282.400370][ T7554] __sys_sendmsg+0x16d/0x220 [ 2282.400385][ T7554] ? __pfx___sys_sendmsg+0x10/0x10 [ 2282.400409][ T7554] __do_fast_syscall_32+0xe8/0x680 [ 2282.400439][ T7554] do_fast_syscall_32+0x32/0x80 [ 2282.400460][ T7554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2282.400474][ T7554] RIP: 0023:0xf709d579 [ 2282.400484][ T7554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2282.400495][ T7554] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2282.400507][ T7554] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 2282.400514][ T7554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2282.400520][ T7554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2282.400526][ T7554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2282.400533][ T7554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2282.400547][ T7554] [ 2282.971974][ T3841] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2283.116633][ T7581] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8349'. [ 2283.584928][ T7585] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 2284.110037][ T1332] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 2284.263113][ T1332] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2284.270897][ T1332] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.273940][ T1332] usb 11-1: Product: syz [ 2284.275430][ T1332] usb 11-1: Manufacturer: syz [ 2284.277050][ T1332] usb 11-1: SerialNumber: syz [ 2284.358457][ T7606] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2284.360678][ T7606] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2284.363788][ T7606] vhci_hcd vhci_hcd.0: Device attached [ 2284.504910][ T7591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.510240][ T7591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.554928][ T1332] rtl8150 11-1:1.0: couldn't reset the device [ 2284.557203][ T1332] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 2284.563285][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8356'. [ 2284.563456][ T1332] usb 11-1: USB disconnect, device number 28 [ 2284.584677][ T7610] input: syz1 as /devices/virtual/input/input302 [ 2284.655201][ T6038] usb 44-1: SetAddress Request (58) to port 0 [ 2284.657349][ T6038] usb 44-1: new SuperSpeed USB device number 58 using vhci_hcd [ 2285.309977][ T7607] vhci_hcd: connection reset by peer [ 2285.322671][T30506] vhci_hcd vhci_hcd.3: stop threads [ 2285.324529][T30506] vhci_hcd vhci_hcd.3: release socket [ 2285.326423][T30506] vhci_hcd vhci_hcd.3: disconnect device [ 2287.476627][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8371'. [ 2287.490171][ T7681] input: syz1 as /devices/virtual/input/input303 [ 2288.086829][ T7684] FAULT_INJECTION: forcing a failure. [ 2288.086829][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.094173][ T7684] CPU: 2 UID: 0 PID: 7684 Comm: syz.1.8374 Tainted: G L syzkaller #0 PREEMPT(full) [ 2288.094193][ T7684] Tainted: [L]=SOFTLOCKUP [ 2288.094197][ T7684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2288.094205][ T7684] Call Trace: [ 2288.094209][ T7684] [ 2288.094214][ T7684] dump_stack_lvl+0x16c/0x1f0 [ 2288.094235][ T7684] should_fail_ex+0x512/0x640 [ 2288.094249][ T7684] ? fs_reclaim_acquire+0xae/0x150 [ 2288.094268][ T7684] should_failslab+0xc2/0x120 [ 2288.094286][ T7684] __kmalloc_noprof+0xeb/0x910 [ 2288.094298][ T7684] ? tomoyo_encode2+0x100/0x3e0 [ 2288.094316][ T7684] ? tomoyo_encode2+0x100/0x3e0 [ 2288.094330][ T7684] tomoyo_encode2+0x100/0x3e0 [ 2288.094346][ T7684] tomoyo_encode+0x29/0x50 [ 2288.094361][ T7684] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2288.094380][ T7684] tomoyo_path_number_perm+0x245/0x580 [ 2288.094392][ T7684] ? tomoyo_path_number_perm+0x237/0x580 [ 2288.094406][ T7684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2288.094432][ T7684] ? find_held_lock+0x2b/0x80 [ 2288.094447][ T7684] ? hook_file_ioctl_common+0x144/0x410 [ 2288.094464][ T7684] ? __fget_files+0x20e/0x3c0 [ 2288.094479][ T7684] ? fput+0x70/0xf0 [ 2288.094492][ T7684] security_file_ioctl_compat+0x9b/0x240 [ 2288.094507][ T7684] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2288.094523][ T7684] __do_fast_syscall_32+0xe8/0x680 [ 2288.094542][ T7684] do_fast_syscall_32+0x32/0x80 [ 2288.094559][ T7684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2288.094573][ T7684] RIP: 0023:0xf70dd579 [ 2288.094582][ T7684] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2288.094594][ T7684] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2288.094604][ T7684] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c034564b [ 2288.094611][ T7684] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.094618][ T7684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.094625][ T7684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2288.094631][ T7684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.094645][ T7684] [ 2288.094655][ T7684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2288.929889][ T2467] block nbd0: Possible stuck request ffff888025e60000: control (read@0,4096B). Runtime 270 seconds [ 2288.934821][ T7692] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2288.936992][ T7692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2288.939733][ T7692] vhci_hcd vhci_hcd.0: Device attached [ 2288.995137][ T7702] syzkaller0: entered promiscuous mode [ 2288.996996][ T7702] syzkaller0: entered allmulticast mode [ 2289.094977][ T7699] vhci_hcd: connection closed [ 2289.095253][T24694] vhci_hcd vhci_hcd.6: stop threads [ 2289.098742][T24694] vhci_hcd vhci_hcd.6: release socket [ 2289.101025][T24694] vhci_hcd vhci_hcd.6: disconnect device [ 2289.755652][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8385'. [ 2289.780021][ T6038] usb 44-1: device descriptor read/8, error -110 [ 2289.784173][ T7720] input: syz1 as /devices/virtual/input/input304 [ 2290.181198][ T6038] usb usb44-port1: attempt power cycle [ 2290.442447][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8387'. [ 2290.447586][ T7733] input: syz1 as /devices/virtual/input/input305 [ 2290.661855][T11777] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 2290.769600][ T6038] usb usb44-port1: unable to enumerate USB device [ 2290.835083][T11777] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2290.838203][T11777] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2290.841226][T11777] usb 11-1: Product: syz [ 2290.842707][T11777] usb 11-1: Manufacturer: syz [ 2290.844425][T11777] usb 11-1: SerialNumber: syz [ 2290.847603][T11777] usb 11-1: config 0 descriptor?? [ 2290.851090][T11777] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2290.853588][T11777] dvb-usb: bulk message failed: -22 (2/0) [ 2290.861937][T11777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2290.866722][T11777] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2290.869431][T11777] usb 11-1: media controller created [ 2290.878912][T11777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2291.054071][ T7730] cxusb: i2c wr: len=79 is too big! [ 2291.054071][ T7730] [ 2291.057404][T11777] cxusb: set interface failed [ 2291.058956][T11777] dvb-usb: bulk message failed: -22 (1/0) [ 2291.161328][T11777] DVB: Unable to find symbol mt352_attach() [ 2291.178258][T11777] dvb-usb: bulk message failed: -22 (5/0) [ 2291.181122][T11777] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2291.183778][T11777] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2291.269980][T11777] rc_core: IR keymap rc-dvico-mce not found [ 2291.272349][T11777] Registered IR keymap rc-empty [ 2291.275001][T11777] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 2291.279773][T11777] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input306 [ 2291.304760][T11777] dvb-usb: schedule remote query interval to 100 msecs. [ 2291.307435][T11777] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2291.332113][T11777] usb 11-1: USB disconnect, device number 29 [ 2291.363153][T11777] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2291.963068][ T7754] FAULT_INJECTION: forcing a failure. [ 2291.963068][ T7754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2291.967335][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: syz.3.8395 Tainted: G L syzkaller #0 PREEMPT(full) [ 2291.967354][ T7754] Tainted: [L]=SOFTLOCKUP [ 2291.967358][ T7754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2291.967365][ T7754] Call Trace: [ 2291.967370][ T7754] [ 2291.967375][ T7754] dump_stack_lvl+0x16c/0x1f0 [ 2291.967396][ T7754] should_fail_ex+0x512/0x640 [ 2291.967412][ T7754] _copy_to_user+0x32/0xd0 [ 2291.967425][ T7754] simple_read_from_buffer+0xcb/0x170 [ 2291.967443][ T7754] proc_fail_nth_read+0x197/0x240 [ 2291.967462][ T7754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2291.967481][ T7754] ? rw_verify_area+0xcf/0x6c0 [ 2291.967496][ T7754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2291.967514][ T7754] vfs_read+0x1e4/0xcf0 [ 2291.967531][ T7754] ? __pfx___mutex_lock+0x10/0x10 [ 2291.967550][ T7754] ? __pfx_vfs_read+0x10/0x10 [ 2291.967564][ T7754] ? find_held_lock+0x2b/0x80 [ 2291.967582][ T7754] ? __fget_files+0x20e/0x3c0 [ 2291.967602][ T7754] ksys_read+0x12a/0x250 [ 2291.967618][ T7754] ? __pfx_ksys_read+0x10/0x10 [ 2291.967633][ T7754] ? fput+0x70/0xf0 [ 2291.967646][ T7754] __do_fast_syscall_32+0xe8/0x680 [ 2291.967665][ T7754] do_fast_syscall_32+0x32/0x80 [ 2291.967682][ T7754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2291.967696][ T7754] RIP: 0023:0xf709d579 [ 2291.967706][ T7754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2291.967717][ T7754] RSP: 002b:00000000f548d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2291.967728][ T7754] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f548d620 [ 2291.967735][ T7754] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2291.967741][ T7754] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2291.967748][ T7754] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2291.967754][ T7754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2291.967767][ T7754] [ 2292.244416][ T7761] /dev/nullb0: Can't open blockdev [ 2292.381220][ T7769] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2292.383420][ T7769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2292.386123][ T7769] vhci_hcd vhci_hcd.0: Device attached [ 2292.619927][T11777] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 2292.649952][T24898] usb 52-1: SetAddress Request (2) to port 0 [ 2292.652823][T24898] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2292.770115][T11777] usb 11-1: Using ep0 maxpacket: 8 [ 2292.773762][T11777] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2292.775992][T11777] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2292.778885][T11777] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.783653][T11777] usb 11-1: config 0 descriptor?? [ 2293.006465][ T7770] vhci_hcd: connection reset by peer [ 2293.009682][T32636] vhci_hcd vhci_hcd.7: stop threads [ 2293.011804][T32636] vhci_hcd vhci_hcd.7: release socket [ 2293.013798][T32636] vhci_hcd vhci_hcd.7: disconnect device [ 2293.200670][T11777] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 2293.427056][ T6988] usb 11-1: USB disconnect, device number 30 [ 2293.659981][T11777] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2293.834988][T11777] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2293.838811][T11777] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2293.842054][T11777] usb 6-1: Product: syz [ 2293.843663][T11777] usb 6-1: Manufacturer: syz [ 2293.845686][T11777] usb 6-1: SerialNumber: syz [ 2293.849440][T11777] usb 6-1: config 0 descriptor?? [ 2293.859464][T11777] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2293.862820][T11777] dvb-usb: bulk message failed: -22 (2/0) [ 2293.867730][T11777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2293.871909][T11777] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2293.875101][T11777] usb 