last executing test programs: 22m2.857913285s ago: executing program 0 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x40000003}, 0x18) syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 22m2.857557016s ago: executing program 0 (id=1111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffd) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000001d01000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 21m58.924904591s ago: executing program 1 (id=1114): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x88000cc, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x2800) ioctl$EVIOCSFF(r3, 0x402c4580, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = open(0x0, 0x101040, 0x0) memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) r5 = userfaultfd(0x208f6369c927ba8b) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe3000/0x4000)=nil, 0x3000}) fcntl$setlease(r4, 0x400, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x0, 0x43, 0x0, &(0x7f0000000680)=""/67, 0xf, 0x0, 0x45, 0xbe, &(0x7f0000000700)="8c5634419a2cb810cc9371e85f628504a32ed64d6bd2381132bb35a79eb44ed5b4d80d50b2779a8295e8fb2b514ca41a7cf80abf140c7e9f39ca98e97a4a36eb84cd4bd679", &(0x7f0000000780)="4583bfff33b671a6a77325fc22e6aeb1cb161f0654bcd157e733a6f8739e9d0c445e00d39105dbef421dd2f0a34c3154d687babc0ed3c675c9ae7583dc5182f645e3ebc2ec4a1ef61a401fc196d09ed3b313d4a9ce8ae6531af700a2c11bcf868f9244f622fc2907797714c1f5c5d0b461253ae0efcdadc525231fec73d564bbd94ef3ce29410f89a2d879b6434ae37d5304f6e0b23af242293571b3f53a11a4dd2a8b0d06d73540edad5473b0feb2943b406079f588ac41ab7cd2c07940", 0x0, 0x0, 0x1ff}, 0x4c) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r10}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 21m58.902908596s ago: executing program 0 (id=1116): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000100), 0xfffffd79) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x6) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@empty}, &(0x7f00000000c0)=0x8) io_submit(r2, 0x1, &(0x7f0000002440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, 0x0, 0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x5, 0x32c80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x57) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010007"], 0x38}}, 0x0) 21m58.839693372s ago: executing program 1 (id=1118): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fedbdf25030000000800020008000000050005000200000005000600c600000010000400080000003a250000ffffff7f050005000300000008000300ff00000005000600b7550ae4"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x1c67444063ec2203) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r3, 0x406, r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r6, @ANYBLOB="5e000b00e000000108000200ac8b44762e3450b66c8bbe386f7135885f134b969f978f32c6d8e73e7450"], 0x60}}, 0x40010) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x8000) r8 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102200000", @ANYRES8=r7, @ANYRES16=r1, @ANYBLOB="4158b9c7333e678a1f19b18fa3bd50030c8a58ed8a0f234e5da54ed4ed1f545e64b9aa7602682066789f5d92ffb585ab8d4c2602028c18d40a94b41c62c85691282b88669f58dc7603af3ca9a4333ed79a489f8ea2bed25dad70cee9"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x401, 0x9) accept4$unix(r8, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, &(0x7f0000000040)={0x71, 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) 21m58.150585803s ago: executing program 1 (id=1120): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x82001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'8255\x00', [0x2, 0x9, 0x4f598, 0xc, 0x7, 0x3, 0x800, 0x8001, 0x7, 0x7fff, 0xee, 0x3ff, 0x1, 0x3, 0x0, 0xb, 0xf, 0x7, 0x8, 0x89, 0xe, 0xa7, 0x85fa, 0x4, 0x100, 0x400, 0x800, 0x1, 0x9, 0x55e9, 0x9, 0x61]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, 0x0, 0x0, 0x3c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 21m58.00519294s ago: executing program 1 (id=1121): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) sigaltstack(0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0xffffffffffffffda, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x120ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x0, 0x80, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x42) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) splice(r3, 0x0, r4, 0x0, 0x25a9, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x1, 0xe6d7) 21m57.910707622s ago: executing program 1 (id=1122): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = semget$private(0x0, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) semctl$SETALL(r2, 0x0, 0x11, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x280, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x451, 0x8001008, r4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026090909140006"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r9 = eventfd(0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r11, 0x0) setresuid(0x0, 0x0, r11) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xc2, r9, &(0x7f0000000080)="077afdb5849020db6010dfb900", 0xd, 0x39}]) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724bd7002f8dbdf250d000002"], 0x14}}, 0x4008800) io_destroy(r0) 21m57.770622108s ago: executing program 0 (id=1123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x80002, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) recvfrom(r4, &(0x7f0000000040)=""/38, 0x26, 0x40000102, 0x0, 0x0) writev(r4, &(0x7f0000000280), 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x3b4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x368, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 21m57.478849884s ago: executing program 1 (id=1124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="187cdb0000000000000000000000000018421997", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x1ff}) 21m55.615984708s ago: executing program 0 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000100)={0x2, 0xfc}, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(0x0, 0x0, &(0x7f00000025c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x15) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r7, 0x5f2ba000) 21m51.904844738s ago: executing program 0 (id=1129): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x82001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'8255\x00', [0x2, 0x9, 0x4f598, 0xc, 0x7, 0x3, 0x800, 0x8001, 0x7, 0x7fff, 0xee, 0x3ff, 0x1, 0x3, 0x0, 0xb, 0xf, 0x7, 0x8, 0x89, 0xe, 0xa7, 0x85fa, 0x4, 0x100, 0x400, 0x800, 0x1, 0x9, 0x55e9, 0x9, 0x61]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, 0x0, 0x0, 0x3c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 21m42.467655177s ago: executing program 32 (id=1124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="187cdb0000000000000000000000000018421997", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x31c, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x1ff}) 21m36.544773759s ago: executing program 33 (id=1129): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0xe4e03, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x82001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'8255\x00', [0x2, 0x9, 0x4f598, 0xc, 0x7, 0x3, 0x800, 0x8001, 0x7, 0x7fff, 0xee, 0x3ff, 0x1, 0x3, 0x0, 0xb, 0xf, 0x7, 0x8, 0x89, 0xe, 0xa7, 0x85fa, 0x4, 0x100, 0x400, 0x800, 0x1, 0x9, 0x55e9, 0x9, 0x61]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, 0x0, 0x0, 0x3c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 13m10.014019871s ago: executing program 3 (id=3139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffd) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000001d01000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13m9.099888595s ago: executing program 3 (id=3141): openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x103800, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x2, 0x8]}, &(0x7f0000000080), 0x8) 13m9.003317846s ago: executing program 3 (id=3142): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 13m9.002492711s ago: executing program 3 (id=3143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffeb, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c8}, [@IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 13m7.274718715s ago: executing program 3 (id=3148): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xc, 0x1b, 0x0, &(0x7f00000000c0)="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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 13m7.170435039s ago: executing program 3 (id=3149): socket$nl_netfilter(0x10, 0x3, 0xc) time(&(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400e0ff01ec009a4cfb8500000000a2d382dd2cb33b23f0ce96f8173a2720adb7aac1aae88c"], 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffded, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@initdev, @private}, &(0x7f0000000140)=0xc) r4 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="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"]) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400a800}, 0x4000001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) openat$cgroup_int(r8, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) 12m52.082343201s ago: executing program 34 (id=3149): socket$nl_netfilter(0x10, 0x3, 0xc) time(&(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400e0ff01ec009a4cfb8500000000a2d382dd2cb33b23f0ce96f8173a2720adb7aac1aae88c"], 0x14}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffded, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESOCT], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@initdev, @private}, &(0x7f0000000140)=0xc) r4 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="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"]) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400a800}, 0x4000001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) openat$cgroup_int(r8, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) 6m14.36052907s ago: executing program 4 (id=4637): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x0, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 6m14.240139736s ago: executing program 4 (id=4638): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1ff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r0, 0x8}, &(0x7f00000000c0)=0x8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'hsr0\x00', 0xee11}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/141, &(0x7f0000000240)=0x8d) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r0, @in6={{0xa, 0x4e24, 0x81, @mcast2, 0x2}}}, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x401, 0x2) io_uring_enter(r2, 0x74cf, 0xa876, 0x10, &(0x7f00000003c0)={[0x6, 0xffffffff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000640)={&(0x7f0000000400), 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x17c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000001a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000700)={0x131c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xe3, 0x2a, [@measure_req={0x26, 0xdd, {0x6, 0xf9, 0x0, "a317bd59637367440669c7cc6c76d8536f264d365660a5ac8020083b82079e8a773e1a13444696843ae4683608c518c2983ce8cf975a38649fbe7df7e4fc5382ed78f903f30c1750101b77d071b2286cbf7d844e0b0eeccf5b1f31f3426377986b961f751f0bd4782a27435b394254205d594a2d1bfb247cfcba9c2d31ffab35c713482ce6802319f39baf3576fcb1c45647ed33671579abe4b60e848eac4eff319977418567523a0b4d5f1194f7a48cc0224880e89f2f226e3dd1fb2c4dc5f1649e94d370f5121576e89007268a1af7b611348f28add303653d"}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x9}, {0x24, 0x1}, {0xb, 0x1}, {0x9}, {0x4, 0x1}, {0x16}, {0x5}]}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xe5, 0xfa, "49e9c6ca53ddd3396f48399a547e40037da3dd8f5d9eae459e0e9ad23c0a29413d1484387d12d77e265b4dd2e98dc8ab56cfa3de290f4070817745786d44a0cb711899788299dfbabff8151860e788b93e4834680dd6dba635ec14cd92a56d9b504f57f718ff6017f73879c585a8dacc29838beb72d55fd5ea6a29ce1783cada99ba69c4c8672962481987adcb007548773eeb5fa2f1ca610c4a4f39fb6a8c7ebfbb44e9c30be13ef4874528a6d7731841cd327262b34a79be21c22a27dd8b4e907752940b94e0af62a57583643fc59463b46ecf67162ecff399d43cb19e8675a6"}, @NL80211_ATTR_FILS_ERP_RRK={0xe8, 0xfc, "1e07e0f1ab04a85f6cbd23b134c7516430e277057c2fb59e3f5af471fe193ebc211a2dff64b1311fa0eb6e1ce34fe87391f1d9be1409908e10093f5c9d9fa820aa1dc1d6d4b2e35cfea2ec2c318dceed7b96e4b4b14551d2cf151d9c0f540162af97ceae9cd813f120eb7a541c7f212456f8d90c5a5ef66cc29ea77e3d2d259874e21ebbab28ca0a0d59cd463cf46c814e8ff13b6dd19cf9eae8a154fd9e9a411f536fb834dc045226facbadac2740ff95f9678fa6b99f79a070ba9924a2f61128ba56776a3520e688395ce975e86f41a8513cb32ca9c9f167b3f002a86f1478a1c0ab55"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "e14159931248dae6fbeab779d1e2c3c602c70ba3eef13b1abddce1c0f4b378c1e40bd16249bd9cb461a117bed6544d2bd7bfe2491a4216062d2903b9037c55a51120bb6320e8ba94b8579cab1be8f618c0d1d0dd7fac0728025ee192b472634e6e4daf349ff70f460966599e5923a9ad2fd284e4c4a5c08e97f202fd492a662ed8501d1ae276f4c5f5d6fff43b09b244a7f9535a939e317460d99ffaea657c36dcdcdc6b37837df1f7b5510b4721dd06c34fcceaa7a9ddc325fb9a484fba8b7f7d0cde0bc39698e725797ccfc43e9344304507fabf8e0e80ef8e4159b8e9a422a7fa7e9c4714cf24090fa2bb37d791530274488639e0cb0238d483961bea3fdc757ecfe9620be9796dac0a7b222a6e63c5486abbdc2bcf87b2fc60fff10fcd2368f3926caf3841751527686080b0f76185f0ec1056d003c55b38142fffa386c08e8b095b073c04402e0ab452497bcfe9b0a5016bc6c65e3df8f71d310fd056c67fd7ff9fd0188043daa1e457397a2a215ade32ce3b80e8ba4bb2c6c55c7dd5de748136b5c63baa3cbe4c9141583d9b6547160c3f341076587727f5a0e0a92696948f6de44b6d5c467ef167af0429c219d584fc8689f95951a3db1250ad344d0e93923d48818b5d8f0977ce695d6c569ad47f6e8da3924435bf396a9dbb3e92b0c3516a5ef3999a69dfe6fb03f85f67e250cd93f27f65d07a4cd31ab014051ecd476ef596162a1c39d4d5cd6d7ebc3e3c7a10bfee3cd1c31e5671ff3176eed81a8b054800b444bb76405276016faca9f2c55f05ba2706b0abaa350ef199dc9a6c4af432956193842f6e25297be3f0a52e30a203aa1bb2912e81cf932457e978b02a093913b3a0ad5a28af71ee13d397598d8a7bee910c323e1fbb61d90bb23b0f2c2c407b8cd835495b62709c1aaaa8ad9d56ca50f7dc41d865c10595bdade3ac8503792d27efa42eb013d31188d6c1e667646cec9053955fa460831c216778306785b89c7e983f63b8fd7a6c7457e17de0187601ed411af4820b741794c39a2eebf299510497573a0cbf2da5a76d833aa916abfdfd250dfa427ee1e569759644be2c38ca75fd56c7309edf62d2f20be21d14599d40f4ee42346e1d1d27093cbc48591c8285d5b8e998d240c3700a32086093ff078ec2c5aa0482ab2eea14cf50ed43fc4dcef62bb9bb4df146c92a2f9de1937b6b762d96bd04f1bb446522cc1badff8b66b5052bfedb8c4bb54fc54c3df895c4163f83285f5689af63fde1f6004d1ff72b27d2824866881be28a0314c1ff193c974c8f9d90827091703fa06a3738a7b1d18dfc1d6fe31a134e108c969452876e40f4862d9d26cd44e3e1df9c40be67043d051196700089b8bd964c88d30e9954f41c66538a157ec3d6e9493556fe16cd3d3d987ed941134dcc552f29e245f731ce617bf0ce61015f0e4fcd0418c917faf76a5a6b8cecaa2de50f2b8f6bc8bab3c1c3cf4ffaa342ef8c9620019f755a5cdb299e84f8b903d87b8a7ea4113bb7e7bf15ca0b7823036ffb0203baf559caf1f3a0292ca491ff85a48d52f71f1d80367cb29e71778dd5fd064be7f8770bd62a919693666a92d25f3a01a45f472b6ceec7387924816fdabdc1a427dfd8434095795afafa68b1cc8a1f0fa7d4bc5f53da1f31d77d2d7d7579b4be25705eb531ae9e2bd0be0bb5aceb7560e5cf9bd93c51cd831e2a9e3f773f6a37893dc19d8b9b22e0a1e0564c98bb58b679382acb3955954a374fb62b6262c36fd25bb4004f15e0cd51b0aeec861add8092f7d3adc867c5197e71e49a46a80a7939dcafe5be2559bd05aaa0e23513e7e411b36c7d36038b4a00b910ed70c64f4c875cf6f08157315a023307f81dae63e4789de2b8ec5b491d439306042e1a6c3f25ad8f03d508eb566c04173851a91669853d640c05c8ee18ae246f2372e5ef192396b54c564bac790966a1166c37d0f857ca158c65736a8685d69bd9afef87443e61a7a047ef749df163bc54b09d2ecbd62f3f6b4348243c1fa5ffea5dfa7534def7c1005ca0a8165d91387a6fbb42dfeec251f2309d25ccc18dc3fd71f151972d007c9a64a307d2af1d052a8a2c8f3084c6355662a1dba5080137dffcfbb939ac79864ac3647d67cc7fb63e4644ecc783935bcd3ce661706ae2331f7ef6597eebc9307a5f99f4c137ee54ffae95b99710cd2e3653ff19dfeaa2d16e2718f5c6815271d38174089de170ba99a52d5d9bd55a6b9045767397ad8d4985bbf398ad19cf9bf9852999e19b1cd41951fb709c6807f28734a36a67473b6619975ff8e46d9e077b07fc3348833a10195157f41ba98f5f70ff170e7bc8040ae305f9cdf0faf73f70e8409c080a7d909eb22a7a06e84f9d5f8707043ea86986bfc4ac9f3186cc890a5d36e84d68c437fe700288c72bfe144236d8534787d41e0d78750629d866ce271cc234b8332c20955cacf3f6f7742ce9892cdb80f6318ddfe84bd1b60f5d0a76ebdbfcd6a071b3036a1b0b600d69d9d924e29654e4f9fd2bb7fb031237e2488c7cdb11322f7698df0af3573f4d86a36dcb2c1d13ecd52dcb3e19cd42d4d16bb9d275dfbac040ef692a7fce6effab1dab2916be40ec989c1dfb699c2ff78a5bbaa52543c5485c7acfa099742ba4ec7c63614b4217527fb71ac25c75a97817ecb1ac8d607012e71e9b2c7f430998d91b3e7f93473402932880e0a0a47c77a080e0c7317211afd0fc279269dd468dddaf2bcc315de09b1181bfb91f6a9fb378527268735e7143bfa1d769db15256febd98ed24b4e9671d7e8a9e4601cac5de14a6a8de2515dae28ea8b44486e5df4eef2339b8748b98fcf05cf85e4f032579f1574d9fdc9cce4b3863e7d1617a7e64fc94dbe10171c7c9f5c11fedf50e958cf69357acdf8f3e51d746de6f9daf1d488d4792aa2a7d3bff27309d15b8b843fc9210810d3ffcd31f100b8f8ce4952090a27ce5bad1be8bbf720eb65e4b97be886f5e00fa67e8bc0a3d6e262e83020c2525797a10795ada87b7bf8c6fa175ff4d567dbfd560c7a06a77e65b07bf38676a64e40b0c56d4b13e35645b32146c45c0aad9db3883028a4bd2ccead3d3c79d7e230c5563bc91f9ef856b81b2a16f71528d735546513f8fd702ad3ba29bbd2a6a6ff8715d2dba5adaad8393661bf83c37666e08a0593d2d182f13901d87bc53bbc514a829c5e1a61b80cf08412386855335eda73389053371f6db8faffead981f4fe9c7bdd3c72366a734aea1d479e746f592683a65d80e1b39ecd1387a67be86d119f0dce157fc7042bece2ed23b357a2b0f13b5f5bdbffdf88d0b6c45282f96bb3aa34ec54f6ffbed1e803c98458af138113a95784bc5a6ffb8a077045c6e4c16019c3a5fa6384bece8edd65fa67030bdfd473b339c524405b85ec1e3964e6984233081b6af84f3473bd7e7dbec857e16020b690802d8c024d80c58290457079b5d6b471c91cc141da28374a6c3303329dd6eb9901117b19c8f6518f56bbe4918b3880977c6678b48aec2f30d234e99358ab157642ed8dcb4605b87a6b575ddfb5e673d2399665fa02d2daa554f365bc9d197bf5ae0dea5ee09f596259c646045f2a0cd1192c64b9de27d7649e9d51d4676610d94f8031d742dc260043b7894efe2c71d13dcf57c95c822d2f33045c32d79f825f2bc3a8b28f6f35504b17a149d64b788419eaaa05af0db4a6f7aa210edf8ca8feb838a985fd4fff1b716ba878603f24c173005bb680f96a585a9d964df6dae6bb98e080f82bb588b857cfefd78409761b86f9b7984a2ce178a3782e07a0520607e89bea50ec6c8bc8cfc8d37fafbcced2793c24aceeb2647efe78cc655ac47c32fc89c098233d10686b2f855bc93ede8147a98df7128ef069ef4a904b6d898f8d11830ef61a3b6823b749db38d4087182c256d0e311fa26fe3fc7620b7c686fa3fade5392c8b00f171f2bd69681f35445144d064116fbca70596eee1d39b48f1fca169c8f8c995093374544515c7d38eb7ffd2b0a11793ee684072ef02f893105a40f5249035d5ba9f56fc1ae7d5a3ce1798d7cb5a313826eb9a04bff234a8408d8500918bdaa0c9e80799f20ab5b6ae470efa31dd0e76c47b9e6da019ee4e6814154b3f983938010d3420aa8ed03a8fb3b60e4abe50da2ab6bae729fc9c068d1f685d93f6800f134fb9ce4e1b2d43e5afee75abc38f03610207fdb54935913528ed3ab1f37f623a945e2392c7f1d69779681488e2601a20bd06e3a64303df118466be9e87cfeac2aced5e3d27e75a4f98661b881b499b826eb0e2b3b598a99f1af4f581d64d67cb744af4117e130da38c0bb1f2dbafffb7c4a235d736d6c8d56579066ce37688b202b3d007a56b94b0c8642cb277cbbca23c721d99cfd71f47bd80cc8710fc9f3a93ee2e6e3d6a25b6b9b0909541bdd03b09c5b2b5ec7f94feaef64ec5c54fc75db3400a4aa2a301b9d343c0ae73f940fab3cd14d0686bc34b965a2c7e5f9f6e8affe4234d92e10b62451991e0f7cb1c3b4153075e2476f62d4bfe313731b1b5eeec30df748eb424582bba08a894d1da6e8de1dabc46d5ad3f792a86d580b370ba77bc9f73c94b71b8753e98a2b19a14e7e46db302f0666d90257177a7344afb9f9dbc046bf6ea7587811fe0433155e774fa2fcdc8325847d8d9570b1a4ed3f6188eebf8edaf7275d122dd4fb47d0c8547a2f10159cdb5e63d7c28153436acb6867acd07f27b14beed5ffe487785c28d17a6bbc886e03e6475d909439e562e4de816da259ada56ef3b6d1a8f0d96b36c83271a0ed634c4546564aef9cd1052bf423dc72f1ac521c3e6437f5a503581e6ccf4a221ede5eb950e5b4d1cc9681902747f18123aa83bfa7b4b690acd85e37dc6cb72c3263625f155a33a3e3216dd75ab823d6dff33c8350dc623b98b6879e89188e0f0d1b92704a1dd2c5b848345abc27627d3d571fd83f44e635c53d3f777fc58e56ca96217b395ddc06e30ebe9ab222c151831d33af6214623cc26081e65b25a84d5f0f80d7794efdeb3d6c33079372ec87de8f5864de7b75f02cea9423508207ca1321340b7aece6d8f4333ef372995d683c94ba45d5f9590a0f7a440dd738d5e634b065a3633441e9cd047709529f4f4e8f07e4a8e0cdbe4816ed7f1a0bca8f98deb2383f60a3052ac654b0e8ed0de2b3b7cf94277e07126a1d56d101a83f473ae65e19e07395f49dc3dd6be33e980c4a9d7498aac6d6287ff848524bb4ef68ca1d201b783b80c07f01bca252e11b4f9d100906bdcbb1643df8fefe7187f7134f34a7ec8c6e40404e98edb2fd79be1833b9374cae0e7f5adcadf8dd4305f8f8af84c3135491a4e6ad1bbe3428277d07c32ff9a6d79f8bf6fa165fbf824ec7533733cb8d958421f775afde7bdfd51e32a0964b51c55935ef88758b8adaf0718f984c4ce92b5b7123e2483822a0cbcb4bff07a8d94f93cdd570040dd58d71b8748d9843fb93472d10d37d5329fe07b2f81ca6a257bd1b7532451de363ee59f59c2cd1b58b6135763e70ec042de0a3fa891e73d6da96518d770172961d04621c1ef74f932df7fe408866ad87223968540fc76298a907b5737a7c1620053d5eaa5595b9a15bdf07566b61655a2d31cc2191c178c28f0e2e0d29b1596cf26a8553bb3c015c4e4d1315a0000efe29f395646a05fb86c42bf1a535e651f10b1fccc4e1361118f19c94c25026732e88058af7791c5a0883bb08483593867af61195deaa3a269158bc32d32ed91c84361a3a729d322a704fde72e75d902c367d05f8632d3fbc28bc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x28, 0xfc, "296f42a7e92088afa1655a211695282312ac70d4b97ec3a788af3209f8abcbf35da7aa69"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}]]}, 0x131c}, 0x1, 0x0, 0x0, 0x2}, 0x8000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001b00)={0x3, &(0x7f0000001ac0)=[{0x100, 0x6e, 0x5, 0x18a}, {0x2, 0x7, 0x1, 0x7}, {0x0, 0x4, 0xef}]}, 0x8) capset(&(0x7f0000001b40)={0x19980330, 0xffffffffffffffff}, &(0x7f0000001b80)={0x4, 0x7, 0x0, 0x5, 0x2, 0x172}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000091) socket$isdn_base(0x22, 0x3, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001d00), 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000001d40)=0x4) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x54, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfff}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x400000}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x408c4}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001f00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001ec0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000001f40)={0xf, 