last executing test programs: 18m5.613362198s ago: executing program 32 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x55d0, 0x3000, 0x0, 0xfffffffa}) socket$igmp6(0xa, 0x3, 0x2) exit(0xffff) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, &(0x7f0000000280), 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x3614, 0x2c, 0x800, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x35e8, 0x2, [@TCA_BPF_POLICE={0x41c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2162}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0xfbf7, 0xfffffff7, 0x3, 0x0, 0x80000000, 0x101, 0x176, 0x1, 0x8, 0x4, 0x2, 0x101, 0x3, 0x1, 0x5, 0x10001, 0x7, 0xf4ea, 0x4e8, 0x76, 0x9a, 0xffffffff, 0x7f, 0x1, 0xa, 0x8, 0xffffc263, 0x0, 0xb, 0x9, 0x101, 0x8, 0x9, 0x5, 0x3, 0x7ff, 0x2205, 0x4, 0x3, 0x7, 0xd203, 0x9, 0x2, 0x8, 0x0, 0x5, 0x101, 0x4, 0xfffffffb, 0x9, 0x7, 0xa, 0x5, 0x7f, 0x4, 0x2, 0xffffff7f, 0x3, 0x6, 0x2, 0x3, 0x1, 0x7f, 0x9, 0x3, 0x2, 0x4000, 0x4, 0x0, 0x1, 0x6, 0x5, 0x8001, 0x1, 0x4, 0x8, 0x0, 0x5, 0x3d25, 0x8, 0x1, 0x5, 0x7a71, 0xc, 0x700, 0x80000001, 0x10001, 0x4, 0xd1ae, 0x8000, 0xaef8, 0x8, 0x6, 0x9, 0xfdb8, 0x8d, 0xd, 0x1, 0x2, 0xce, 0x5, 0x6, 0x6d, 0xb986, 0x46, 0x8, 0xe, 0x7, 0xd, 0x1, 0x1000, 0x1, 0x9, 0x1, 0x8, 0x4, 0x9, 0x3, 0x9a, 0x4, 0x6, 0x9, 0x0, 0x200, 0x8, 0x9d, 0x1ff, 0x80, 0xb93, 0x7fffffff, 0x1, 0x1, 0xffffffff, 0xffffff00, 0x8, 0x1, 0x0, 0x3, 0x2, 0x800, 0xb92, 0x4, 0x0, 0xfffffff7, 0x5, 0x6, 0x4, 0x19, 0x5, 0x1, 0xfff, 0x7, 0x0, 0x5035, 0x62d, 0x6, 0x1, 0x9, 0x80000001, 0xdd, 0x7fffffff, 0x1, 0x1da7, 0xffffb6c4, 0x8, 0x40, 0x9, 0x2, 0x401, 0x7, 0x9, 0x7, 0x6, 0x10001, 0x3, 0x159, 0x40, 0x5, 0x4, 0xfffffffd, 0x4, 0x33547423, 0x85d, 0x3, 0xff, 0x8, 0xfffffff7, 0x8, 0x5, 0x400, 0x5, 0x9, 0xffffff7f, 0x2, 0x39, 0x3, 0xf6, 0xaa98, 0x1ff, 0x8, 0x5, 0x5, 0x8, 0x2, 0x1400, 0x7, 0x800, 0x10, 0x1, 0x400, 0x8, 0x3, 0x4, 0xbd13, 0x101, 0x9, 0x8000000, 0x7fff, 0x4, 0x4, 0x0, 0x8, 0x8, 0x61747a07, 0x1, 0x0, 0xd, 0x6, 0xa0, 0x401, 0xee, 0x0, 0x4000, 0x81, 0x2, 0x4, 0xc, 0x625, 0x9, 0x9, 0xec8, 0x7150, 0x9, 0x7, 0x6e, 0x2, 0x7, 0x80000001, 0xffff, 0x5, 0x7, 0x9, 0x10001, 0x3]}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_NAME={0x15, 0x7, './file0/../file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xcf76, 0x1, 0xfa, 0xffffffff}, {0x2, 0x6, 0xd, 0x7}, {0x6, 0xc, 0xff, 0x4}]}}, @TCA_BPF_ACT={0x3158, 0x1, [@m_nat={0x108, 0x1d, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x0, 0x3, 0x8, 0xd}, @dev={0xac, 0x14, 0x14, 0x34}, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x5, 0x9, 0x9b}, @private=0xa010102, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x123d, 0x60000, 0xfffffffffffffffd, 0xc4, 0x4f6}, @multicast2, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x14d9, 0x0, 0x2, 0x2, 0xd}, @remote, @multicast1, 0xff, 0x1}}]}, {0x40, 0x6, "4f65d78129044ff252fb7b856b945cb633e998e19668f6fbc777721b0bef94e17091f473ab5ad7a1fc69672e70bda59a579ebeeda440a5abfede4238"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x2bf4, 0xf, 0x0, 0x0, {{0xa}, {0x2b24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x2, 0x7, 0x0, 0xa, 0xffff}, 0x8, 0x1, [{0x1000, 0xe5, 0xec, 0xff, 0xfffffffc, 0x7}, {0xae, 0x7, 0xfff, 0xfffffffc, 0x19, 0xb}, {0x0, 0x5, 0xe32, 0x0, 0x1000, 0x9bc}, {0x7, 0xfffeffff, 0x7, 0x6, 0x4, 0x4}, {0x101, 0xff, 0x9, 0x3, 0x5818edf, 0xfffffffd}]}, [{0x2, 0x0, 0x9, 0xffff8000, 0x5d50, 0xf3b3}, {0x7, 0x1, 0x0, 0x8, 0xfffffffe, 0x6}, {0x3ff, 0xff, 0xe, 0x3, 0x1, 0x3}, {0x8, 0x0, 0x6e3, 0x3, 0x6, 0x6}, {0x4, 0x200, 0x5, 0x7, 0x5, 0x1}, {0xfab, 0x3, 0xb0, 0x8, 0x21, 0x4}, {0x1, 0x200, 0x9, 0x5, 0x9, 0x3}, {0x576, 0x7, 0x6, 0x6, 0x59, 0xf}, {0xffff, 0x4, 0x3, 0x1000, 0x80000001, 0x5}, {0xae8, 0x7, 0xff, 0x8b4, 0x5, 0x100}, {0x5, 0x9, 0xf5, 0x671d3cab, 0x7, 0x5d}, {0x5, 0x0, 0x8, 0x7, 0x10, 0x3}, {0x401, 0x8, 0x0, 0x4, 0x6}, {0xc1b, 0x5, 0x5, 0x775, 0x3f3, 0xfffffffe}, {0x3, 0x3, 0x2, 0x1, 0x7ff, 0x64f}, {0x8, 0x2, 0x1, 0x7, 0x3ff, 0x5}, {0xfce, 0xffffffff, 0x4, 0x68cc, 0x7, 0x80}, {0x7fff, 0x9, 0xa58, 0x2, 0x10000, 0x7}, {0x800, 0x10001, 0x5, 0x8000, 0x8e, 0x530e}, {0x0, 0xa299, 0x4, 0x81, 0x20000, 0x1}, {0xb, 0x6, 0x3, 0x7c, 0x9, 0x4}, {0x65a, 0x7, 0x5, 0x7, 0x2, 0x9}, {0x6, 0x0, 0x6f5, 0x1, 0xd748}, {0xfff, 0x4, 0x3, 0x5, 0x5a7}, {0x9, 0x6e8, 0x6, 0xeac, 0x8000, 0x9}, {0x3, 0x8001, 0x0, 0xb, 0xffff, 0x38000}, {0x8, 0x3, 0xfffffffe, 0x5, 0xfffffffd, 0x1}, {0x2, 0x2, 0x400, 0x38, 0x8, 0x80000001}, {0x8, 0x6, 0x3, 0xc7, 0x9, 0x8}, {0x1, 0x4, 0x5, 0x8, 0x5, 0x1000}, {0x1, 0x5, 0x100, 0x8, 0x10001, 0x7}, {0x6, 0x850e, 0x5, 0x400, 0x6, 0x7}, {0xfffffffa, 0x9, 0x1, 0x400, 0xff, 0x10}, {0xf16, 0x6, 0x3, 0x5, 0x0, 0x3}, {0x1, 0x1, 0x1, 0x2, 0x6, 0x3}, {0x5, 0xfe6, 0x0, 0x3, 0x80000001, 0x8001}, {0x6, 0x2, 0x5, 0x4, 0x4, 0x3}, {0x1000, 0x6, 0x2, 0x0, 0x2, 0x1}, {0x4, 0x2, 0xb8f, 0x3, 0x6, 0x7}, {0x7, 0x4, 0x52d6, 0xfffffff7, 0x9}, {0x7, 0x10001, 0x2, 0x180, 0xfffffff4, 0x1}, {0x6, 0x49d3, 0x5, 0x8001, 0xffffff63, 0x7}, {0x0, 0xf, 0x8000, 0x4, 0x9, 0xc6b}, {0x7ff, 0x1, 0x470, 0x9, 0x3, 0x4}, {0x5, 0x2, 0x6, 0x6, 0x7, 0x2}, {0x8, 0x3, 0x6, 0x101, 0x4, 0x800}, {0x2, 0xff, 0x3, 0x4, 0x10000, 0x7}, {0x6, 0x7, 0x7, 0x7, 0x6, 0xfffffffc}, {0x1590f164, 0x80000001, 0x101, 0x5a5806da, 0x40, 0x80000000}, {0x56, 0xd, 0x6, 0x6, 0x6, 0x3}, {0x4, 0x7, 0x1868, 0x6, 0xa, 0xffffffff}, {0x1, 0x9, 0xfe4, 0x10001, 0x9, 0x1f9}, {0x7, 0x53d5, 0x9, 0x3, 0x8, 0x6e}, {0x10, 0x6, 0xfffffffb, 0x7735, 0x1, 0x2}, {0x773, 0x10000, 0xb, 0x4d7, 0x5660, 0x771}, {0x5, 0x9, 0x170, 0xff, 0x5, 0x8}, {0x3, 0xfffffffa, 0x6, 0x1, 0xfffffe00, 0x80}, {0x800, 0x3, 0x7, 0x5, 0x8, 0xffffffb3}, {0x3, 0x9, 0x3, 0x50eb591b, 0x8, 0xffffff00}, {0x6, 0xffffffff, 0x4, 0x6, 0x8, 0x9}, {0x8000, 0x101, 0xac, 0x0, 0x3, 0xff}, {0x686, 0x773, 0x7, 0xd77, 0x8, 0xffffffff}, {0x7, 0x0, 0x6, 0xff, 0x1000, 0x6}, {0x4bffeaed, 0xff, 0x3387, 0x7ff, 0x0, 0xb}, {0x220, 0x9, 0x6, 0x25c70b65, 0xfffff000, 0x610f9864}, {0x3, 0x8, 0x8, 0x4, 0x9, 0x400}, {0x8, 0x10, 0x6, 0x2ad49e6d, 0x0, 0x7}, {0x6, 0x37, 0xb, 0xffffff80, 0x6098, 0xa51}, {0xc, 0x1, 0x6e5a, 0x8, 0x3, 0x719d573a}, {0x0, 0xb6a, 0xe, 0xdc0, 0xc, 0x8001}, {0x1, 0x1ff, 0x7, 0x7, 0x5, 0xfffffffd}, {0x5, 0x56a, 0x9, 0xffffffff, 0x1, 0x2}, {0x5d4, 0x3, 0xffff34c4, 0x9, 0xfffffff9, 0x8}, {0x370, 0xffffff80, 0x2, 0x1, 0x1, 0x9}, {0x100000, 0x9, 0x6, 0x4, 0x7, 0x7}, {0x6, 0x9, 0x1000, 0x6, 0x5, 0xaa0b}, {0xffff, 0x4, 0x8, 0x9, 0xfffffffe, 0x6d}, {0xe9, 0x0, 0x9, 0x6, 0x10, 0xabf}, {0x9, 0xca72, 0x2d7, 0x1ff, 0x4, 0xffffffff}, {0xef22, 0x6, 0x326, 0xcc1c, 0x4, 0x80000001}, {0x4, 0xfff, 0xffffffff, 0x8ccf, 0xb, 0x1ff}, {0x7, 0x1, 0x8, 0x100000, 0x77a, 0x6}, {0x1, 0x9, 0x0, 0x3, 0x7, 0xe12e}, {0xd07c, 0x401, 0x3, 0x8, 0x4, 0x5}, {0x8685b7d9, 0x6, 0x1920, 0x8, 0xfffff0db, 0xfffffffa}, {0x8001, 0x1, 0x2, 0x8, 0x8, 0x1ff}, {0x2, 0x3, 0x2, 0x80000000, 0x1, 0x6}, {0xfffffffe, 0x2578, 0xa, 0x0, 0x7, 0x3}, {0x4, 0x9, 0x6, 0x8, 0xb3, 0x3ff}, {0x7fff, 0x0, 0x7, 0xf, 0x2, 0x1}, {0x2, 0x7, 0x800, 0x2ffe, 0x7, 0x5}, {0x5768, 0x2, 0x5, 0x9, 0x4a487e46, 0x2}, {0x6, 0xf0d2, 0x5, 0x5, 0x1}, {0x40, 0xd1, 0x7, 0x5, 0x9, 0xa71d}, {0x80000001, 0xfffffffc, 0x5, 0x7e, 0x6}, {0x6d9, 0x4, 0x5, 0x0, 0x8, 0xb7a}, {0x7, 0x7, 0x7, 0x1ff, 0x6, 0x17}, {0x4, 0x5, 0x8, 0xda5, 0x401, 0x9c8}, {0x5, 0xa7c, 0x8, 0x0, 0x3c9, 0x2}, {0x9, 0x2, 0x7ff, 0x2, 0x0, 0x9}, {0xa, 0x10, 0x255b3a45, 0x0, 0x8001, 0x9}, {0x6, 0x5, 0x7fff, 0xb, 0x6, 0xff}, {0xb7be, 0x8, 0x0, 0x400, 0x4, 0x2}, {0x38e9, 0x2, 0x1, 0x6, 0x1ff, 0x4}, {0x88, 0xffff0001, 0x3, 0xf2, 0x3ff, 0x5}, {0x4, 0x0, 0xcdc, 0x9, 0x4, 0x52c}, {0x7, 0x800, 0x40, 0x5, 0x4, 0x8001}, {0xfffffff7, 0x8, 0x9, 0x466, 0x4, 0x4}, {0x6950ced6, 0x5, 0x3, 0x2d36, 0x0, 0x7}, {0x80, 0xffffffff, 0xfff, 0x8, 0xfffffff9, 0x8}, {0x3, 0x9, 0x9, 0x9, 0x3, 0xfffffeff}, {0x2, 0x81d6, 0xc, 0x448d6556, 0x6, 0x101}, {0x1000, 0x800, 0x6, 0xd5, 0x6, 0x1}, {0x2, 0x7fffffff, 0x0, 