6-1: media controller created [ 2293.884740][T11777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2294.070623][ T7790] cxusb: i2c wr: len=79 is too big! [ 2294.070623][ T7790] [ 2294.074956][T11777] cxusb: set interface failed [ 2294.076594][T11777] dvb-usb: bulk message failed: -22 (1/0) [ 2294.101076][T11777] DVB: Unable to find symbol mt352_attach() [ 2294.103128][T11777] dvb-usb: bulk message failed: -22 (5/0) [ 2294.105145][T11777] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2294.108506][T11777] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2294.160202][T11777] rc_core: IR keymap rc-dvico-mce not found [ 2294.164523][T11777] Registered IR keymap rc-empty [ 2294.167211][T11777] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 2294.171856][T11777] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input307 [ 2294.177382][T11777] dvb-usb: schedule remote query interval to 100 msecs. [ 2294.179986][T11777] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2294.188856][T11777] usb 6-1: USB disconnect, device number 42 [ 2294.261843][T11777] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2294.579956][ T140] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 2294.742605][ T140] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 2294.750890][ T140] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2294.760094][ T140] usb 12-1: config 0 interface 0 has no altsetting 0 [ 2294.772540][ T140] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2294.776521][ T140] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2294.795784][ T140] usb 12-1: Product: syz [ 2294.802642][ T140] usb 12-1: Manufacturer: syz [ 2294.805542][ T140] usb 12-1: SerialNumber: syz [ 2294.810866][ T140] usb 12-1: config 0 descriptor?? [ 2294.818283][ T140] hub 12-1:0.0: bad descriptor, ignoring hub [ 2294.829920][ T140] hub 12-1:0.0: probe with driver hub failed with error -5 [ 2294.835001][ T140] usb 12-1: selecting invalid altsetting 0 [ 2295.201218][T27450] usb 12-1: USB disconnect, device number 2 [ 2295.361084][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8412'. [ 2295.365358][ T7827] input: syz1 as /devices/virtual/input/input308 [ 2296.720026][ T840] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2296.829762][ T7841] bridge_slave_0: left allmulticast mode [ 2296.832023][ T7841] bridge_slave_0: left promiscuous mode [ 2296.834060][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.838545][ T7841] bridge_slave_1: left allmulticast mode [ 2296.840645][ T7841] bridge_slave_1: left promiscuous mode [ 2296.842568][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.848053][ T7841] bond0: (slave bond_slave_0): Releasing backup interface [ 2296.854802][ T7841] bond0: (slave bond_slave_1): Releasing backup interface [ 2296.861555][ T7841] team0: Port device team_slave_0 removed [ 2296.866169][ T7841] team0: Port device team_slave_1 removed [ 2296.868621][ T7841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2296.872248][ T7841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.875763][ T7841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2296.878943][ T7841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.885121][ T7841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2296.894119][ T840] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2296.897092][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2296.899907][ T840] usb 6-1: Product: syz [ 2296.901356][ T840] usb 6-1: Manufacturer: syz [ 2296.902895][ T840] usb 6-1: SerialNumber: syz [ 2296.907619][T24690] tipc: Resetting bearer [ 2296.919359][ T840] usb 6-1: config 0 descriptor?? [ 2296.926647][ T840] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2296.929162][ T840] dvb-usb: bulk message failed: -22 (2/0) [ 2296.950996][ T840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2296.960311][ T840] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2296.962883][ T840] usb 6-1: media controller created [ 2296.988477][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2297.128863][ T7837] cxusb: i2c wr: len=79 is too big! [ 2297.128863][ T7837] [ 2297.133480][ T840] cxusb: set interface failed [ 2297.137482][ T840] dvb-usb: bulk message failed: -22 (1/0) [ 2297.169226][ T840] DVB: Unable to find symbol mt352_attach() [ 2297.171772][ T840] dvb-usb: bulk message failed: -22 (5/0) [ 2297.173784][ T840] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2297.176218][ T840] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2297.198678][ T40] audit: type=1326 audit(2296.829:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.7.8407" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7fc00000 [ 2297.229949][ T840] rc_core: IR keymap rc-dvico-mce not found [ 2297.232595][ T840] Registered IR keymap rc-empty [ 2297.240956][ T840] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 2297.247877][ T840] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input309 [ 2297.256097][ T840] dvb-usb: schedule remote query interval to 100 msecs. [ 2297.259133][ T840] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2297.268558][ T840] usb 6-1: USB disconnect, device number 43 [ 2297.390147][ T840] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2297.846421][T24898] usb 52-1: device descriptor read/8, error -110 [ 2297.850121][ T7862] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.8423'. [ 2298.065286][ T7878] binder: 7874:7878 ioctl 400c620e 80000100 returned -22 [ 2298.111706][ T7881] 9pnet_fd: Insufficient options for proto=fd [ 2298.116290][ T840] IPVS: starting estimator thread 0... [ 2298.160942][ T1410] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2298.210211][ T7882] IPVS: using max 44 ests per chain, 105600 per kthread [ 2298.240513][T24898] usb usb52-port1: attempt power cycle [ 2298.499926][ T1410] usb 6-1: device descriptor read/64, error -71 [ 2298.631267][ T7891] bridge_slave_0: left allmulticast mode [ 2298.633216][ T7891] bridge_slave_0: left promiscuous mode [ 2298.635168][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.639375][ T7891] bridge_slave_1: left allmulticast mode [ 2298.641410][ T7891] bridge_slave_1: left promiscuous mode [ 2298.643390][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.649717][ T7891] bond0: (slave bond_slave_0): Releasing backup interface [ 2298.654607][ T7891] bond0: (slave bond_slave_1): Releasing backup interface [ 2298.658555][ T7891] team0: Port device team_slave_0 removed [ 2298.662618][ T7891] team0: Port device team_slave_1 removed [ 2298.664657][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2298.668315][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2298.671485][ T7891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2298.814462][T24898] usb usb52-port1: unable to enumerate USB device [ 2298.951339][ T1410] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2299.246251][ T7894] KVM: debugfs: duplicate directory 7894-7 [ 2299.390456][ T1410] usb 6-1: device descriptor read/64, error -71 [ 2299.500127][ T1410] usb usb6-port1: attempt power cycle [ 2299.592925][ T7901] input: syz0 as /devices/virtual/input/input310 [ 2299.954052][ T7911] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8439'. [ 2299.970492][ T7911] batadv1: entered allmulticast mode [ 2300.850013][T11777] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 2300.980121][T11777] usb 12-1: device descriptor read/64, error -71 [ 2301.220019][T11777] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 2301.275115][ T7941] input: syz0 as /devices/virtual/input/input311 [ 2301.349904][T11777] usb 12-1: device descriptor read/64, error -71 [ 2301.439704][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8449'. [ 2301.444962][ T7944] input: syz1 as /devices/virtual/input/input312 [ 2301.460207][T11777] usb usb12-port1: attempt power cycle [ 2301.810578][T11777] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 2301.840703][T11777] usb 12-1: device descriptor read/8, error -71 [ 2302.100330][T11777] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 2302.130677][T11777] usb 12-1: device descriptor read/8, error -71 [ 2302.240307][T11777] usb usb12-port1: unable to enumerate USB device [ 2302.489989][ T6988] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 2302.656028][ T6988] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2302.659608][ T6988] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2302.662839][ T6988] usb 11-1: Product: syz [ 2302.664437][ T6988] usb 11-1: Manufacturer: syz [ 2302.666259][ T6988] usb 11-1: SerialNumber: syz [ 2302.670352][ T6988] usb 11-1: config 0 descriptor?? [ 2302.675335][ T6988] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2302.678231][ T6988] dvb-usb: bulk message failed: -22 (2/0) [ 2302.696446][ T6988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2302.730519][ T6988] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2302.734475][ T6988] usb 11-1: media controller created [ 2302.749678][ T6988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2302.890900][ T7965] dvb-usb: bulk message failed: -22 (4/0) [ 2302.893545][ T7965] cxusb: i2c read failed [ 2302.895547][ T6988] cxusb: set interface failed [ 2302.897108][ T6988] dvb-usb: bulk message failed: -22 (1/0) [ 2302.930272][ T6988] DVB: Unable to find symbol mt352_attach() [ 2302.932376][ T6988] dvb-usb: bulk message failed: -22 (5/0) [ 2302.934282][ T6988] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2302.936692][ T6988] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2302.989923][ T6988] rc_core: IR keymap rc-dvico-mce not found [ 2302.991982][ T6988] Registered IR keymap rc-empty [ 2302.994327][ T6988] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 2302.998360][ T6988] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input313 [ 2303.004664][ T6988] dvb-usb: schedule remote query interval to 100 msecs. [ 2303.006924][ T6988] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2303.011039][ T6988] usb 11-1: USB disconnect, device number 31 [ 2303.032119][ T6988] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2303.311559][ T40] audit: type=1326 audit(2302.949:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.324598][ T40] audit: type=1326 audit(2302.949:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.334941][ T40] audit: type=1326 audit(2302.949:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.349892][ T40] audit: type=1326 audit(2302.949:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.356651][ T40] audit: type=1326 audit(2302.949:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.367785][ T40] audit: type=1326 audit(2302.949:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.374638][ T40] audit: type=1326 audit(2302.949:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.381615][ T40] audit: type=1326 audit(2302.949:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.389898][ T40] audit: type=1326 audit(2302.949:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.397799][ T40] audit: type=1326 audit(2302.959:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.3.8460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2303.971970][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8464'. [ 2303.977258][ T7996] input: syz1 as /devices/virtual/input/input315 [ 2304.186870][ T8004] netlink: 'syz.3.8467': attribute type 6 has an invalid length. [ 2304.190913][ T8004] netlink: 'syz.3.8467': attribute type 7 has an invalid length. [ 2304.195126][ T8004] netlink: 'syz.3.8467': attribute type 8 has an invalid length. [ 2304.289787][ T8006] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2304.292232][ T8006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2304.295454][ T8006] vhci_hcd vhci_hcd.0: Device attached [ 2304.348295][ T8006] cifs: Unknown parameter 'fd' [ 2304.350558][ T8006] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2304.416644][ T8006] CIFS mount error: No usable UNC path provided in device string! [ 2304.416644][ T8006] [ 2304.420383][ T8006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2304.583294][ T1332] usb 50-1: SetAddress Request (43) to port 0 [ 2304.588983][ T1332] usb 50-1: new SuperSpeed USB device number 43 using vhci_hcd [ 2304.777782][ T8007] vhci_hcd: connection reset by peer [ 2304.780865][T24688] vhci_hcd vhci_hcd.6: stop threads [ 2304.782689][T24688] vhci_hcd vhci_hcd.6: release socket [ 2304.785053][T24688] vhci_hcd vhci_hcd.6: disconnect device [ 2305.060028][ T140] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 2305.296095][ T140] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2305.300293][ T140] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2305.303966][ T140] usb 12-1: Product: syz [ 2305.305800][ T140] usb 12-1: Manufacturer: syz [ 2305.307811][ T140] usb 12-1: SerialNumber: syz [ 2305.313085][ T140] usb 12-1: config 0 descriptor?? [ 2305.320705][ T140] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2305.323949][ T140] dvb-usb: bulk message failed: -22 (2/0) [ 2305.330109][ T140] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2305.334667][ T140] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2305.338220][ T140] usb 12-1: media controller created [ 2305.346572][ T140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2305.411893][ T8024] netlink: 'syz.3.8470': attribute type 16 has an invalid length. [ 2305.415169][ T8024] netlink: 'syz.3.8470': attribute type 17 has an invalid length. [ 2305.464854][ T8026] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8471'. [ 2305.533480][ T8018] cxusb: i2c wr: len=79 is too big! [ 2305.533480][ T8018] [ 2305.537515][ T140] cxusb: set interface failed [ 2305.539628][ T140] dvb-usb: bulk message failed: -22 (1/0) [ 2305.566098][ T140] DVB: Unable to find symbol mt352_attach() [ 2305.568583][ T140] dvb-usb: bulk message failed: -22 (5/0) [ 2305.571872][ T140] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2305.574777][ T140] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2305.620043][ T140] rc_core: IR keymap rc-dvico-mce not found [ 2305.622328][ T140] Registered IR keymap rc-empty [ 2305.624687][ T140] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 2305.629042][ T140] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input316 [ 2305.638553][ T140] dvb-usb: schedule remote query interval to 100 msecs. [ 2305.642273][ T140] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2305.647217][ T140] usb 12-1: USB disconnect, device number 7 [ 2305.651710][ T8035] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.8474'. [ 2305.677456][ T140] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2305.694768][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2305.699745][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 2305.713281][ T8024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2306.133312][ T8052] FAULT_INJECTION: forcing a failure. [ 2306.133312][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.137383][ T8052] CPU: 3 UID: 0 PID: 8052 Comm: syz.7.8481 Tainted: G L syzkaller #0 PREEMPT(full) [ 2306.137402][ T8052] Tainted: [L]=SOFTLOCKUP [ 2306.137406][ T8052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2306.137413][ T8052] Call Trace: [ 2306.137417][ T8052] [ 2306.137422][ T8052] dump_stack_lvl+0x16c/0x1f0 [ 2306.137442][ T8052] should_fail_ex+0x512/0x640 [ 2306.137455][ T8052] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2306.137470][ T8052] should_failslab+0xc2/0x120 [ 2306.137488][ T8052] kmem_cache_alloc_noprof+0x83/0x770 [ 2306.137501][ T8052] ? skb_clone+0x190/0x3f0 [ 2306.137518][ T8052] ? skb_clone+0x190/0x3f0 [ 2306.137531][ T8052] skb_clone+0x190/0x3f0 [ 2306.137545][ T8052] nfnetlink_rcv_batch+0x1cf/0x2350 [ 2306.137562][ T8052] ? stack_trace_save+0x8e/0xc0 [ 2306.137582][ T8052] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 2306.137596][ T8052] ? kasan_save_stack+0x42/0x60 [ 2306.137611][ T8052] ? kasan_save_stack+0x33/0x60 [ 2306.137624][ T8052] ? kasan_save_track+0x14/0x30 [ 2306.137638][ T8052] ? __kasan_slab_alloc+0x89/0x90 [ 2306.137653][ T8052] ? kmem_cache_alloc_node_noprof+0x298/0x800 [ 2306.137666][ T8052] ? kmalloc_reserve+0x18b/0x2c0 [ 2306.137687][ T8052] ? __lock_acquire+0x436/0x2890 [ 2306.137698][ T8052] ? __asan_memset+0x23/0x50 [ 2306.137711][ T8052] ? __nla_validate_parse+0x600/0x2880 [ 2306.137729][ T8052] ? __lock_acquire+0x436/0x2890 [ 2306.137740][ T8052] ? __pfx___nla_validate_parse+0x10/0x10 [ 2306.137757][ T8052] ? apparmor_capable+0x1d7/0x4e0 [ 2306.137771][ T8052] ? __nla_parse+0x40/0x60 [ 2306.137788][ T8052] nfnetlink_rcv+0x3c1/0x430 [ 2306.137804][ T8052] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2306.137820][ T8052] netlink_unicast+0x5aa/0x870 [ 2306.137838][ T8052] ? __pfx_netlink_unicast+0x10/0x10 [ 2306.137859][ T8052] netlink_sendmsg+0x8c8/0xdd0 [ 2306.137877][ T8052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.137895][ T8052] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2306.137915][ T8052] ____sys_sendmsg+0xa5d/0xc30 [ 2306.137934][ T8052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2306.137951][ T8052] ? get_compat_msghdr+0x11a/0x170 [ 2306.137971][ T8052] ___sys_sendmsg+0x134/0x1d0 [ 2306.137986][ T8052] ? __pfx____sys_sendmsg+0x10/0x10 [ 2306.138006][ T8052] ? find_held_lock+0x2b/0x80 [ 2306.138028][ T8052] __sys_sendmsg+0x16d/0x220 [ 2306.138042][ T8052] ? __pfx___sys_sendmsg+0x10/0x10 [ 2306.138061][ T8052] ? do_user_addr_fault+0x843/0x1370 [ 2306.138078][ T8052] __do_fast_syscall_32+0xe8/0x680 [ 2306.138098][ T8052] do_fast_syscall_32+0x32/0x80 [ 2306.138115][ T8052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2306.138129][ T8052] RIP: 0023:0xf701d579 [ 2306.138139][ T8052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2306.138150][ T8052] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2306.138161][ T8052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 2306.138168][ T8052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2306.138175][ T8052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2306.138181][ T8052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2306.138187][ T8052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2306.138201][ T8052] [ 2306.250014][T27450] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2306.384417][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8484'. [ 2306.401560][T27450] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2306.405989][T27450] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2306.411625][T27450] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2306.415032][T27450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.421164][T27450] usb 6-1: config 0 descriptor?? [ 2306.425718][T27450] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2306.428355][T27450] dvb-usb: bulk message failed: -22 (3/0) [ 2306.436068][T27450] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2306.439588][T27450] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2306.442019][T27450] usb 6-1: media controller created [ 2306.444638][T27450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2306.453265][T27450] dvb-usb: bulk message failed: -22 (6/0) [ 2306.457223][T27450] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2306.461108][T27450] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input317 [ 2306.466742][T27450] dvb-usb: schedule remote query interval to 150 msecs. [ 2306.469142][T27450] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2306.623387][T27450] dvb-usb: bulk message failed: -22 (1/0) [ 2306.626890][T27450] dvb-usb: error while querying for an remote control event. [ 2306.639484][ T8043] pim6reg: entered allmulticast mode [ 2306.733441][ T8064] pim6reg: left allmulticast mode [ 2306.782095][ T8043] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 2306.789966][T27450] dvb-usb: bulk message failed: -22 (1/0) [ 2306.794934][T27450] dvb-usb: error while querying for an remote control event. [ 2306.882345][ T140] usb 6-1: USB disconnect, device number 47 [ 2306.896752][ T140] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2307.384716][ T8086] binder: 8083:8086 ioctl 84009422 0 returned -22 [ 2307.515272][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8492'. [ 2308.456695][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8493'. [ 2308.478622][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8493'. [ 2308.487245][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.489903][ T8096] bridge0: port 2(bridge_slave_1) entered listening state [ 2308.492340][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.494809][ T8096] bridge0: port 1(bridge_slave_0) entered listening state [ 2308.510774][ T8096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2308.595577][ T8115] ptrace attach of "/syz-executor exec"[6864] was attempted by " ú“\x0c¬¹H;¤'ýëãSde/È|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡amL5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎöOGËDn›û\x07Âæw™¹m}O²ñq¦ã¬p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQUolLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ ¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б춋¬½†1â[{þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5c [ 2308.596715][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8496'. [ 2309.323237][T27115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2309.328557][T27115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2309.329946][ T8131] ubi: mtd0 is already attached to ubi31 [ 2309.337381][T27115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2309.342251][T27115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2309.345280][T27115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2309.583389][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 2309.664713][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.667155][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.669591][ T8128] bridge_slave_0: entered allmulticast mode [ 2309.672643][ T8128] bridge_slave_0: entered promiscuous mode [ 2309.676893][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.679281][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.682366][ T8128] bridge_slave_1: entered allmulticast mode [ 2309.685332][ T8128] bridge_slave_1: entered promiscuous mode [ 2309.699986][ T1332] usb 50-1: device descriptor read/8, error -110 [ 2309.703106][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2309.707685][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2309.723591][ T8128] team0: Port device team_slave_0 added [ 2309.727024][ T8128] team0: Port device team_slave_1 added [ 2309.740660][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.743040][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2309.751456][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.755869][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.758125][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2309.766667][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2309.812210][ T8128] hsr_slave_0: entered promiscuous mode [ 2309.814666][ T8128] hsr_slave_1: entered promiscuous mode [ 2309.816996][ T8128] debugfs: 'hsr0' already exists in 'hsr' [ 2309.818996][ T8128] Cannot create hsr debugfs directory [ 2310.096338][ T1332] usb usb50-port1: attempt power cycle [ 2310.172352][ T8144] vivid-007: ================= START STATUS ================= [ 2310.177078][ T8144] vivid-007: Generate PTS: true [ 2310.186049][ T8144] vivid-007: Generate SCR: true [ 2310.188360][ T8144] tpg source WxH: 320x240 (Y'CbCr) [ 2310.191229][ T8144] tpg field: 1 [ 2310.192839][ T8144] tpg crop: (0,0)/320x240 [ 2310.194606][ T8144] tpg compose: (0,0)/320x240 [ 2310.196534][ T8144] tpg colorspace: 8 [ 2310.198358][ T8144] tpg transfer function: 0/0 [ 2310.200826][ T8144] tpg Y'CbCr encoding: 0/0 [ 2310.202521][ T8144] tpg quantization: 