0x8, 0xfa00, {r7, 0xd}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001f80)={r0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x3, 0x6, 0x4, 0xaa, 0xfffffffd, 0x4}, 0x9c) io_setup(0x2, &(0x7f0000002040)=0x0) io_getevents(r8, 0xfffffff9, 0x5, &(0x7f0000002080)=[{}, {}, {}, {}, {}], &(0x7f0000002140)={0x0, 0x989680}) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000002180)) 6m13.280132011s ago: executing program 4 (id=4642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r6, 0x0, 0x0, 0x8000, 0x4, 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r7, &(0x7f0000000200), 0x0) creat(0x0, 0x34) 6m12.364356088s ago: executing program 4 (id=4644): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000000900000000000000000000000200000000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0314004f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 6m12.097590522s ago: executing program 4 (id=4648): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x1, 0xe, "91eb096f5d4949060e7de4c9c1658feb81d7cfca01e3344d70c4f21aab9a0347b176587f714eea23c610cb967d382e96d75c1f116bf2ddd2d26f25fc415c74", 0x37}, 0x60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000001000000050000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d4"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) 6m11.6789852s ago: executing program 4 (id=4651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb, 0x4}}, './file0\x00'}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x29) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x80, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000240)=r5, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe0, 0xe0, 0x1c0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000040), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 0x3, 0xd, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x9, 0x6, 0x3, 0x4, 0x5, '\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x206}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0xffffffff, 0x0, 0x7, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x4, 0x7, 0x0, 0x1, 0xa, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x400, 0xe18, 0x800, 0x0, 0x0, "dcbb6428c22f03aefea0d050b7fa38d15e3d750b4c1123af8b8562dd5722d704541487b25d96acb10297d6413f16eb83234de1612fac2638072325d348fd001b"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414) 6m11.539065525s ago: executing program 35 (id=4651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb, 0x4}}, './file0\x00'}) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x29) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x80, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000240)=r5, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe0, 0xe0, 0x1c0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000040), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 0x3, 0xd, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, 0x1, 0x9, 0x6, 0x3, 0x4, 0x5, '\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x206}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0xffffffff, 0x0, 0x7, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x4, 0x7, 0x0, 0x1, 0xa, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x400, 0xe18, 0x800, 0x0, 0x0, "dcbb6428c22f03aefea0d050b7fa38d15e3d750b4c1123af8b8562dd5722d704541487b25d96acb10297d6413f16eb83234de1612fac2638072325d348fd001b"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414) 5m19.59381657s ago: executing program 6 (id=4892): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) (async) tkill(r0, 0x7) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x2}, {0x0, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4010) (rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000140)={'veth0_macvtap\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5m19.593483818s ago: executing program 6 (id=4893): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="09aa2f430390ac3f17793657c4de7de16cb3ecddd400000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@map=r3, 0x26, 0x0, 0x379, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, 0x8) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r7 = dup(r2) r8 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f0000000240)) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) 5m17.743243471s ago: executing program 6 (id=4895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="53b748bf412183542dd1cd69f07c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0xfff4}, @llc={@llc={0xfe, 0xe, "b240", "6350daff8b00acec59537a10ec00ac089ffd9827688a2e75d72bc4561163d7772836def2a4eec9f1246b6658050bcb972b7694660ea14430047ef1736014c551884756c860e36d5b5c1a2a9efab55a3163221396"}}}, 0x66) 5m16.847984621s ago: executing program 6 (id=4904): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r3 = getpid() r4 = getpgrp(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6], 0x4c}}, 0x0) rt_tgsigqueueinfo(r3, r4, 0x3a, &(0x7f0000000100)={0x7, 0x1, 0x9c1b}) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000ce9a6ac7d0479204f82f00c62fb54edafa6ce9e0e47b1abb1cec24b6244c32aa3a190f4e0882af2f36a405bdbf1dff5b6e6fd64bc28fd10091528f141f867748998ffa9b3e2551d3ede0b3ec4879df97f40dcf2865eabca77d6e02455e979a9e3b840632cbfb5d3caee7177c7e6252e43679c6250d5a78046d23f8e194eadfba1f6e75bb3598df8bbfbb51ae7c085df2bb928bc58b9d1d687b7773db7e4691de3cf40620486ca3047c17d98d80eb315cce8f067589d3c8451fb2b2d650e57fa7f9ba04ca5e8a5478f4e703dd264fe4882501fe04a2", @ANYRES16=r8, @ANYBLOB="310029bd7000fedbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$FIBMAP(r9, 0x401070cd, &(0x7f0000000040)=0x3) 5m14.581315118s ago: executing program 6 (id=4911): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x101000, 0x80) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) r1 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}, {&(0x7f0000000100)="6e6f82e5e8bf21ed4e1a02367f8b3cf61b4a16a146dfb1851626bda845094856f52489d817e92e5a8ecce42c451dca7457a66c467e", 0x35}]}, 0x2, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, {}, [0x100, 0x0]}}, @devid}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, {}, [0x100, 0x0]}}, @devid}) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 5m14.101193946s ago: executing program 6 (id=4917): openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x70bd2b, 0x2003, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4a) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$vga_arbiter(r3, 0x0, 0x16) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000340)={0x0, 0x5, 0x1, {0x1, @pix={0x8, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002060500000000000000000007000000050001000700000009000200737957300000000014000780080006000000000008001340000000010500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) write$binfmt_misc(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) io_uring_enter(r2, 0x2e87, 0xe204, 0x8, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x111, 0x4b4, 0x294, 0x700, 0x3c4, 0x278, 0x278, 0x3c4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x22c, 0x294, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@rt={{0x138}, {0x4, [0x400, 0x15a], 0x3, 0x4, 0x4, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, @remote, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}], 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [0xff], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0xbb, 0x10, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10004) socket$netlink(0x10, 0x3, 0x2) 5m14.040786144s ago: executing program 36 (id=4917): openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x70bd2b, 0x2003, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_PORT_SELF={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4a) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$vga_arbiter(r3, 0x0, 0x16) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000340)={0x0, 0x5, 0x1, {0x1, @pix={0x8, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002060500000000000000000007000000050001000700000009000200737957300000000014000780080006000000000008001340000000010500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) write$binfmt_misc(r2, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) io_uring_enter(r2, 0x2e87, 0xe204, 0x8, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x111, 0x4b4, 0x294, 0x700, 0x3c4, 0x278, 0x278, 0x3c4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x22c, 0x294, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@rt={{0x138}, {0x4, [0x400, 0x15a], 0x3, 0x4, 0x4, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, @remote, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}], 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [0xff], 'geneve1\x00', 'erspan0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0xbb, 0x10, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10004) socket$netlink(0x10, 0x3, 0x2) 7.767137786s ago: executing program 2 (id=6501): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) socket$inet6(0xa, 0x1, 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fddbdf250300000008002c000600000008000600", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x2008004}, 0x2048881) (async) sendmmsg$inet6(r0, &(0x7f0000004f80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @remote, 0x5}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000280)="08e352d7fe2f15022f1f64c89d03961c4e1eaea995fe7115d6589517b89a79e2d535566ef0f3bce3c10191b8143bb946c321a7cb4b22b41570117c0188abe2b4fcd08fde79a236c4f331e8f90f4664f83fd8f07435f682cda598a52950ff0f6961793a118dd85ad80faae5", 0x6b}, {&(0x7f0000000300)="9c7f23a40b5e84cceda54fc051abaa193f7e20b99a28220c6921276570f736c3ca8a90fdb370bedee2a9c1c150d83304bf6cfdf75d6e267f88d3265657f049dd217138132a78e99e2f1391d46525390c48ca5e34", 0x54}, {&(0x7f0000000380)="9b8dc40d1729a032e14d700119da35ef8f78c06bea8238842f02a9ebd08c99d8095965cc766aa54b481a32b08c8876b4d48013d41d408a72fe29f81d32932a96312c11578850f534919241e85dedb0e2c6d6067d8eed21ca18279543422fde529bee39d5211d838604e43b6f6a3b4e5f6b3eb22c7a9e6f0d8e139925cb9b0823f0dca76edb37b7b783", 0x89}, {&(0x7f0000000440)="389188ad1caaa9b98df9286d59e5f189beba600608ab859b2a684985edf1af98e5aa1cf9ca9bfcb86185232ed64d0f21b26e30deba47272ce1f5c033dff5e456245cf3d31ddd6bbd3eabbf14b0865a070fbc79b9c81900645ef38acb8a1c9914c2250c20311a61bbdbe7caf315da3c293ac59a475b6a53ef3119bfbf1b49de102d630c52d2d8dab00503d3e89d1ae8bed83cb1033c464401dc2f8fbf37b3c44f9884c5eef0c4e70c034f4a0778ee1f24ba067cab7d", 0xb5}, {&(0x7f0000000500)="76118401abd98a64963533273e5e550442be30ba9667bdbffe7e95e59e879a4df62528c54719a6a3e301dc620c8c0850de8abea5aec159d7bda704eaab07ca8c71256a4d69e17fd3390a3b753ff6b6f40ba88b7038ef1637070f90b7c31ed9c91e55972c0475330f37674f5f781d81dd314220e4fed0c6e4ee549b0fb6ad5cfe4a1a9a5fe81d1130c97db95393d0b738a9e27e6b1694f2b5e603d5960ae1d09ca638ba0578a8c633f783f1703c96be990a884489daf47d134fd3b2e47a0a290ba073001e8f94fee034994a663400ba1441ddc4d8fe", 0xd5}, {&(0x7f0000000600)="aa568619bcf3ff4021fd3a96b228aae57149fb8fe6e5080551b463947ea4b1bcad06aa4577c4eb3e63f3982728e927334e32ef1bda91036a3a9b4a914a7538bf4d4ebeceb4036c6c2de3f012070669d69a336e255d5ff384cf2eaa57c8f00477307dd9e6bb72587fba83d507bfe171e560345bd96abedbe8ccfb98687662ffb26764a16ca1504d3e4501dc1d037ad77324b7f2568ec99c68", 0x98}, {&(0x7f00000000c0)="af5399b9763e15baeb4eb1f3a3fbb4c825c9393f30203db3064e68d9d69db927", 0x20}, {&(0x7f00000006c0)="43dcccd2a1aa2f3b3f9370619a027a69492a466eb0f240b39a5d95cfa513eb693184ed588afa1bc232e901540d327b8a8d63be6bcc7d8077c28b91c4a2d76c9fb6b04f657805ad5c2d9b0a0110a4cee3f08df59e29a3f627b13eebe011ea1d0d2fb9a2eb03c4a9e64a67f8dc80eeb018b873e1ba26dc5fd87fc6252de6ad026512", 0x81}, {&(0x7f0000000780)="7a4b852e803584fa5b66da2986652259a091a68eb4727001cb8e2cf0c441134b37aa6ba160d0b45fede10b8c409cfbf66bcaaaa37e5bce058b4df5df052cebdcdfd84b009452f951fd434101c695e79a8be0caf75590fc75bc7384c03ad5f2ba9c90de2816928edf0567c9fa3d9c771a77c7775702d22db95977e62211fdd824285f0e19f54bfc0706900af2557de70747e1a0e52f4a3bfcd2d2f190a05139d62673111a7cb9b32cfba9881f7969ec3cb703179d9f632b22380c02416e7cb75a7b822adc760da52c238bf47dd0802e08b80bd56595d77d896d2638c098d791ca343384c6c35876a6", 0xe8}], 0x9, &(0x7f0000005000)=ANY=[@ANYBLOB="200000002900000032000000200100000000f1ffffffffffffff00011f33c223bdc00307680eb1ba22259048c499827b0045f4fde5fd4a72f7133b5de6df1b525d3683d833a32e3124c47d7034c41a9cc93c1c1acf1725d503d9abfbe82b3da14c8f94723110ba2e0d203076c8653735662bd9574255d9413056d18ea2ced75e8aa4edf55213a6a1436f71bf4efd95bac75ef648fcbdfaddffbd0844c505011cd825de3832d543ae30cf5262dc7dc4566babee6858800bd3dc70383a1266394359d2e838ddce88bcfee828b3909761ddad2560312fa32f9b3d65ed52aa67c225ff92efb22f03999d8b4bc2e20700df9a", @ANYRES32=r3, @ANYBLOB="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"], 0x1f0}}, {{&(0x7f0000000180)={0xa, 0xfff, 0x3, @mcast2, 0x71c6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000b00)="92d71af799f97e9384e06999646f6e75277313217c9413b500ebd421499bf5391871739bcb37b871be2a65d12c7afe422b48449b0841bc45813b020ab02cc71ffbee3c68ded85bdba4f2863279f5726a0a2a5ff5fb542faed0c78e95c3908da50594aa58c0427a17435eed4c8e2c7e08a62442386404eecbc166169a8e131e044aece8b1b823a6661da3756811d9b3249a3f7522d43ffaad978bc169764492edc21ae337429857a006eb2a4eeb6410c7e5a8f15f2e7206e86f545842ddb36f7dfc56d87334e6efb7bd4ac8af9650a7379420ac15f485ede7500805122fe876e8f9a2936a5f8acb7d872bc5df73ef5363405d2071991b68e3", 0xf8}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="1bfb952ec7115adf06c1edd7bbae1a76d7f7d97aa1ce80e74f6a27404a8cf688fba899ba0c9855a53540c6bd220d7a23803a95f62dd8786a7343765ff9b05665f8782135005085fafcaa633908feb1d89dd7", 0x52}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="7658ecd988f65641603273a8d09201342abb8ac547d5d88984ccc2fac5db65974d504c02bcf6b0cb8f4fb9d8cd198079a7693d934a1bdf7447a799b1540ff6920daa6bf09a", 0x45}], 0x6}}, {{&(0x7f0000003d00)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, &(0x7f0000004ec0)=[{&(0x7f0000003d40)="7f3fcb0770b5e2600a5b8fd633c39276fabf1574fa1312fc9d11fbdb56c65b8a9f89b5e1e1894e0454d33614fed6e45acd71c243b800b08574fcf5fd778476b312655b6871b95bd8440645959cf5bbadd21e4e267bf3ab1cb63947dcce1a20f8d0", 0x61}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="f0d69aac46bccc7be569a259f0c6c4df5c8bd70eb532666725ca258b566b8ef8a4f222ea0ea8b490dd9ae5d4f7cc783f4f35c3a0322652ad2fad29bd8605f452bbf6d0ade0263e200c8d45756097598fd9a77fc4efb5843688715b29926c704e6cd5bc1d72cd9e03cff9400a1bdd220c0e2af1551b90db11fcb8114cfd74e7c2bdccaa1e467e638adc37453e000e7c6f84d37638c36e14650999dd3362b7d9b513a0b005d2683305df5131a9d33e48685c2ac2f2b4671add07bf90a26148f7da6680b4379fa0d5061f", 0xc9}], 0x3, &(0x7f0000004f00)=[@hopopts={{0x6c, 0x29, 0x36, {0x3a, 0xa, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x8, [0x9, 0x5, 0x4]}}, @jumbo={0xc2, 0x4, 0x4b}, @pad1, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x1, [0x5, 0x9, 0x5]}}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x5}}], 0x7c}}], 0x3, 0x20000000) (async) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0xf) r4 = eventfd2(0x0, 0x800) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) (async) write$cgroup_subtree(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="2d6e6a675f7072696f20dd6d656d6f7279202d6d656d6f7279202b6d656d6f7279202d6d656d6f7279202d6e65745f636c73202b726c696d6974202b6e65745f636c73202b63707573657420"], 0x4c) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000009c0)={'erspan0\x00', r3, 0x8, 0x20, 0x0, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000005300)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)=@ipv4_getnetconf={0x44, 0x52, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x200}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40100) 7.466416881s ago: executing program 2 (id=6502): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5801, 0x0, 0x0}], 0x1}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000140)={0x40, 0x18, 0x73, "95b3d7cfec968787818cdf73e299e8119a7c4a63fca44749f49c3dd8e018ac154b40fc3821b71058f6ceb0db681e3ba6cdfa0b2f4cf557a326f109be02daf1bdedf0d80fa83c29a7fac1483676489d2db6c4ce62056137ddce49d28961bb86da7bc9bfdc39c71945410b93905a7a6efd7f89ea"}, 0x0, 0x0, 0x0, 0x0}) 7.416254001s ago: executing program 5 (id=6504): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000001e0c000000000000", @ANYRES32, @ANYBLOB="0700001d35998b81be0000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000240), &(0x7f0000000340)='%ps \x00'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x2f, 0xfd, 0x5, 0xfffffff9, 0x28, @private1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7800, 0x40, 0xe, 0x10000000}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000780)=""/186, 0xba, 0x0, &(0x7f0000000840)=""/81, 0x51}}, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000940), 0x40000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f00000004c0)={0x7a, 0xfffffff8, {0x0}, {}, 0x40, 0x5}) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000500)=r9) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x100f}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xec) fchdir(r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1}, &(0x7f0000000980), &(0x7f00000009c0)='%pK \x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f0000000480)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x1, 0x0, 0x2, 0x4, 0x0, 0x6, 0x1}], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x42, &(0x7f00000005c0)=""/66, 0x41000, 0x6, '\x00', r4, @fallback=0x1a, r5, 0x8, &(0x7f0000000740)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x3, 0xd, 0xb}, {0x2, 0x2, 0xe, 0x4}], 0x10, 0x5}, 0x94) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x40001) 7.356425755s ago: executing program 5 (id=6505): mount$fuse(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$9p_rdma(&(0x7f00000013c0), 0x0, &(0x7f0000000000), 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) 7.354781565s ago: executing program 5 (id=6506): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x4004, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x1f4, 0x30, 0x20, 0x0, 0x0, {}, [{0x1e0, 0x1, [@m_simple={0x11c, 0x4, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x10, 0x6, 0x3, 0x685c}}, @TCA_DEF_DATA={0x11, 0x3, 'sched_switch\x00'}]}, {0xc2, 0x6, "267030103952946e914d7cca57afb0fd36d4814d2b467a168855f5a3e5a3be377793a5c1d50d872fe887616af8031a00fdd72a4446a74ab51b452ca2fe2e21ad28f0366aabe9d373753f71e009d843d72862e824f3336cc95ca8e12ecb0c8af0c2fe22c7411ff98c6b7197638375ea1566274d02175f759cdc4fc31995aca24bcf1d505e401b2ba137903280245068d2732e1d40ac3ec4459adf2ca376769073783f94871dce244c4ff148514633e1406ba90bc4aeed22336a48814be4ed"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xc0, 0x1d, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xcba, 0x9, 0x7, 0x2, 0x8}, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, 0xffffffff}}]}, {0x6d, 0x6, "cc657c7427785ea08e913ff7ceae67584739b8e09bd8459eab0c0cb959386c26b60622fa28c88175c7369a9fe013eb5cff5cb49a52b2ff29d1807bb986e5f84b708cf9f46ce31a1722de3683ef9203fd6866d74e58693c5363bd42adfc33f844f49da0088137aeee52"}, {0xc, 0x7, {0x1, 0x7064629d043aba5e}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f03612c00"]) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) connect$inet6(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 4.645446431s ago: executing program 5 (id=6517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x8, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) unlink(&(0x7f00000002c0)='./file0\x00') timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) 4.428017365s ago: executing program 2 (id=6518): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000200)={0x10, 0x0, [{0x1ff, 0x0, 0x9}, {0x40, 0x0, 0x6}, {0x7ffe, 0x0, 0x2f50}, {0xe, 0x0, 0x9}, {0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xffffffffffffffff}, {0x1b2, 0x0, 0xffffffffff800000}, {0x10401, 0x0, 0x9}, {0x84e, 0x0, 0x9}, {0x4, 0x0, 0x81}, {0x2, 0x0, 0x28}, {0xf, 0x0, 0x6}, {0x10000, 0x0, 0xd}, {0x5, 0x0, 0x77c}, {0x8, 0x0, 0x57}, {0x6, 0x0, 0xa16}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) socket$kcm(0x21, 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 3.556539792s ago: executing program 7 (id=6522): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x3ff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(0x0, 0x2, 0x3, &(0x7f0000000300)=[{}, {}, {}], &(0x7f0000000280)={r7, r8+10000000}) r9 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r9) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x100) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 3.545013024s ago: executing program 2 (id=6523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0x11, 0x0, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001, 0x0, 0x0, 0x8d, &(0x7f0000000000), &(0x7f0000000400)="4d92db18db001d56a4876d6316b254843a6173470bce48dfc1ee8fdbe8ceb949120d970218e58a06a2ebbf21caf50bd4846fb6b99fb7b621f11ff5cf8b3d93d18a474ca26ddf5ec37e4236723e97ae655bf314fe7aa389f7edcdf5f1375383e85ef21fd0a63e6a05a9e18d77321772d3bc9af922dbfe30f54dcacf5a2456ddf081180184f8f780f548a745cb2a", 0x4, 0x0, 0x4}, 0x4c) syz_clone3(&(0x7f0000000340)={0x80084000, 0x0, &(0x7f0000000100), 0x0, {0xa}, &(0x7f0000000540)=""/113, 0x71, &(0x7f0000000200)=""/206, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, {r0}}, 0x58) r1 = syz_usb_connect(0x5, 0x25c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000103afffe8000000000000000000000000600aa0000000000000000000000000000000186009078002d06009909000032590000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="184c5d0000000100001c95000000000000", @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x3c, 0x2, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x968b}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee0, 0x100, 0x2, 0x1f9, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f00000000c0)={0x7, 0x5, 0xadc}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r9, &(0x7f0000000040), 0x8) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.340501932s ago: executing program 7 (id=6525): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) 2.212769852s ago: executing program 7 (id=6526): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5801, 0x0, 0x0}], 0x1}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000140)={0x40, 0x18, 0x73, "95b3d7cfec968787818cdf73e299e8119a7c4a63fca44749f49c3dd8e018ac154b40fc3821b71058f6ceb0db681e3ba6cdfa0b2f4cf557a326f109be02daf1bdedf0d80fa83c29a7fac1483676489d2db6c4ce62056137ddce49d28961bb86da7bc9bfdc39c71945410b93905a7a6efd7f89ea"}, 0x0, 0x0, 0x0, 0x0}) 1.979158937s ago: executing program 5 (id=6527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaae6", &(0x7f0000000b00)="4155eeb476bb994a7adbf9ced4cff73ffcc565c90d1d14d488c98904e0d534423e707c5479b3594e0fdb8e8fe861ad8b0baf8b88a81271f0124bb6b06ccb0ab9b2584e405faac843e88185bad71856917b1d4d97243b2bd4497bee39a561d0189bee83a0347b64dc849e99bf872e3fc58867d649170aaa5e5ee950c69d24b89a90d7ac96e65aacfddedea3512f37", 0x3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x13, &(0x7f0000001bc0), 0x2) 1.637690874s ago: executing program 7 (id=6528): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000200)={0x10, 0x0, [{0x1ff, 0x0, 0x9}, {0x40, 0x0, 0x6}, {0x7ffe, 0x0, 0x2f50}, {0xe, 0x0, 0x9}, {0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xffffffffffffffff}, {0x1b2, 0x0, 0xffffffffff800000}, {0x10401, 0x0, 0x9}, {0x84e, 0x0, 0x9}, {0x4, 0x0, 0x81}, {0x2, 0x0, 0x28}, {0xf, 0x0, 0x6}, {0x10000, 0x0, 0xd}, {0x5, 0x0, 0x77c}, {0x8, 0x0, 0x57}, {0x6, 0x0, 0xa16}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r4 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) socket$kcm(0x21, 0x2, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.598095964s ago: executing program 8 (id=6529): mount$fuse(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000040)='.