0xa, 0x6508, 0x2}, {0x17c3, 0x5, 0x10000, 0x400, 0x2, 0x21a3}, {0x0, 0x8000, 0x6, 0xd5fa, 0x5, 0x1}, {0x13, 0x78, 0x2, 0x38b3, 0x1, 0x5}, {0x10000, 0x9, 0x9, 0x1161, 0x1, 0x5185}, {0x2, 0x5, 0x9, 0x3, 0x5, 0x8a}, {0x32f4ceb6, 0x4, 0x400, 0x401, 0x800, 0x7ff}, {0x1662, 0xfffffffb, 0x4, 0x5, 0x1, 0x7}, {0x4, 0x8001, 0x6, 0xb, 0x5, 0x6006f96e}, {0x7fff, 0x3b, 0xe7e7, 0x80000001, 0x3, 0x7}, {0x6b, 0x7, 0x7, 0x1ff, 0xb, 0x6}, {0xffffffff, 0x6, 0x8001, 0x401, 0x3ff, 0x9}, {0xfffffff3, 0x5, 0x200, 0xfffffff9, 0x4, 0x9}, {0x1ff, 0x6, 0xffffff69, 0x24f, 0x6, 0xfffffff8}, {0x4, 0x38, 0xffff8001, 0x240, 0x6a, 0x200000}], [{0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x7}, {}, {0x4}, {0x4, 0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x2}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x42482b53ac5ac50d}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0xfa834df222c3b8d3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x4}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1}, {0x3}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xf03a, 0x8, 0x1}, 0x9, 0x2, [{0xe355, 0x6, 0x2, 0xffffffff, 0x0, 0xd}, {0x4, 0x6, 0x5, 0x40, 0xfffffffc, 0xfffffffc}, {0x8, 0x7, 0x81, 0x9, 0x2, 0x1}]}, [{0xc, 0x6, 0x9, 0xfa5, 0x0, 0xfffffff9}, {0xd20, 0x7, 0xeb, 0x1, 0x0, 0x2}, {0x9, 0x5, 0x524, 0x7, 0x6, 0x1000}, {0x0, 0xfffffffd, 0xc3d6, 0x7fffffff, 0xa5f, 0x7}, {0x10001, 0x9, 0x5, 0x2, 0x6, 0x401}, {0x5, 0x2, 0x4, 0x1, 0x7, 0x8}, {0x101, 0x4, 0x0, 0x6, 0x80000001, 0x80}, {0x3, 0x8, 0x7f, 0x1000, 0x5d}, {0xe, 0x6, 0x10001, 0x5, 0x5, 0xe00000}, {0x6, 0x1000, 0x7, 0x1ff, 0x92d, 0x401}, {0x1, 0x8, 0x3, 0x6, 0x8, 0x5}, {0x9, 0x4, 0x5d, 0x4, 0x4, 0x5}, {0x6, 0xe1, 0x6, 0x4, 0x0, 0x2}, {0x0, 0x8, 0x8, 0x65765afc, 0x9, 0xb}, {0x9, 0x7, 0x6, 0x0, 0x2ba, 0x66}, {0x6, 0x80000000, 0x2, 0x2, 0x1, 0x7}, {0x4, 0x2, 0x4, 0x7f, 0x2, 0x3}, {0x2, 0x6, 0x80000000, 0x6, 0xffffff1c, 0x1000}, {0x5, 0x3, 0x0, 0x7, 0x8000, 0x10}, {0x5, 0x4, 0xfffffadc, 0x7, 0x2, 0x2}, {0x2, 0x3ff, 0x5, 0x40, 0x6ca6, 0xfff}, {0x9, 0x4, 0x0, 0x5, 0x7}, {0x9, 0x3842, 0x0, 0x80, 0x7, 0xfffffffd}, {0x81, 0x6, 0x396e, 0x7, 0x3, 0x401}, {0x8, 0x4, 0x6, 0x8ee, 0x791cdf05, 0xb}, {0x2a, 0x8, 0x2, 0x2, 0x5, 0x550}, {0x5, 0x4, 0x0, 0x8001, 0x3, 0x6}, {0x3, 0x6, 0x2, 0x8, 0xc, 0xe}, {0x6c, 0x0, 0x2, 0x0, 0x32, 0x85}, {0x6, 0x401, 0x6, 0x5, 0x2}, {0x7, 0x8, 0x3, 0x0, 0x28, 0x4}, {0x3, 0x26c3, 0xf, 0xffff0000, 0x3, 0x6}, {0x7, 0x2, 0x3, 0x819, 0x88, 0x9}, {0x2a510e86, 0x5, 0x10, 0x6, 0x9, 0x200}, {0x14, 0xce3, 0x8, 0x9, 0x5c6c, 0x101}, {0x0, 0x35f7, 0x3a26, 0x0, 0x2}, {0x1000, 0x78903a30, 0x9, 0x780355ec, 0x1412, 0x1}, {0xffffffff, 0x8, 0x1, 0x4, 0x0, 0xffffff81}, {0x5, 0x401, 0x9, 0x5, 0xfffffff8, 0x473}, {0x9, 0xf, 0x7, 0xffff, 0x38, 0x1}, {0x7fffffff, 0x2, 0x2, 0x7f, 0x9, 0x5}, {0xa, 0x0, 0x3ff, 0x4, 0x0, 0xfbb}, {0x4, 0x3, 0x1, 0xea9, 0x8, 0x401}, {0x9, 0x2, 0x0, 0x2, 0x3, 0xb}, {0x1, 0x1, 0x9c2, 0x3, 0x10, 0x7}, {0x8, 0x9, 0x3, 0x10000, 0x4d, 0x7fff}, {0x6, 0xfffffc00, 0x4, 0x8, 0xd4, 0xdace}, {0xa, 0x404, 0x5, 0x80000, 0x9}, {0x37, 0xfffff4f1, 0x7, 0x3, 0xa, 0x7c}, {0x101, 0x2, 0x60000, 0xfffffff7, 0x3, 0x9}, {0x9, 0x7ff, 0x7fff, 0x8, 0x9, 0x1}, {0x9, 0x862, 0x0, 0xff, 0x1, 0x67be}, {0xe52, 0x1, 0x9, 0x6, 0x5, 0x9}, {0x7fff, 0xf, 0x1ff, 0x1, 0x53c, 0x8}, {0x1, 0x6, 0x8, 0x4, 0x2, 0x3}, {0x6, 0x1, 0x0, 0x9, 0x4, 0x33bfb24a}, {0x2, 0x7fffffff, 0xfbe, 0x2, 0x0, 0x8}, {0x9, 0x10, 0x4, 0x5789, 0x4, 0x2}, {0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x5}, {0xecab012, 0x1, 0x7, 0xa, 0xfffffffb, 0x2}, {0x0, 0x8, 0xffff, 0x8, 0x7, 0x6}, {0xffffffff, 0x2, 0x1, 0x0, 0x6, 0x40}, {0xc, 0x4, 0x1, 0x0, 0xdd, 0x4c}, {0x3, 0x8, 0x7fff, 0x4, 0xab8, 0x9}, {0x4, 0x6, 0x83b, 0x6, 0x4}, {0x7, 0x24000000, 0x3, 0x2d9, 0x6, 0x401}, {0x2, 0x8, 0x1, 0x7ff, 0x3, 0x67}, {0x7, 0x1, 0x2, 0x49, 0xffffffff, 0xffffffff}, {0x5, 0x62, 0x8, 0x2, 0x400, 0x2}, {0x1ff, 0x7, 0x9, 0x8000, 0x5, 0x3f7c}, {0x0, 0x4ab, 0xca, 0x4, 0x5, 0x6}, {0x4a, 0x5, 0x5f50, 0x9, 0x7, 0x10}, {0x9, 0x1, 0x800, 0x7c7183a9, 0x7, 0x4}, {0x1, 0x9, 0x5dd, 0x1, 0x80000001, 0x80000000}, {0x4, 0x1, 0xd37c, 0x1, 0xc, 0x6905}, {0x1, 0x0, 0x4, 0x4, 0x4769, 0x80000001}, {0x6, 0x8, 0x10, 0x1, 0x0, 0x401}, {0x5, 0x2, 0x9, 0xf, 0x0, 0x6}, {0x3d, 0x0, 0x1ff, 0x4, 0x7f, 0x6}, {0x8, 0x4, 0x7, 0x4, 0x3, 0xe}, {0x100, 0x3, 0x4, 0x8, 0x9}, {0x8, 0x4, 0x2, 0x7, 0x5, 0xe277}, {0x0, 0x9e34, 0xe300, 0x3, 0x9, 0xfffffff8}, {0x9, 0x6, 0x9, 0xa, 0x7, 0x9}, {0x56df, 0x800, 0x0, 0x8, 0x80000001, 0x8}, {0x2, 0x6, 0x8, 0x0, 0x7f, 0x5}, {0xd1c, 0x1, 0x8000, 0x80000001, 0x5, 0x9}, {0x3, 0xb, 0x7, 0x3, 0x1b8, 0xdf3}, {0xc, 0x4, 0x8, 0x8000, 0xffff, 0x7}, {0x4f3, 0x7, 0x5, 0xb, 0x800, 0x84bd}, {0x2, 0x101, 0xc4c8, 0x2000000, 0x5, 0x2}, {0x4, 0x8, 0x7, 0xd0, 0x8001}, {0x54a3, 0xc, 0x3, 0x9, 0xa, 0x8}, {0x4, 0x3, 0x8, 0x5, 0xc, 0x1}, {0x10001, 0x88, 0xda88, 0x3, 0x0, 0x8}, {0x200, 0x5, 0x5, 0x5, 0x80000000, 0x8}, {0x400, 0x3, 0x3, 0xfff, 0x5, 0xb}, {0x1, 0x646, 0x2, 0x3, 0xca, 0x74}, {0x31, 0xdfd, 0x5, 0x9, 0x8, 0x8000}, {0x26, 0x4, 0x0, 0x7, 0x7, 0x3}, {0x2, 0x0, 0x45, 0x24000000, 0x2, 0x8b5}, {0x400, 0x4, 0xe2f3, 0x9, 0x80, 0x8}, {0x1, 0x103, 0x5f, 0x0, 0x2, 0x7}, {0xfffffcc2, 0x2, 0x23, 0x7, 0x3, 0x5}, {0x8, 0x5, 0xc, 0xa, 0x1, 0x9}, {0x6, 0x10a9, 0x48, 0x9, 0x1, 0xe}, {0x2, 0x100, 0x2, 0x5, 0x6, 0x800}, {0x4, 0xf29, 0x8, 0x6, 0x6, 0x9}, {0xfec9, 0x88, 0x5, 0x1476, 0x9, 0xe96}, {0x3, 0x5, 0xffff168a, 0x81, 0xffff, 0x5}, {0x1, 0x34, 0x9, 0xfff, 0x10000, 0x1}, {0x3, 0x1, 0x8, 0x101, 0x2, 0x400}, {0x0, 0x64, 0x7, 0x9, 0x5, 0x5}, {0x2, 0x2, 0x5, 0x8, 0x3, 0x6}, {0x7, 0x3, 0x5, 0x6c7, 0x4, 0x7fff}, {0x10000, 0x6, 0x80, 0x9, 0x81, 0x2}, {0x1, 0x4, 0x0, 0x1, 0x925, 0x1}, {0x54, 0x2, 0x1, 0x3, 0x5e8, 0x55f}, {0x7, 0x8001, 0x101, 0xfffffffe, 0x3, 0x200}, {0x2, 0x4, 0x7f, 0x19ce, 0x0, 0x8}, {0x6a6, 0x80000000, 0xb09, 0x4, 0xe, 0x6f}, {0x6, 0x0, 0x3ff, 0x3, 0x0, 0x1000}, {0x1, 0x9, 0x0, 0x4, 0x7ff, 0x800}, {0x0, 0x4, 0x101, 0x2b, 0x1, 0x2}, {0x80000000, 0x15, 0xffffffff, 0x896, 0xa74e297, 0x1}, {0xfff0000, 0x5, 0x400, 0x1000, 0x7cf6, 0x2}, {0x0, 0x3, 0x7, 0xcd, 0x40000000, 0x5}, {0x6c, 0x6, 0x3, 0x3, 0x3, 0x6}], [{0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x3}, {}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x37080de3c11a1c70}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x45f, 0x401, 0x20000000, 0x0, 0x6}, 0x5, 0x6}, [{0x8, 0x492b, 0x23, 0x3, 0x7e7, 0x4}, {0x2, 0xa, 0xb4, 0x1, 0x7ff, 0x80}, {0x6, 0xa221, 0x9, 0x2, 0x7, 0x1}, {0xc, 0x10, 0x0, 0x5, 0x4, 0x2}, {0xfffffffa, 0x6, 0xdade, 0x3, 0x7, 0xfffffff1}, {0x4, 0x1, 0x80, 0xbc, 0x6, 0x5}, {0x100, 0x3, 0x9, 0x60e, 0xd326, 0x2}, {0x9d, 0xe, 0x0, 0x5, 0x7fff, 0x5}, {0xf2, 0x2, 0x3, 0xfff, 0x6, 0xd}, {0x40, 0xfffffffb, 0x8, 0x3639, 0xee, 0x7}, {0x8, 0x2, 0x401, 0x6, 0x9, 0xffffff7f}, {0x8, 0x8, 0x7, 0xffffff23, 0x4, 0x1}, {0x6, 0x1ff, 0x3, 0x2, 0x0, 0x1}, {0x98, 0xb, 0x2, 0x9, 0x4da2d5b8, 0x401}, {0x1, 0xd, 0x5, 0x9df, 0x80000000, 0x800}, {0x8, 0x5, 0x800, 0x4, 0x1, 0x6}, {0x2, 0x8, 0x2, 0x4, 0xd, 0x3}, {0xffffffb1, 0x0, 0x4, 0x7, 0x851, 0x4}, {0xa3, 0x7d3, 0xfffffffc, 0xffffff05, 0x8, 0x7}, {0x8, 0xe, 0x800, 0x8, 0x400, 0xb}, {0x0, 0x2, 0xa736, 0x6, 0x8, 0xea}, {0x6, 0x7, 0x1, 0x4, 0xc73, 0x4de5}, {0x3, 0x10000, 0x4, 0xffff0000, 0x2, 0xb}, {0x8a4, 0x3ff, 0x80000000, 0x69fd, 0x9, 0x9}, {0x1, 0x7f, 0x7, 0x8, 0x9, 0x8}, {0x408000, 0x2, 0x3, 0x6, 0xa520, 0x253}, {0x8, 0x0, 0x1, 0x2, 0x4, 0x1}, {0x6, 0x7fffffff, 0x80, 0x4, 0x4, 0x3}, {0x3, 0x6, 0x80, 0x18, 0xd, 0x512}, {0x2, 0x9, 0x4a2, 0x1, 0x7, 0x6}, {0xff, 0x798, 0x3, 0x9, 0x10000, 0xffffd496}, {0x3ff, 0x5, 0x0, 0x6, 0x2, 0x4}, {0x87, 0x3ff, 0x4, 0x4, 0x101, 0x5}, {0x10000, 0x6, 0x6, 0xc, 0xa, 0xfffffbff}, {0x6, 0xffffffff, 0x1, 0xfffffffc, 0x6, 0x8}, {0x8, 0x5, 0x9, 0x9ccc, 0x5, 0x800}, {0x2, 0x6, 0x8, 0x100, 0x3, 0x8}, {0x81, 0x0, 0x6, 0x54, 0xeb, 0x6}, {0xc, 0xab0b2e24, 0x80, 0x0, 0x6, 