0/0 [ 2310.206442][ T8144] tpg RGB range: 0/2 [ 2310.207883][ T8144] vivid-007: ================== END STATUS ================== [ 2310.479895][T24684] bond0 (unregistering): Released all slaves [ 2310.585722][ T8150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.670756][ T1332] usb usb50-port1: unable to enumerate USB device [ 2310.709401][ T8150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.806969][ T8150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2310.848988][ T8128] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2310.864118][T24684] hsr_slave_0: left promiscuous mode [ 2310.867482][T24684] hsr_slave_1: left promiscuous mode [ 2311.370037][ T3841] Bluetooth: hci0: command tx timeout [ 2312.037147][ T8128] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2312.216872][ T8150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.226273][ T8128] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2312.231669][ T8128] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2312.318396][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.336430][T24716] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.347071][T24718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.358141][ T4934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.365722][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 2312.378657][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 2312.381410][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2312.398021][ T4934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2312.413370][T24718] bridge0: port 2(bridge_slave_1) entered blocking state [ 2312.415676][T24718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2312.612216][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2312.925534][ T8128] veth0_vlan: entered promiscuous mode [ 2312.948407][ T8128] veth1_vlan: entered promiscuous mode [ 2313.001434][ T8128] veth0_macvtap: entered promiscuous mode [ 2313.009708][ T8128] veth1_macvtap: entered promiscuous mode [ 2313.042290][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2313.051079][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2313.060438][T24684] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.063420][T24684] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.067989][T24684] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.078766][T24684] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2313.174960][T24716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.177651][T24716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.202471][T24716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2313.205278][T24716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.450050][ T3841] Bluetooth: hci0: command tx timeout [ 2313.960218][ T8274] netlink: 'syz.3.8518': attribute type 1 has an invalid length. [ 2313.974383][ T8274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8518'. [ 2314.052794][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8520'. [ 2314.504860][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8524'. [ 2315.459227][ T8341] batman_adv: batadv0: Adding interface: dummy0 [ 2315.461591][ T8341] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2315.471576][ T8341] batman_adv: batadv0: Interface activated: dummy0 [ 2315.482029][ T8341] batadv0: mtu less than device minimum [ 2315.484589][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.488699][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.493951][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.499340][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.504841][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.510344][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.515007][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.518924][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.522852][ T8341] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2315.531058][ T3841] Bluetooth: hci0: command tx timeout [ 2317.008274][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8538'. [ 2317.189866][ T8388] /dev/nullb0: Can't open blockdev [ 2317.610083][ T3841] Bluetooth: hci0: command tx timeout [ 2319.746537][ T2467] block nbd0: Possible stuck request ffff888025e60000: control (read@0,4096B). Runtime 300 seconds [ 2319.821353][ T8450] bond1: (slave dummy0): Releasing active interface [ 2319.827576][ T8450] batman_adv: batadv0: Adding interface: dummy0 [ 2319.830503][ T8450] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2319.841150][ T8450] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2319.932361][ T8460] binder: transaction release 92 bad handle 1, ret = -22 [ 2320.341790][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8561'. [ 2320.374905][ T8477] fuse: Unknown parameter 'racerPid: 0 [ 2320.374905][ T8477] Uid: 0 0 0 0 [ 2320.374905][ T8477] Gid: 0 0 0 0 [ 2320.374905][ T8477] FDSize: 256 [ 2320.374905][ T8477] Groups: 0 10 [ 2320.374905][ T8477] NStgid: 634 [ 2320.374905][ T8477] NSpid: 636 [ 2320.374905][ T8477] NSpgid: 634 [ 2320.374905][ T8477] NSsid: 0 [ 2320.374905][ T8477] Kthread: 0 [ 2320.374905][ T8477] VmPeak: 104012 kB [ 2320.374905][ T8477] VmSize: 104012 kB [ 2320.374905][ T8477] VmLck: 0 kB [ 2320.374905][ T8477] VmPin: 0 kB [ 2320.374905][ T8477] VmHWM: 23560 kB [ 2320.374905][ T8477] VmRSS: 23560 kB [ 2320.374905][ T8477] RssAnon: 220 kB [ 2320.374905][ T8477] RssFile: 23340 kB [ 2320.374905][ T8477] RssShmem: 0 kB [ 2320.374905][ T8477] VmData: 36628 kB [ 2320.374905][ T8477] VmStk: 132 kB [ 2320.374905][ T8477] VmExe: 1708 kB [ 2320.374905][ T8477] VmLib: 12 kB [ 2320.374905][ T8477] VmPTE: 108 kB [ 2320.374905][ T8477] VmSwap: 992 kB [ 2320.374905][ T8477] HugetlbPages: 0 kB [ 2320.374905][ T8477] CoreDumping: 0 [ 2320.374905][ T8477] THP_enabled: 1 [ 2320.374905][ T8477] untag_mask: 0xffffffffffffffff [ 2320.374905][ T8477] Threads: 3 [ 2320.374905][ T8477] SigQ: 0/2406 [ 2320.374905][ T8477] SigPnd: 0000000000000000 [ 2320.374905][ T8477] ShdPnd: 0000000000000000 [ 2320.374905][ T8477] SigBlk: 0000000000000000 [ 2320.374905][ T8477] SigIgn: fffffffefffaba35 [ 2320.374905][ T8477] SigCgt: 0000000100010440 [ 2320.374905][ T8477] CapInh: 0000000000000000 [ 2320.374905][ T8477] CapPrm: 000001ffff77ffff [ 2320.374905][ T8477] CapEff: 000001ffff77ffff [ 2320.374905][ T8477] CapBnd: 000001ffffffffff [ 2320.374905][ T8477] CapAmb: 0000000000000000 [ 2320.374905][ T8477] NoNewPrivs: 0 [ 2320.374905][ T8477] Seccomp: 0 [ 2320.374905][ T8477] Seccomp_filters: 0 [ 2320.374905][ T8477] Speculation_Store_Bypass: thread vulnerable [ 2320.374905][ T8477] SpeculationIndirectBranch: conditional enabled [ 2320.374905][ T8477] Cpus_allowed: ff [ 2320.460757][ T8476] bridge1: left allmulticast mode [ 2322.040653][ T1411] kernel read not supported for file /dsp (pid: 1411 comm: kworker/1:4) [ 2322.465797][ T8515] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8574'. [ 2322.468925][ T8515] net_ratelimit: 10 callbacks suppressed [ 2322.468936][ T8515] netlink: Unknown conntrack attr (0) [ 2322.767056][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8574'. [ 2322.818360][ T8520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2323.281493][ T8530] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8576'. [ 2324.324139][ T8562] netlink: 'syz.3.8581': attribute type 10 has an invalid length. [ 2324.388040][ T8562] team0: Port device wlan1 added [ 2326.468292][ T8621] lo: entered allmulticast mode [ 2326.619896][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 2326.619946][ T40] audit: type=1326 audit(2326.039:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.6.8592" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x0 [ 2327.653908][ T8629] hub 8-0:1.0: USB hub found [ 2327.656528][ T8629] hub 8-0:1.0: 1 port detected [ 2327.665432][ T8641] Invalid logical block size (21760) [ 2327.684261][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8595'. [ 2327.688042][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8595'. [ 2327.700115][ T8629] netlink: 'syz.1.8595': attribute type 12 has an invalid length. [ 2327.719785][ T8629] netlink: 'syz.1.8595': attribute type 4 has an invalid length. [ 2327.723056][ T8629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8595'. [ 2327.731757][ T8629] .`: renamed from bond0 (while UP) [ 2328.287046][T16112] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 2328.345332][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8602'. [ 2328.353517][ T8658] input: syz1 as /devices/virtual/input/input320 [ 2328.446106][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8603'. [ 2328.455732][ T8659] input: syz1 as /devices/virtual/input/input321 [ 2328.502044][T16112] usb 11-1: Using ep0 maxpacket: 16 [ 2328.521486][T16112] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 2328.524172][T16112] usb 11-1: config 0 has no interface number 0 [ 2328.526730][T16112] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2328.532162][T16112] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2328.577326][T16112] usb 11-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2328.580376][T16112] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.583021][T16112] usb 11-1: Product: syz [ 2328.584420][T16112] usb 11-1: Manufacturer: syz [ 2328.585973][T16112] usb 11-1: SerialNumber: syz [ 2328.600451][T16112] usb 11-1: config 0 descriptor?? [ 2328.612807][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8604'. [ 2328.620822][T16112] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2328.637291][ T8656] input: syz1 as /devices/virtual/input/input322 [ 2328.854239][ T3468] usb 11-1: USB disconnect, device number 32 [ 2330.225680][ T40] audit: type=1326 audit(2329.859:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8676 comm="syz.1.8607" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 2331.575812][ T8698] hub 8-0:1.0: USB hub found [ 2331.586056][ T8698] hub 8-0:1.0: 1 port detected [ 2331.710576][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8611'. [ 2331.713276][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8611'. [ 2331.715941][ T8698] netlink: 'syz.6.8611': attribute type 12 has an invalid length. [ 2331.754423][ T8698] netlink: 'syz.6.8611': attribute type 4 has an invalid length. [ 2331.756969][ T8698] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8611'. [ 2331.780134][ T8698] .`: renamed from bond0 (while UP) [ 2331.884189][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8614'. [ 2331.893813][ T8728] input: syz1 as /devices/virtual/input/input323 [ 2334.313948][ T3841] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 2334.515667][ T8776] hub 8-0:1.0: USB hub found [ 2334.518641][ T8776] hub 8-0:1.0: 1 port detected [ 2334.532766][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8624'. [ 2334.536397][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8624'. [ 2334.540396][ T8776] netlink: 'syz.3.8624': attribute type 12 has an invalid length. [ 2334.573326][ T8776] netlink: 'syz.3.8624': attribute type 4 has an invalid length. [ 2334.576945][ T8776] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8624'. [ 2334.588937][ T8778] FAULT_INJECTION: forcing a failure. [ 2334.588937][ T8778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2334.590836][ T8776] .