\x00', 0x0, 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) 1.509299614s ago: executing program 8 (id=6530): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x233, &(0x7f00000005c0)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.508942463s ago: executing program 8 (id=6531): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x0, 0xfffffff8, 0x8, r1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) clock_adjtime(0x4, &(0x7f00000000c0)={0x56c5e951, 0xc000000, 0x1, 0x100, 0x7, 0x0, 0xb, 0x1, 0x4e2558c9, 0xb1, 0x10000, 0x3, 0xa2, 0x1, 0x2, 0x8, 0x7, 0x20000005, 0x8001, 0x400000, 0x5, 0x7fff, 0x3, 0x0, 0x2800000, 0x2}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[{0xc, 0x1, 0x5}], 0xc}}], 0x2, 0x4044044) open(&(0x7f00000001c0)='./file0/file0\x00', 0x4cd81, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="4700000001003f", 0x7) 1.429322461s ago: executing program 8 (id=6532): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="b6ae72d1ca7e0621424aa5e6ff6fd756e83c03c321d2ce27a97c0535e8d8f42cede133a1ecd59f54fcb60de3ef47934faacf6c8802de", 0x36, 0x4004, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 759.590312ms ago: executing program 7 (id=6533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x8, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) 528.92323ms ago: executing program 7 (id=6534): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xc, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0xaf}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f00000001c0)="b6ae72d1ca7e0621424aa5e6ff6fd756e83c03c321d2ce27a97c0535e8d8f42cede133a1ecd59f54fcb60de3ef47934faacf6c8802de", 0x36, 0x4004, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x880, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r6, 0x8b32, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000500"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) 458.67899ms ago: executing program 2 (id=6535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r2, 0x0, 0x8, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) unlink(&(0x7f00000002c0)='./file0\x00') timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) 179.801269ms ago: executing program 2 (id=6536): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a400000", @ANYRES32, @ANYBLOB="14000200000000000000000019e5ffff00000093144d621a39743fab8f0a00"], 0x40}}, 0x4000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 99.157501ms ago: executing program 5 (id=6537): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0x485b]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x1}, 0x3, 0x1c576fbe89bdbd1c, 0x0, 0x0, 0x2, 0xffff, 0x3, 0x200, 0xf6b, 0x0}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20012, r0, 0x7b341000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xbf, &(0x7f0000000600)=""/191, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_io_uring_setup(0x105, &(0x7f0000000540)={0x0, 0x84d9, 0x0, 0x0, 0x2d4}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000005c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x2004, @fd_index=0x4, 0x401, 0x1000000003, 0x1ff, 0x0, 0x1, {0x1}}) io_uring_enter(r10, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 76.907089ms ago: executing program 8 (id=6538): mount$fuse(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000000040)='.\x00', &(0x7f0000000000), 0x800, 0x0) 0s ago: executing program 8 (id=6539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0xfffffffe}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb) r9 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0xa4}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r10, {0x4}}, '.\x00'}) ioctl$CDROM_SELECT_SPEED(r12, 0x5322, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=@base={0x5, 0x1, 0x6c02, 0xffff, 0x100d1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @value=r7}, 0x50) kernel console output (not intermixed with test programs): 10-1: config 0 descriptor?? [ 1505.710236][ T61] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1505.713858][ T61] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1506.315395][ T61] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1506.439589][T31156] overlayfs: failed to clone upperpath [ 1506.725935][ T61] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1506.728755][ T61] em28xx 10-1:0.0: board has no eeprom [ 1506.778743][T31146] em28xx 10-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1506.847415][ T61] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1506.851510][ T61] em28xx 10-1:0.0: dvb set to bulk mode. [ 1506.853887][T15723] em28xx 10-1:0.0: Binding DVB extension [ 1506.862181][ T61] usb 10-1: USB disconnect, device number 34 [ 1506.866597][ T61] em28xx 10-1:0.0: Disconnecting em28xx [ 1506.882780][T15723] em28xx 10-1:0.0: Registering input extension [ 1506.888724][ T61] em28xx 10-1:0.0: Closing input extension [ 1506.904877][ T61] em28xx 10-1:0.0: Freeing device [ 1509.056919][T31201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1509.059175][T31201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1509.146231][T31201] vhci_hcd vhci_hcd.0: Device attached [ 1509.180622][T31201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1509.186669][T31201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5699'. [ 1509.406131][ T61] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 1509.992115][T31202] vhci_hcd: connection closed [ 1510.336655][ T4046] vhci_hcd vhci_hcd.2: stop threads [ 1510.340315][ T4046] vhci_hcd vhci_hcd.2: release socket [ 1510.353400][ T4046] vhci_hcd vhci_hcd.2: disconnect device [ 1511.672704][T31248] siw: device registration error -23 [ 1513.500826][T31277] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1513.502964][T31277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1513.509353][T31277] vhci_hcd vhci_hcd.0: Device attached [ 1513.519857][T31277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5720'. [ 1513.612281][T31282] ubi0: attaching mtd0 [ 1513.617421][T31282] ubi0: scanning is finished [ 1513.711995][T31282] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1513.743936][T31282] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1513.747168][T31282] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1513.750167][T31282] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1513.753751][T31282] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1513.764116][T31282] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1513.777751][T31282] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1513.788461][T31282] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1513.803038][T31284] ubi0: background thread "ubi_bgt0d" started, PID 31284 [ 1513.806078][T31283] ubi0: detaching mtd0 [ 1513.813702][T31283] ubi0: mtd0 is detached [ 1514.132435][T31278] vhci_hcd: connection reset by peer [ 1514.135942][T14400] vhci_hcd vhci_hcd.2: stop threads [ 1514.138184][T14400] vhci_hcd vhci_hcd.2: release socket [ 1514.140365][T14400] vhci_hcd vhci_hcd.2: disconnect device [ 1514.272303][T31292] siw: device registration error -23 [ 1514.353387][T31298] siw: device registration error -23 [ 1514.603516][ T61] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1515.072609][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 1515.072623][ T40] audit: type=1326 audit(1770196858.123:30741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31312 comm="syz.2.5729" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 1515.321028][T31329] netlink: 'syz.5.5731': attribute type 12 has an invalid length. [ 1516.195255][T31340] FAULT_INJECTION: forcing a failure. [ 1516.195255][T31340] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.200556][T31340] CPU: 3 UID: 0 PID: 31340 Comm: syz.5.5734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.200578][T31340] Tainted: [L]=SOFTLOCKUP [ 1516.200583][T31340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1516.200591][T31340] Call Trace: [ 1516.200598][T31340] [ 1516.200603][T31340] dump_stack_lvl+0x16c/0x1f0 [ 1516.200652][T31340] should_fail_ex+0x512/0x640 [ 1516.200676][T31340] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1516.200693][T31340] should_failslab+0xc2/0x120 [ 1516.200713][T31340] kmem_cache_alloc_noprof+0x83/0x770 [ 1516.200728][T31340] ? skb_clone+0x190/0x3f0 [ 1516.200747][T31340] ? skb_clone+0x190/0x3f0 [ 1516.200761][T31340] skb_clone+0x190/0x3f0 [ 1516.200777][T31340] netlink_deliver_tap+0xabd/0xd30 [ 1516.200803][T31340] netlink_unicast+0x71f/0x870 [ 1516.200823][T31340] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.200839][T31340] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1516.200863][T31340] netlink_ack+0x696/0xb80 [ 1516.200885][T31340] netlink_rcv_skb+0x332/0x420 [ 1516.200902][T31340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1516.200921][T31340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.200944][T31340] ? netlink_deliver_tap+0x1ae/0xd30 [ 1516.200963][T31340] netlink_unicast+0x5aa/0x870 [ 1516.200983][T31340] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.200999][T31340] ? __asan_memset+0x23/0x50 [ 1516.201013][T31340] ? __build_skb_around+0x278/0x390 [ 1516.201026][T31340] ? is_vmalloc_addr+0x86/0xa0 [ 1516.201042][T31340] netlink_sendmsg+0x8c8/0xdd0 [ 1516.201064][T31340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.201083][T31340] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1516.201106][T31340] sock_sendmsg+0x3cc/0x470 [ 1516.201127][T31340] ? __pfx_sock_sendmsg+0x10/0x10 [ 1516.201144][T31340] ? bpf_ksym_find+0x124/0x1c0 [ 1516.201166][T31340] splice_to_socket+0xaf4/0x1110 [ 1516.201193][T31340] ? __pfx_splice_to_socket+0x10/0x10 [ 1516.201217][T31340] ? __pfx_aa_file_perm+0x10/0x10 [ 1516.201247][T31340] ? bpf_lsm_file_permission+0x9/0x10 [ 1516.201261][T31340] ? security_file_permission+0x71/0x210 [ 1516.201279][T31340] ? __pfx_splice_to_socket+0x10/0x10 [ 1516.201298][T31340] do_splice+0x1478/0x1fc0 [ 1516.201316][T31340] ? __lock_acquire+0x436/0x2890 [ 1516.201329][T31340] ? ksys_write+0x190/0x250 [ 1516.201350][T31340] ? __pfx_do_splice+0x10/0x10 [ 1516.201366][T31340] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1516.201384][T31340] ? find_held_lock+0x2b/0x80 [ 1516.201401][T31340] __do_splice+0x32a/0x360 [ 1516.201420][T31340] ? __pfx___do_splice+0x10/0x10 [ 1516.201436][T31340] ? __fput_deferred+0x410/0x480 [ 1516.201452][T31340] __ia32_sys_splice+0x189/0x250 [ 1516.201473][T31340] __do_fast_syscall_32+0xe8/0x680 [ 1516.201494][T31340] do_fast_syscall_32+0x32/0x80 [ 1516.201505][T31340] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1516.201521][T31340] RIP: 0023:0xf704d579 [ 1516.201532][T31340] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1516.201543][T31340] RSP: 002b:00000000f541c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 1516.201558][T31340] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1516.201569][T31340] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 1516.201580][T31340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1516.201591][T31340] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1516.201604][T31340] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1516.201630][T31340] [ 1517.300558][T31351] siw: device registration error -23 [ 1517.639123][T31356] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1517.641237][T31356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1517.644637][T31356] vhci_hcd vhci_hcd.0: Device attached [ 1517.664564][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5737'. [ 1517.922399][T10734] usb 47-1: new low-speed USB device number 11 using vhci_hcd [ 1517.976214][T31357] vhci_hcd: connection reset by peer [ 1517.982167][ T6369] vhci_hcd vhci_hcd.5: stop threads [ 1517.983905][ T6369] vhci_hcd vhci_hcd.5: release socket [ 1517.986205][ T6369] vhci_hcd vhci_hcd.5: disconnect device [ 1520.490541][T31406] siw: device registration error -23 [ 1521.016891][ T40] audit: type=1326 audit(1770196864.086:30742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.2.5752" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 1521.230589][T23076] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1521.245123][T31425] ubi0: attaching mtd0 [ 1521.247901][T31425] ubi0: scanning is finished [ 1521.344758][T31425] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1521.348234][T31425] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1521.351927][T31425] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1521.354922][T31425] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1521.358183][T31425] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1521.361962][T31425] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1521.366272][T31425] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1521.371176][T31425] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1521.375414][T31428] ubi0: detaching mtd0 [ 1521.375419][T31429] ubi0: background thread "ubi_bgt0d" started, PID 31429 [ 1521.383630][T31428] ubi0: mtd0 is detached [ 1521.410465][T23076] usb 10-1: Using ep0 maxpacket: 8 [ 1521.421157][T23076] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1521.424643][T23076] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1521.428095][T23076] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1521.432303][T23076] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1521.437247][T23076] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1521.441325][T23076] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.664687][T23076] usb 10-1: usb_control_msg returned -32 [ 1521.666805][T23076] usbtmc 10-1:16.0: can't read capabilities [ 1521.687957][T23076] usb 10-1: USB disconnect, device number 35 [ 1521.701574][T31432] Invalid ELF header type: 2 != 1 [ 1521.707819][T31432] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1521.710755][T31432] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1521.715087][T31432] vhci_hcd vhci_hcd.0: Device attached [ 1521.723472][T31433] vhci_hcd: connection closed [ 1521.723882][ T6252] vhci_hcd vhci_hcd.8: stop threads [ 1521.727348][ T6252] vhci_hcd vhci_hcd.8: release socket [ 1521.729137][ T6252] vhci_hcd vhci_hcd.8: disconnect device [ 1521.896995][T31442] overlayfs: failed to clone upperpath [ 1522.175769][T31447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1522.177991][T31447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1522.181045][T31447] vhci_hcd vhci_hcd.0: Device attached [ 1522.419578][T16602] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 1523.002428][T10734] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1523.161819][T31447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'. [ 1523.937602][T31448] vhci_hcd: connection reset by peer [ 1523.945626][ T84] vhci_hcd vhci_hcd.2: stop threads [ 1523.947412][ T84] vhci_hcd vhci_hcd.2: release socket [ 1523.956493][ T84] vhci_hcd vhci_hcd.2: disconnect device [ 1524.185068][ T40] audit: type=1326 audit(1770196867.258:30743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31474 comm="syz.7.5769" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 1524.328589][ T61] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1524.498586][ T61] usb 10-1: Using ep0 maxpacket: 16 [ 1524.502170][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1524.507528][ T61] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1524.518541][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.521636][ T61] usb 10-1: Product: syz [ 1524.523209][ T61] usb 10-1: Manufacturer: syz [ 1524.524916][ T61] usb 10-1: SerialNumber: syz [ 1524.530768][ T61] usb 10-1: config 0 descriptor?? [ 1524.540405][ T61] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1524.544136][ T61] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1525.108273][ T8779] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 1525.141406][ T61] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1525.258379][ T8779] usb 13-1: Using ep0 maxpacket: 8 [ 1525.262631][ T8779] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1525.265973][ T8779] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1525.269494][ T8779] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1525.273460][ T8779] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1525.278104][ T8779] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1525.281356][ T8779] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.492382][ T8779] usb 13-1: GET_CAPABILITIES returned 0 [ 1525.494239][ T8779] usbtmc 13-1:16.0: can't read capabilities [ 1525.547168][ T61] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1525.549886][ T61] em28xx 10-1:0.0: board has no eeprom [ 1525.707301][ T29] usb 13-1: USB disconnect, device number 11 [ 1525.755357][T31496] netlink: 'syz.7.5774': attribute type 12 has an invalid length. [ 1525.907947][ T61] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1525.912029][ T61] em28xx 10-1:0.0: dvb set to bulk mode. [ 1525.914768][T15723] em28xx 10-1:0.0: Binding DVB extension [ 1527.098010][T31468] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1527.103988][ T61] usb 10-1: USB disconnect, device number 36 [ 1527.106910][ T61] em28xx 10-1:0.0: Disconnecting em28xx [ 1527.394485][T31516] 9p: Bad value for 'rfdno' [ 1527.489717][T14400] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.494164][T14400] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.500576][T14400] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.504100][T14400] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1527.588021][T15723] em28xx 10-1:0.0: Registering input extension [ 1527.736962][ T61] em28xx 10-1:0.0: Closing input extension [ 1527.797352][T16602] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1527.935489][ T61] em28xx 10-1:0.0: Freeing device [ 1528.334498][T31536] overlayfs: failed to clone upperpath [ 1528.368054][T31537] netlink: 'syz.2.5784': attribute type 12 has an invalid length. [ 1528.692488][T31542] siw: device registration error -23 [ 1529.023339][T31548] netlink: 'syz.8.5786': attribute type 4 has an invalid length. [ 1529.026051][T31548] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5786'. [ 1529.042315][T31548] .