0x1}, {0x2644, 0xf4, 0x7, 0x0, 0x1, 0x2}, {0x100, 0x6, 0x8, 0x0, 0x2, 0x4}, {0x5, 0x2, 0x2, 0xf5e5, 0x9, 0x302}, {0xfa, 0xb19, 0x8, 0x0, 0x10001, 0x4}, {0x7, 0x8cd, 0x6, 0x4, 0x96f0, 0x5}, {0x9, 0xffff0077, 0x7, 0x6, 0x5}, {0x3, 0x207e, 0xffff, 0x9, 0x11d, 0x7f}, {0xffffff80, 0x1, 0x7444, 0x4, 0xb, 0x4}, {0x6, 0x3, 0x7, 0xf, 0x0, 0x9}, {0x8ad, 0x3, 0x200, 0x2, 0xfffffff9, 0x80}, {0x7, 0x3ff, 0x200, 0x9, 0xa1, 0xd}, {0x1, 0x9, 0x7, 0xfffffffd, 0x3, 0x6}, {0x2, 0x1000, 0xffffffff, 0x4488, 0xfffffffc, 0x7f}, {0x5, 0x9, 0x3a7, 0x5, 0x73, 0xdb3d}, {0x5, 0xede, 0xd3, 0x0, 0x10, 0x80000001}, {0xc4a, 0x9e62, 0x3, 0x0, 0x6, 0x4}, {0x7, 0x10001, 0x5, 0x7fff, 0x6, 0x1}, {0x9, 0x5, 0x0, 0x9, 0x3, 0x9}, {0x6, 0x7fff, 0x2, 0x400, 0x9, 0x97}, {0x6, 0x1, 0x8, 0x9f3, 0x6, 0x101}, {0x200, 0x3, 0x4, 0xaf9, 0x7f, 0x2}, {0x7800000, 0x8001, 0x9, 0x1000, 0x7f, 0xffff}, {0xcd, 0x20, 0xffffffff, 0x0, 0xfff, 0xf8}, {0x1000, 0x6a, 0x332, 0xa, 0x200, 0x6}, {0x6, 0x92d4, 0x7, 0x7, 0xd2ac2a3, 0x7}, {0x7, 0xffff2c20, 0x8, 0x4, 0x8, 0x1}, {0x7, 0x7, 0x2, 0x66b, 0xc0000000, 0x7}, {0x88000000, 0xa, 0xffffffff, 0x9, 0x0, 0x9}, {0x80, 0x6, 0x5, 0x6, 0x9, 0xffff}, {0x6, 0x7, 0x8, 0x1, 0x80000000, 0x4}, {0x3ff, 0x0, 0x589cda98, 0x0, 0x7, 0x7ec}, {0x8, 0x9, 0x3, 0x20000, 0x1, 0xfffffffd}, {0x401, 0x2f, 0x7, 0xe7c, 0x9, 0x2}, {0x7, 0x10001, 0x1ff, 0x181, 0x6, 0x2}, {0x1, 0x4, 0x14, 0x6, 0xffffff60, 0xae01}, {0x18e9, 0x3, 0xfffffff8, 0x0, 0x2, 0x766}, {0xffffffff, 0xac, 0x0, 0x10000, 0x4, 0xf87}, {0x8, 0xfff, 0x7, 0x7, 0x3, 0x3}, {0x668, 0x1, 0x6, 0x4, 0x5, 0x5}, {0xca, 0xffff8001, 0x3, 0x8, 0x8, 0x8}, {0x2, 0x2, 0xeb, 0xa, 0x6, 0x5}, {0x6, 0xb, 0x2, 0x4, 0x2, 0x3}, {0x5, 0x5, 0x5, 0x8, 0x7}, {0x8, 0x8, 0x5, 0x1, 0x6, 0x4}, {0x0, 0x8, 0xfffffff4, 0x3, 0x0, 0x9}, {0x81, 0x8, 0x0, 0x3, 0x6, 0x7}, {0x7, 0x2, 0x5, 0x1, 0x400, 0x6}, {0xf, 0x10, 0x80000001, 0x3ff, 0x80000000, 0x8}, {0x8, 0x3, 0x1, 0x0, 0xaa66, 0xa90}, {0x9, 0x5, 0xb, 0xd7f, 0xffffffff, 0xc}, {0x80000001, 0x6, 0x4, 0x3, 0x200, 0x8}, {0x7, 0x2a45, 0x1, 0x2, 0x0, 0x2}, {0x5, 0x6, 0x2, 0x1, 0x7, 0x2}, {0x5, 0x800, 0xffff, 0x8a, 0xd595, 0x8}, {0x7e5, 0x0, 0x8, 0x1, 0x4, 0x7f}, {0x2, 0x80000001, 0x2e958504, 0x2, 0x10, 0x5b10}, {0x2, 0x2, 0x9, 0x0, 0x9, 0x5}, {0x1, 0xa3b7, 0x43d, 0x7, 0x2, 0x51b}, {0x4, 0x10000, 0x77da, 0x8, 0x401, 0x6}, {0x101, 0x5, 0x100, 0xb8d, 0x7, 0x7f0a89de}, {0x0, 0x3, 0x9427, 0x9, 0x2d813efe, 0x6}, {0xe6d3, 0x1, 0x43fab855, 0x3, 0x8, 0x1}, {0xfffffff0, 0xa, 0xd0, 0xb, 0x7f, 0x10}, {0x9, 0x1, 0x7, 0x0, 0xfffffd01, 0x3ff}, {0x5, 0x4, 0x1, 0x3, 0xf8000000, 0x3}, {0x70, 0x9, 0x2, 0xc9, 0x81, 0x3}, {0x1, 0x2, 0x800, 0x1ff, 0x1e, 0x9}, {0x80000001, 0x11, 0x80000000, 0x7, 0xa}, {0x5, 0x7fffffff, 0x5, 0x4, 0x6, 0x9000000}, {0x9, 0x7, 0xaef9, 0x9, 0x4, 0x3}, {0x8, 0x1000, 0x1, 0x2d71f2a0, 0x83b, 0x38000}, {0x8, 0x2, 0x2, 0x0, 0xb, 0x81}, {0x4, 0x1, 0x100, 0x5, 0x1, 0x10}, {0x3, 0x1000, 0x800, 0x1ff, 0x4}, {0x8, 0xfffffffa, 0x3, 0x278330d0, 0x1e73, 0x6}, {0x2, 0xe37d, 0xe78, 0x80000, 0x80000000, 0x1}, {0x6, 0x6, 0x8000, 0xfff, 0x401, 0x6}, {0x2, 0x3, 0x4, 0x10001, 0x6, 0x5cac}, {0xc188, 0x3, 0xffffffff, 0x879, 0x7863, 0x7fffffff}, {0x7ff, 0xb0000000, 0x1, 0x2aad, 0x6}, {0x5, 0x80000001, 0x5, 0x10, 0xd072, 0x9}, {0x2, 0x3, 0x6, 0x7b3c, 0x3ff, 0xffffff81}, {0x8, 0x6, 0x7f, 0x2, 0x1, 0xb0}, {0x2, 0x5, 0x82, 0xffff, 0xfff, 0xc}, {0x0, 0x8, 0x615e, 0x68b, 0x4, 0x1}, {0x9bb, 0x4, 0x5, 0x0, 0xff, 0xfffffffb}, {0x80000000, 0x1f, 0x401, 0x4, 0x10001, 0x78}, {0x2, 0xffffffff, 0xe, 0x5, 0xfffffff9, 0x3}, {0x1, 0x0, 0x3, 0x6, 0x0, 0x10}], [{0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x1}, {0x1}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x4}, {0x1}, {0x3}, {0x2}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0xd, 0x1}, {0x1}, {0x2}, {}, {0x3}, {0x2, 0x88504272ca2a4221}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x5}, {0x5}, {0x2}, {}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x23a8af75574b3632}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1, 0x1}], 0x1}}]}, {0xa6, 0x6, "557142d35684977a35895d206ca9c6870fa0b8275e5ee3f53b2de1e1d914c00872f6a8cfa9808a3f817c18f92d7865c80897ab319fd94193c8a85ad893b0ac9cd4c7ba625e93d6e8cd844cc5f4efcaa24a40e956527b34b9548b395eb0fe76b2b9872bd7ca586d188bf55015e293d7765dd0383cd75cb56c73f8e0f57f14f4f5d49a392d76064267b942b3b462e870ca3265a8c0644791c11c2e22b7f8ffd6cbaf4e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x90, 0x1b, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}]}, {0x2e, 0x6, "a9bf81bf2499867310a4fc70667b7850ece4a320ad2a84a9be01b533176ff1424f436760e784d7a34018"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x170, 0xd, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe94, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x10000, 0x20000000, 0xb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0xee9, 0x2, 0x675, 0xfffffffe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1efa, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20a, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x910, 0x9, 0x10000000, 0x5, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1d62, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x18b, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb141, 0x80000, 0x20000000, 0x2}}]}, {0xa6, 0x6, "d0bc82fc18f9f4b8a0847be03db5c45df0ecb032ea50940a0df2e92659bad04ab956eafe1bfac08b295f4916812a11128a7ab6e001f0a23ca914603037254fedfeac11edfb776476b7ae298587db23826d6198e5b7caf3ed867499c74db544fb7a1303de8185aebc49bcb48bebb68e2fb60d39158bf6c5d57e5db79c5afe3e2051ddac7aa1fc0b427a073d27a2b16b86b1e33cb8540b7f0f64131926087721557431"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x104, 0x15, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8, 0x20000000, 0xfffffff7, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x217f, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x4, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc0000000, 0x1ff, 0x0, 0x6, 0xe8be}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1, 0x6, 0x1000, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1028, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x1, 0x9, 0xfffffff7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7, 0x3, 0x5, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4999, 0x80, 0x0, 0x2, 0xf}}]}, {0x15, 0x6, "831922943d1073ec7a752f155b11d812a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x154, 0x9, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x609}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x4, 0xffffffffefffffff, 0x1000, 0x1493}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xae}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x8, 0x2, 0x3, 0xa3}}]}, {0xcd, 0x6, "b65b50d36a986b3e74fe05fcda90fde4dd44cf58be61830e9c395f37996f63ac9254d47ca3fec7d9e3ad2c3dd2558736ebf0dc29a6eb04cdcd6e1c9d6b873ab804c4c60e04d8236dc680258f0026da319036c94422f5f2dd887fc24a41916fb6db66bb4ac167f85050c6f16333c85102ef155d45695ed82dfe9ccbac30b7a783a42d3d7ddafcbb01b2f0b82825e968adf14f83e2ab69bef25d1e115c1c407240cfb8606807cbcce6f0d05ba61cb742755d15cc4d142d82c346099b55eca86de308a2aa86ec6d48c25f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x602, 0x3, 0x0, 0x7fffffff}, {0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0xffe0}}]}}]}, 0x3614}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000300)=""/252) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r4, &(0x7f0000000180)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r4, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 16m36.853731414s ago: executing program 33 (id=499): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x400d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) prlimit64(r5, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0xc000, 0x2000001, 0x13, r6, 0x100300) 16m29.345174113s ago: executing program 34 (id=535): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0xd00, 0x2, 0x1, 0x0, 0x4003, 0xfffffffe, 0x8, 0x0, 0x1, 0x40, 0x2, 0x1, 0xb, 0xffffffff, 0x6, 0x9, 0x1, 0x46, 0x7, 0x40001003, 0x5, 0xffff, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0xffff, 0xfffffff4]}) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f00000006c0)={0x0, 0x20000, 0x0, 0xffffffff, 0x20, 0x3, 0x20, 0x10001, 0x100, 0x5, 0x2, 0x100, 0x0, 0x0, 0x0}) 15m6.630713722s ago: executing program 4 (id=840): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x1c) mprotect(&(0x7f00001b3000/0x3000)=nil, 0x3000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 15m6.552354721s ago: executing program 4 (id=841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x40004) 15m5.431208572s ago: executing program 4 (id=847): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="00000100dfff", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) 15m5.365073835s ago: executing program 4 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f00000003c0)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r3 = userfaultfd(0x80801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x4200031, r3, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r5 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r6, 0x0, 0x0}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000180)="a14648e2901357137d6fe359398109d64b7b432489ba57ad3e62c71e494590bd8ca251b4cc02c403f64bd5045fc4ab18e2fa5ea67e37c892ce602d089a2815c5b8bbc6dda1c2b0240be37487ad97a578dced27ff78d2", &(0x7f0000000280)="42fc7336af415db265ceb96b4efd6e44ed4b00d87a918d41a30db52de28654335e1a2a1a6b53e1fdbba8a872fe3f00fb1a43b9466023328b6512cfe831caa820def55e4833312f1bd4bc1c1e306caf41216c604d"}}, &(0x7f0000bbdffc)) prlimit64(r7, 0x6, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)) 15m5.180117259s ago: executing program 4 (id=850): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/68) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000080)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 15m4.990618258s ago: executing program 4 (id=851): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000040)={0xc, &(0x7f00000005c0)={0x40, 0x10, 0xf7, {0xf7, 0xa, "db56908e02f45b2819d59a7215aff12c64225097e53e7a507e5b859e639d0f18dc624bdb3a28decaebab72e697a127576a525ebb9181d4dc7ced92ea3c0cd7dc233251be56f531da1acf0530ed5f84451ac4ec0ae84634a3d08ec99b0c83fb09247de4a4a8d11d1f625bcda78056117a99f83d9b783e2b616a3dcd42b8541bc6347b2cc9a687f8eebc0023fa04b2a34e07ce3b1d58ff0b7a32aa1d130866a13edb07d65bba72a3997142d84146c774f037a3a0a73ccae8e79c5aab9739cab8a7980db17f446636c2d5a89888b1dd0dc197472ab0c3ebbd7ac7de45c6f95ee0cc5c76893a81190843f80ef4474009b7603ddec15fbd"}}, &(0x7f00000004c0)={0x0, 0x3, 0xee, @string={0xee, 0x3, "98365bea1cd4d248e8ceed8af4c68dfd4b87e78a2f9e0f28d6f87de673c1e861b73e905d22894c02bce372ebd2fdeb182a1bd31dd9ffa65962a8db17efd61a970d92054f9bef34867012133b327f168aaf76c9caf897d16b1b4afc24947960d4aafeda4693db9eddecf6e982cd9f0b0abf80559a4f724cff0b5922486be7d3553a35dafdf4b36ebb5ab624968db5009bb87a08e0caf121bc93616d8af9e26deee81b7752737766a1494cbce621b9b864e80cde199c1ce1e60370762a069698be8b296a5a15aa4c90a9456fe1642e0a2a989ca37c8a61366febfaec083df521d5fbe2a52a4b43d413b92ae809"}}}, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x92, "235c308c7b150de25b27e46a30d763d9694ce7930ac6e14f8f75b20fe8c07f81838a9ee1103ac1f4c42a85e9c43e5968b5ca523dc5e0c026304fd8039661b1cdda18fac0168d9d00a91615c0601585bbbf64ef907609d80077bab8eeb59487dce7261384e008edce85c29c5664cfbce55a7c64e36fd0f163acf2366fadb0384f01a6daaf32c25ca2a4becfeaceced29e6ef7"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0xe6}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "b3a6d06e44661d14beac3e11a92c8e466bd136ab402c3c7da56ed05312bc6dabab810ff472342a137d6233fb877978"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="001300080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m4.912774909s ago: executing program 35 (id=851): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000040)={0xc, &(0x7f00000005c0)={0x40, 0x10, 0xf7, {0xf7, 0xa, "db56908e02f45b2819d59a7215aff12c64225097e53e7a507e5b859e639d0f18dc624bdb3a28decaebab72e697a127576a525ebb9181d4dc7ced92ea3c0cd7dc233251be56f531da1acf0530ed5f84451ac4ec0ae84634a3d08ec99b0c83fb09247de4a4a8d11d1f625bcda78056117a99f83d9b783e2b616a3dcd42b8541bc6347b2cc9a687f8eebc0023fa04b2a34e07ce3b1d58ff0b7a32aa1d130866a13edb07d65bba72a3997142d84146c774f037a3a0a73ccae8e79c5aab9739cab8a7980db17f446636c2d5a89888b1dd0dc197472ab0c3ebbd7ac7de45c6f95ee0cc5c76893a81190843f80ef4474009b7603ddec15fbd"}}, &(0x7f00000004c0)={0x0, 0x3, 0xee, @string={0xee, 0x3, "98365bea1cd4d248e8ceed8af4c68dfd4b87e78a2f9e0f28d6f87de673c1e861b73e905d22894c02bce372ebd2fdeb182a1bd31dd9ffa65962a8db17efd61a970d92054f9bef34867012133b327f168aaf76c9caf897d16b1b4afc24947960d4aafeda4693db9eddecf6e982cd9f0b0abf80559a4f724cff0b5922486be7d3553a35dafdf4b36ebb5ab624968db5009bb87a08e0caf121bc93616d8af9e26deee81b7752737766a1494cbce621b9b864e80cde199c1ce1e60370762a069698be8b296a5a15aa4c90a9456fe1642e0a2a989ca37c8a61366febfaec083df521d5fbe2a52a4b43d413b92ae809"}}}, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x92, "235c308c7b150de25b27e46a30d763d9694ce7930ac6e14f8f75b20fe8c07f81838a9ee1103ac1f4c42a85e9c43e5968b5ca523dc5e0c026304fd8039661b1cdda18fac0168d9d00a91615c0601585bbbf64ef907609d80077bab8eeb59487dce7261384e008edce85c29c5664cfbce55a7c64e36fd0f163acf2366fadb0384f01a6daaf32c25ca2a4becfeaceced29e6ef7"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0xe6}, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "b3a6d06e44661d14beac3e11a92c8e466bd136ab402c3c7da56ed05312bc6dabab810ff472342a137d6233fb877978"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="001300080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m48.029981004s ago: executing program 2 (id=912): syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x815, 0x350}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0xea, 0x440, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x4, 0x4) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xfffffffffffffe83, 0x2, {0x1}}]}, 0x20}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @random="1ab900", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b70bff", 0x4c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x3b, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000001c0)="10031200e0ff020002004788aa96a13bb100001100007fca1a0027a7", 0x1c, 0x88000, &(0x7f0000000140)={0x11, 0xf6, r4, 0x1, 0xf8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 14m47.881029693s ago: executing program 2 (id=915): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfff5, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000290000003900000084020201"], 0x28}, 0x24004800) 14m47.674548008s ago: executing program 2 (id=918): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) name_to_handle_at(r4, &(0x7f0000000040)='./file7/file0/file0\x00', &(0x7f0000000100)=@isofs={0x14, 0x1, {0x3, 0x7, 0x0, 0x8, 0x7fffffff, 0x9}}, 0x0, 0x1000) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r5, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000000)=""/65, 0x41) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 14m47.511164129s ago: executing program 2 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', &(0x7f0000000300)={0x101000, 0xa0}, 0x18) (async) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r5, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240000d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000000000000000007000002050005000200000005000400000000000c000780080012400010000014000300686173683a69702c706f72742c69700005000100070000000900020073797a30000000000d99d5bba64ea9a84e0477f7c926e31c83e6b5e40fb48859dfbe9137e71e4891f4114ffe310cb05adcde892ec86b839e488a594979400485547d8677ff903a7483f5b1f1d65db38827e63b373035f5fd2a4dbd9203136890f9c2521f4af0bf377f1232b37ab6022842aa975034e0c933b77e72"], 