`: renamed from bond0 [ 2334.594136][ T8778] CPU: 2 UID: 0 PID: 8778 Comm: syz.6.8625 Tainted: G L syzkaller #0 PREEMPT(full) [ 2334.594160][ T8778] Tainted: [L]=SOFTLOCKUP [ 2334.594166][ T8778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2334.594176][ T8778] Call Trace: [ 2334.594184][ T8778] [ 2334.594192][ T8778] dump_stack_lvl+0x16c/0x1f0 [ 2334.594220][ T8778] should_fail_ex+0x512/0x640 [ 2334.594241][ T8778] should_fail_alloc_page+0xe7/0x130 [ 2334.594271][ T8778] prepare_alloc_pages+0x401/0x670 [ 2334.594301][ T8778] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 2334.594328][ T8778] ? find_held_lock+0x2b/0x80 [ 2334.594349][ T8778] ? is_bpf_text_address+0x8a/0x1a0 [ 2334.594375][ T8778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2334.594395][ T8778] ? is_bpf_text_address+0x94/0x1a0 [ 2334.594419][ T8778] ? kernel_text_address+0x8d/0x100 [ 2334.594439][ T8778] ? arch_stack_walk+0xa6/0x100 [ 2334.594466][ T8778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2334.594490][ T8778] ? policy_nodemask+0xea/0x4e0 [ 2334.594520][ T8778] alloc_pages_mpol+0x1fb/0x550 [ 2334.594543][ T8778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2334.594570][ T8778] ? find_held_lock+0x2b/0x80 [ 2334.594593][ T8778] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2334.594609][ T8778] shmem_alloc_folio+0x135/0x160 [ 2334.594638][ T8778] shmem_alloc_and_add_folio+0x494/0xc20 [ 2334.594660][ T8778] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2334.594684][ T8778] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 2334.594706][ T8778] shmem_get_folio_gfp+0x67f/0x1610 [ 2334.594731][ T8778] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 2334.594750][ T8778] ? filemap_map_pages+0x12dd/0x1e00 [ 2334.594766][ T8778] ? is_bpf_text_address+0x8a/0x1a0 [ 2334.594791][ T8778] shmem_fault+0x1fe/0xa00 [ 2334.594810][ T8778] ? __pfx_shmem_fault+0x10/0x10 [ 2334.594830][ T8778] ? unwind_get_return_address+0x59/0xa0 [ 2334.594859][ T8778] ? __pfx_filemap_map_pages+0x10/0x10 [ 2334.594887][ T8778] ? __pfx_filemap_map_pages+0x10/0x10 [ 2334.594905][ T8778] __do_fault+0x10d/0x490 [ 2334.594924][ T8778] ? __pfx_filemap_map_pages+0x10/0x10 [ 2334.594940][ T8778] do_fault+0xae4/0x1ad0 [ 2334.594966][ T8778] ? __pfx_filemap_map_pages+0x10/0x10 [ 2334.594989][ T8778] __handle_mm_fault+0x1919/0x2bb0 [ 2334.595010][ T8778] ? __pfx___handle_mm_fault+0x10/0x10 [ 2334.595045][ T8778] ? find_vma+0xbf/0x140 [ 2334.595066][ T8778] ? __pfx_find_vma+0x10/0x10 [ 2334.595089][ T8778] handle_mm_fault+0x3fe/0xad0 [ 2334.595114][ T8778] do_user_addr_fault+0x7a6/0x1370 [ 2334.595139][ T8778] ? rcu_is_watching+0x12/0xc0 [ 2334.595161][ T8778] exc_page_fault+0x64/0xc0 [ 2334.595179][ T8778] asm_exc_page_fault+0x26/0x30 [ 2334.595189][ T8778] RIP: 0010:_copy_from_user+0x93/0xd0 [ 2334.595202][ T8778] Code: e7 13 fd 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 59 cd 7c fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 65 e2 [ 2334.595213][ T8778] RSP: 0018:ffffc9000648fcd8 EFLAGS: 00050246 [ 2334.595223][ T8778] RAX: 0000000000000001 RBX: 0000000080000540 RCX: 0000000000000050 [ 2334.595230][ T8778] RDX: fffff52000c91fb1 RSI: 0000000080000540 RDI: ffffc9000648fd38 [ 2334.595237][ T8778] RBP: 0000000000000050 R08: 0000000000000001 R09: fffff52000c91fb0 [ 2334.595243][ T8778] R10: ffffc9000648fd87 R11: ffff8880289fd4b0 R12: 0000000000000000 [ 2334.595250][ T8778] R13: ffffc9000648fd38 R14: ffffc9000648fd38 R15: ffff888051bda000 [ 2334.595264][ T8778] ? _copy_from_user+0x87/0xd0 [ 2334.595276][ T8778] snd_seq_ioctl+0x1bf/0x430 [ 2334.595294][ T8778] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 2334.595319][ T8778] ? __fget_files+0x20e/0x3c0 [ 2334.595334][ T8778] ? fput+0x70/0xf0 [ 2334.595347][ T8778] snd_seq_ioctl_compat+0xea/0x310 [ 2334.595363][ T8778] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 2334.595380][ T8778] __ia32_compat_sys_ioctl+0x242/0x370 [ 2334.595396][ T8778] __do_fast_syscall_32+0xe8/0x680 [ 2334.595414][ T8778] do_fast_syscall_32+0x32/0x80 [ 2334.595432][ T8778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2334.595445][ T8778] RIP: 0023:0xf7f44579 [ 2334.595454][ T8778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2334.595464][ T8778] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2334.595474][ T8778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505331 [ 2334.595481][ T8778] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.595487][ T8778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.595493][ T8778] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2334.595500][ T8778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.595514][ T8778] [ 2335.142374][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2335.390829][ T8808] netlink: 'syz.6.8632': attribute type 12 has an invalid length. [ 2335.413173][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8628'. [ 2336.570546][T26634] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2336.633563][ T8836] vivid-007: disconnect [ 2336.719906][T26634] usb 6-1: Using ep0 maxpacket: 8 [ 2336.723079][T26634] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2336.725303][T26634] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2336.732935][T26634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.737151][T26634] usb 6-1: config 0 descriptor?? [ 2337.154591][ T8843] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8644'. [ 2337.341756][T26634] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2337.374945][ T8833] vivid-007: reconnect [ 2337.471456][T26634] usb 6-1: USB disconnect, device number 48 [ 2337.628681][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8649'. [ 2337.632309][ T8863] netlink: 'syz.3.8649': attribute type 10 has an invalid length. [ 2337.641092][ T8863] team0: Port device wlan1 removed [ 2337.643530][ T8863] wlan1: mtu less than device minimum [ 2337.645378][ T8863] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 2337.787134][ T8867] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 2337.789996][ T8867] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2337.793595][ T8867] vhci_hcd vhci_hcd.0: Device attached [ 2338.091897][T26634] usb 54-1: SetAddress Request (2) to port 0 [ 2338.099473][T26634] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2338.377376][ T8882] fuse: Unknown parameter ' [ 2338.377376][ T8882] TracerPid: 0 [ 2338.377376][ T8882] Uid: 0 0 0 0 [ 2338.377376][ T8882] Gid: 0 0 0 0 [ 2338.377376][ T8882] FDSize: 256 [ 2338.377376][ T8882] Groups: 0 10 [ 2338.377376][ T8882] NStgid: 1202 [ 2338.377376][ T8882] NSpid: 1204 [ 2338.377376][ T8882] NSpgid: 1202 [ 2338.377376][ T8882] NSsid: 0 [ 2338.377376][ T8882] Kthread: 0 [ 2338.377376][ T8882] VmPeak: 101964 kB [ 2338.377376][ T8882] VmSize: 101964 kB [ 2338.377376][ T8882] VmLck: 0 kB [ 2338.377376][ T8882] VmPin: 0 kB [ 2338.377376][ T8882] VmHWM: 23088 kB [ 2338.377376][ T8882] VmRSS: 23088 kB [ 2338.377376][ T8882] RssAnon: 220 kB [ 2338.377376][ T8882] RssFile: 22868 kB [ 2338.377376][ T8882] RssShmem: 0 kB [ 2338.377376][ T8882] VmData: 36628 kB [ 2338.377376][ T8882] VmStk: 132 kB [ 2338.377376][ T8882] VmExe: 1708 kB [ 2338.377376][ T8882] VmLib: 12 kB [ 2338.377376][ T8882] VmPTE: 108 kB [ 2338.377376][ T8882] VmSwap: 996 kB [ 2338.377376][ T8882] HugetlbPages: 0 kB [ 2338.377376][ T8882] CoreDumping: 0 [ 2338.377376][ T8882] THP_enabled: 1 [ 2338.377376][ T8882] untag_mask: 0xffffffffffffffff [ 2338.377376][ T8882] Threads: 3 [ 2338.377376][ T8882] SigQ: 0/2406 [ 2338.377376][ T8882] SigPnd: 0000000000000000 [ 2338.377376][ T8882] ShdPnd: 0000000000000000 [ 2338.377376][ T8882] SigBlk: 0000000000000000 [ 2338.377376][ T8882] SigIgn: fffffffefffaba35 [ 2338.377376][ T8882] SigCgt: 0000000100010440 [ 2338.377376][ T8882] CapInh: 0000000000000000 [ 2338.377376][ T8882] CapPrm: 000001ffff77ffff [ 2338.377376][ T8882] CapEff: 000001ffff77ffff [ 2338.377376][ T8882] CapBnd: 000001ffffffffff [ 2338.377376][ T8882] CapAmb: 0000000000000000 [ 2338.377376][ T8882] NoNewPrivs: 0 [ 2338.377376][ T8882] Seccomp: 0 [ 2338.377376][ T8882] Seccomp_filters: 0 [ 2338.377376][ T8882] Speculation_Store_Bypass: thread vulnerable [ 2338.377376][ T8882] SpeculationIndirectBranch: conditional enabled [ 2338.446332][ T8868] vhci_hcd: connection reset by peer [ 2338.453952][T24673] vhci_hcd vhci_hcd.8: stop threads [ 2338.456440][T24673] vhci_hcd vhci_hcd.8: release socket [ 2338.459139][T24673] vhci_hcd vhci_hcd.8: disconnect device [ 2338.650179][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 2338.653199][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 2339.208990][ T8902] FAULT_INJECTION: forcing a failure. [ 2339.208990][ T8902] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.218398][ T8902] CPU: 1 UID: 0 PID: 8902 Comm: syz.1.8660 Tainted: G L syzkaller #0 PREEMPT(full) [ 2339.218427][ T8902] Tainted: [L]=SOFTLOCKUP [ 2339.218433][ T8902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2339.218444][ T8902] Call Trace: [ 2339.218450][ T8902] [ 2339.218457][ T8902] dump_stack_lvl+0x16c/0x1f0 [ 2339.218483][ T8902] should_fail_ex+0x512/0x640 [ 2339.218502][ T8902] ? __kmalloc_noprof+0xca/0x910 [ 2339.218524][ T8902] should_failslab+0xc2/0x120 [ 2339.218549][ T8902] __kmalloc_noprof+0xeb/0x910 [ 2339.218569][ T8902] ? sk_prot_alloc+0x1a8/0x2a0 [ 2339.218598][ T8902] ? sk_prot_alloc+0x1a8/0x2a0 [ 2339.218620][ T8902] sk_prot_alloc+0x1a8/0x2a0 [ 2339.218645][ T8902] sk_alloc+0x36/0xe30 [ 2339.218663][ T8902] bpf_prog_test_run_skb+0x4cd/0x31a0 [ 2339.218691][ T8902] ? find_held_lock+0x2b/0x80 [ 2339.218721][ T8902] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2339.218747][ T8902] ? fput+0x70/0xf0 [ 2339.218761][ T8902] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2339.218784][ T8902] __sys_bpf+0x1035/0x4980 [ 2339.218804][ T8902] ? __pfx___sys_bpf+0x10/0x10 [ 2339.218818][ T8902] ? find_held_lock+0x2b/0x80 [ 2339.218840][ T8902] ? find_held_lock+0x2b/0x80 [ 2339.218858][ T8902] ? __mutex_unlock_slowpath+0x161/0x790 [ 2339.218884][ T8902] ? fput+0x70/0xf0 [ 2339.218894][ T8902] ? ksys_write+0x1ac/0x250 [ 2339.218909][ T8902] ? __pfx_ksys_write+0x10/0x10 [ 2339.218927][ T8902] __ia32_sys_bpf+0x76/0xe0 [ 2339.218938][ T8902] ? lockdep_hardirqs_on+0x7c/0x110 [ 2339.218954][ T8902] __do_fast_syscall_32+0xe8/0x680 [ 2339.218973][ T8902] do_fast_syscall_32+0x32/0x80 [ 2339.218990][ T8902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2339.219005][ T8902] RIP: 0023:0xf70dd579 [ 2339.219014][ T8902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2339.219025][ T8902] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2339.219036][ T8902] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000d80 [ 2339.219043][ T8902] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2339.219049][ T8902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.219056][ T8902] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2339.219062][ T8902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.219076][ T8902] [ 2339.338409][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8657'. [ 2339.346903][ T8904] input: syz1 as /devices/virtual/input/input324 [ 2339.399928][T11777] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 2339.560015][T11777] usb 13-1: Using ep0 maxpacket: 16 [ 2339.563216][T11777] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 2339.565892][T11777] usb 13-1: config 0 has no interface number 0 [ 2339.568543][T11777] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2339.577631][T11777] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2339.583349][T11777] usb 13-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2339.587601][T11777] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.590906][T11777] usb 13-1: Product: syz [ 2339.592299][T11777] usb 13-1: Manufacturer: syz [ 2339.593869][T11777] usb 13-1: SerialNumber: syz [ 2339.597075][T11777] usb 13-1: config 0 descriptor?? [ 2339.603725][T11777] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2339.645042][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8663'. [ 2339.650518][ T8913] syz_tun: entered allmulticast mode [ 2339.842212][ T8920] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 2339.857957][T24530] usb 13-1: USB disconnect, device number 2 [ 2339.883102][ T8920] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.8666'. [ 2339.886123][ T8920] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2340.258656][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8668'. [ 2340.267699][ T8933] input: syz1 as /devices/virtual/input/input325 [ 2341.011981][ T8945] tipc: Trying to set illegal importance in message [ 2341.227377][ T8958] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8678'. [ 2341.865863][ T8974] FAULT_INJECTION: forcing a failure. [ 2341.865863][ T8974] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.875139][ T8974] CPU: 3 UID: 0 PID: 8974 Comm: syz.8.8684 Tainted: G L syzkaller #0 PREEMPT(full) [ 2341.875158][ T8974] Tainted: [L]=SOFTLOCKUP [ 2341.875162][ T8974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2341.875170][ T8974] Call Trace: [ 2341.875174][ T8974] [ 2341.875179][ T8974] dump_stack_lvl+0x16c/0x1f0 [ 2341.875200][ T8974] should_fail_ex+0x512/0x640 [ 2341.875213][ T8974] ? fs_reclaim_acquire+0xae/0x150 [ 2341.875234][ T8974] should_failslab+0xc2/0x120 [ 2341.875260][ T8974] __kmalloc_noprof+0xeb/0x910 [ 2341.875279][ T8974] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2341.875309][ T8974] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2341.875331][ T8974] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2341.875357][ T8974] ? tomoyo_profile+0x47/0x60 [ 2341.875385][ T8974] tomoyo_path_number_perm+0x245/0x580 [ 2341.875428][ T8974] ? tomoyo_path_number_perm+0x237/0x580 [ 2341.875452][ T8974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2341.875497][ T8974] ? find_held_lock+0x2b/0x80 [ 2341.875526][ T8974] ? hook_file_ioctl_common+0x144/0x410 [ 2341.875553][ T8974] ? __fget_files+0x20e/0x3c0 [ 2341.875576][ T8974] ? fput+0x70/0xf0 [ 2341.875597][ T8974] security_file_ioctl_compat+0x9b/0x240 [ 2341.875621][ T8974] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2341.875646][ T8974] __do_fast_syscall_32+0xe8/0x680 [ 2341.875677][ T8974] do_fast_syscall_32+0x32/0x80 [ 2341.875703][ T8974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2341.875725][ T8974] RIP: 0023:0xf7fd5579 [ 2341.875739][ T8974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2341.875756][ T8974] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2341.875774][ T8974] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004068aea3 [ 2341.875784][ T8974] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2341.875794][ T8974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2341.875805][ T8974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2341.875815][ T8974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2341.875838][ T8974] [ 2341.875927][ T8974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2342.061766][ T8976] binder: 8975:8976 ioctl 400c620e 80000100 returned -22 [ 2342.160410][ T8984] FAULT_INJECTION: forcing a failure. [ 2342.160410][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.165869][ T8984] CPU: 1 UID: 0 PID: 8984 Comm: syz.6.8688 Tainted: G L syzkaller #0 PREEMPT(full) [ 2342.165898][ T8984] Tainted: [L]=SOFTLOCKUP [ 2342.165905][ T8984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2342.165917][ T8984] Call Trace: [ 2342.165925][ T8984] [ 2342.165933][ T8984] dump_stack_lvl+0x16c/0x1f0 [ 2342.165965][ T8984] should_fail_ex+0x512/0x640 [ 2342.165987][ T8984] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2342.166013][ T8984] should_failslab+0xc2/0x120 [ 2342.166041][ T8984] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2342.166063][ T8984] ? __alloc_skb+0x156/0x410 [ 2342.166089][ T8984] ? __alloc_skb+0x156/0x410 [ 2342.166109][ T8984] __alloc_skb+0x156/0x410 [ 2342.166127][ T8984] ? __alloc_skb+0x35d/0x410 [ 2342.166147][ T8984] ? __pfx___alloc_skb+0x10/0x10 [ 2342.166168][ T8984] ? netlink_autobind.isra.0+0x158/0x370 [ 2342.166202][ T8984] netlink_alloc_large_skb+0x69/0x140 [ 2342.166230][ T8984] netlink_sendmsg+0x698/0xdd0 [ 2342.166260][ T8984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2342.166290][ T8984] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2342.166325][ T8984] ____sys_sendmsg+0xa5d/0xc30 [ 2342.166356][ T8984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2342.166385][ T8984] ? get_compat_msghdr+0x11a/0x170 [ 2342.166416][ T8984] ___sys_sendmsg+0x134/0x1d0 [ 2342.166442][ T8984] ? __pfx____sys_sendmsg+0x10/0x10 [ 2342.166475][ T8984] ? find_held_lock+0x2b/0x80 [ 2342.166514][ T8984] __sys_sendmsg+0x16d/0x220 [ 2342.166537][ T8984] ? __pfx___sys_sendmsg+0x10/0x10 [ 2342.166571][ T8984] ? do_user_addr_fault+0x843/0x1370 [ 2342.166598][ T8984] __do_fast_syscall_32+0xe8/0x680 [ 2342.166629][ T8984] do_fast_syscall_32+0x32/0x80 [ 2342.166657][ T8984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2342.166680][ T8984] RIP: 0023:0xf7f44579 [ 2342.166695][ T8984] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2342.166712][ T8984] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2342.166737][ T8984] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 2342.166749][ T8984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2342.166760][ T8984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2342.166770][ T8984] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2342.166782][ T8984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2342.166807][ T8984] [ 2342.390262][ T8988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8689'. [ 2342.619508][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8693'. [ 2343.221194][T26634] usb 54-1: device descriptor read/8, error -110 [ 2343.700849][T26634] usb usb54-port1: attempt power cycle [ 2344.048325][ T9029] netlink: 'syz.8.8702': attribute type 12 has an invalid length. [ 2344.133235][ T9030] autofs: Unknown parameter 'syzkaller' [ 2344.281623][T26634] usb usb54-port1: unable to enumerate USB device [ 2344.551807][ T9041] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8703'. [ 2345.157202][ T9062] netlink: set zone limit has 4 unknown bytes [ 2345.333908][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8713'. [ 2345.351933][ T840] libceph: connect (1)[c::]:6789 error -101 [ 2345.356849][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 2345.371372][ T9071] ceph: No mds server is up or the cluster is laggy [ 2345.495861][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8715'. [ 2345.598055][ T9088] Bluetooth: MGMT ver 1.23 [ 2345.776734][ T9092] loop6: detected capacity change from 0 to 2560 [ 2345.780618][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8716'. [ 2345.782372][ T9092] buffer_io_error: 40 callbacks suppressed [ 2345.782387][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.797296][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.806977][ T9095] input: syz1 as /devices/virtual/input/input326 [ 2345.817404][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.830673][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.864221][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.868717][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.877974][ T9098] fuse: Unknown parameter 'racerPid: 0 [ 2345.877974][ T9098] Uid: 0 0 0 0 [ 2345.877974][ T9098] Gid: 0 0 0 0 [ 2345.877974][ T9098] FDSize: 256 [ 2345.877974][ T9098] Groups: 0 10 [ 2345.877974][ T9098] NStgid: 215 [ 2345.877974][ T9098] NSpid: 218 [ 2345.877974][ T9098] NSpgid: 215 [ 2345.877974][ T9098] NSsid: 0 [ 2345.877974][ T9098] Kthread: 0 [ 2345.877974][ T9098] VmPeak: 102096 kB [ 2345.877974][ T9098] VmSize: 102096 kB [ 2345.877974][ T9098] VmLck: 0 kB [ 2345.877974][ T9098] VmPin: 0 kB [ 2345.877974][ T9098] VmHWM: 23228 kB [ 2345.877974][ T9098] VmRSS: 23228 kB [ 2345.877974][ T9098] RssAnon: 228 kB [ 2345.877974][ T9098] RssFile: 23000 kB [ 2345.877974][ T9098] RssShmem: 0 kB [ 2345.877974][ T9098] VmData: 36756 kB [ 2345.877974][ T9098] VmStk: 132 kB [ 2345.877974][ T9098] VmExe: 1708 kB [ 2345.877974][ T9098] VmLib: 12 kB [ 2345.877974][ T9098] VmPTE: 108 kB [ 2345.877974][ T9098] VmSwap: 984 kB [ 2345.877974][ T9098] HugetlbPages: 0 kB [ 2345.877974][ T9098] CoreDumping: 0 [ 2345.877974][ T9098] THP_enabled: 1 [ 2345.877974][ T9098] untag_mask: 0xffffffffffffffff [ 2345.877974][ T9098] Threads: 4 [ 2345.877974][ T9098] SigQ: 0/2406 [ 2345.877974][ T9098] SigPnd: 0000000000000000 [ 2345.877974][ T9098] ShdPnd: 0000000000000000 [ 2345.877974][ T9098] SigBlk: 0000000000000000 [ 2345.877974][ T9098] SigIgn: fffffffefffaba35 [ 2345.877974][ T9098] SigCgt: 0000000100010440 [ 2345.877974][ T9098] CapInh: 0000000000000000 [ 2345.877974][ T9098] CapPrm: 000001ffff77ffff [ 2345.877974][ T9098] CapEff: 000001ffff77ffff [ 2345.877974][ T9098] CapBnd: 000001ffffffffff [ 2345.877974][ T9098] CapAmb: 0000000000000000 [ 2345.877974][ T9098] NoNewPrivs: 0 [ 2345.877974][ T9098] Seccomp: 0 [ 2345.877974][ T9098] Seccomp_filters: 0 [ 2345.877974][ T9098] Speculation_Store_Bypass: thread vulnerable [ 2345.877974][ T9098] SpeculationIndirectBranch: conditional enabled [ 2345.877974][ T9098] Cpus_allowed: ff [ 2345.954035][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.974915][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.978200][ T9092] ldm_validate_partition_table(): Disk read failed. [ 2345.981495][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.984524][ T9092] Buffer I/O error on dev loop6, logical block 0, async page read [ 2345.987915][ T9092] Dev loop6: unable to read RDB block 0 [ 2345.990429][ T9092] loop6: unable to read partition table [ 2345.997858][ T9092] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2346.382804][ T9114] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2346.385680][ T9114] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2346.389376][ T9114] vhci_hcd vhci_hcd.0: Device attached [ 2346.508101][ T5352] ldm_validate_partition_table(): Disk read failed. [ 2346.510445][ T5352] Dev loop6: unable to read RDB block 0 [ 2346.512322][ T5352] loop6: unable to read partition table [ 2346.672174][T28397] usb 50-1: SetAddress Request (47) to port 0 [ 2346.675016][T28397] usb 50-1: new SuperSpeed USB device number 47 using vhci_hcd [ 2347.130058][ T840] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2347.289964][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 2347.295924][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2347.298200][ T840] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2347.301505][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.314124][ T840] usb 6-1: config 0 descriptor?? [ 2347.320375][T11777] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2347.480191][T11777] usb 8-1: Using ep0 maxpacket: 8 [ 2347.487771][T11777] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2347.492720][T11777] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2347.497080][T11777] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2347.501456][T11777] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2347.507039][T11777] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2347.511117][T11777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.681104][ T9115] vhci_hcd: connection reset by peer [ 2347.683875][T24718] vhci_hcd vhci_hcd.6: stop threads [ 2347.685765][T24718] vhci_hcd vhci_hcd.6: release socket [ 2347.687684][T24718] vhci_hcd vhci_hcd.6: disconnect device [ 2347.734385][T11777] usb 8-1: GET_CAPABILITIES returned 0 [ 2347.734962][ T1411] IPVS: starting estimator thread 0... [ 2347.737110][T11777] usbtmc 8-1:16.0: can't read capabilities [ 2347.840010][ T9152] IPVS: using max 44 ests per chain, 105600 per kthread [ 2347.855158][ T840] usbhid 6-1:0.0: can't add hid device: -71 [ 2347.857233][ T840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2347.948014][ T840] usb 6-1: USB disconnect, device number 49 [ 2347.950859][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2347.967204][ T9141] usbtmc 8-1:16.0: Unable to send data, error -71 [ 2347.976407][T24530] usb 8-1: USB disconnect, device number 24 [ 2348.431346][T24530] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 2348.672215][ T9171] fuse: Unknown parameter ' [ 2348.672215][ T9171] TracerPid: 0 [ 2348.672215][ T9171] Uid: 0 0 0 0 [ 2348.672215][ T9171] Gid: 0 0 0 0 [ 2348.672215][ T9171] FDSize: 