`: renamed from bond0 (while UP) [ 1531.192881][T31575] siw: device registration error -23 [ 1531.336778][T31580] ubi0: attaching mtd0 [ 1531.341166][T31580] ubi0: scanning is finished [ 1531.425723][T31583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1531.428254][T31583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1531.433329][T31583] vhci_hcd vhci_hcd.0: Device attached [ 1531.450355][T31583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1531.523896][T31580] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1531.564228][T31580] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1531.580359][T31580] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1531.584114][T31580] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1531.603991][T31580] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1531.612902][T31580] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1531.616186][T31580] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1531.619444][T31580] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1531.623095][T31582] ubi0: detaching mtd0 [ 1531.624616][T31589] ubi0: background thread "ubi_bgt0d" started, PID 31589 [ 1531.684959][T10734] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 1531.735853][T31584] vhci_hcd: connection reset by peer [ 1531.739051][ T6252] vhci_hcd vhci_hcd.2: stop threads [ 1531.768841][T31582] ubi0: mtd0 is detached [ 1531.807788][ T6252] vhci_hcd vhci_hcd.2: release socket [ 1531.877081][ T6252] vhci_hcd vhci_hcd.2: disconnect device [ 1531.918488][T31599] netlink: 'syz.8.5796': attribute type 12 has an invalid length. [ 1532.029713][T31601] overlayfs: failed to clone upperpath [ 1532.486904][ T40] audit: type=1326 audit(1770196875.562:30744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31606 comm="syz.2.5799" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 1533.471324][T31634] siw: device registration error -23 [ 1536.832708][T10734] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1537.451427][T31712] siw: device registration error -23 [ 1537.794593][T31722] netlink: 'syz.8.5829': attribute type 12 has an invalid length. [ 1537.992920][T31724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1537.995257][T31724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1537.998650][T31724] vhci_hcd vhci_hcd.0: Device attached [ 1538.006919][T31729] vhci_hcd: connection closed [ 1538.007143][ T220] vhci_hcd vhci_hcd.2: stop threads [ 1538.012285][ T220] vhci_hcd vhci_hcd.2: release socket [ 1538.014358][ T220] vhci_hcd vhci_hcd.2: disconnect device [ 1538.609725][T31746] FAULT_INJECTION: forcing a failure. [ 1538.609725][T31746] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.615944][T31746] CPU: 0 UID: 0 PID: 31746 Comm: syz.5.5836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1538.615976][T31746] Tainted: [L]=SOFTLOCKUP [ 1538.615982][T31746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1538.615995][T31746] Call Trace: [ 1538.616016][T31746] [ 1538.616023][T31746] dump_stack_lvl+0x16c/0x1f0 [ 1538.616078][T31746] should_fail_ex+0x512/0x640 [ 1538.616110][T31746] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1538.616136][T31746] should_failslab+0xc2/0x120 [ 1538.616163][T31746] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1538.616185][T31746] ? __alloc_skb+0x156/0x410 [ 1538.616210][T31746] ? __alloc_skb+0x156/0x410 [ 1538.616229][T31746] __alloc_skb+0x156/0x410 [ 1538.616247][T31746] ? __alloc_skb+0x35d/0x410 [ 1538.616267][T31746] ? __pfx___alloc_skb+0x10/0x10 [ 1538.616287][T31746] ? netlink_autobind.isra.0+0x158/0x370 [ 1538.616319][T31746] netlink_alloc_large_skb+0x69/0x140 [ 1538.616347][T31746] netlink_sendmsg+0x698/0xdd0 [ 1538.616377][T31746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.616406][T31746] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1538.616441][T31746] ____sys_sendmsg+0xa5d/0xc30 [ 1538.616471][T31746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1538.616498][T31746] ? get_compat_msghdr+0x11a/0x170 [ 1538.616531][T31746] ___sys_sendmsg+0x134/0x1d0 [ 1538.616556][T31746] ? __pfx____sys_sendmsg+0x10/0x10 [ 1538.616591][T31746] ? find_held_lock+0x2b/0x80 [ 1538.616631][T31746] __sys_sendmsg+0x16d/0x220 [ 1538.616677][T31746] ? __pfx___sys_sendmsg+0x10/0x10 [ 1538.616716][T31746] __do_fast_syscall_32+0xe8/0x680 [ 1538.616748][T31746] do_fast_syscall_32+0x32/0x80 [ 1538.616766][T31746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1538.616789][T31746] RIP: 0023:0xf704d579 [ 1538.616805][T31746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1538.616823][T31746] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1538.616851][T31746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1538.616864][T31746] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1538.616876][T31746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1538.616887][T31746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1538.616898][T31746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1538.616921][T31746] [ 1538.616966][ T40] audit: type=1326 audit(1770196881.695:30745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31744 comm="syz.8.5835" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x0 [ 1538.820561][T31761] fuse: blksize only supported for fuseblk [ 1538.823908][T31761] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5840'. [ 1539.191881][T31771] netlink: 'syz.7.5843': attribute type 12 has an invalid length. [ 1541.213485][T31785] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5846'. [ 1541.428968][T31776] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1541.431074][T31776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1541.434225][T31776] vhci_hcd vhci_hcd.0: Device attached [ 1541.440111][T23076] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 1541.504480][T31794] siw: device registration error -23 [ 1541.520168][T31792] vhci_hcd: connection closed [ 1541.521818][T14400] vhci_hcd vhci_hcd.5: stop threads [ 1541.525079][T14400] vhci_hcd vhci_hcd.5: release socket [ 1541.527046][T14400] vhci_hcd vhci_hcd.5: disconnect device [ 1541.849979][T23076] usb 13-1: Using ep0 maxpacket: 16 [ 1541.853345][T23076] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1541.858010][T23076] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1541.862039][T23076] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.865033][T23076] usb 13-1: Product: syz [ 1541.866430][T23076] usb 13-1: Manufacturer: syz [ 1541.867971][T23076] usb 13-1: SerialNumber: syz [ 1541.875803][T23076] usb 13-1: config 0 descriptor?? [ 1541.885668][T23076] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1541.889584][T23076] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1542.472439][T31808] siw: device registration error -23 [ 1542.519938][T23076] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1542.938216][T31818] netlink: 'syz.7.5854': attribute type 12 has an invalid length. [ 1543.077683][T23076] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1543.102679][T23076] em28xx 13-1:0.0: board has no eeprom [ 1543.499018][T23076] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1543.507804][T23076] em28xx 13-1:0.0: dvb set to bulk mode. [ 1543.514857][T10734] em28xx 13-1:0.0: Binding DVB extension [ 1544.436023][T31837] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5859'. [ 1544.445846][T31838] 9p: Unknown Cache mode or invalid value fscach [ 1544.678504][T31840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1544.680654][T31840] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1544.688557][T31784] em28xx 13-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1544.694927][T23076] usb 13-1: USB disconnect, device number 12 [ 1544.699262][T23076] em28xx 13-1:0.0: Disconnecting em28xx [ 1544.706833][T31840] vhci_hcd vhci_hcd.0: Device attached [ 1544.721870][T10734] em28xx 13-1:0.0: Registering input extension [ 1544.724381][T23076] em28xx 13-1:0.0: Closing input extension [ 1544.734971][T23076] em28xx 13-1:0.0: Freeing device [ 1544.905932][T31842] vhci_hcd: connection closed [ 1544.906323][T21022] vhci_hcd vhci_hcd.2: stop threads [ 1544.910742][T21022] vhci_hcd vhci_hcd.2: release socket [ 1544.913810][T21022] vhci_hcd vhci_hcd.2: disconnect device [ 1544.968691][T10734] usb 42-1: enqueue for inactive port 0 [ 1545.491438][T10734] usb usb42-port1: attempt power cycle [ 1545.681968][T31851] binder: 31850:31851 ioctl c018620c 80000140 returned -22 [ 1546.181669][T10734] usb usb42-port1: unable to enumerate USB device [ 1546.367852][T22087] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1546.483118][T31868] siw: device registration error -23 [ 1546.537539][T22087] usb 10-1: Using ep0 maxpacket: 16 [ 1546.721646][T22087] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1546.748576][T22087] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1546.751941][T22087] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.024726][T22087] usb 10-1: Product: syz [ 1547.167157][T22087] usb 10-1: Manufacturer: syz [ 1547.168794][T22087] usb 10-1: SerialNumber: syz [ 1547.217143][T22087] usb 10-1: config 0 descriptor?? [ 1547.228617][T22087] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1547.237327][T22087] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1547.907551][T22087] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1547.985680][T31895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1547.988253][T31895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1547.998218][T31895] vhci_hcd vhci_hcd.0: Device attached [ 1548.020693][T31895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1548.266702][ T29] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 1548.354993][T22087] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1548.399956][T22087] em28xx 10-1:0.0: board has no eeprom [ 1548.678313][T22087] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1548.708239][T22087] em28xx 10-1:0.0: dvb set to bulk mode. [ 1548.710971][ T8779] em28xx 10-1:0.0: Binding DVB extension [ 1548.766618][ T8779] em28xx 10-1:0.0: Registering input extension [ 1548.769803][T22087] usb 10-1: USB disconnect, device number 37 [ 1548.772386][T22087] em28xx 10-1:0.0: Disconnecting em28xx [ 1548.777714][T22087] em28xx 10-1:0.0: Closing input extension [ 1548.806715][T22087] em28xx 10-1:0.0: Freeing device [ 1548.838861][T31896] vhci_hcd: connection reset by peer [ 1548.846386][ T60] vhci_hcd vhci_hcd.2: stop threads [ 1548.856453][ T60] vhci_hcd vhci_hcd.2: release socket [ 1548.858307][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 1549.230802][T31918] ata1.00: invalid command format 189 [ 1549.276997][T31921] syz.8.5883: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1549.281352][T31921] CPU: 2 UID: 0 PID: 31921 Comm: syz.8.5883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.281372][T31921] Tainted: [L]=SOFTLOCKUP [ 1549.281377][T31921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1549.281385][T31921] Call Trace: [ 1549.281391][T31921] [ 1549.281397][T31921] dump_stack_lvl+0x16c/0x1f0 [ 1549.281433][T31921] warn_alloc+0x248/0x3a0 [ 1549.281453][T31921] ? __pfx_warn_alloc+0x10/0x10 [ 1549.281470][T31921] ? __lock_acquire+0x436/0x2890 [ 1549.281486][T31921] ? __perf_event_task_sched_in+0x27a/0xa10 [ 1549.281503][T31921] ? compat_do_replace+0x1af/0x7f0 [ 1549.281520][T31921] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 1549.281532][T31921] ? find_held_lock+0x2b/0x80 [ 1549.281547][T31921] ? __might_fault+0xe3/0x190 [ 1549.281560][T31921] ? __might_fault+0xe3/0x190 [ 1549.281572][T31921] ? __might_fault+0x13b/0x190 [ 1549.281586][T31921] ? compat_do_replace+0x1af/0x7f0 [ 1549.281600][T31921] ? __asan_memcpy+0x3c/0x60 [ 1549.281615][T31921] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1549.281627][T31921] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 1549.281645][T31921] ? compat_do_replace+0x1af/0x7f0 [ 1549.281657][T31921] __vmalloc_node_noprof+0xad/0xf0 [ 1549.281668][T31921] ? compat_do_replace+0x1af/0x7f0 [ 1549.281681][T31921] compat_do_replace+0x1af/0x7f0 [ 1549.281695][T31921] ? __pfx_compat_do_replace+0x10/0x10 [ 1549.281709][T31921] ? __pfx___might_resched+0x10/0x10 [ 1549.281731][T31921] ? bpf_lsm_capable+0x9/0x10 [ 1549.281747][T31921] ? security_capable+0x7e/0x260 [ 1549.281767][T31921] do_ebt_set_ctl+0x362/0x460 [ 1549.281779][T31921] ? sockopt_release_sock+0x52/0x60 [ 1549.281795][T31921] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1549.281808][T31921] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1549.281826][T31921] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1549.281847][T31921] nf_setsockopt+0x8d/0xf0 [ 1549.281866][T31921] ip_setsockopt+0xcb/0xf0 [ 1549.281880][T31921] tcp_setsockopt+0xa7/0x100 [ 1549.281894][T31921] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1549.281912][T31921] do_sock_setsockopt+0xf3/0x1d0 [ 1549.281931][T31921] __sys_setsockopt+0x120/0x1a0 [ 1549.281947][T31921] __ia32_sys_setsockopt+0xbc/0x160 [ 1549.281960][T31921] ? __do_fast_syscall_32+0x9a/0x680 [ 1549.281979][T31921] ? lockdep_hardirqs_on+0x7c/0x110 [ 1549.281996][T31921] __do_fast_syscall_32+0xe8/0x680 [ 1549.282015][T31921] do_fast_syscall_32+0x32/0x80 [ 1549.282025][T31921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1549.282041][T31921] RIP: 0023:0xf702d579 [ 1549.282051][T31921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1549.282062][T31921] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1549.282073][T31921] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 1549.282080][T31921] RDX: 0000000000000080 RSI: 0000000080000140 RDI: 00000000000000e0 [ 1549.282087][T31921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1549.282094][T31921] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1549.282100][T31921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1549.282114][T31921] [ 1549.282118][T31921] Mem-Info: [ 1549.391051][T31921] active_anon:6821 inactive_anon:2775 isolated_anon:0 [ 1549.391051][T31921] active_file:2782 inactive_file:12931 isolated_file:0 [ 1549.391051][T31921] unevictable:1768 dirty:224 writeback:0 [ 1549.391051][T31921] slab_reclaimable:6895 slab_unreclaimable:70460 [ 1549.391051][T31921] mapped:33169 shmem:6400 pagetables:1817 [ 1549.391051][T31921] sec_pagetables:337 bounce:0 [ 1549.391051][T31921] kernel_misc_reclaimable:0 [ 1549.391051][T31921] free:50481 free_pcp:9711 free_cma:0 [ 1549.405769][T31921] Node 0 active_anon:388kB inactive_anon:324kB active_file:0kB inactive_file:176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:4564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9912kB pagetables:1592kB sec_pagetables:1156kB all_unreclaimable? no Balloon:0kB [ 1549.415998][T31921] Node 1 active_anon:28496kB inactive_anon:10776kB active_file:11128kB inactive_file:51548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:134356kB dirty:892kB writeback:0kB shmem:22736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:5860kB pagetables:5676kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB [ 1549.426390][T31921] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:556kB local_pcp:68kB free_cma:0kB [ 1549.436645][T31921] lowmem_reserve[]: 0 289 289 289 289 [ 1549.438346][T31921] Node 0 DMA32 free:16552kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:388kB inactive_anon:324kB active_file:0kB inactive_file:176kB unevictable:3536kB writepending:4kB zspages:1248kB present:1032196kB managed:296808kB mlocked:0kB bounce:0kB free_pcp:10952kB local_pcp:3184kB free_cma:0kB [ 1549.449523][T31921] lowmem_reserve[]: 0 0 0 0 0 [ 1549.451399][T31921] Node 1 DMA32 free:175312kB boost:4096kB min:51240kB low:63024kB high:74808kB reserved_highatomic:2048KB free_highatomic:1112KB active_anon:31396kB inactive_anon:10776kB active_file:11128kB inactive_file:51548kB unevictable:3536kB writepending:892kB zspages:4528kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:31064kB local_pcp:9632kB free_cma:0kB [ 1549.464469][T31921] lowmem_reserve[]: 0 0 0 0 0 [ 1549.466218][T31921] Node 0 DMA: 39*4kB (UM) 12*8kB (U) 5*16kB (UM) 10*32kB (U) 2*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2060kB [ 1549.470912][T31921] Node 0 DMA32: 752*4kB (UME) 293*8kB (UME) 298*16kB (UME) 89*32kB (UME) 28*64kB (UME) 10*128kB (UME) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16552kB [ 1549.476636][T31921] Node 1 DMA32: 1676*4kB (UEH) 3943*8kB (UEH) 2936*16kB (UEH) 215*32kB (UEH) 101*64kB (UMEH) 47*128kB (UMEH) 28*256kB (UME) 30*512kB (UM) 33*1024kB (UM) 5*2048kB (UM) 1*4096kB (U) = 175240kB [ 1549.483061][T31921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.486192][T31921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1549.489883][T31921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1549.492889][T31921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1549.495827][T31921] 24367 total pagecache pages [ 1549.497471][T31921] 1158 pages in swap cache [ 1549.498898][T31921] Free swap = 98812kB [ 1549.500320][T31921] Total swap = 124996kB [ 1549.501781][T31921] 524155 pages RAM [ 1549.502996][T31921] 0 pages HighMem/MovableOnly [ 1549.504498][T31921] 209060 pages reserved [ 1549.506367][T31921] 0 pages cma reserved [ 1549.878286][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1549.878354][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.402910][T31945] siw: device registration error -23 [ 1551.011930][T31955] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1551.014057][T31955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1551.018619][T31955] vhci_hcd vhci_hcd.0: Device attached [ 1551.048747][T31955] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5888'. [ 1551.285176][T22087] usb 53-1: new low-speed USB device number 6 using vhci_hcd [ 1551.760230][T31956] vhci_hcd: connection reset by peer [ 1551.762275][T21022] vhci_hcd vhci_hcd.8: stop threads [ 1551.763989][T21022] vhci_hcd vhci_hcd.8: release socket [ 1551.766409][T21022] vhci_hcd vhci_hcd.8: disconnect device [ 1551.905608][T31979] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1551.907776][T31979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1551.910210][T31979] vhci_hcd vhci_hcd.0: Device attached [ 1551.949957][T31979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5892'. [ 1552.155174][T10734] usb 47-1: new low-speed USB device number 12 using vhci_hcd [ 1552.752772][T31987] misc userio: Invalid payload size [ 1552.754831][T31980] vhci_hcd: connection reset by peer [ 1552.761186][T21022] vhci_hcd vhci_hcd.5: stop threads [ 1552.765861][T21022] vhci_hcd vhci_hcd.5: release socket [ 1552.794422][T21022] vhci_hcd vhci_hcd.5: disconnect device [ 1554.083864][ T61] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 1554.223682][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1554.264222][ T61] usb 13-1: Using ep0 maxpacket: 16 [ 1554.267266][ T61] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1554.272375][ T61] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1554.276452][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.278918][ T61] usb 13-1: Product: syz [ 1554.280166][ T61] usb 13-1: Manufacturer: syz [ 1554.281708][ T61] usb 13-1: SerialNumber: syz [ 1554.293867][ T61] usb 13-1: config 0 descriptor?? [ 1554.297855][ T61] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1554.300817][ T61] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1555.119649][T32009] ubi0: attaching mtd0 [ 1555.131072][T32009] ubi0: scanning is finished [ 1555.250566][ T61] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1555.284155][T32009] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1555.287308][T32009] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1555.289875][T32009] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1555.292448][T32009] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1555.297200][T32009] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1555.300052][T32009] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1555.303851][T32009] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1555.307318][T32009] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1555.315290][T32013] ubi0: background thread "ubi_bgt0d" started, PID 32013 [ 1556.068055][ T61] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1556.322676][ T61] em28xx 13-1:0.0: board has no eeprom [ 1556.422602][T22087] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1556.602569][ T61] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1556.606494][ T61] em28xx 13-1:0.0: dvb set to bulk mode. [ 1556.609253][T16602] em28xx 13-1:0.0: Binding DVB extension [ 1556.617425][ T61] usb 13-1: USB disconnect, device number 13 [ 1556.620934][ T61] em28xx 13-1:0.0: Disconnecting em28xx [ 1556.735998][T16602] em28xx 13-1:0.0: Registering input extension [ 1556.742626][ T61] em28xx 13-1:0.0: Closing input extension [ 1556.763046][T25871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.772125][T25871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.775857][T25871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.785618][T25871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.792823][T25871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1556.799434][ T61] em28xx 13-1:0.0: Freeing device [ 1556.820781][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.823627][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.827495][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.835329][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.841600][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1556.868339][T32040] lo speed is unknown, defaulting to 1000 [ 1556.913373][T32044] overlayfs: failed to clone upperpath [ 1557.032705][T29281] bond0: (slave syz_tun): Releasing backup interface [ 1557.218679][T32040] chnl_net:caif_netlink_parms(): no params data found [ 1557.245291][T32056] netlink: 'syz.7.5914': attribute type 12 has an invalid length. [ 1557.314923][T32040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.317424][T32040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.319790][T32040] bridge_slave_0: entered allmulticast mode [ 1557.322486][T10734] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1557.325530][T32040] bridge_slave_0: entered promiscuous mode [ 1557.329274][T32040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.331961][T32040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.334427][T32040] bridge_slave_1: entered allmulticast mode [ 1557.337457][T32040] bridge_slave_1: entered promiscuous mode [ 1557.354129][T32040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.358750][T32040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.375392][T32040] team0: Port device team_slave_0 added [ 1557.378647][T32040] team0: Port device team_slave_1 added [ 1557.394009][T32040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.396503][T32040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.404852][T32040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.409434][T32040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.411873][T32040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.420453][T32040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.428188][T32049] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1557.430303][T32049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1557.441088][T32049] vhci_hcd vhci_hcd.0: Device attached [ 1557.446503][T32040] hsr_slave_0: entered promiscuous mode [ 1557.448870][T32040] hsr_slave_1: entered promiscuous mode [ 1557.451078][T32040] debugfs: 'hsr0' already exists in 'hsr' [ 1557.453281][T32040] Cannot create hsr debugfs directory [ 1557.524149][T32061] vhci_hcd: connection closed [ 1557.524398][T21022] vhci_hcd vhci_hcd.8: stop threads [ 1557.527781][T21022] vhci_hcd vhci_hcd.8: release socket [ 1557.529636][T21022] vhci_hcd vhci_hcd.8: disconnect device [ 