0x58}}, 0x8000) 14m47.430757412s ago: executing program 2 (id=920): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7ff, 0xfffe, 0x10007e, 0x618e, 0x5}, 0x14) listen(r0, 0x1ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5323, 0x10000, 0x0, 0x100003cc}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) openat$dir(0xffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, 0x3d4) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='selinuxfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 14m47.271118965s ago: executing program 2 (id=921): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000048000), 0x10000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000100)=""/183, 0xb7) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/191, 0xce}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000900)=""/29, 0x21}, {&(0x7f0000000440)=""/229, 0xe5}], 0x8, &(0x7f0000000bc0)=[@cred={{0x18}}], 0x18}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/61, 0x3d}], 0x1, &(0x7f0000000800), 0x9c}}], 0x2, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000060000000600000008000084a90000000600000003000000010000000300000002000000070000000200000000000000d61b00000500000005000000a60000000700000002000000ffff00000500000003000000030000000500000000000000fbffffff0400000003000000060000000d0000000000000a0400000000302e2e3000"], &(0x7f0000000a00)=""/122, 0x96, 0x7a, 0x0, 0x10001, 0x10000}, 0x28) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x80, 0x0, 0xa, 0x8}, &(0x7f0000000ac0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000b00)={r3, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x7}}, 0x9, 0xa, 0x3fc00000, 0xf, 0x7, 0x6, 0x2}, 0x9c) 14m32.270186158s ago: executing program 36 (id=921): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000048000), 0x10000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000100)=""/183, 0xb7) recvmmsg$unix(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/191, 0xce}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000900)=""/29, 0x21}, {&(0x7f0000000440)=""/229, 0xe5}], 0x8, &(0x7f0000000bc0)=[@cred={{0x18}}], 0x18}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000780)=""/61, 0x3d}], 0x1, &(0x7f0000000800), 0x9c}}], 0x2, 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000060000000600000008000084a90000000600000003000000010000000300000002000000070000000200000000000000d61b00000500000005000000a60000000700000002000000ffff00000500000003000000030000000500000000000000fbffffff0400000003000000060000000d0000000000000a0400000000302e2e3000"], &(0x7f0000000a00)=""/122, 0x96, 0x7a, 0x0, 0x10001, 0x10000}, 0x28) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x80, 0x0, 0xa, 0x8}, &(0x7f0000000ac0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000b00)={r3, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x7}}, 0x9, 0xa, 0x3fc00000, 0xf, 0x7, 0x6, 0x2}, 0x9c) 9m58.845221486s ago: executing program 8 (id=2086): mremap(&(0x7f0000548000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000320000/0x4000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @func_proto, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4f, 0x0, 0x1}, 0x28) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 9m58.724983877s ago: executing program 8 (id=2087): socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)={0x16, 0x1, '\x00', [@pad1, @enc_lim, @ra={0x5, 0x2, 0x4}]}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prlimit64(r1, 0xe, &(0x7f0000000380)={0xc, 0x1000083}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x143, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001100)=""/216, 0xd8, 0x401) setitimer(0x0, 0x0, 0x0) 9m57.815726199s ago: executing program 8 (id=2090): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000100)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) unshare(0x4020400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc01, 0x0, 0x8, r5, 0x11}) 9m55.784845879s ago: executing program 8 (id=2094): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000007060104000000000000000005000003050001000700000005000100070000000500010007000000c8d7566a713bc6451f64b252512c29a7e060ba272cd9ac371d6267ce114fc736772a6f7a0ea978709db493572dbd725c32aa2d4c8d6e63cfd4d72cd24e2e653f09df2955a72a8f0d79804233785d5263c5eb"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) prctl$PR_SCHED_CORE(0x3e, 0x20000001, 0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) (async) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000380)=0x34) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="0dfdffff03010200600012800b00010062726964676500005000028008001b00d7ab000008001b00080000000c002300010000000100000008001c00b00000000c002e00000000000000000006000600830000000c002100f9ffff"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) 9m54.887244648s ago: executing program 8 (id=2098): fsopen(&(0x7f0000000280)='xfs\x00', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x3, 0x1a74c0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RCREATE(r2, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) 9m54.557101839s ago: executing program 8 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x5c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) fstatfs(r4, 0x0) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) write$UHID_CREATE2(r2, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x9a, 0xdde, 0xc, 0x1, 0xf7, 0x6, "e8dbfa439082e53338a0c0b434149c85a0eee33984969c439c808785bd7900092e5c4fa190b99cd4ae2c4921bc6862cc3cad872988ef96132137cfeccfb644862310e4013e4aacc0df299ccbbd77a78fbf8d2d9080a6297f1fa6795f202041bee4d9252fe917acc5f34ac44e2e840865c1262c05fc69a24fe100594a997bc09162630284a1c767c446283ceb3a60c61aea6cb260dcade18103a3"}}, 0x1b2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 9m54.438952176s ago: executing program 37 (id=2099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x5c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x60}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) fstatfs(r4, 0x0) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) write$UHID_CREATE2(r2, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x9a, 0xdde, 0xc, 0x1, 0xf7, 0x6, "e8dbfa439082e53338a0c0b434149c85a0eee33984969c439c808785bd7900092e5c4fa190b99cd4ae2c4921bc6862cc3cad872988ef96132137cfeccfb644862310e4013e4aacc0df299ccbbd77a78fbf8d2d9080a6297f1fa6795f202041bee4d9252fe917acc5f34ac44e2e840865c1262c05fc69a24fe100594a997bc09162630284a1c767c446283ceb3a60c61aea6cb260dcade18103a3"}}, 0x1b2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 7m19.787563148s ago: executing program 7 (id=2807): r0 = syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000380)) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x6, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}]}}]}, 0x3c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100), 0x0) 7m18.816569596s ago: executing program 7 (id=2812): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf258900000008000300", @ANYRES32=r6, @ANYBLOB="18001d801400008005000000010000000600050081000000"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000090) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x33, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r7}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r9 = accept4(r8, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002b00)=""/4104, 0x1008}], 0x1}, 0x120) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b40)=ANY=[@ANYBLOB="00100000130004002cbd7000ffcf0787910cc6dbdf252208e2044e214e1e9e0200000e0000000100000066f1900409000000040000000800000003000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1000}, 0x1, 0x0, 0x0, 0x4}, 0x20040041) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000001c0)=0x9, 