256 [ 2348.672215][ T9171] Groups: 0 10 [ 2348.672215][ T9171] NStgid: 1054 [ 2348.672215][ T9171] NSpid: 1057 [ 2348.672215][ T9171] NSpgid: 1054 [ 2348.672215][ T9171] NSsid: 0 [ 2348.672215][ T9171] Kthread: 0 [ 2348.672215][ T9171] VmPeak: 102096 kB [ 2348.672215][ T9171] VmSize: 102096 kB [ 2348.672215][ T9171] VmLck: 0 kB [ 2348.672215][ T9171] VmPin: 0 kB [ 2348.672215][ T9171] VmHWM: 23220 kB [ 2348.672215][ T9171] VmRSS: 23220 kB [ 2348.672215][ T9171] RssAnon: 220 kB [ 2348.672215][ T9171] RssFile: 23000 kB [ 2348.672215][ T9171] RssShmem: 0 kB [ 2348.672215][ T9171] VmData: 36756 kB [ 2348.672215][ T9171] VmStk: 132 kB [ 2348.672215][ T9171] VmExe: 1708 kB [ 2348.672215][ T9171] VmLib: 12 kB [ 2348.672215][ T9171] VmPTE: 108 kB [ 2348.672215][ T9171] VmSwap: 996 kB [ 2348.672215][ T9171] HugetlbPages: 0 kB [ 2348.672215][ T9171] CoreDumping: 0 [ 2348.672215][ T9171] THP_enabled: 1 [ 2348.672215][ T9171] untag_mask: 0xffffffffffffffff [ 2348.672215][ T9171] Threads: 4 [ 2348.672215][ T9171] SigQ: 0/2406 [ 2348.672215][ T9171] SigPnd: 0000000000000000 [ 2348.672215][ T9171] ShdPnd: 0000000000000000 [ 2348.672215][ T9171] SigBlk: 0000000000000000 [ 2348.672215][ T9171] SigIgn: fffffffefffaba35 [ 2348.672215][ T9171] SigCgt: 0000000100010440 [ 2348.672215][ T9171] CapInh: 0000000000000000 [ 2348.672215][ T9171] CapPrm: 000001ffff77ffff [ 2348.672215][ T9171] CapEff: 000001ffff77ffff [ 2348.672215][ T9171] CapBnd: 000001ffffffffff [ 2348.672215][ T9171] CapAmb: 0000000000000000 [ 2348.672215][ T9171] NoNewPrivs: 0 [ 2348.672215][ T9171] Seccomp: 0 [ 2348.672215][ T9171] Seccomp_filters: 0 [ 2348.672215][ T9171] Speculation_Store_Bypass: thread vulnerable [ 2348.672215][ T9171] SpeculationIndirectBranch: conditional enabled [ 2348.682337][T24530] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2348.757094][T24530] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2348.761114][T24530] usb 13-1: Product: syz [ 2348.763108][T24530] usb 13-1: Manufacturer: syz [ 2348.765847][T24530] usb 13-1: SerialNumber: syz [ 2348.789709][T24530] usb 13-1: config 0 descriptor?? [ 2348.797384][T24530] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2348.800731][T24530] dvb-usb: bulk message failed: -22 (2/0) [ 2348.805376][T24530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2348.808937][T24530] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2348.811826][T24530] usb 13-1: media controller created [ 2348.818900][T24530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2349.029013][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2349.033704][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2349.643157][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8731'. [ 2349.660269][ T9178] input: syz1 as /devices/virtual/input/input327 [ 2350.194882][ T2467] block nbd0: Possible stuck request ffff888025e60000: control (read@0,4096B). Runtime 330 seconds [ 2350.720194][ T9196] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2350.722986][ T9196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2350.726673][ T9196] vhci_hcd vhci_hcd.0: Device attached [ 2350.761427][ T9196] random: crng reseeded on system resumption [ 2350.999924][T26634] usb 44-1: SetAddress Request (62) to port 0 [ 2351.002040][T26634] usb 44-1: new SuperSpeed USB device number 62 using vhci_hcd [ 2351.081346][ T40] audit: type=1326 audit(2350.719:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.089184][ T40] audit: type=1326 audit(2350.719:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.105863][ T40] audit: type=1326 audit(2350.719:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.123188][ T40] audit: type=1326 audit(2350.719:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.126765][T24530] cxusb: set interface failed [ 2351.147531][T24530] dvb-usb: bulk message failed: -22 (1/0) [ 2351.159892][ T40] audit: type=1326 audit(2350.719:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.166917][ T40] audit: type=1326 audit(2350.719:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.203170][T24530] DVB: Unable to find symbol mt352_attach() [ 2351.209899][ T40] audit: type=1326 audit(2350.719:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 2351.218242][ T40] audit: type=1326 audit(2350.719:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.230112][T24530] dvb-usb: bulk message failed: -22 (5/0) [ 2351.232632][T24530] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2351.234960][ T40] audit: type=1326 audit(2350.719:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd598 code=0x7ffc0000 [ 2351.236682][T24530] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2351.248029][ T40] audit: type=1326 audit(2350.719:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.1.8735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 2351.330105][T24530] rc_core: IR keymap rc-dvico-mce not found [ 2351.332750][T24530] Registered IR keymap rc-empty [ 2351.335831][T24530] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 2351.351060][T24530] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input328 [ 2351.375123][T24530] dvb-usb: schedule remote query interval to 100 msecs. [ 2351.377697][T24530] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2351.403169][T24530] usb 13-1: USB disconnect, device number 3 [ 2351.473981][T24530] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2351.535577][ T9211] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8736'. [ 2351.684300][ T9212] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2351.770056][T28397] usb 50-1: device descriptor read/8, error -110 [ 2351.819131][ T9199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2351.838677][ T9197] vhci_hcd: connection reset by peer [ 2351.846265][T24673] vhci_hcd vhci_hcd.3: stop threads [ 2351.848509][T24673] vhci_hcd vhci_hcd.3: release socket [ 2351.850475][T24673] vhci_hcd vhci_hcd.3: disconnect device [ 2352.184930][T28397] usb usb50-port1: attempt power cycle [ 2352.559949][ T9229] FAULT_INJECTION: forcing a failure. [ 2352.559949][ T9229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2352.565603][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.6.8740 Tainted: G L syzkaller #0 PREEMPT(full) [ 2352.565647][ T9229] Tainted: [L]=SOFTLOCKUP [ 2352.565653][ T9229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2352.565663][ T9229] Call Trace: [ 2352.565669][ T9229] [ 2352.565676][ T9229] dump_stack_lvl+0x16c/0x1f0 [ 2352.565703][ T9229] should_fail_ex+0x512/0x640 [ 2352.565730][ T9229] _copy_from_user+0x2e/0xd0 [ 2352.565747][ T9229] get_compat_msghdr+0xa7/0x170 [ 2352.565766][ T9229] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2352.565787][ T9229] ? __lock_acquire+0x436/0x2890 [ 2352.565807][ T9229] ___sys_recvmsg+0x191/0x1a0 [ 2352.565831][ T9229] ? __pfx____sys_recvmsg+0x10/0x10 [ 2352.565857][ T9229] ? find_held_lock+0x2b/0x80 [ 2352.565889][ T9229] ? __pfx___might_resched+0x10/0x10 [ 2352.565918][ T9229] do_recvmmsg+0x55d/0x750 [ 2352.565944][ T9229] ? __pfx_do_recvmmsg+0x10/0x10 [ 2352.565980][ T9229] ? __fget_files+0x20e/0x3c0 [ 2352.566011][ T9229] __sys_recvmmsg+0x21c/0x280 [ 2352.566035][ T9229] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2352.566060][ T9229] ? __pfx_ksys_write+0x10/0x10 [ 2352.566090][ T9229] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 2352.566114][ T9229] ? __do_fast_syscall_32+0x9a/0x680 [ 2352.566141][ T9229] ? lockdep_hardirqs_on+0x7c/0x110 [ 2352.566167][ T9229] __do_fast_syscall_32+0xe8/0x680 [ 2352.566198][ T9229] do_fast_syscall_32+0x32/0x80 [ 2352.566225][ T9229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2352.566247][ T9229] RIP: 0023:0xf7f44579 [ 2352.566263][ T9229] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2352.566280][ T9229] RSP: 002b:00000000f53f455c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 2352.566299][ T9229] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000b40 [ 2352.566310][ T9229] RDX: 00000000000005df RSI: 0000000000000002 RDI: 0000000000000000 [ 2352.566322][ T9229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2352.566332][ T9229] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2352.566343][ T9229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2352.566367][ T9229] [ 2352.760871][T28397] usb usb50-port1: unable to enumerate USB device [ 2352.780324][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8742'. [ 2352.789391][ T9231] input: syz1 as /devices/virtual/input/input329 [ 2352.982244][ T9234] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2353.019169][ T9234] mkiss: ax0: crc mode is auto. [ 2353.062399][ T9234] ref_ctr_offset mismatch. inode: 0x17e offset: 0x0 ref_ctr_offset(old): 0x2020202020302020 ref_ctr_offset(new): 0x2020202020203020 [ 2353.456321][ T9241] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2354.297651][ T9256] syzkaller0: entered promiscuous mode [ 2354.300236][ T9256] syzkaller0: entered allmulticast mode [ 2354.415592][ T9261] netlink: set zone limit has 4 unknown bytes [ 2354.677878][ T1411] IPVS: starting estimator thread 0... [ 2354.780107][ T9272] IPVS: using max 44 ests per chain, 105600 per kthread [ 2355.218403][ T9288] fuse: Unknown parameter ' [ 2355.218403][ T9288] TracerPid: 0 [ 2355.218403][ T9288] Uid: 0 0 0 0 [ 2355.218403][ T9288] Gid: 0 0 0 0 [ 2355.218403][ T9288] FDSize: 256 [ 2355.218403][ T9288] Groups: 0 10 [ 2355.218403][ T9288] NStgid: 1266 [ 2355.218403][ T9288] NSpid: 1269 [ 2355.218403][ T9288] NSpgid: 1266 [ 2355.218403][ T9288] NSsid: 0 [ 2355.218403][ T9288] Kthread: 0 [ 2355.218403][ T9288] VmPeak: 102096 kB [ 2355.218403][ T9288] VmSize: 102096 kB [ 2355.218403][ T9288] VmLck: 0 kB [ 2355.218403][ T9288] VmPin: 0 kB [ 2355.218403][ T9288] VmHWM: 23232 kB [ 2355.218403][ T9288] VmRSS: 23232 kB [ 2355.218403][ T9288] RssAnon: 232 kB [ 2355.218403][ T9288] RssFile: 23000 kB [ 2355.218403][ T9288] RssShmem: 0 kB [ 2355.218403][ T9288] VmData: 36756 kB [ 2355.218403][ T9288] VmStk: 132 kB [ 2355.218403][ T9288] VmExe: 1708 kB [ 2355.218403][ T9288] VmLib: 12 kB [ 2355.218403][ T9288] VmPTE: 108 kB [ 2355.218403][ T9288] VmSwap: 988 kB [ 2355.218403][ T9288] HugetlbPages: 0 kB [ 2355.218403][ T9288] CoreDumping: 0 [ 2355.218403][ T9288] THP_enabled: 1 [ 2355.218403][ T9288] untag_mask: 0xffffffffffffffff [ 2355.218403][ T9288] Threads: 4 [ 2355.218403][ T9288] SigQ: 1/2406 [ 2355.218403][ T9288] SigPnd: 0000000000000000 [ 2355.218403][ T9288] ShdPnd: 0000000000000000 [ 2355.218403][ T9288] SigBlk: 0000000000000000 [ 2355.218403][ T9288] SigIgn: fffffffefffaba35 [ 2355.218403][ T9288] SigCgt: 0000000100010440 [ 2355.218403][ T9288] CapInh: 0000000000000000 [ 2355.218403][ T9288] CapPrm: 000001ffff77ffff [ 2355.218403][ T9288] CapEff: 000001ffff77ffff [ 2355.218403][ T9288] CapBnd: 000001ffffffffff [ 2355.218403][ T9288] CapAmb: 0000000000000000 [ 2355.218403][ T9288] NoNewPrivs: 0 [ 2355.218403][ T9288] Seccomp: 0 [ 2355.218403][ T9288] Seccomp_filters: 0 [ 2355.218403][ T9288] Speculation_Store_Bypass: thread vulnerable [ 2355.218403][ T9288] SpeculationIndirectBranch: conditional enabled [ 2355.631969][ T9303] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8759'. [ 2356.089950][T26634] usb 44-1: device descriptor read/8, error -110 [ 2356.326089][ T1411] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2356.436952][ T9317] mkiss: ax0: crc mode is auto. [ 2356.518793][ T1411] usb 6-1: config 0 has no interfaces? [ 2356.521488][ T1411] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2356.524902][ T1411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.581154][T28397] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 2356.597469][ T1411] usb 6-1: config 0 descriptor?? [ 2356.699379][T26634] usb usb44-port1: attempt power cycle [ 2356.731898][T28397] usb 11-1: Using ep0 maxpacket: 8 [ 2356.735922][T28397] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2356.741397][T28397] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2356.745800][T28397] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2356.750384][T28397] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2356.756080][T28397] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2356.760294][T28397] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.973071][T28397] usb 11-1: GET_CAPABILITIES returned 0 [ 2356.975522][T28397] usbtmc 11-1:16.0: can't read capabilities [ 2357.183126][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2357.188256][ T9314] usbtmc 11-1:16.0: Unable to send data, error -71 [ 2357.191727][T28397] usb 11-1: USB disconnect, device number 33 [ 2357.777432][ T9336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2357.891409][T26634] usb usb44-port1: unable to enumerate USB device [ 2357.935154][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8771'. [ 2358.386049][ T9345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8772'. [ 2359.040673][T11777] usb 6-1: USB disconnect, device number 50 [ 2360.172798][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8774'. [ 2360.610758][ T9357] 8021q: adding VLAN 0 to HW filter on device .