1557.554918][T32040] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.646742][T32040] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.728792][T32040] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.821434][T32040] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.960444][T32040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1557.967673][T32040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1557.973583][T32040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1557.978705][T32040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1558.014114][T32040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.017235][T32040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.019646][T32040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.021840][T32040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.120131][T32040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.133341][T22505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.138252][T22505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.315571][T32040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.335176][T21022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.337687][T21022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.362754][T14400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.365986][T14400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.439740][T32040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1558.443589][T32040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1558.543132][T32083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1558.545278][T32083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1558.555535][T32083] vhci_hcd vhci_hcd.0: Device attached [ 1558.595867][T32040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.782299][T32040] veth0_vlan: entered promiscuous mode [ 1558.784215][T32083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5924'. [ 1558.792019][T10734] usb 41-1: new low-speed USB device number 14 using vhci_hcd [ 1558.796299][T32040] veth1_vlan: entered promiscuous mode [ 1558.830905][T32040] veth0_macvtap: entered promiscuous mode [ 1558.843250][T32040] veth1_macvtap: entered promiscuous mode [ 1558.855106][T32040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.865087][T32040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.872532][ T6252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.875603][ T6252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.879549][ T6252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.883859][ T6252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.942186][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.943168][ T5956] Bluetooth: hci2: command tx timeout [ 1558.944806][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.972715][T22505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.975281][T22505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.982312][T32093] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5917'. [ 1559.172434][T32093] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5917'. [ 1560.423183][T32088] vhci_hcd: connection reset by peer [ 1560.425495][T21022] vhci_hcd vhci_hcd.2: stop threads [ 1560.428018][T21022] vhci_hcd vhci_hcd.2: release socket [ 1560.430114][T21022] vhci_hcd vhci_hcd.2: disconnect device [ 1560.560893][T16602] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 1560.710588][T16602] usb 13-1: Using ep0 maxpacket: 16 [ 1560.714869][T16602] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1560.722291][T16602] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1560.727090][T16602] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.730234][T16602] usb 13-1: Product: syz [ 1560.732546][T16602] usb 13-1: Manufacturer: syz [ 1560.734647][T16602] usb 13-1: SerialNumber: syz [ 1560.741045][T16602] usb 13-1: config 0 descriptor?? [ 1560.749052][T16602] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1560.753808][T16602] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1561.000357][ T5956] Bluetooth: hci2: command tx timeout [ 1561.112365][T32114] netlink: 'syz.2.5922': attribute type 12 has an invalid length. [ 1561.200566][T32115] siw: device registration error -23 [ 1561.501453][T16602] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1561.910307][T16602] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1561.913540][T16602] em28xx 13-1:0.0: board has no eeprom [ 1561.954701][T32129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1562.189867][T16602] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1562.194272][T16602] em28xx 13-1:0.0: dvb set to bulk mode. [ 1562.209022][T16602] usb 13-1: USB disconnect, device number 14 [ 1562.215195][T16602] em28xx 13-1:0.0: Disconnecting em28xx [ 1562.223056][ T61] em28xx 13-1:0.0: Binding DVB extension [ 1562.263861][ T61] em28xx 13-1:0.0: Registering input extension [ 1562.266566][T16602] em28xx 13-1:0.0: Closing input extension [ 1562.275716][T16602] em28xx 13-1:0.0: Freeing device [ 1562.974327][T32140] siw: device registration error -23 [ 1563.069485][ T5956] Bluetooth: hci2: command tx timeout [ 1564.598942][T10734] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1565.185364][ T5956] Bluetooth: hci2: command tx timeout [ 1565.344410][T32178] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1565.346876][T32178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1565.351614][T32178] vhci_hcd vhci_hcd.0: Device attached [ 1565.377306][T32178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5936'. [ 1565.526401][T32189] overlayfs: failed to clone upperpath [ 1565.598040][T16824] usb 47-1: new low-speed USB device number 13 using vhci_hcd [ 1566.767074][T32179] vhci_hcd: connection reset by peer [ 1566.769704][T14400] vhci_hcd vhci_hcd.5: stop threads [ 1566.772171][T14400] vhci_hcd vhci_hcd.5: release socket [ 1566.810940][T14400] vhci_hcd vhci_hcd.5: disconnect device [ 1568.760874][T32216] siw: device registration error -23 [ 1568.996118][T32233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1569.420757][T32248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5955'. [ 1570.749012][T16824] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1573.181180][T32294] netlink: 'syz.8.5966': attribute type 12 has an invalid length. [ 1573.327537][T32298] ubi: mtd0 is already attached to ubi0 [ 1573.331014][T32298] ubi0: detaching mtd0 [ 1573.337942][T32298] ubi0: mtd0 is detached [ 1573.996465][T32318] overlayfs: failed to clone upperpath [ 1574.842557][T32344] ubi0: attaching mtd0 [ 1574.869722][T32344] ubi0: scanning is finished [ 1574.977301][T32344] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1574.977349][T32344] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1574.977386][T32344] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1574.977585][T32344] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1574.977630][T32344] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1574.977666][T32344] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1574.980924][T32344] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1574.980984][T32344] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1574.982401][T32345] ubi0: detaching mtd0 [ 1575.064969][T32345] ubi0: mtd0 is detached [ 1575.347021][T32348] overlayfs: failed to resolve './file1': -2 [ 1576.044488][T32352] netlink: 'syz.8.5981': attribute type 12 has an invalid length. [ 1576.430777][T32358] netlink: 'syz.7.5982': attribute type 12 has an invalid length. [ 1576.581943][T32361] siw: device registration error -23 [ 1576.889049][T32374] ubi0: attaching mtd0 [ 1576.891578][T32374] ubi0: scanning is finished [ 1576.983832][T32374] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1576.990066][T32374] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1576.997474][T32374] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1577.004599][T32374] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1577.012429][T32374] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1577.019475][T32374] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1577.030347][T32374] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1577.034187][T32374] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1577.042352][T32378] ubi0: background thread "ubi_bgt0d" started, PID 32378 [ 1577.046177][T32376] ubi0: detaching mtd0 [ 1577.055057][T32376] ubi0: mtd0 is detached [ 1578.292896][T32398] netlink: 'syz.8.5992': attribute type 12 has an invalid length. [ 1579.796362][T32421] ubi0: attaching mtd0 [ 1579.798496][T32421] ubi0: scanning is finished [ 1579.865798][T32421] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1579.876789][T32421] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1579.879007][T32421] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1579.903730][T32421] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1579.914494][T32421] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1579.923566][T32421] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1579.932573][T32421] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1579.956803][T32421] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1579.966019][T32426] ubi0: background thread "ubi_bgt0d" started, PID 32426 [ 1579.969312][T32425] ubi0: detaching mtd0 [ 1579.986040][T32425] ubi0: mtd0 is detached [ 1580.551988][T32438] siw: device registration error -23 [ 1581.434669][T32461] ubi0: attaching mtd0 [ 1581.437301][T32461] ubi0: scanning is finished [ 1581.486765][T32464] netlink: 'syz.5.6003': attribute type 12 has an invalid length. [ 1581.510115][T32461] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1581.518085][T32461] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1581.524814][T32461] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1581.527788][T32461] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1581.531944][T32461] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1581.535185][T32461] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1581.538915][T32461] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1581.544989][T32461] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1581.549328][T32465] ubi0: detaching mtd0 [ 1581.554941][T32465] ubi0: mtd0 is detached [ 1581.586559][T10707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.589535][T10707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.878963][T32514] ubi0: attaching mtd0 [ 1582.884480][T32514] ubi0: scanning is finished [ 1582.921217][T32520] overlayfs: failed to clone upperpath [ 1582.944929][T32514] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1582.947410][T32514] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1582.959582][T32514] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1582.962111][T32514] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1582.964712][T32514] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1582.967004][T32514] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1582.999804][T32514] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1583.003597][T32514] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1583.007080][T32523] ubi0: background thread "ubi_bgt0d" started, PID 32523 [ 1583.012523][T32522] ubi0: detaching mtd0 [ 1583.015378][T32522] ubi0: mtd0 is detached [ 1583.360341][T32535] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1583.362729][T32535] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1583.379482][T32535] vhci_hcd vhci_hcd.0: Device attached [ 1583.405654][T32535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1583.427965][T32517] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1583.430393][T32517] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1583.434254][T32517] vhci_hcd vhci_hcd.0: Device attached [ 1583.523348][T32540] vhci_hcd: connection closed [ 1583.523811][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1583.528209][ T13] vhci_hcd vhci_hcd.5: release socket [ 1583.532328][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1583.629006][T10734] usb 41-1: new low-speed USB device number 15 using vhci_hcd [ 1584.785046][T32536] vhci_hcd: connection reset by peer [ 1584.787927][ T84] vhci_hcd vhci_hcd.2: stop threads [ 1584.790982][ T84] vhci_hcd vhci_hcd.2: release socket [ 1584.793005][ T84] vhci_hcd vhci_hcd.2: disconnect device [ 1585.078690][T32565] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1585.080826][T32565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1585.083614][T32565] vhci_hcd vhci_hcd.0: Device attached [ 1585.388094][T28629] usb 54-1: SetAddress Request (6) to port 0 [ 1585.390991][T28629] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1585.708624][T32566] vhci_hcd: connection reset by peer [ 1585.711279][ T6252] vhci_hcd vhci_hcd.8: stop threads [ 1585.713923][ T6252] vhci_hcd vhci_hcd.8: release socket [ 1585.716465][ T6252] vhci_hcd vhci_hcd.8: disconnect device [ 1586.478867][T32593] siw: device registration error -23 [ 1586.721620][T32599] netlink: 'syz.8.6039': attribute type 12 has an invalid length. [ 1587.046233][T32605] overlayfs: failed to resolve './file0': -2 [ 1587.443300][T32609] ubi0: attaching mtd0 [ 1587.445801][T32609] ubi0: scanning is finished [ 1587.537081][T32609] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1587.545412][T32609] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1587.557474][T32609] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1587.561405][T32609] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1587.572754][T32609] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1587.581847][T32609] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1587.597168][T32609] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1587.607603][T32609] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1587.621523][T32611] ubi0: background thread "ubi_bgt0d" started, PID 32611 [ 1587.627543][T32610] ubi0: detaching mtd0 [ 1587.635807][T32610] ubi0: mtd0 is detached [ 1587.939408][T32607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1587.941657][T32607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1588.003229][T32607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1588.435571][T32628] binder: 32627:32628 ioctl 4008af60 80000140 returned -22 [ 1588.498139][T32632] netlink: 'syz.2.6048': attribute type 12 has an invalid length. [ 1588.726866][T10734] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1589.531768][T32664] netlink: 'syz.5.6065': attribute type 12 has an invalid length. [ 1589.653169][T32667] netlink: 'syz.7.6056': attribute type 12 has an invalid length. [ 1589.690920][T32665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1590.062919][T32675] FAULT_INJECTION: forcing a failure. [ 1590.062919][T32675] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.069370][T32675] CPU: 1 UID: 0 PID: 32675 Comm: syz.2.6058 Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.069401][T32675] Tainted: [L]=SOFTLOCKUP [ 1590.069408][T32675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1590.069419][T32675] Call Trace: [ 1590.069425][T32675] [ 1590.069434][T32675] dump_stack_lvl+0x16c/0x1f0 [ 1590.069468][T32675] should_fail_ex+0x512/0x640 [ 1590.069490][T32675] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1590.069516][T32675] should_failslab+0xc2/0x120 [ 1590.069545][T32675] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1590.069567][T32675] ? __alloc_skb+0x156/0x410 [ 1590.069593][T32675] ? __alloc_skb+0x156/0x410 [ 1590.069611][T32675] __alloc_skb+0x156/0x410 [ 1590.069630][T32675] ? __alloc_skb+0x35d/0x410 [ 1590.069649][T32675] ? __pfx___alloc_skb+0x10/0x10 [ 1590.069669][T32675] ? genl_rcv_msg+0x540/0x800 [ 1590.069684][T32675] ? genl_rcv_msg+0x4bb/0x800 [ 1590.069706][T32675] netlink_ack+0x15d/0xb80 [ 1590.069739][T32675] netlink_rcv_skb+0x332/0x420 [ 1590.069764][T32675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1590.069784][T32675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1590.069819][T32675] ? netlink_deliver_tap+0x1ae/0xd30 [ 1590.069848][T32675] genl_rcv+0x28/0x40 [ 1590.069873][T32675] netlink_unicast+0x5aa/0x870 [ 1590.069903][T32675] ? __pfx_netlink_unicast+0x10/0x10 [ 1590.069937][T32675] netlink_sendmsg+0x8c8/0xdd0 [ 1590.069967][T32675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.069996][T32675] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1590.070030][T32675] ____sys_sendmsg+0xa5d/0xc30 [ 1590.070061][T32675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1590.070094][T32675] ? get_compat_msghdr+0x11a/0x170 [ 1590.070128][T32675] ___sys_sendmsg+0x134/0x1d0 [ 1590.070154][T32675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.070189][T32675] ? find_held_lock+0x2b/0x80 [ 1590.070229][T32675] __sys_sendmsg+0x16d/0x220 [ 1590.070253][T32675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1590.070291][T32675] ? fput+0x70/0xf0 [ 1590.070313][T32675] __do_fast_syscall_32+0xe8/0x680 [ 1590.070344][T32675] do_fast_syscall_32+0x32/0x80 [ 1590.070361][T32675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1590.070384][T32675] RIP: 0023:0xf706d579 [ 1590.070399][T32675] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1590.070416][T32675] RSP: 002b:00000000f545d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1590.070434][T32675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1590.070446][T32675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.070456][T32675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1590.070466][T32675] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1590.070477][T32675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1590.070502][T32675] [ 1590.415675][T28629] usb 54-1: device descriptor read/8, error -110 [ 1590.988058][T28629] usb usb54-port1: attempt power cycle [ 1591.545716][T28629] usb usb54-port1: unable to enumerate USB device [ 1591.695178][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1591.785603][T32725] siw: device registration error -23 [ 1592.432694][T32743] ubi0: attaching mtd0 [ 1592.435555][T32743] ubi0: scanning is finished [ 1592.518386][T32743] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1592.521021][T32743] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1592.523392][T32743] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1592.526471][T32743] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1592.529064][T32743] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1592.531303][T32743] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1592.533874][T32743] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1592.537332][T32743] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1592.540541][T32749] ubi0: background thread "ubi_bgt0d" started, PID 32749 [ 1592.542878][T32748] ubi0: detaching mtd0 [ 1592.546396][T32748] ubi0: mtd0 is detached [ 1592.756906][ T302] FAULT_INJECTION: forcing a failure. [ 1592.756906][ T302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.761339][ T302] CPU: 0 UID: 0 PID: 302 Comm: syz.5.6083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.761359][ T302] Tainted: [L]=SOFTLOCKUP [ 1592.761364][ T302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1592.761372][ T302] Call Trace: [ 1592.761378][ T302] [ 1592.761383][ T302] dump_stack_lvl+0x16c/0x1f0 [ 1592.761408][ T302] should_fail_ex+0x512/0x640 [ 1592.761425][ T302] _copy_to_user+0x32/0xd0 [ 1592.761441][ T302] simple_read_from_buffer+0xcb/0x170 [ 1592.761461][ T302] proc_fail_nth_read+0x197/0x240 [ 1592.761483][ T302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1592.761503][ T302] ? rw_verify_area+0xcf/0x6c0 [ 1592.761519][ T302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1592.761537][ T302] vfs_read+0x1e4/0xcf0 [ 1592.761555][ T302] ? __pfx___mutex_lock+0x10/0x10 [ 1592.761576][ T302] ? __pfx_vfs_read+0x10/0x10 [ 1592.761590][ T302] ? find_held_lock+0x2b/0x80 [ 1592.761610][ T302] ? __fget_files+0x20e/0x3c0 [ 1592.761632][ T302] ksys_read+0x12a/0x250 [ 1592.761648][ T302] ? __pfx_ksys_read+0x10/0x10 [ 1592.761664][ T302] ? fput+0x70/0xf0 [ 1592.761677][ T302] __do_fast_syscall_32+0xe8/0x680 [ 1592.761698][ T302] do_fast_syscall_32+0x32/0x80 [ 1592.761708][ T302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.761724][ T302] RIP: 0023:0xf7f61579 [ 1592.761734][ T302] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1592.761745][ T302] RSP: 002b:00000000f5435590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1592.761757][ T302] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5435620 [ 1592.761765][ T302] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 1592.761771][ T302] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1592.761778][ T302] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1592.761785][ T302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.761798][ T302] [ 1593.071250][ T311] siw: device registration error -23 [ 1593.774265][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1593.815458][ T319] ubi0: attaching mtd0 [ 1593.819015][ T319] ubi0: scanning is finished [ 1593.958196][ T319] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1593.960992][ T319] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1593.963315][ T319] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1593.965814][ T319] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1593.969142][ T319] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1593.971592][ T319] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1593.974621][ T319] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1593.977960][ T319] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1593.981450][ T322] ubi0: detaching mtd0 [ 1593.981526][ T324] ubi0: background thread "ubi_bgt0d" started, PID 324 [ 1593.990050][ T322] ubi0: mtd0 is detached [ 1595.502642][ T351] ubi0: attaching mtd0 [ 1595.505092][ T351] ubi0: scanning is finished [ 1595.602222][ T352] siw: device registration error -23 [ 1595.843810][ T351] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1595.846459][ T351] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1595.848901][ T351] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1595.851510][ T351] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1595.852879][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1595.854811][ T351] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1595.859143][ T351] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1595.861805][ T351] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1595.865189][ T351] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1595.868411][ T358] ubi0: background thread "ubi_bgt0d" started, PID 358 [ 1595.868420][ T355] ubi0: detaching mtd0 [ 1595.874018][ T355] ubi0: mtd0 is detached [ 1595.948203][ T361] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6098'. [ 1596.273246][ T373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6099'. [ 1596.598131][ T388] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6107'. [ 1597.047297][ T411] siw: device registration error -23 [ 1597.303723][ T420] overlayfs: failed to clone upperpath [ 1597.414671][ T421] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1597.417188][ T421] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1597.462273][ T421] vhci_hcd vhci_hcd.0: Device attached [ 1597.464091][ T429] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6112'. [ 1597.702088][ T6009] usb 53-1: new low-speed USB device number 7 using vhci_hcd [ 1597.721312][ T425] vhci_hcd: connection reset by peer [ 1597.724657][ T46] vhci_hcd vhci_hcd.8: stop threads [ 1597.726852][ T46] vhci_hcd vhci_hcd.8: release socket [ 1597.729157][ T46] vhci_hcd vhci_hcd.8: disconnect device [ 1597.750946][ T433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6118'. [ 1598.343032][ T459] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6127'. [ 1598.553755][ T462] siw: device registration error -23 [ 1599.655781][ T491] overlayfs: failed to clone upperpath [ 1600.081201][ T493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.172091][ T500] ubi0: attaching mtd0 [ 1600.174242][ T500] ubi0: scanning is finished [ 1600.195717][ T504] netlink: 'syz.2.6138': attribute type 4 has an invalid length. [ 1600.198256][ T504] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1600.202871][ T504] .