0x4) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007b00000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r12, r11, 0x25, 0x8, @val=@netkit}, 0x1c) 7m17.865407763s ago: executing program 7 (id=2814): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f00000002c0)={0x4, 0xe, 0x80003, 0xfffffffe, 0x8, 0x1, "260000000000000754439400", 0xc, 0x1, 0x5, 0x2, 0x0, 0x0, 0x9d}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m16.848189308s ago: executing program 7 (id=2817): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040)=0x8, 0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000100)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) unshare(0x4020400) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x8, 0x0, 0x8, 0xffffffffffffffff, 0x5}) 7m15.867226771s ago: executing program 7 (id=2821): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRES8=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m15.781912667s ago: executing program 7 (id=2822): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x94, &(0x7f00000000c0)={0x7fffffffffffefff, 0x1000, 0xd}}) 6m59.457083995s ago: executing program 38 (id=2822): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x94, &(0x7f00000000c0)={0x7fffffffffffefff, 0x1000, 0xd}}) 6m1.66292842s ago: executing program 9 (id=3104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xe3, 0x8}, {0x1, 0x6, 0x794, 0x8}}}}, 0x15) 6m1.566269456s ago: executing program 9 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 6m1.549857215s ago: executing program 9 (id=3110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) (fail_nth: 2) 6m1.373838072s ago: executing program 9 (id=3111): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000000)={0x1f, &(0x7f00000001c0)=[{0x1, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x3, @uvalue=0x2}, {0x0, @svalue=0x7}, {0x3, @svalue=0xfffffffffffffffc}]}, 0x2}]}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40000, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m1.372009838s ago: executing program 9 (id=3112): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setrlimit(0xc, &(0x7f00000000c0)={0x12, 0x4}) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r5) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/238, 0xee}], 0x3, &(0x7f00000009c0)=""/147, 0x93}, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="39fb", @ANYRES16=r7, @ANYBLOB="796112000000000000007e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'aio_iiro_16\x00', [0x8001, 0x6, 0x1, 0x4, 0x5, 0xcc7, 0x8, 0x4000000, 0x1, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x40089, 0x109, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x9, 0x10000, 0xfffffff4]}) 5m59.212631372s ago: executing program 9 (id=3119): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r2, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000200), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x854}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 5m59.058675773s ago: executing program 39 (id=3119): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r2, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000200), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x854}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 51.83977639s ago: executing program 6 (id=4724): creat(&(0x7f0000000540)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',dfltuid=', @ANYRESHEX=r1]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000180)=0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 51.839276697s ago: executing program 6 (id=4725): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000040)=0xfff) sendfile(r0, r1, 0x0, 0x3) writev(r0, &(0x7f0000002740)=[{&(0x7f00000003c0)="c84640c5bf", 0x5}], 0x1) 51.413320934s ago: executing program 6 (id=4727): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002d00)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1}, 0x20) 50.407009045s ago: executing program 6 (id=4731): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x350, 0x20002, 0xffbfffff}, {0x4f4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd610, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5\x17\x00\xae+\x86\x16Y\b0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x1000000, 0x1, 0x0, r0, 0x0}]) 8.052216959s ago: executing program 0 (id=4968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x903, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x42}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee8, 0x12, r7, 0xffffe000) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r12, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_SIGNAL_MSI(r12, 0x4020aea5, &(0x7f0000000000)={0x200000, 0x30002, 0xc, 0x0, 0x9}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0xf}, {0xfff2, 0xf}, {0xa, 0xd}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 5.583673017s ago: executing program 0 (id=4976): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000040)='!^\x00', 0x50a40, &(0x7f00000000c0)={@align, {0xa3, 0x4, 0x4, 0x53d}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, 0x0, 0x0) 5.462707976s ago: executing program 3 (id=4979): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}, {&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000000)="b0a94e", 0x3}, {&(0x7f0000000a80)="e8", 0x1}], 0xa}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000380)="e7", 0x1}, {&(0x7f0000000680)="9c", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}], 0x2, 0x4000440) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x4, @void}, 0x10) fchdir(0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) 3.754869121s ago: executing program 0 (id=4981): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_info_req={{0xa, 0x5, 0x2}, {0x2}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x9, 0x8, 0x4, 0xdad3}}]}}, 0x1b) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x560a, &(0x7f0000000480)={0x0, 0x9, 0x0, 0x20, 0xf, '\r\x00'}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0xc, &(0x7f0000000080)={0x20, 0x6, 0x47, {0x47, 0x22, "2e073ad2215f1ac8f418d62a6d5bef9b160c7cc52796d9cb8e605ba2cf76e7ce6bee79adb07b29d97519affbaa576d3b2566eadd06f7fa82ab910f5cac5bb02fddd86b2a28"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000140)={0x40, 0x16, 0x99, "89fd9bfe43930a67ed629166e8d299442e80f11f27638cbce56d01e7f8be7db3c4cd693a836c392ec3df243426aa95872bb0ebb5945e45b96132d7a89d0dd21aa677cfead753f26b8d0476b9c33f8724052603001d6d219f96f5c9a74259cb3341e2b9ad43b852b6c1aedaa3fbd449d1879f2035f54c5f3c0b6cc31952c8f3b2badaa5393a2344bed1067d9560d32f0c456fee8fdb397e834c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x19}}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x6}, {0x0, 0x85, 0x4d}}}}, 0x9) 3.701612466s ago: executing program 3 (id=4982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a9", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f0000000000), 0xd4ba103) 3.624820594s ago: executing program 1 (id=4983): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="24596e15", 0x4}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 3.549113666s ago: executing program 1 (id=4984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) sync() r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xee, 0x6, "46c44c6eb88ccb543e7ef380f30b11e36d8b6c4adfa047d72ca453953ba938b6fd32dceb75a167b4ad237d1f66b4f8aef8bdd4884d7496b04a4c8b4a514bb58645dd59f895b68b8cc90d8dc244c160a890e59c2d97705b4407325034e9c5ab8db8f171770bbe19b71e2befd031cb361ea61fa7cb8ba3451644caa9d0f7a5824993d989ab7cf7dcbcda36f3aa0fd663d327d909ec40cc61bed2d3e82d5892a6619205b3720a3a448ec387a13b7daf2cf0fa8ee6ec453b6e17827321e95cf2f6c465907258a820a7ed5143ac5a75f983c42fe806cc335c2f6f23b1ff7579b0d11b4067318abf9d70c296dc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1a4}}, 