` [ 2360.629437][ T9357] tipc: Resetting bearer [ 2360.632653][ T9357] tipc: Resetting bearer [ 2360.656143][ T9357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2360.896927][ T9373] macvlan2: entered promiscuous mode [ 2360.898723][ T9373] macvlan2: entered allmulticast mode [ 2360.904720][ T9374] macvlan3: entered promiscuous mode [ 2360.906575][ T9374] macvlan3: entered allmulticast mode [ 2361.469442][ T9387] 0xfffffffffffffffd-0x000000020000 : "" [ 2361.471580][ T9387] mtd: partition "" is out of reach -- disabled [ 2361.473678][ T9387] FAULT_INJECTION: forcing a failure. [ 2361.473678][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.477758][ T9387] CPU: 2 UID: 0 PID: 9387 Comm: syz.3.8781 Tainted: G L syzkaller #0 PREEMPT(full) [ 2361.477775][ T9387] Tainted: [L]=SOFTLOCKUP [ 2361.477780][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2361.477787][ T9387] Call Trace: [ 2361.477791][ T9387] [ 2361.477797][ T9387] dump_stack_lvl+0x16c/0x1f0 [ 2361.477817][ T9387] should_fail_ex+0x512/0x640 [ 2361.477830][ T9387] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2361.477845][ T9387] should_failslab+0xc2/0x120 [ 2361.477862][ T9387] __kmalloc_cache_noprof+0x80/0x800 [ 2361.477875][ T9387] ? device_add+0xcf2/0x1980 [ 2361.477891][ T9387] ? __pfx___debug_object_init+0x10/0x10 [ 2361.477910][ T9387] ? device_add+0xcf2/0x1980 [ 2361.477925][ T9387] device_add+0xcf2/0x1980 [ 2361.477940][ T9387] ? lockdep_init_map_type+0x5c/0x270 [ 2361.477953][ T9387] ? __pfx_device_add+0x10/0x10 [ 2361.477967][ T9387] ? lockdep_init_map_type+0x5c/0x270 [ 2361.477978][ T9387] ? __init_waitqueue_head+0xca/0x150 [ 2361.477996][ T9387] add_mtd_device+0x999/0x1830 [ 2361.478017][ T9387] ? __pfx_add_mtd_device+0x10/0x10 [ 2361.478037][ T9387] mtd_add_partition+0x30c/0x670 [ 2361.478050][ T9387] ? __pfx_mtd_add_partition+0x10/0x10 [ 2361.478060][ T9387] ? __might_fault+0xe3/0x190 [ 2361.478073][ T9387] ? __might_fault+0xe3/0x190 [ 2361.478091][ T9387] mtdchar_blkpg_ioctl+0x20b/0x250 [ 2361.478103][ T9387] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 2361.478127][ T9387] mtdchar_compat_ioctl+0x2e7/0x450 [ 2361.478140][ T9387] ? find_held_lock+0x2b/0x80 [ 2361.478154][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.478170][ T9387] ? fput+0x70/0xf0 [ 2361.478183][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.478197][ T9387] __ia32_compat_sys_ioctl+0x242/0x370 [ 2361.478212][ T9387] __do_fast_syscall_32+0xe8/0x680 [ 2361.478232][ T9387] do_fast_syscall_32+0x32/0x80 [ 2361.478249][ T9387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2361.478263][ T9387] RIP: 0023:0xf709d579 [ 2361.478273][ T9387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2361.478290][ T9387] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2361.478305][ T9387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 2361.478315][ T9387] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.478325][ T9387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.478334][ T9387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2361.478343][ T9387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.478357][ T9387] [ 2361.478668][ T9387] ------------[ cut here ]------------ [ 2361.575008][ T9387] WARNING: drivers/mtd/mtdpart.c:37 at release_mtd_partition+0x71/0x90, CPU#2: syz.3.8781/9387 [ 2361.578527][ T9387] Modules linked in: [ 2361.582030][ T9387] CPU: 2 UID: 0 PID: 9387 Comm: syz.3.8781 Tainted: G L syzkaller #0 PREEMPT(full) [ 2361.585612][ T9387] Tainted: [L]=SOFTLOCKUP [ 2361.587038][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2361.591239][ T9387] RIP: 0010:release_mtd_partition+0x71/0x90 [ 2361.593232][ T9387] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 af fe d3 fb 48 89 df 5b 5d e9 a5 fe d3 fb e8 00 df 76 fb 90 <0f> 0b 90 eb c2 e8 c5 bc df fb eb db 48 89 ef e8 bb bc df fb eb a5 [ 2361.599496][ T9387] RSP: 0018:ffffc900065bf9c8 EFLAGS: 00010293 [ 2361.601826][ T9387] RAX: 0000000000000000 RBX: ffff88802b150000 RCX: ffffffff8b70804d [ 2361.604710][ T9387] RDX: ffff888000fea4c0 RSI: ffffffff86478bf0 RDI: ffff88802b150000 [ 2361.607329][ T9387] RBP: ffff88802b150650 R08: 0000000000000001 R09: 0000000000000001 [ 2361.610102][ T9387] R10: 0000000000000002 R11: ffff888000feaff0 R12: 0000000000000000 [ 2361.612723][ T9387] R13: dffffc0000000000 R14: ffff888023dcf6c0 R15: 0000000000000000 [ 2361.615328][ T9387] FS: 0000000000000000(0000) GS:ffff8880978fc000(0063) knlGS:00000000f548db40 [ 2361.618256][ T9387] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2361.620578][ T9387] CR2: 00000000f548cfac CR3: 0000000050766000 CR4: 0000000000352ef0 [ 2361.623211][ T9387] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2361.625839][ T9387] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2361.628464][ T9387] Call Trace: [ 2361.629604][ T9387] [ 2361.630688][ T9387] mtd_release+0xa0/0xd0 [ 2361.632117][ T9387] ? __pfx_mtd_release+0x10/0x10 [ 2361.633789][ T9387] device_release+0xa4/0x240 [ 2361.635352][ T9387] kobject_put+0x1ef/0x6f0 [ 2361.637132][ T9387] put_device+0x1f/0x30 [ 2361.638532][ T9387] add_mtd_device+0xc47/0x1830 [ 2361.640218][ T9387] ? __pfx_add_mtd_device+0x10/0x10 [ 2361.641993][ T9387] mtd_add_partition+0x30c/0x670 [ 2361.643734][ T9387] ? __pfx_mtd_add_partition+0x10/0x10 [ 2361.645565][ T9387] ? __might_fault+0xe3/0x190 [ 2361.647134][ T9387] ? __might_fault+0xe3/0x190 [ 2361.648723][ T9387] mtdchar_blkpg_ioctl+0x20b/0x250 [ 2361.650513][ T9387] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 2361.652542][ T9387] mtdchar_compat_ioctl+0x2e7/0x450 [ 2361.654305][ T9387] ? find_held_lock+0x2b/0x80 [ 2361.655897][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.657803][ T9387] ? fput+0x70/0xf0 [ 2361.659094][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.661091][ T9387] __ia32_compat_sys_ioctl+0x242/0x370 [ 2361.663016][ T9387] __do_fast_syscall_32+0xe8/0x680 [ 2361.664762][ T9387] do_fast_syscall_32+0x32/0x80 [ 2361.666406][ T9387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2361.668528][ T9387] RIP: 0023:0xf709d579 [ 2361.669970][ T9387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2361.676291][ T9387] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2361.679631][ T9387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 2361.682316][ T9387] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.684921][ T9387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.687509][ T9387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2361.690241][ T9387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.692983][ T9387] [ 2361.694279][ T9387] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2361.697276][ T9387] CPU: 2 UID: 0 PID: 9387 Comm: syz.3.8781 Tainted: G L syzkaller #0 PREEMPT(full) [ 2361.701709][ T9387] Tainted: [L]=SOFTLOCKUP [ 2361.703490][ T9387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2361.707895][ T9387] Call Trace: [ 2361.709301][ T9387] [ 2361.710530][ T9387] dump_stack_lvl+0x3d/0x1f0 [ 2361.712355][ T9387] vpanic+0x640/0x6f0 [ 2361.713694][ T9387] ? release_mtd_partition+0x71/0x90 [ 2361.715445][ T9387] panic+0xca/0xd0 [ 2361.716755][ T9387] ? __pfx_panic+0x10/0x10 [ 2361.718431][ T9387] ? check_panic_on_warn+0x1f/0xb0 [ 2361.720621][ T9387] check_panic_on_warn+0xab/0xb0 [ 2361.722301][ T9387] __warn+0x108/0x3c0 [ 2361.723668][ T9387] __report_bug+0x2a0/0x520 [ 2361.725238][ T9387] ? release_mtd_partition+0x71/0x90 [ 2361.726995][ T9387] ? __pfx___report_bug+0x10/0x10 [ 2361.728694][ T9387] ? dump_stack_lvl+0x185/0x1f0 [ 2361.730316][ T9387] ? delete_node+0x207/0x8d0 [ 2361.731855][ T9387] ? lockdep_hardirqs_on+0x7c/0x110 [ 2361.733594][ T9387] ? release_mtd_partition+0x71/0x90 [ 2361.735593][ T9387] report_bug+0xb2/0x220 [ 2361.737059][ T9387] ? release_mtd_partition+0x71/0x90 [ 2361.738816][ T9387] handle_bug+0x127/0x260 [ 2361.740273][ T9387] exc_invalid_op+0x17/0x50 [ 2361.741802][ T9387] asm_exc_invalid_op+0x1a/0x20 [ 2361.743516][ T9387] RIP: 0010:release_mtd_partition+0x71/0x90 [ 2361.745583][ T9387] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 af fe d3 fb 48 89 df 5b 5d e9 a5 fe d3 fb e8 00 df 76 fb 90 <0f> 0b 90 eb c2 e8 c5 bc df fb eb db 48 89 ef e8 bb bc df fb eb a5 [ 2361.751852][ T9387] RSP: 0018:ffffc900065bf9c8 EFLAGS: 00010293 [ 2361.753969][ T9387] RAX: 0000000000000000 RBX: ffff88802b150000 RCX: ffffffff8b70804d [ 2361.756589][ T9387] RDX: ffff888000fea4c0 RSI: ffffffff86478bf0 RDI: ffff88802b150000 [ 2361.759115][ T9387] RBP: ffff88802b150650 R08: 0000000000000001 R09: 0000000000000001 [ 2361.761721][ T9387] R10: 0000000000000002 R11: ffff888000feaff0 R12: 0000000000000000 [ 2361.764316][ T9387] R13: dffffc0000000000 R14: ffff888023dcf6c0 R15: 0000000000000000 [ 2361.766921][ T9387] ? delete_node+0x40d/0x8d0 [ 2361.768469][ T9387] ? release_mtd_partition+0x70/0x90 [ 2361.770206][ T9387] ? release_mtd_partition+0x70/0x90 [ 2361.771948][ T9387] mtd_release+0xa0/0xd0 [ 2361.773376][ T9387] ? __pfx_mtd_release+0x10/0x10 [ 2361.775007][ T9387] device_release+0xa4/0x240 [ 2361.776577][ T9387] kobject_put+0x1ef/0x6f0 [ 2361.778062][ T9387] put_device+0x1f/0x30 [ 2361.779449][ T9387] add_mtd_device+0xc47/0x1830 [ 2361.781157][ T9387] ? __pfx_add_mtd_device+0x10/0x10 [ 2361.783061][ T9387] mtd_add_partition+0x30c/0x670 [ 2361.784715][ T9387] ? __pfx_mtd_add_partition+0x10/0x10 [ 2361.786513][ T9387] ? __might_fault+0xe3/0x190 [ 2361.788073][ T9387] ? __might_fault+0xe3/0x190 [ 2361.789653][ T9387] mtdchar_blkpg_ioctl+0x20b/0x250 [ 2361.791355][ T9387] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 2361.793251][ T9387] mtdchar_compat_ioctl+0x2e7/0x450 [ 2361.794969][ T9387] ? find_held_lock+0x2b/0x80 [ 2361.796540][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.798417][ T9387] ? fput+0x70/0xf0 [ 2361.799703][ T9387] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 2361.801594][ T9387] __ia32_compat_sys_ioctl+0x242/0x370 [ 2361.803431][ T9387] __do_fast_syscall_32+0xe8/0x680 [ 2361.805143][ T9387] do_fast_syscall_32+0x32/0x80 [ 2361.806775][ T9387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2361.808869][ T9387] RIP: 0023:0xf709d579 [ 2361.810257][ T9387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2361.816558][ T9387] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2361.819286][ T9387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 2361.821871][ T9387] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2361.824460][ T9387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2361.826893][ T9387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2361.829396][ T9387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2361.831991][ T9387] [ 2361.833792][ T9387] Kernel Offset: disabled [ 2361.835167][ T9387] Rebooting in 86400 seconds..