`: renamed from bond0 [ 1600.253168][ T509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1601.202907][ T500] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1601.736089][ T547] netlink: 'syz.7.6148': attribute type 4 has an invalid length. [ 1601.740377][ T547] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6148'. [ 1601.748435][ T547] .`: renamed from bond0 [ 1601.830508][ T548] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1601.832846][ T548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1601.835622][ T548] vhci_hcd vhci_hcd.0: Device attached [ 1601.867011][ T551] vhci_hcd: connection closed [ 1601.867464][T12186] vhci_hcd vhci_hcd.8: stop threads [ 1601.874135][T12186] vhci_hcd vhci_hcd.8: release socket [ 1601.876696][T12186] vhci_hcd vhci_hcd.8: disconnect device [ 1602.067429][ T535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1602.809786][ T6009] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1603.090707][ T575] ubi0: attaching mtd0 [ 1603.093206][ T575] ubi0: scanning is finished [ 1603.154366][ T575] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1603.158164][ T575] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1603.161874][ T575] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1603.165290][ T575] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1603.168301][ T575] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1603.171081][ T575] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1603.174139][ T575] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1603.178415][ T575] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1603.182199][ T578] ubi0: detaching mtd0 [ 1603.182196][ T579] ubi0: background thread "ubi_bgt0d" started, PID 579 [ 1603.188112][ T578] ubi0: mtd0 is detached [ 1603.449187][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1603.829255][ T599] overlayfs: failed to clone upperpath [ 1604.869698][T28629] libceph: connect (1)[c::]:6789 error -101 [ 1604.872253][T28629] libceph: mon0 (1)[c::]:6789 connect error [ 1605.128976][T28629] libceph: connect (1)[c::]:6789 error -101 [ 1605.131759][T28629] libceph: mon0 (1)[c::]:6789 connect error [ 1605.654849][T28629] libceph: connect (1)[c::]:6789 error -101 [ 1605.657714][T28629] libceph: mon0 (1)[c::]:6789 connect error [ 1605.679074][ T618] ceph: No mds server is up or the cluster is laggy [ 1606.872043][ T653] siw: device registration error -23 [ 1607.376429][ T659] overlayfs: failed to clone upperpath [ 1607.421112][ T661] overlayfs: failed to clone upperpath [ 1607.595200][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6179'. [ 1608.834527][ T704] ubi0: attaching mtd0 [ 1608.837019][ T704] ubi0: scanning is finished [ 1608.965319][ T704] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1608.968264][ T704] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1608.971288][ T704] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1608.974068][ T704] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1608.977290][ T704] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1608.979996][ T704] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1608.983141][ T704] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1608.986855][ T704] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1608.990636][ T706] ubi0: background thread "ubi_bgt0d" started, PID 706 [ 1608.993371][ T705] ubi0: detaching mtd0 [ 1608.996025][ T705] ubi0: mtd0 is detached [ 1611.161959][ T40] audit: type=1326 audit(1770196954.271:30746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=734 comm="syz.2.6193" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x0 [ 1611.289236][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1611.291393][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.473442][ T740] overlayfs: failed to resolve './file0': -2 [ 1611.854959][ T749] siw: device registration error -23 [ 1612.092721][ T751] siw: device registration error -23 [ 1612.519284][ T762] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1612.521443][ T762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1612.525366][ T762] vhci_hcd vhci_hcd.0: Device attached [ 1612.532058][ T762] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6200'. [ 1612.764348][T16920] usb 53-1: new low-speed USB device number 8 using vhci_hcd [ 1613.085285][ T766] vhci_hcd: connection reset by peer [ 1613.087679][T22505] vhci_hcd vhci_hcd.8: stop threads [ 1613.089781][T22505] vhci_hcd vhci_hcd.8: release socket [ 1613.092269][T22505] vhci_hcd vhci_hcd.8: disconnect device [ 1613.811437][ T802] siw: device registration error -23 [ 1614.303701][ T810] input: syz1 as /devices/virtual/input/input218 [ 1614.419640][ T817] overlayfs: failed to clone upperpath [ 1614.763692][ T827] netlink: 'syz.8.6216': attribute type 12 has an invalid length. [ 1616.307271][ T845] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1616.310393][ T845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1616.323497][ T845] vhci_hcd vhci_hcd.0: Device attached [ 1616.330366][ T845] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6221'. [ 1616.407410][ T841] 9p: Unknown Cache mode or invalid value fscach [ 1616.836494][ T846] vhci_hcd: connection closed [ 1616.837201][T12186] vhci_hcd vhci_hcd.8: stop threads [ 1616.841465][T12186] vhci_hcd vhci_hcd.8: release socket [ 1616.853044][T12186] vhci_hcd vhci_hcd.8: disconnect device [ 1617.130685][ T852] siw: device registration error -23 [ 1617.342914][ T863] ubi0: attaching mtd0 [ 1617.345091][ T863] ubi0: scanning is finished [ 1617.464331][ T863] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1617.467099][ T863] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1617.469527][ T863] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1617.472239][ T863] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1617.475049][ T863] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1617.477305][ T863] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1617.479907][ T863] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1204866771 [ 1617.484055][ T863] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1617.487497][ T871] ubi0: background thread "ubi_bgt0d" started, PID 871 [ 1617.795284][ T884] overlayfs: failed to resolve './file1': -2 [ 1617.930228][T16920] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1617.984525][ T895] netlink: 'syz.8.6232': attribute type 12 has an invalid length. [ 1618.498588][ T907] overlayfs: failed to clone upperpath [ 1618.592596][ T910] siw: device registration error -23 [ 1618.836491][ T924] overlayfs: failed to resolve './file1': -2 [ 1619.254135][ T947] ubi: mtd0 is already attached to ubi0 [ 1619.472611][ T954] netlink: 'syz.2.6248': attribute type 12 has an invalid length. [ 1619.734357][ T957] overlayfs: failed to resolve './file1': -2 [ 1619.754941][ T960] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6250'. [ 1621.175707][ T978] siw: device registration error -23 [ 1622.234169][ T1024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1622.237083][ T1024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1622.240215][ T1024] vhci_hcd vhci_hcd.0: Device attached [ 1622.251559][ T1024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6266'. [ 1622.258616][ T1026] vhci_hcd: connection closed [ 1622.258970][T10707] vhci_hcd vhci_hcd.2: stop threads [ 1622.262307][T10707] vhci_hcd vhci_hcd.2: release socket [ 1622.264066][T10707] vhci_hcd vhci_hcd.2: disconnect device [ 1622.429703][ T1031] netlink: 'syz.5.6267': attribute type 12 has an invalid length. [ 1622.485623][ T1033] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1622.997573][ T1047] loop6: detected capacity change from 0 to 7 [ 1623.006080][ T1047] Dev loop6: unable to read RDB block 7 [ 1623.007761][ T1047] loop6: unable to read partition table [ 1623.020104][ T1047] loop6: partition table beyond EOD, truncated [ 1623.022609][ T1047] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1623.054907][ T1054] netlink: 'syz.2.6274': attribute type 1 has an invalid length. [ 1623.447346][ T1072] binder: 1070:1072 ioctl c0306201 80000480 returned -14 [ 1623.749822][ T1068] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1623.752013][ T1068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1623.754556][ T1068] vhci_hcd vhci_hcd.0: Device attached [ 1623.764023][ T1068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1623.769519][ T1078] vhci_hcd: connection closed [ 1623.770960][ T220] vhci_hcd vhci_hcd.2: stop threads [ 1623.775166][ T220] vhci_hcd vhci_hcd.2: release socket [ 1623.780327][ T220] vhci_hcd vhci_hcd.2: disconnect device [ 1624.300481][ T1099] netlink: 'syz.8.6285': attribute type 12 has an invalid length. [ 1624.994312][ T1113] overlayfs: failed to clone upperpath [ 1625.141899][ T1123] veth1_macvtap: left promiscuous mode [ 1625.271740][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6292'. [ 1625.294662][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.440941][ T1136] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1625.443096][ T1136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1625.445559][ T1136] vhci_hcd vhci_hcd.0: Device attached [ 1625.458722][ T1136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1625.462606][ T1141] vhci_hcd: connection closed [ 1625.463073][T32207] vhci_hcd vhci_hcd.2: stop threads [ 1625.468131][T32207] vhci_hcd vhci_hcd.2: release socket [ 1625.469899][T32207] vhci_hcd vhci_hcd.2: disconnect device [ 1625.470315][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1625.474635][ T1145] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1625.477520][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6295'. [ 1625.595826][ T1157] overlayfs: failed to resolve './file0': -2 [ 1625.773373][ T1156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1626.615632][ T1196] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6310'. [ 1626.688880][ T1198] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1626.691615][ T1198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1626.694814][ T1198] vhci_hcd vhci_hcd.0: Device attached [ 1626.699763][ T1198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1626.704354][ T1201] vhci_hcd: connection closed [ 1626.704639][ T1140] vhci_hcd vhci_hcd.2: stop threads [ 1626.711911][ T1140] vhci_hcd vhci_hcd.2: release socket [ 1626.717410][ T1140] vhci_hcd vhci_hcd.2: disconnect device [ 1626.852182][ T1208] overlayfs: failed to clone upperpath [ 1627.195332][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6317'. [ 1627.373636][ T1234] netlink: 'syz.2.6320': attribute type 12 has an invalid length. [ 1627.457560][T16920] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 1627.499419][ T1232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1627.608366][T16920] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.610936][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1627.614420][T16920] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1627.618680][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1627.622328][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1627.627084][T16920] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.629329][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1627.633172][T16920] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1627.637917][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1627.641795][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1627.646606][T16920] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.649215][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1627.652863][T16920] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1627.657244][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1627.661125][T16920] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1627.667528][T16920] usb 13-1: string descriptor 0 read error: -22 [ 1627.669515][T16920] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1627.673015][T16920] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.683029][T16920] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1627.789715][ T1243] overlayfs: failed to resolve './file0': -2 [ 1627.881078][T16920] usb 13-1: USB disconnect, device number 15 [ 1627.962770][ T1248] 9pnet_virtio: no channels available for device syz [ 1628.163921][ T1256] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6328'. [ 1628.880849][ T1266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1628.972216][ T1273] FAULT_INJECTION: forcing a failure. [ 1628.972216][ T1273] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.976504][ T1273] CPU: 0 UID: 0 PID: 1273 Comm: syz.8.6333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1628.976523][ T1273] Tainted: [L]=SOFTLOCKUP [ 1628.976527][ T1273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1628.976534][ T1273] Call Trace: [ 1628.976538][ T1273] [ 1628.976543][ T1273] dump_stack_lvl+0x16c/0x1f0 [ 1628.976565][ T1273] should_fail_ex+0x512/0x640 [ 1628.976579][ T1273] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1628.976598][ T1273] should_failslab+0xc2/0x120 [ 1628.976616][ T1273] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1628.976633][ T1273] ? simple_xattr_set+0x5b/0x3e0 [ 1628.976645][ T1273] ? simple_xattr_alloc+0x46/0xa0 [ 1628.976659][ T1273] ? kstrdup+0x53/0x100 [ 1628.976672][ T1273] kstrdup+0x53/0x100 [ 1628.976685][ T1273] simple_xattr_set+0x5b/0x3e0 [ 1628.976699][ T1273] shmem_xattr_handler_set+0x31b/0x3b0 [ 1628.976717][ T1273] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1628.976732][ T1273] __vfs_setxattr+0x175/0x1e0 [ 1628.976749][ T1273] ? __pfx___vfs_setxattr+0x10/0x10 [ 1628.976764][ T1273] ? generic_permission+0xad/0x7d0 [ 1628.976781][ T1273] __vfs_setxattr_noperm+0x127/0x660 [ 1628.976800][ T1273] __vfs_setxattr_locked+0x17d/0x250 [ 1628.976819][ T1273] vfs_setxattr+0x145/0x350 [ 1628.976838][ T1273] ? __pfx_vfs_setxattr+0x10/0x10 [ 1628.976854][ T1273] ? mnt_get_write_access+0x52/0x2f0 [ 1628.976868][ T1273] ? mnt_get_write_access+0x52/0x2f0 [ 1628.976882][ T1273] do_setxattr+0x145/0x180 [ 1628.976899][ T1273] filename_setxattr+0x16b/0x1d0 [ 1628.976917][ T1273] ? __pfx_filename_setxattr+0x10/0x10 [ 1628.976934][ T1273] ? getname_flags.part.0+0x1c5/0x550 [ 1628.976949][ T1273] path_setxattrat+0x1de/0x2a0 [ 1628.976971][ T1273] ? __pfx_path_setxattrat+0x10/0x10 [ 1628.976991][ T1273] ? ksys_write+0x190/0x250 [ 1628.977018][ T1273] ? fput+0x70/0xf0 [ 1628.977029][ T1273] ? ksys_write+0x1ac/0x250 [ 1628.977044][ T1273] ? __pfx_ksys_write+0x10/0x10 [ 1628.977062][ T1273] __ia32_sys_setxattr+0xc4/0x140 [ 1628.977079][ T1273] ? __do_fast_syscall_32+0x9a/0x680 [ 1628.977097][ T1273] ? lockdep_hardirqs_on+0x7c/0x110 [ 1628.977114][ T1273] __do_fast_syscall_32+0xe8/0x680 [ 1628.977133][ T1273] do_fast_syscall_32+0x32/0x80 [ 1628.977143][ T1273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1628.977158][ T1273] RIP: 0023:0xf702d579 [ 1628.977167][ T1273] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1628.977177][ T1273] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 1628.977189][ T1273] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800001c0 [ 1628.977196][ T1273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1628.977202][ T1273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1628.977208][ T1273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1628.977215][ T1273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1628.977229][ T1273] [ 1629.219141][ T1275] FAULT_INJECTION: forcing a failure. [ 1629.219141][ T1275] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.223270][ T1275] CPU: 1 UID: 0 PID: 1275 Comm: syz.8.6334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.223289][ T1275] Tainted: [L]=SOFTLOCKUP [ 1629.223293][ T1275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1629.223301][ T1275] Call Trace: [ 1629.223307][ T1275] [ 1629.223313][ T1275] dump_stack_lvl+0x16c/0x1f0 [ 1629.223335][ T1275] should_fail_ex+0x512/0x640 [ 1629.223348][ T1275] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1629.223363][ T1275] should_failslab+0xc2/0x120 [ 1629.223382][ T1275] kmem_cache_alloc_noprof+0x83/0x770 [ 1629.223396][ T1275] ? skb_clone+0x190/0x3f0 [ 1629.223414][ T1275] ? skb_clone+0x190/0x3f0 [ 1629.223427][ T1275] skb_clone+0x190/0x3f0 [ 1629.223442][ T1275] netlink_deliver_tap+0xabd/0xd30 [ 1629.223462][ T1275] netlink_unicast+0x64c/0x870 [ 1629.223480][ T1275] ? __pfx_netlink_unicast+0x10/0x10 [ 1629.223516][ T1275] netlink_sendmsg+0x8c8/0xdd0 [ 1629.223535][ T1275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1629.223553][ T1275] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1629.223575][ T1275] ____sys_sendmsg+0xa5d/0xc30 [ 1629.223595][ T1275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1629.223612][ T1275] ? get_compat_msghdr+0x11a/0x170 [ 1629.223633][ T1275] ___sys_sendmsg+0x134/0x1d0 [ 1629.223649][ T1275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1629.223670][ T1275] ? find_held_lock+0x2b/0x80 [ 1629.223694][ T1275] __sys_sendmsg+0x16d/0x220 [ 1629.223716][ T1275] ? __pfx___sys_sendmsg+0x10/0x10 [ 1629.223736][ T1275] ? do_user_addr_fault+0x843/0x1370 [ 1629.223752][ T1275] __do_fast_syscall_32+0xe8/0x680 [ 1629.223772][ T1275] do_fast_syscall_32+0x32/0x80 [ 1629.223783][ T1275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1629.223798][ T1275] RIP: 0023:0xf702d579 [ 1629.223807][ T1275] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1629.223819][ T1275] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1629.223830][ T1275] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000080 [ 1629.223837][ T1275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1629.223843][ T1275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1629.223850][ T1275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1629.223857][ T1275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1629.223870][ T1275] [ 1629.223902][ T1275] netlink: 'syz.8.6334': attribute type 4 has an invalid length. [ 1629.312345][ T1275] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6334'. [ 1629.363945][ T1282] overlayfs: failed to resolve './file1': -2 [ 1629.458022][ T1289] batman_adv: batadv0: Adding interface: dummy0 [ 1629.460803][ T1289] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.469622][ T1289] batman_adv: batadv0: Interface activated: dummy0 [ 1629.479102][ T1289] batadv0: mtu less than device minimum [ 1629.481550][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.485569][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.490420][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.494241][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.498376][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.502342][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.507221][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.511467][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.515444][ T1289] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1629.547811][ T1290] netlink: 'syz.8.6339': attribute type 10 has an invalid length. [ 1629.563028][ T1290] .