0x0) (async) openat2(r0, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x13}, 0x18) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 3.44350048s ago: executing program 1 (id=4985): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) (fail_nth: 3) 3.4430981s ago: executing program 3 (id=4986): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x4000423) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000008140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0xc, 0x108, 0x316a3ca1}], 0xc}}], 0x1, 0x24000854) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xfffffffe}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000500010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000160900010073797a30"], 0xc4}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendto$packet(r5, &(0x7f0000000600)="44c33a69ebc9e05e9bdec0c288a8", 0xe, 0x34, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_io_uring_setup(0xe24, &(0x7f0000000580)={0x0, 0xd235, 0x10101, 0x0, 0x28b}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x24040844) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) 3.44284461s ago: executing program 1 (id=4987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x298) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000240)="9496", 0xfebd}], 0x1) mmap(&(0x7f0000003000/0x7000)=nil, 0x7000, 0x0, 0x50, r5, 0xcc8f8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000300)=0x800) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB='x<3m)'], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083c00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.218175179s ago: executing program 3 (id=4989): bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80000000, 0x0, 0xb45, 0x100000000009, 0x8000000a, 0x5, 0x3}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r3, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = creat(0x0, 0xecf86c37d53049cc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8}) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000440)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=""/49, 0x31}], 0x1, &(0x7f0000002780)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6ba, 0x7}, &(0x7f0000000600)=0x7fffffffffffffff, &(0x7f0000002680)=0x7, 0x0, 0x0, 0x8000000000000000, 0xf, 0x10, 0x2}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x3}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f00000026c0)=""/87, 0x57}, &(0x7f0000002740), 0x2}}], 0x94, 0x10}, 0x40884) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0xa4, 0x2, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xf30}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4000092}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x35f}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.253040247s ago: executing program 0 (id=4992): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x18d181, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)=0xfffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x8002) recvmmsg(r7, &(0x7f0000002340)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000002600)=""/225, 0xe1}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000002500)=""/234, 0xea}, {&(0x7f0000000900)=""/132, 0x84}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/99, 0x63}], 0x7, &(0x7f0000001a40)=""/192, 0xc0}, 0xac}, {{&(0x7f0000001b40)=@phonet, 0x80, &(0x7f0000001c80)}, 0x5}, {{&(0x7f0000001cc0)=@ax25={{0x3, @rose}, [@default, @remote, @netrom, @remote, @remote, @remote, @default, @bcast]}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d40)=""/210, 0xd2}, {&(0x7f0000001e40)=""/27, 0x1b}, {&(0x7f0000000840)=""/118, 0x76}], 0x3, &(0x7f0000001f40)=""/60, 0x3c}, 0x5e}, {{&(0x7f0000001f80)=@can, 0x80, &(0x7f0000002240)=[{&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f00000020c0)=""/243, 0xf3}, {&(0x7f00000021c0)=""/6, 0x6}, {&(0x7f0000002200)}, {&(0x7f0000000580)=""/141, 0x8d}], 0x5}, 0x7}], 0x4, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x5) creat(&(0x7f0000000640)='./file0\x00', 0xecf86c37d53049fd) 2.247440522s ago: executing program 3 (id=4993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0x4, 0x7}) socket(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 1.989629979s ago: executing program 5 (id=4994): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x4, [0x3, 0x1000, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x1, 0x4, 0x9edf, 0x28, 0x385, 0xef9a, 0xfff, 0x7, 0xb2, 0x1, 0x2, 0x5, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0xffff, 0x8000, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x3, 0x9], 0x4}) (fail_nth: 2) 1.989133095s ago: executing program 5 (id=4995): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000140)={0x4, [0x3, 0x1000, 0x0, 0x1, 0x2, 0x6, 0x7, 0x3, 0x10, 0x1, 0x4, 0x9edf, 0x28, 0x385, 0xef9a, 0xfff, 0x7, 0xb2, 0x1, 0x2, 0x5, 0x4, 0x1ff, 0x0, 0xfffc, 0x0, 0x2, 0x10, 0x6, 0xd, 0x3f1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229e, 0xffff, 0x8000, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x3, 0x9], 0x4}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000000)={{0x3, @addr=0x8001}, 0x8, 0x1000}) 1.915013748s ago: executing program 5 (id=4996): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002a80)=0x0, &(0x7f0000002ac0)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004040)={0x0, @private, @remote}, &(0x7f0000004080)=0xc) sendmmsg$inet6(r0, &(0x7f0000004140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="4ac755549d9d92dff56695ed20072c99bd9e6179b552852a9b1103df2e2a41d7209718871592c9d9af7ec8d3f6fd36bc5e2ca19c97980e3a8be815aea8c576db20855ef651dc2e9380db3c48ea61d0f9626261e64840f12ac58719ffb1e46b4c685c8fcd2d026ac7aad90bcb2a513a3a05d4378d513cbef0f34b3137b712c06c0ab46675215b5920adc14e6bd89598ba1d4296fc23b8d3e2fcb1341309d285c3ba5ae020eb1499747ad53c9e1f929889956de3378933d374b278495331474cab55c7f4b20a2f249f1c49797b7baa9693c5e57633a1280604c25f780c8cf1f1bc06f457fef42d9b32fd55ed7e102615d29776ece447a8f2", 0xf7}, {&(0x7f00000002c0)="f0dcee15d4524671bb6362b97a99e1e9727239a9fa821b620d355ec8c8b8dc92c7aac0190d47b522b000b3d8742b958dee69735481b0f834c276a068f48a8ca68e08119e80d2f2e09d8ad058f5348428ad1448e060cc553536b19600e8f72688ef6d284e81b158fed9ab4ddb1bcda8538c9ef977c1c3c88b2dab3e5b8337b86540bf85dfeaeb4884dc6ff34b87df3646b7a4fec7bc17c5606521ee48955b4ab8cdc0e91731022ce7945cb16791e68f98522dec083459bd44c7869cdf1e114c58112930dfe357c9722af54d6fc2df65f73f28a8858cb89682", 0xd8}, {&(0x7f0000000080)="6efa599463d944a1b8aa39078b675473b3589fa99838e1814da19e8aa8d17a1b354c39ab5f7cbbb026b3365eb2b8d6d20c03df7f209d1ff65a7c1a6f6d", 0x3d}, {&(0x7f00000000c0)="a8ad4ea76fd78bac799021641e3cb6cd32d3b511aca226efaaad7dc8f4c50b6dc7dadef59f95571210c213608457561b1d784f324f413cfae89eac8093bc82", 0x3f}], 0x4, &(0x7f0000000400)=[@dstopts={{0x221c, 0x29, 0x37, {0x8, 0x440, '\x00', [@generic={0xbe, 0xdd, "5dbb75107455e73e50b9778efed206b7deab33bac93b4fe25be013433d073433b5813937bdbc9b4817ea217408028512c74cf5606a74a3dd9d2456b7fd1cdc15378701b822b91194648ecddc9da391566da898041157549db54c11f48907a6c9ea58243c7b6b19e92c00ff7b310c5fb62b972ff63a68f1966dfcf875b3968fa71be3ceb2da3973c87b9e878b0c47955551deac41b406105bf86ac9bd8eb4aac70ee7fd9b4d48af49a342e94209a680b557c874cf664205d2e2632065776347c99721ea5335420c5606da51deded336951489b82f18e166b3711ff2ba39"}, @generic={0x6, 0x1000, "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"}, @pad1, @calipso={0x7, 0x58, {0x2, 0x14, 0x9, 0x6000, [0x100000000, 0x0, 0x1351, 0x100000001, 0x5, 0x2, 0xffffffff, 0x4, 0xf, 0x8acb]}}, @generic={0x3, 