`: (slave batadv0): Error -22 calling dev_set_mtu [ 1629.809390][ T1296] netlink: 'syz.7.6341': attribute type 4 has an invalid length. [ 1629.811969][ T1296] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6341'. [ 1629.939829][ T1300] overlayfs: failed to clone upperpath [ 1630.402422][ T1311] netlink: 'syz.2.6345': attribute type 4 has an invalid length. [ 1630.405169][ T1311] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1630.875367][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1631.818011][ T1332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1632.229215][ T1350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1632.231493][ T1350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1632.246720][ T1350] vhci_hcd vhci_hcd.0: Device attached [ 1632.515444][T10734] usb 42-1: SetAddress Request (87) to port 0 [ 1632.517577][T10734] usb 42-1: new SuperSpeed USB device number 87 using vhci_hcd [ 1632.893743][ T1352] vhci_hcd: connection reset by peer [ 1632.896652][T22505] vhci_hcd vhci_hcd.2: stop threads [ 1632.898553][T22505] vhci_hcd vhci_hcd.2: release socket [ 1632.900566][T22505] vhci_hcd vhci_hcd.2: disconnect device [ 1633.760392][ T1383] overlayfs: failed to clone upperpath [ 1633.834976][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1634.837575][ T1392] netlink: 'syz.2.6363': attribute type 12 has an invalid length. [ 1635.521438][ T1399] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6365'. [ 1636.576199][ T1439] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1636.578670][ T1439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1636.581334][ T1439] vhci_hcd vhci_hcd.0: Device attached [ 1636.602540][ T1439] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6373'. [ 1636.615961][ T1440] vhci_hcd: connection closed [ 1636.644932][ T1442] siw: device registration error -23 [ 1636.722766][T14400] vhci_hcd vhci_hcd.8: stop threads [ 1636.732381][T14400] vhci_hcd vhci_hcd.8: release socket [ 1636.734523][T14400] vhci_hcd vhci_hcd.8: disconnect device [ 1636.772469][T28629] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1637.201386][ T1446] netlink: 'syz.7.6374': attribute type 12 has an invalid length. [ 1637.602536][T10734] usb 42-1: device descriptor read/8, error -110 [ 1638.012516][T10734] usb usb42-port1: attempt power cycle [ 1638.205309][ T1468] overlayfs: failed to clone upperpath [ 1638.262122][ T1469] netlink: 'syz.5.6387': attribute type 12 has an invalid length. [ 1638.748863][T10734] usb usb42-port1: unable to enumerate USB device [ 1639.338374][ T1501] siw: device registration error -23 [ 1640.696762][ T1514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1641.094315][ T1530] netlink: 'syz.2.6399': attribute type 12 has an invalid length. [ 1642.150772][ T1553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1643.103879][ T1583] overlayfs: failed to clone upperpath [ 1643.313017][ T1593] overlayfs: failed to clone upperpath [ 1643.710490][ T1605] afs: Unknown parameter 'floobj_ñ˜ ' [ 1644.232382][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1645.366428][ T1654] lo speed is unknown, defaulting to 1000 [ 1645.793032][ T1654] netlink: 'syz.8.6440': attribute type 13 has an invalid length. [ 1645.800435][ T1654] net_ratelimit: 10 callbacks suppressed [ 1645.800447][ T1654] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1646.182902][ T1677] overlayfs: failed to clone upperpath [ 1646.317653][T16920] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1646.364080][ T1683] overlayfs: failed to clone upperpath [ 1646.469476][T16920] usb 10-1: Using ep0 maxpacket: 8 [ 1646.473074][T16920] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.495412][T16920] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1646.499271][T16920] usb 10-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1646.504003][T16920] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1646.506168][T16920] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1646.527717][T16920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.531712][T16920] usb 10-1: config 0 descriptor?? [ 1646.539481][T16920] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1647.455422][T16920] usb 10-1: USB disconnect, device number 38 [ 1647.607809][ T40] audit: type=1326 audit(1770196990.740:30747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.625055][ T40] audit: type=1326 audit(1770196990.740:30748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.633554][ T40] audit: type=1326 audit(1770196990.740:30749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.645310][ T40] audit: type=1326 audit(1770196990.740:30750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.663029][ T40] audit: type=1326 audit(1770196990.740:30751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.673771][ T40] audit: type=1326 audit(1770196990.740:30752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.681918][ T40] audit: type=1326 audit(1770196990.740:30753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.689500][ T40] audit: type=1326 audit(1770196990.740:30754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.697478][ T40] audit: type=1326 audit(1770196990.740:30755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.715384][ T40] audit: type=1326 audit(1770196990.740:30756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1720 comm="syz.7.6451" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1647.824312][ T1730] netlink: 'syz.7.6454': attribute type 12 has an invalid length. [ 1647.970032][ T1736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1647.978215][ T1736] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1648.715545][ T1741] overlayfs: failed to clone upperpath [ 1648.892410][ T1753] misc userio: The device must be registered before sending interrupts [ 1649.480971][ T1766] netlink: 'syz.5.6466': attribute type 12 has an invalid length. [ 1649.582518][ T1765] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1649.586029][ T1765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1649.590123][ T1765] vhci_hcd vhci_hcd.0: Device attached [ 1649.855914][T16920] usb 42-1: SetAddress Request (91) to port 0 [ 1649.859222][T16920] usb 42-1: new SuperSpeed USB device number 91 using vhci_hcd [ 1649.890619][ T1773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1650.220934][ T1768] vhci_hcd: connection reset by peer [ 1650.223027][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 1650.224770][ T1142] vhci_hcd vhci_hcd.2: release socket [ 1650.227709][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 1650.283944][ T1783] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6471'. [ 1650.605485][T16824] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1650.755421][T16824] usb 10-1: Using ep0 maxpacket: 16 [ 1650.760808][T16824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1650.770267][T16824] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1650.773679][T16824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.785360][T16824] usb 10-1: Product: syz [ 1650.786649][T16824] usb 10-1: Manufacturer: syz [ 1650.788032][T16824] usb 10-1: SerialNumber: syz [ 1650.791536][T16824] usb 10-1: config 0 descriptor?? [ 1650.802670][T16824] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1650.805447][T16824] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1650.866144][ T1788] overlayfs: failed to clone upperpath [ 1650.971669][ T1791] FAULT_INJECTION: forcing a failure. [ 1650.971669][ T1791] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.976286][ T1791] CPU: 2 UID: 0 PID: 1791 Comm: syz.2.6474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1650.976305][ T1791] Tainted: [L]=SOFTLOCKUP [ 1650.976309][ T1791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1650.976317][ T1791] Call Trace: [ 1650.976321][ T1791] [ 1650.976326][ T1791] dump_stack_lvl+0x16c/0x1f0 [ 1650.976348][ T1791] should_fail_ex+0x512/0x640 [ 1650.976364][ T1791] should_failslab+0xc2/0x120 [ 1650.976382][ T1791] kmem_cache_alloc_noprof+0x83/0x770 [ 1650.976397][ T1791] ? fdb_create+0x126/0x1a20 [ 1650.976412][ T1791] ? fdb_create+0x126/0x1a20 [ 1650.976423][ T1791] fdb_create+0x126/0x1a20 [ 1650.976437][ T1791] ? find_held_lock+0x2b/0x80 [ 1650.976453][ T1791] ? __pfx_fdb_create+0x10/0x10 [ 1650.976464][ T1791] ? br_fdb_find+0xe4/0x240 [ 1650.976479][ T1791] fdb_add_local+0x1f4/0x270 [ 1650.976493][ T1791] br_fdb_add_local+0x39/0x60 [ 1650.976507][ T1791] __vlan_add+0x1a58/0x2df0 [ 1650.976526][ T1791] ? br_vlan_add+0x13a/0xaf0 [ 1650.976540][ T1791] ? pcpu_alloc_noprof+0x1fc/0x1470 [ 1650.976554][ T1791] ? __pfx___vlan_add+0x10/0x10 [ 1650.976572][ T1791] br_vlan_add+0x2ff/0xaf0 [ 1650.976589][ T1791] br_vlan_info+0x35a/0x3d0 [ 1650.976602][ T1791] ? __pfx_br_vlan_info+0x10/0x10 [ 1650.976618][ T1791] br_process_vlan_info+0x435/0xa10 [ 1650.976635][ T1791] ? __pfx_br_process_vlan_info+0x10/0x10 [ 1650.976649][ T1791] ? __lock_acquire+0x430/0x2890 [ 1650.976663][ T1791] br_afspec+0x573/0x650 [ 1650.976677][ T1791] ? __pfx_br_afspec+0x10/0x10 [ 1650.976690][ T1791] ? __lock_acquire+0x436/0x2890 [ 1650.976705][ T1791] br_setlink+0x374/0x630 [ 1650.976718][ T1791] ? __pfx_br_setlink+0x10/0x10 [ 1650.976744][ T1791] ? __lock_acquire+0x436/0x2890 [ 1650.976755][ T1791] ? __pfx___mutex_lock+0x10/0x10 [ 1650.976777][ T1791] rtnl_bridge_setlink+0x315/0x740 [ 1650.976792][ T1791] ? __pfx_br_setlink+0x10/0x10 [ 1650.976805][ T1791] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1650.976826][ T1791] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1650.976840][ T1791] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1650.976858][ T1791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1650.976876][ T1791] ? __lock_acquire+0x436/0x2890 [ 1650.976889][ T1791] netlink_rcv_skb+0x158/0x420 [ 1650.976906][ T1791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1650.976923][ T1791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1650.976944][ T1791] ? netlink_deliver_tap+0x1ae/0xd30 [ 1650.976962][ T1791] netlink_unicast+0x5aa/0x870 [ 1650.976980][ T1791] ? __pfx_netlink_unicast+0x10/0x10 [ 1650.977001][ T1791] netlink_sendmsg+0x8c8/0xdd0 [ 1650.977019][ T1791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1650.977037][ T1791] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1650.977060][ T1791] ____sys_sendmsg+0xa5d/0xc30 [ 1650.977080][ T1791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1650.977097][ T1791] ? get_compat_msghdr+0x11a/0x170 [ 1650.977117][ T1791] ___sys_sendmsg+0x134/0x1d0 [ 1650.977133][ T1791] ? __pfx____sys_sendmsg+0x10/0x10 [ 1650.977153][ T1791] ? find_held_lock+0x2b/0x80 [ 1650.977175][ T1791] __sys_sendmsg+0x16d/0x220 [ 1650.977190][ T1791] ? __pfx___sys_sendmsg+0x10/0x10 [ 1650.977209][ T1791] ? do_user_addr_fault+0x843/0x1370 [ 1650.977226][ T1791] __do_fast_syscall_32+0xe8/0x680 [ 1650.977245][ T1791] do_fast_syscall_32+0x32/0x80 [ 1650.977256][ T1791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1650.977270][ T1791] RIP: 0023:0xf706d579 [ 1650.977280][ T1791] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1650.977291][ T1791] RSP: 002b:00000000f543c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1650.977302][ T1791] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 1650.977309][ T1791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1650.977316][ T1791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1650.977322][ T1791] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1650.977328][ T1791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1650.977342][ T1791] [ 1650.977433][ T1791] bridge0: failed insert local address into bridge forwarding table [ 1651.383185][ T1799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6476'. [ 1651.835765][T16824] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1651.893465][ T1809] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1651.895532][ T1809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1651.903169][ T1809] vhci_hcd vhci_hcd.0: Device attached [ 1651.909631][ T1809] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6478'. [ 1651.914997][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1651.961135][ T1817] netlink: 'syz.7.6482': attribute type 1 has an invalid length. [ 1651.966249][ T1815] netlink: 'syz.2.6479': attribute type 12 has an invalid length. [ 1652.154890][T16602] usb 53-1: new low-speed USB device number 10 using vhci_hcd [ 1652.192008][T16824] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1652.196166][T16824] em28xx 10-1:0.0: board has no eeprom [ 1652.316521][ T1810] vhci_hcd: connection reset by peer [ 1652.319021][T22505] vhci_hcd vhci_hcd.8: stop threads [ 1652.321638][T22505] vhci_hcd vhci_hcd.8: release socket [ 1652.324442][T22505] vhci_hcd vhci_hcd.8: disconnect device [ 1652.749001][ T1822] overlayfs: failed to resolve './file1': -2 [ 1652.981081][ T1833] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6489'. [ 1653.284337][ T1786] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1653.354072][T16824] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1653.357423][T16824] em28xx 10-1:0.0: dvb set to bulk mode. [ 1653.361195][ T6113] em28xx 10-1:0.0: Binding DVB extension [ 1653.368737][T16824] usb 10-1: USB disconnect, device number 39 [ 1653.377538][T16824] em28xx 10-1:0.0: Disconnecting em28xx [ 1653.403208][ T6113] em28xx 10-1:0.0: Registering input extension [ 1653.406700][T16824] em28xx 10-1:0.0: Closing input extension [ 1653.416661][T16824] em28xx 10-1:0.0: Freeing device [ 1653.554051][T22087] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 1653.704012][T22087] usb 13-1: Using ep0 maxpacket: 16 [ 1653.708254][T22087] usb 13-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1653.717554][T22087] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1653.721511][T22087] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.725727][T22087] usb 13-1: Product: syz [ 1653.727641][T22087] usb 13-1: Manufacturer: syz [ 1653.729651][T22087] usb 13-1: SerialNumber: syz [ 1653.732885][T22087] usb 13-1: config 0 descriptor?? [ 1653.810822][ T1847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1653.841503][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1653.841515][ T40] audit: type=1326 audit(1770196996.963:30758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1653.855900][ T40] audit: type=1326 audit(1770196996.963:30759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1653.865405][ T40] audit: type=1326 audit(1770196996.963:30760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 1653.875826][ T40] audit: type=1326 audit(1770196996.963:30761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1653.882873][ T40] audit: type=1326 audit(1770196996.963:30762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 1653.890229][ T40] audit: type=1326 audit(1770196996.963:30763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 1653.898208][ T40] audit: type=1326 audit(1770196996.963:30764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 1653.901993][ T1850] overlayfs: failed to resolve './file1': -2 [ 1653.907523][ T40] audit: type=1326 audit(1770196996.963:30765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1653.916850][ T40] audit: type=1326 audit(1770196996.963:30766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1653.925348][ T40] audit: type=1326 audit(1770196996.963:30767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1846 comm="syz.2.6493" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 1654.944025][T16920] usb 42-1: device descriptor read/8, error -110 [ 1655.037250][ T1877] FAULT_INJECTION: forcing a failure. [ 1655.037250][ T1877] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1655.041212][ T1877] CPU: 2 UID: 0 PID: 1877 Comm: syz.5.6500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.041235][ T1877] Tainted: [L]=SOFTLOCKUP [ 1655.041241][ T1877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1655.041250][ T1877] Call Trace: [ 1655.041256][ T1877] [ 1655.041261][ T1877] dump_stack_lvl+0x16c/0x1f0 [ 1655.041284][ T1877] should_fail_ex+0x512/0x640 [ 1655.041300][ T1877] should_fail_alloc_page+0xe7/0x130 [ 1655.041320][ T1877] prepare_alloc_pages+0x401/0x670 [ 1655.041341][ T1877] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1655.041359][ T1877] ? find_held_lock+0x2b/0x80 [ 1655.041375][ T1877] ? is_bpf_text_address+0x8a/0x1a0 [ 1655.041392][ T1877] ? bpf_ksym_find+0x124/0x1c0 [ 1655.041404][ T1877] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1655.041424][ T1877] ? kernel_text_address+0x8d/0x100 [ 1655.041442][ T1877] ? __kernel_text_address+0xd/0x40 [ 1655.041460][ T1877] ? unwind_get_return_address+0x59/0xa0 [ 1655.041488][ T1877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1655.041524][ T1877] ? policy_nodemask+0xea/0x4e0 [ 1655.041552][ T1877] alloc_pages_mpol+0x1fb/0x550 [ 1655.041580][ T1877] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1655.041604][ T1877] ? kasan_save_stack+0x42/0x60 [ 1655.041626][ T1877] ? kasan_save_track+0x14/0x30 [ 1655.041645][ T1877] ? __kasan_kmalloc+0xaa/0xb0 [ 1655.041665][ T1877] ? __get_vm_area_node+0x101/0x330 [ 1655.041695][ T1877] alloc_pages_noprof+0x131/0x390 [ 1655.041722][ T1877] get_free_pages_noprof+0x10/0xb0 [ 1655.041746][ T1877] __kasan_populate_vmalloc+0xa0/0x220 [ 1655.041772][ T1877] alloc_vmap_area+0x98d/0x2a50 [ 1655.041806][ T1877] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1655.041837][ T1877] __get_vm_area_node+0x1ca/0x330 [ 1655.041869][ T1877] __vmalloc_node_range_noprof+0x247/0x16b0 [ 1655.041889][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.041912][ T1877] ? post_alloc_hook+0x19e/0x220 [ 1655.041934][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.041959][ T1877] ? __pfx___might_resched+0x10/0x10 [ 1655.041985][ T1877] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1655.042001][ T1877] ? should_fail_alloc_page+0xee/0x130 [ 1655.042031][ T1877] ? rcu_is_watching+0x12/0xc0 [ 1655.042055][ T1877] ? trace_mm_page_alloc+0x11b/0x180 [ 1655.042083][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.042103][ T1877] __vmalloc_node_noprof+0xad/0xf0 [ 1655.042119][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.042142][ T1877] __vmalloc_noprof+0xa3/0x120 [ 1655.042160][ T1877] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1655.042183][ T1877] ? apparmor_capable+0x1d7/0x4e0 [ 1655.042287][ T1877] bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.042327][ T1877] ? security_capable+0x7e/0x260 [ 1655.042355][ T1877] bpf_prog_alloc+0x3b/0x230 [ 1655.042373][ T1877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1655.042400][ T1877] bpf_prog_load+0x19bc/0x2cc0 [ 1655.042426][ T1877] ? _parse_integer_limit+0x17f/0x1d0 [ 1655.042456][ T1877] ? __pfx_bpf_prog_load+0x10/0x10 [ 1655.042597][ T1877] ? __lock_acquire+0x436/0x2890 [ 1655.042746][ T1877] __sys_bpf+0x3e72/0x4980 [ 1655.042812][ T1877] ? __pfx___sys_bpf+0x10/0x10 [ 1655.042829][ T1877] ? find_held_lock+0x2b/0x80 [ 1655.042858][ T1877] ? find_held_lock+0x2b/0x80 [ 1655.042889][ T1877] ? __mutex_unlock_slowpath+0x161/0x790 [ 1655.042933][ T1877] ? fput+0x70/0xf0 [ 1655.042951][ T1877] ? ksys_write+0x1ac/0x250 [ 1655.042976][ T1877] ? __pfx_ksys_write+0x10/0x10 [ 1655.043005][ T1877] __ia32_sys_bpf+0x76/0xe0 [ 1655.043023][ T1877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1655.043054][ T1877] __do_fast_syscall_32+0xe8/0x680 [ 1655.043085][ T1877] do_fast_syscall_32+0x32/0x80 [ 1655.043102][ T1877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1655.043125][ T1877] RIP: 0023:0xf7f61579 [ 1655.043157][ T1877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1655.043173][ T1877] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1655.043190][ T1877] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1655.043203][ T1877] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1655.043212][ T1877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1655.043222][ T1877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1655.043231][ T1877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1655.043253][ T1877] [ 1655.228029][ T1877] syz.5.6500: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1655.232968][ T1877] CPU: 2 UID: 0 PID: 1877 Comm: syz.5.6500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1655.232988][ T1877] Tainted: [L]=SOFTLOCKUP [ 1655.232993][ T1877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1655.233001][ T1877] Call Trace: [ 1655.233005][ T1877] [ 1655.233011][ T1877] dump_stack_lvl+0x16c/0x1f0 [ 1655.233047][ T1877] warn_alloc+0x248/0x3a0 [ 1655.233065][ T1877] ? __pfx_warn_alloc+0x10/0x10 [ 1655.233080][ T1877] ? kfree+0x2f8/0x6e0 [ 1655.233092][ T1877] ? __get_vm_area_node+0x2cd/0x330 [ 1655.233113][ T1877] ? __get_vm_area_node+0x2cd/0x330 [ 1655.233130][ T1877] ? __get_vm_area_node+0x1dc/0x330 [ 1655.233148][ T1877] ? __get_vm_area_node+0x208/0x330 [ 1655.233169][ T1877] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 1655.233181][ T1877] ? post_alloc_hook+0x19e/0x220 [ 1655.233197][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.233216][ T1877] ? __pfx___might_resched+0x10/0x10 [ 1655.233247][ T1877] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1655.233260][ T1877] ? should_fail_alloc_page+0xee/0x130 [ 1655.233280][ T1877] ? rcu_is_watching+0x12/0xc0 [ 1655.233297][ T1877] ? trace_mm_page_alloc+0x11b/0x180 [ 1655.233317][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.233332][ T1877] __vmalloc_node_noprof+0xad/0xf0 [ 1655.233343][ T1877] ? bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.233360][ T1877] __vmalloc_noprof+0xa3/0x120 [ 1655.233371][ T1877] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1655.233385][ T1877] ? apparmor_capable+0x1d7/0x4e0 [ 1655.233400][ T1877] bpf_prog_alloc_no_stats+0x58/0x600 [ 1655.233414][ T1877] ? security_capable+0x7e/0x260 [ 1655.233434][ T1877] bpf_prog_alloc+0x3b/0x230 [ 1655.233448][ T1877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1655.233468][ T1877] bpf_prog_load+0x19bc/0x2cc0 [ 1655.233494][ T1877] ? _parse_integer_limit+0x17f/0x1d0 [ 1655.233515][ T1877] ? __pfx_bpf_prog_load+0x10/0x10 [ 1655.233532][ T1877] ? __lock_acquire+0x436/0x2890 [ 1655.233559][ T1877] __sys_bpf+0x3e72/0x4980 [ 1655.233573][ T1877] ? __pfx___sys_bpf+0x10/0x10 [ 1655.233583][ T1877] ? find_held_lock+0x2b/0x80 [ 1655.233602][ T1877] ? find_held_lock+0x2b/0x80 [ 1655.233620][ T1877] ? __mutex_unlock_slowpath+0x161/0x790 [ 1655.233649][ T1877] ? fput+0x70/0xf0 [ 1655.233661][ T1877] ? ksys_write+0x1ac/0x250 [ 1655.233678][ T1877] ? __pfx_ksys_write+0x10/0x10 [ 1655.233697][ T1877] __ia32_sys_bpf+0x76/0xe0 [ 1655.233709][ T1877] ? lockdep_hardirqs_on+0x7c/0x110 [ 1655.233727][ T1877] __do_fast_syscall_32+0xe8/0x680 [ 1655.233747][ T1877] do_fast_syscall_32+0x32/0x80 [ 1655.233758][ T1877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1655.233774][ T1877] RIP: 0023:0xf7f61579 [ 1655.233784][ T1877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1655.233797][ T1877] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1655.233809][ T1877] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1655.233816][ T1877] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1655.233823][ T1877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1655.233830][ T1877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1655.233837][ T1877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1655.233852][ T1877] [ 1655.340523][ T1877] Mem-Info: [ 1655.341931][ T1877] active_anon:2034 inactive_anon:1404 isolated_anon:0 [ 1655.341931][ T1877] active_file:3150 inactive_file:7446 isolated_file:0 [ 1655.341931][ T1877] unevictable:1768 dirty:209 writeback:9 [ 1655.341931][ T1877] slab_reclaimable:6924 slab_unreclaimable:73260 [ 1655.341931][ T1877] mapped:29473 shmem:1817 pagetables:1683 [ 1655.341931][ T1877] sec_pagetables:338 bounce:0 [ 1655.341931][ T1877] kernel_misc_reclaimable:0 [ 1655.341931][ T1877] free:54246 free_pcp:14932 free_cma:0 [ 1655.364392][T16920] usb usb42-port1: attempt power cycle [ 1655.367861][ T1877] Node 0 active_anon:12kB inactive_anon:336kB active_file:4kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:4560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9812kB pagetables:1544kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB [ 1655.383412][ T1877] Node 1 active_anon:8124kB inactive_anon:5280kB active_file:12596kB inactive_file:29644kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:117872kB dirty:832kB writeback:36kB shmem:2708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6268kB pagetables:5188kB sec_pagetables:196kB all_unreclaimable? no Balloon:0kB [ 1655.394125][ T1877] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:560kB local_pcp:104kB free_cma:0kB [ 1655.404442][ T1877] lowmem_reserve[]: 0 289 289 289 289 [ 1655.406282][ T1877] Node 0 DMA32 free:16256kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:328kB active_file:4kB inactive_file:140kB unevictable:3536kB writepending:4kB zspages:1336kB present:1032196kB managed:296808kB mlocked:0kB bounce:0kB free_pcp:12528kB local_pcp:2396kB free_cma:0kB [ 1655.416330][ T1877] lowmem_reserve[]: 0 0 0 0 0 [ 1655.417851][ T1877] Node 1 DMA32 free:198328kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:1116KB active_anon:8224kB inactive_anon:5280kB active_file:12596kB inactive_file:29644kB unevictable:3536kB writepending:868kB zspages:4792kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:46328kB local_pcp:984kB free_cma:0kB [ 1655.428403][ T1877] lowmem_reserve[]: 0 0 0 0 0 [ 1655.429871][ T1877] Node 0 DMA: 24*4kB (U) 16*8kB (U) 5*16kB (UM) 6*32kB (UM) 3*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 1655.434389][ T1877] Node 0 DMA32: 168*4kB (UME) 390*8kB (UME) 253*16kB (UME) 147*32kB (UME) 32*64kB (UME) 9*128kB (UME) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 16256kB [ 1655.439602][ T1877] Node 1 DMA32: 3270*4kB (UMEH) 5532*8kB (UMEH) 3664*16kB (UMEH) 224*32kB (UMEH) 142*64kB (UMEH) 54*128kB (UMEH) 25*256kB (UM) 9*512kB (UM) 35*1024kB (UM) 6*2048kB (UM) 0*4096kB = 198264kB [ 1655.446074][ T1877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.449369][ T1877] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1655.452692][ T1877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.456102][ T1877] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1655.459031][ T1877] 13580 total pagecache pages [ 1655.460438][ T1877] 1171 pages in swap cache [ 1655.461860][ T1877] Free swap = 95832kB [ 1655.463505][ T1877] Total swap = 124996kB [ 1655.465021][ T1877] 524155 pages RAM [ 1655.467132][ T1877] 0 pages HighMem/MovableOnly [ 1655.468964][ T1877] 209060 pages reserved [ 1655.470393][ T1877] 0 pages cma reserved [ 1655.509296][ T1889] overlayfs: failed to resolve './file1': -2 [ 1655.880223][ T1897] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1655.882910][ T1897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1655.886101][ T1897] vhci_hcd vhci_hcd.0: Device attached [ 1655.934129][T16920] usb usb42-port1: unable to enumerate USB device [ 1656.182801][T16920] usb 48-1: SetAddress Request (67) to port 0 [ 1656.185095][T16920] usb 48-1: new SuperSpeed USB device number 67 using vhci_hcd [ 1656.338817][T10734] usb 13-1: USB disconnect, device number 16 [ 1656.378794][ T1913] FAULT_INJECTION: forcing a failure. [ 1656.378794][ T1913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.384890][ T1913] CPU: 3 UID: 0 PID: 1913 Comm: syz.8.6511 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.384913][ T1913] Tainted: [L]=SOFTLOCKUP [ 1656.384917][ T1913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1656.384925][ T1913] Call Trace: [ 1656.384929][ T1913] [ 1656.384934][ T1913] dump_stack_lvl+0x16c/0x1f0 [ 1656.384959][ T1913] should_fail_ex+0x512/0x640 [ 1656.384977][ T1913] copy_fpstate_to_sigframe+0x827/0xad0 [ 1656.385000][ T1913] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1656.385018][ T1913] ? posixtimer_deliver_signal+0x105/0x6b0 [ 1656.385038][ T1913] ? irqentry_exit+0x1dd/0x8c0 [ 1656.385057][ T1913] ? lockdep_hardirqs_on+0x7c/0x110 [ 1656.385075][ T1913] ? x86_task_fpu+0x5f/0x90 [ 1656.385092][ T1913] get_sigframe+0x4a8/0x9c0 [ 1656.385111][ T1913] ? __pfx_get_sigframe+0x10/0x10 [ 1656.385127][ T1913] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1656.385149][ T1913] ? _raw_spin_unlock_irq+0x29/0x50 [ 1656.385166][ T1913] ? siginfo_layout+0x177/0x290 [ 1656.385185][ T1913] ia32_setup_rt_frame+0xe4/0xb30 [ 1656.385202][ T1913] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1656.385216][ T1913] ? bpf_lsm_capable+0x9/0x10 [ 1656.385237][ T1913] arch_do_signal_or_restart+0x475/0x7a0 [ 1656.385255][ T1913] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1656.385272][ T1913] ? __pfx_do_syslog+0x10/0x10 [ 1656.385295][ T1913] exit_to_user_mode_loop+0x8c/0x540 [ 1656.385314][ T1913] __do_fast_syscall_32+0x4a4/0x680 [ 1656.385335][ T1913] do_fast_syscall_32+0x32/0x80 [ 1656.385347][ T1913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1656.385363][ T1913] RIP: 0023:0xf702d577 [ 1656.385373][ T1913] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 1656.385386][ T1913] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000067 [ 1656.385398][ T1913] RAX: 0000000000000067 RBX: 0000000000000002 RCX: 0000000080001500 [ 1656.385406][ T1913] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000000 [ 1656.385413][ T1913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1656.385420][ T1913] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1656.385427][ T1913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1656.385442][ T1913] [ 1656.479960][ T1903] vhci_hcd: connection reset by peer [ 1656.482878][T32207] vhci_hcd vhci_hcd.5: stop threads [ 1656.485296][T32207] vhci_hcd vhci_hcd.5: release socket [ 1656.488415][T32207] vhci_hcd vhci_hcd.5: disconnect device [ 1656.530325][ T1917] random: crng reseeded on system resumption [ 1657.253142][T16602] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1658.316522][ T1928] netlink: 'syz.8.6516': attribute type 12 has an invalid length. [ 1658.532283][ T1932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1658.662089][ T1935] netlink: 'syz.2.6518': attribute type 12 has an invalid length. [ 1659.362029][ T1939] sp0: Synchronizing with TNC [ 1659.382212][ T1939] sp0: Found TNC [ 1659.471711][ T1938] [U] è` [ 1659.483002][ T1945] netlink: 'syz.7.6522': attribute type 1 has an invalid length. [ 1660.160114][ T1953] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1660.162138][ T1953] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1660.171194][ T1953] vhci_hcd vhci_hcd.0: Device attached [ 1660.236779][ T1951] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6524'. [ 1660.552963][ T5956] Bluetooth: hci2: command 0x0c1a tx timeout [ 1660.750518][ T1954] vhci_hcd: connection closed [ 1660.751544][T22505] vhci_hcd vhci_hcd.8: stop threads [ 1660.756191][T22505] vhci_hcd vhci_hcd.8: release socket [ 1660.777794][T22505] vhci_hcd vhci_hcd.8: disconnect device [ 1661.264182][T16920] usb 48-1: device descriptor read/8, error -110 [ 1661.401860][ T1967] netlink: 'syz.7.6528': attribute type 12 has an invalid length. [ 1661.458140][ T1972] random: crng reseeded on system resumption [ 1661.591452][ T1977] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1661.593576][ T1977] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1661.596428][ T1977] vhci_hcd vhci_hcd.0: Device attached [ 1661.661362][T16920] usb usb48-port1: attempt power cycle [ 1661.879938][T22087] usb 54-1: SetAddress Request (10) to port 0 [ 1661.882562][T22087] usb 54-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1662.230244][T16920] usb usb48-port1: unable to enumerate USB device [ 1662.294407][ T1983] overlayfs: failed to clone upperpath [ 1662.369813][ T1978] vhci_hcd: connection reset by peer [ 1662.372186][T14400] vhci_hcd vhci_hcd.8: stop threads [ 1662.373976][T14400] vhci_hcd vhci_hcd.8: release socket [ 1662.375896][T14400] vhci_hcd vhci_hcd.8: disconnect device [ 1662.650116][ T1988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.935114][ T1996] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1663.093975][ T2005] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1663.096105][ T2005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1663.119770][ T2005] vhci_hcd vhci_hcd.0: Device attached [ 1663.127370][ T2005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6536'. [ 1663.155986][ T2008] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6539'. [ 1663.164101][ T2008] [ 1663.164938][ T2008] ====================================================== [ 1663.167172][ T2008] WARNING: possible circular locking dependency detected [ 1663.169345][ T2008] syzkaller #0 Tainted: G L [ 1663.171768][ T2008] ------------------------------------------------------ [ 1663.174657][ T2008] syz.8.6539/2008 is trying to acquire lock: [ 1663.176939][ T2008] ffff888052e32cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.180526][ T2008] [ 1663.180526][ T2008] but task is already holding lock: [ 1663.182988][ T2008] ffff888025cb16f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1663.186294][ T2008] [ 1663.186294][ T2008] which lock already depends on the new lock. [ 1663.186294][ T2008] [ 1663.189657][ T2008] [ 1663.189657][ T2008] the existing dependency chain (in reverse order) is: [ 1663.193029][ T2008] [ 1663.193029][ T2008] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}: [ 1663.195836][ T2008] __mutex_lock+0x1aa/0x1ca0 [ 1663.197569][ T2008] __netlink_dump_start+0x150/0x990 [ 1663.200231][ T2008] ip_set_dump+0x17f/0x210 [ 1663.201906][ T2008] nfnetlink_rcv_msg+0x9fc/0x1200 [ 1663.203740][ T2008] netlink_rcv_skb+0x158/0x420 [ 1663.205424][ T2008] nfnetlink_rcv+0x1b3/0x430 [ 1663.207050][ T2008] netlink_unicast+0x5aa/0x870 [ 1663.208746][ T2008] netlink_sendmsg+0x8c8/0xdd0 [ 1663.210446][ T2008] ____sys_sendmsg+0xa5d/0xc30 [ 1663.212532][ T2008] ___sys_sendmsg+0x134/0x1d0 [ 1663.214276][ T2008] __sys_sendmsg+0x16d/0x220 [ 1663.216037][ T2008] __do_fast_syscall_32+0xe8/0x680 [ 1663.218054][ T2008] do_fast_syscall_32+0x32/0x80 [ 1663.220001][ T2008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1663.222184][ T2008] [ 1663.222184][ T2008] -> #1 (nfnl_subsys_ipset){+.+.}-{4:4}: [ 1663.224677][ T2008] __mutex_lock+0x1aa/0x1ca0 [ 1663.226331][ T2008] ip_set_nfnl_get_byindex+0x7c/0x290 [ 1663.228272][ T2008] set_target_v1_checkentry+0x1ac/0x570 [ 1663.230231][ T2008] xt_check_target+0x27c/0xa40 [ 1663.232226][ T2008] nft_target_init+0x459/0x7d0 [ 1663.234055][ T2008] nf_tables_newrule+0xedd/0x2910 [ 1663.236149][ T2008] nfnetlink_rcv_batch+0x190d/0x2350 [ 1663.238302][ T2008] nfnetlink_rcv+0x3c1/0x430 [ 1663.240031][ T2008] netlink_unicast+0x5aa/0x870 [ 1663.242009][ T2008] netlink_sendmsg+0x8c8/0xdd0 [ 1663.243721][ T2008] ____sys_sendmsg+0xa5d/0xc30 [ 1663.245456][ T2008] ___sys_sendmsg+0x134/0x1d0 [ 1663.247127][ T2008] __sys_sendmsg+0x16d/0x220 [ 1663.248769][ T2008] __do_fast_syscall_32+0xe8/0x680 [ 1663.250567][ T2008] do_fast_syscall_32+0x32/0x80 [ 1663.252553][ T2008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1663.254721][ T2008] [ 1663.254721][ T2008] -> #0 (&nft_net->commit_mutex){+.+.}-{4:4}: [ 1663.257466][ T2008] __lock_acquire+0x1669/0x2890 [ 1663.259195][ T2008] lock_acquire+0x179/0x330 [ 1663.260620][ T2008] __mutex_lock+0x1aa/0x1ca0 [ 1663.262387][ T2008] nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.264293][ T2008] netlink_dump+0x539/0xd30 [ 1663.265912][ T2008] __netlink_dump_start+0x6d6/0x990 [ 1663.267775][ T2008] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 1663.269763][ T2008] nf_tables_getrule_reset+0x56b/0x6b0 [ 1663.272127][ T2008] nfnetlink_rcv_msg+0x583/0x1200 [ 1663.274097][ T2008] netlink_rcv_skb+0x158/0x420 [ 1663.275836][ T2008] nfnetlink_rcv+0x1b3/0x430 [ 1663.277464][ T2008] netlink_unicast+0x5aa/0x870 [ 1663.279517][ T2008] netlink_sendmsg+0x8c8/0xdd0 [ 1663.281438][ T2008] ____sys_sendmsg+0xa5d/0xc30 [ 1663.283410][ T2008] ___sys_sendmsg+0x134/0x1d0 [ 1663.285102][ T2008] __sys_sendmsg+0x16d/0x220 [ 1663.286733][ T2008] __do_fast_syscall_32+0xe8/0x680 [ 1663.288500][ T2008] do_fast_syscall_32+0x32/0x80 [ 1663.290422][ T2008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1663.292930][ T2008] [ 1663.292930][ T2008] other info that might help us debug this: [ 1663.292930][ T2008] [ 1663.296931][ T2008] Chain exists of: [ 1663.296931][ T2008] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 1663.296931][ T2008] [ 1663.302079][ T2008] Possible unsafe locking scenario: [ 1663.302079][ T2008] [ 1663.304448][ T2008] CPU0 CPU1 [ 1663.306200][ T2008] ---- ---- [ 1663.307908][ T2008] lock(nlk_cb_mutex-NETFILTER); [ 1663.309518][ T2008] lock(nfnl_subsys_ipset); [ 1663.312046][ T2008] lock(nlk_cb_mutex-NETFILTER); [ 1663.314896][ T2008] lock(&nft_net->commit_mutex); [ 1663.316831][ T2008] [ 1663.316831][ T2008] *** DEADLOCK *** [ 1663.316831][ T2008] [ 1663.319387][ T2008] 1 lock held by syz.8.6539/2008: [ 1663.321120][ T2008] #0: ffff888025cb16f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1663.324551][ T2008] [ 1663.324551][ T2008] stack backtrace: [ 1663.326450][ T2008] CPU: 2 UID: 0 PID: 2008 Comm: syz.8.6539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1663.326469][ T2008] Tainted: [L]=SOFTLOCKUP [ 1663.326475][ T2008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1663.326483][ T2008] Call Trace: [ 1663.326490][ T2008] [ 1663.326496][ T2008] dump_stack_lvl+0x116/0x1f0 [ 1663.326520][ T2008] print_circular_bug+0x275/0x340 [ 1663.326541][ T2008] check_noncircular+0x146/0x160 [ 1663.326559][ T2008] ? nf_tables_getrule_reset+0x56b/0x6b0 [ 1663.326576][ T2008] __lock_acquire+0x1669/0x2890 [ 1663.326590][ T2008] lock_acquire+0x179/0x330 [ 1663.326602][ T2008] ? nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.326617][ T2008] ? __pfx___might_resched+0x10/0x10 [ 1663.326637][ T2008] __mutex_lock+0x1aa/0x1ca0 [ 1663.326656][ T2008] ? nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.326670][ T2008] ? nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.326684][ T2008] ? __alloc_skb+0x186/0x410 [ 1663.326696][ T2008] ? rcu_watching_snap_stopped_since+0x81/0x110 [ 1663.326715][ T2008] ? __pfx___mutex_lock+0x10/0x10 [ 1663.326734][ T2008] ? net_generic+0xea/0x2a0 [ 1663.326751][ T2008] ? nf_tables_dumpreset_rules+0x6f/0xa0 [ 1663.326765][ T2008] nf_tables_dumpreset_rules+0x6f/0xa0 SYZFAIL: failed to recv rpc [ 1663.326779][ T2008] netlink_dump+0x539/0xd30 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1663.326795][ T2008] ? __pfx_netlink_dump+0x10/0x10 [ 1663.326810][ T2008] ? __pfx___mutex_lock+0x10/0x10 [ 1663.326831][ T2008] __netlink_dump_start+0x6d6/0x990 [ 1663.326847][ T2008] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 1663.326864][ T2008] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 1663.326882][ T2008] nf_tables_getrule_reset+0x56b/0x6b0 [ 1663.326897][ T2008] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 1663.326911][ T2008] ? __pfx_nf_tables_dumpreset_rules_start+0x10/0x10 [ 1663.326926][ T2008] ? __pfx_nf_tables_dumpreset_rules+0x10/0x10 [ 1663.326940][ T2008] ? __pfx_nf_tables_dump_rules_done+0x10/0x10 [ 1663.326953][ T2008] ? __nla_parse+0x40/0x60 [ 1663.326969][ T2008] ? __pfx_nf_tables_getrule_reset+0x10/0x10 [ 1663.326983][ T2008] nfnetlink_rcv_msg+0x583/0x1200 [ 1663.326998][ T2008] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1663.327012][ T2008] ? kfree_skbmem+0x1a4/0x1f0 [ 1663.327021][ T2008] ? preempt_schedule_thunk+0x16/0x30 [ 1663.327040][ T2008] netlink_rcv_skb+0x158/0x420 [ 1663.327056][ T2008] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1663.327069][ T2008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1663.327088][ T2008] ? ns_capable+0xd7/0x110 [ 1663.327103][ T2008] nfnetlink_rcv+0x1b3/0x430 [ 1663.327114][ T2008] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1663.327128][ T2008] netlink_unicast+0x5aa/0x870 [ 1663.327145][ T2008] ? __pfx_netlink_unicast+0x10/0x10 [ 1663.327160][ T2008] ? __pfx___might_resched+0x10/0x10 [ 1663.327178][ T2008] netlink_sendmsg+0x8c8/0xdd0 [ 1663.327194][ T2008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1663.327211][ T2008] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1663.327231][ T2008] ____sys_sendmsg+0xa5d/0xc30 [ 1663.327250][ T2008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1663.327267][ T2008] ? get_compat_msghdr+0x11a/0x170 [ 1663.327284][ T2008] ___sys_sendmsg+0x134/0x1d0 [ 1663.327298][ T2008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1663.327312][ T2008] ? ___pte_offset_map+0x175/0x380 [ 1663.327331][ T2008] ? find_held_lock+0x2b/0x80 [ 1663.327348][ T2008] __sys_sendmsg+0x16d/0x220 [ 1663.327362][ T2008] ? __pfx___sys_sendmsg+0x10/0x10 [ 1663.327379][ T2008] ? do_user_addr_fault+0x843/0x1370 [ 1663.327401][ T2008] __do_fast_syscall_32+0xe8/0x680 [ 1663.327423][ T2008] do_fast_syscall_32+0x32/0x80 [ 1663.327434][ T2008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1663.327450][ T2008] RIP: 0023:0xf702d579 [ 1663.327460][ T2008] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1663.327473][ T2008] RSP: 002b:00000000f4f9f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1663.327484][ T2008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1663.327492][ T2008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1663.327498][ T2008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1663.327505][ T2008] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1663.327512][ T2008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1663.327521][ T2008] [ 1663.342397][ T1984] base_sock_release(ffff888012fb5640) sk=ffff8880726a1000 [ 1663.529010][T16824] usb 41-1: new low-speed USB device number 16 using vhci_hcd [ 1663.780097][T30677] syz_tun (unregistering): left allmulticast mode [ 1663.789988][T14400] smc: removing ib device syz1 [ 1663.854532][ T1997] syz_tun (unregistering): left allmulticast mode [ 1663.905216][ T1999] syz_tun (unregistering): left promiscuous mode [ 1663.980348][ T2006] vhci_hcd: connection reset by peer [ 1663.989560][T10707] vhci_hcd vhci_hcd.2: stop threads [ 1663.991207][T10707] vhci_hcd vhci_hcd.2: release socket [ 1663.993122][T10707] vhci_hcd vhci_hcd.2: disconnect device [ 1664.384235][T21022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.455966][T21022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.534009][T21022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.592600][T21022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.692959][T21022] bridge_slave_1: left allmulticast mode [ 1664.694971][T21022] bridge_slave_1: left promiscuous mode [ 1664.696925][T21022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.700851][T21022] bridge_slave_0: left allmulticast mode [ 1664.703034][T21022] bridge_slave_0: left promiscuous mode [ 1664.704916][T21022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.832787][T21022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.836739][T21022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.841879][T21022] bond0 (unregistering): Released all slaves [ 1665.128760][T21022] hsr_slave_0: left promiscuous mode [ 1665.132079][T21022] hsr_slave_1: left promiscuous mode [ 1665.134985][T21022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.138350][T21022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.142038][T21022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.144818][T21022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.149564][T21022] veth1_macvtap: left promiscuous mode [ 1665.151427][T21022] veth0_macvtap: left promiscuous mode [ 1665.153671][T21022] veth1_vlan: left promiscuous mode [ 1665.155541][T21022] veth0_vlan: left promiscuous mode [ 1665.291438][T21022] team0 (unregistering): Port device team_slave_1 removed [ 1665.315051][T21022] team0 (unregistering): Port device team_slave_0 removed [ 1666.937495][T22087] usb 54-1: device descriptor read/8, error -110 [ 1667.327426][T22087] usb usb54-port1: attempt power cycle [ 1667.901101][T22087] usb usb54-port1: unable to enumerate USB device [ 1668.607999][T16824] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1672.695905][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1672.698156][ T1415] ieee802154 phy1 wpan1: encryption failed: -22