0x1000, "22732acc0f98ef9404e584c725737a241aff4ba50d75764a9ef5743f9ebbb1ca6faa5452291e6ce78d6d5131536f731273f20cc6b1aa0367ee069bfa9e4ac5e9d7e544c544b1c4385ac9ee12630e61927f3b0a156518638a6a1673be66daa78ab5b0326d0fc7907b426a9076bef04e475d04d3d25a2524da1abcfca880b77c2342a5642f23191c9295f247201dbd3617461950ffb1e362ec9f7a1f224a3ec41f637cf901b84bda3388e4402400332c4499081424a4b5ff497a7831c1041296c75711928f7081ceab2ba5909217f853742fb831a7927cec90ad87d67b6d86c86f02bd489195436f928946895bc39bd7b28138fb95ab052c00f7f54f8b9b34a49833de478f042ed9a3c7e7c308a10c8cc7adf83499bb9267711cb7131dd64cf06735e76d964e40faedfb2cff864098a764959ed6ce701997b910143ef8eff4846c83ed8d4064f778735ad9e7f97bc45607c220b48b74b06ecbc3d815a363841d1d49c9d85aa22f20ac3abc71a4a47e453a60df89b51fdaaa57085b98228bdf03c479c21d959d1df540cf06670f0b59c5deb94cbd66eb1a8abbaea6db181d62f8a36a70f94b157c475d1a2c8f81024b9fce755a8fc36c07bc20ce5758df07080ac441ef910c1d6665dad9fbda0e469eb567679819bfa8df3c3002052540d1b54060f7f845642ea146d1e9806ca7867c45e3759c85ace14f83c21412ef50ecb1c4f50ce810a0527b88db6029baf6e6bd4128fbbd687bbdf6e29d3caf6cd8955f48d7031dc4681baed538f18d13e8ac08ed816765a14871765f4704791c56093c20963b49f1d53690f5c402f9b117ab16dea910a317ee8ccc575a23191b8956e707787bececc424644472b1489f3b17dea9371c956fe5cf187abea2aefc0f5f5549b5e4b432b3d48bc237c4598deb91fff177b68589cf3fa184e3476a01055ad1439dc4fe110117af52e5849cb83f267ef477de74855e637907b1748deaf55ca9d6557ea7c79f8afc83ff8b5fcd17cf555068c814c2ec3242417f96d5a35bc6c3c1f70dccc83dd8c471d222492542fe08cd867a47f8f648908de54b08a3b7e54b9ca95f6f9e3df7bc820ca75437ef8318f55efe210cb55551c4025491ebbf087d84993a8d4cd8fd8ba20e42cc4184d1e8d3788f35c556e4083e82bfc708816f7578f03faff6368ce109e88d8ed5dff2e1eea1cf36de9cda6390ecba51854c4b4fae118858321b1c666f1e41e721bc95e2afb571af86a8568cd5612ac46576880745de1f8a2cbd25ca0675eba1353ca806badf53bb83a3cc6c45d24c02517de0166b756544c5eec6b714debd2f637dc9b1d905bd798a86b2867b16bd9a401cc3439c3d41b6cf278e8426416ee5318e74a1e43634085ce67934538b5b238159f6d31ac92be6aa5f0927831086fde5afb48ca17b43ca33b358627f2078fe6143a4f6ab37f673930e738feea712db8aa50284191103ee320a45b4dc516300343ef88edc374d902e2a1cba2c9efd2fa0325dbee4ec31544df4b839bca513670d133a1149cb71d599f3f82bd927032c6e8ffdb558ee8dc55cd8850fa41dfa7cdec190b7d7fb89dfd63018623ef11674486b098d78a9cef1d4f012fe03acceaec0b61cdebab2d23517a1572bc5c6ef3dad127f7589ad43c0d29d3384110aef07f83f79c89df5284590ba33c23047ccfd1afd93bebf7b187c3252ba1d1238f8d8b9ba65d12954f1aa3daeeaf7f92d5e5dd657fa6d7bb9d3b09b9f400843c8f06af590e4bd57c8eb67bb30723b6c17e4e90e1358e84ad04eb4b5e9018e0acb7a88024080f829667955cc4a63ab4804bc313d88c2996e8aac7cd2f7877b416235fcd1e64fd8da98b8ca8ebd06c8b468b13117049448f7a54c0f7c606d5d3ac274a18a67f51eb6f1b9f99125b9290cdfee38aa0b1c0798c3126acce18385112530a7e354da995eb75d2b025395081b4b71316c62d98615d61d96942b82dc659383023351e88e27b2371bcad17bb50c46780f33919fef574ae7978cfca995ae848ef8be1c87f866c95c3af75e7f3c6d9f99c4e7ea2067696c2b06e26b1dc4aeea99514a654d42cf48d44b984eb82a3c541f19954f9d14869b037753933abf5923f1c3d35e5f3f4b9b43ff6dc169467e2f6925a79d979e9dab846f0a889cb80eb81a3666ef29c35daf1514a27ba1166dc8fade05ccf15afde7df03db7ed1dfc1059ffc4d01cb5ed7af407ca3607baebcaf48668a4587330f0ea015b107f25a54108b338a0dd7ae11228bf66f8588f06dc1c05a503ff39699f9bcecadea88394a84de507c4f02c83f8e37a6783f71722d2300ba4ce6d9f3aa62a690354808725a7f4ca57064f1b6bd63664bc1b0e5ae7b63c22434900fcd7b5907840f820b385a20ae85236da3e8bac81f818a842883bdb2b1fc87bbd2dfe6f38eb9137d6e235a681b788578a2f863f34c0137facd5cb5c55fe2bd54f3c5ec9d39a83bab4dbcd60a02dfd0b12d57c759d01b19aabfff8648609ed553d4e8ed8f5c159ca1467b516d36626420663494c5f0142a3d4acd00dab53433faade93f762c47665d99b34e65a0b3986b9d1bafef911cb2c576ca0c1f627554476e4717aa5fdc1be468bf76ac1a3df76e03dffcfb765c4624435e7139f99a46e3f6227f60d640df701393bbe849c39ad1371dfd134f89371095d03e06b51bd83ee87052eb0a0a9d00bab2d4621fd1a09cbeb38c632c344d3c10bcda0bb064a904ade85b0972e2ac2e0d1f71ef044d8b29afc5bf355398aac9ac1718495958903f743baccd33eb620e0939a9ed59955162543197441e910ca8868a6fcb9a87da5ffeb7cf8089e12dbad633f038c79233a6e21a7823b90379b7615a034f1a36716fa185a1aff15d18c33f6e8415411ebb5c4b3ab249ca54741cdeb31aea311d4c8588cfa1bfccd27f4702f9b8992c009a803c7c3214c1c5961f88d6076e7e3603358024b6b267e4b0ed85cfedfde336d4b487bae35ba9cd9d842ae7eee0d2c1db8f0da08b806a80e5e3dc52168c6f5f8970a753d2957479bc8087805bb6c64f8f8c2b3504dc172a0808ef56d6de03031da49dbf209267ae6a19ae77621cc9aa1728cfcec12c78de3c3f9664cc653e3a7281b3be0be7ffe268341e7be03249548c7fc048bf7b2200833303f69cf69ad5a89307b3c9e374ab2bd480365caaa7a57b2a55ff933dd454d9151ae009bb710aeccc15bc1a35cc4a9212695196b35cfb2343735e737fa8c98584efbc7ab1d43ea314575b4ec0307be14047fc203612c8d98d3c322e4002ded1e23f381c3662b796ef7debc3edc103cd4da4b7bf177ce9548d46281a6bbcfc70e3dc5ee00a4e4fe7308c477d87ce818e70ed0c184e9bb889a89d744a3f70466fe4007c54254236e142c3a1657b9594be30b0dc2cccc0a259365ae7c9ffdddad65634d5e6fc6a5eba2da7da2496f9c9ef7ed3fb763853584a8becb5697f6f8393d3d925247c5ac0191a07cbc93789be02809d089dc5ff851e68a4331fe128df537cc8da632af6e425c39cbd5c0f045a10180442fc5112731391035a9fd4ed11ace68655997c7c47413adde162c0722291e9d1f4ecb91f1b0f99b471c68d187978a032db419a00e824d2093294c6185292329c0705d30a657e174f032981ac938aeb79f0e97acb632a2ebfd3764dd10f86576cae04b6be3d1694a64c6c4cceefbea38094f087aaaf8f37a7be4cd36f35b3d23ddfadfb40bfbe88b62ef76ee4e744cedf7221596c5715d5e24fbe1594e4624d971b6785438fbb69116561324e14dcc02a697658cc5a2396b38cfb8ac473f95e2c3b4465326d943a515e8d8c7aaab7754dc0f8596e270cd246cf10134d0d08bdbbc705f63d364f26bb924c33b86fa1dfd2b4940d2589f6c5bb76c8935be560dafd23902979857051f8a19a73390c62006fda2000542f18b15024ec0783582b5a5ee8726226936f11089f0eda9eaf61274e9e5a2bf4919dc358bf59c66f81ae971b130d8bee8c67e51bc9aeb6c79b85962838fea0a8b2f886cb19e79d2dd8680b22d69a911f468d802e52114ba1aa24a138756a76c1aa092c50c1823997600227f516474d83cdf302951b3ef49cf4baa28eb890823ae3d316e404ef28eac6278bcb00a8332246e552071190c1f365c6a285b451c93cd97e3955d55223351b628178ea81f24221e869becef7b7873557d5bd0d4592b4199d2082cee55c0d091aa481650e9412f8d0a947900f8159bcf1083a0fed472d1e7813c8210ee1c8769f52bcff8154af7fbf50ac8575a56d313b95b0e31ffa8834b2172c1d38933d298b35fbe51274589fbb0566baa45b8a162c04808264cd223fae77ddd1d79899a02fff2fec635ab012f941f677a181a5c3fd76717e3d036f145004a277d8b311d8b489d8258a1014bc43fce06bedd5afd9beee61bb5216d861806a629012846d3294f695242f8a92d044be9e174e9bb20f01340237b04835a8a0fd352ae157462f2756aa948b9ae7b8fb231a0e859bbc74b1a17cb57a73974c75a4267d5e62d179bd3350896a1007536e2586c1212112f3bfe21668712ba2d1588f280aa266ed3a0794b46b09865173a2534f7a3cca4352d7f916a3be7beb28cdb2f805a5a365bc098924a19530d7e8888a792a535df6a536cabb32584eafd21573dca8103a18679068d0f44852671c6f0376baa9b23df49ed8f6f43e809c657201d577cef16892d3e7cc8579a2037266690929058f073b7f01b4c3f989e3a7d8b5b7be0afc67069efb9901a8b789df6649a63cea12c073d82364f826df402c6e9420cc72702eda341dd7d31d78aa4873890a716bb033cf5ae394f04f231b2f939c7ef7ddbe1c60a71c4810c29fd59d8dbbc7e3e1a9f3ccc6508fa834344ce03ec73c02acb2742480d37716469ab924cda3f738c9000df61af5a8bbff2bbb117fbfe608fab882141bb5f95db6f4f996d4eeaa66fe3f5ba8dd954d45ed4369258987583ea227906bdea3f9bfd6e0c1d17ad4c489c799092c5e8f3d766ad2095522de5fcc4e89795826afb43d259a6f973bd341d460976f6f3d4e751686fd6c053df2d25c17b7bc5899203e058951786c0eb992e4f827ae5a9b0ef7b9cda6c17c862f8b180ace05a78d3c003518a808a2f7853a2d64782ea29b4edeb9fb31ec3cf79367decf283b4ba9d408766d7e7efb31d54ec428fd865bdfb49f3ba140b858bf505ae109055163cf89cff84a003615708a13207983821ad7189b861431b425a12f339f97f281a7569e7519b948f190dc1e3229d75b8c3312e18fca2d1ffc3a8f303409bd3633a1ecb01ad74591fcffcf1dd634a4adc883491eeda9a5eb9c9a9409188cbe456f82ff872ad8dfd5fb6548a495deda5f9c420c5a5874326d2d3775a15222eb9812c65faf18a7867225777aa89f81ed607d393b3c172568c86bc72764dee43b4dd17704f2ba7e9cd8700e598c6c0f265a099452afc3fc807579461f07bf38885ee4b7e3bfaf8ce9a48f49060059de7600733c71496f5884c77b1d16d42d4b687ce0bf0a6c42270b634d5b406d4d11910d1cda23a0c947f709e3f1fc074c1cb6918f5a42ab3a18dea4b31fc2c97960711140d164834dc9812da80ecb28481e1de08920157119443e9d101b6f486b1eb2576659caba979bf8f9755f24fdeba59a0536c150eab5ac42d7676fc399a1a0baf0058d8581a06afb61c1909c4e15b3f3c00d6fa0922eaf497a8929555bedf935b11235d38e305e0d2cb5392c84a642914e831c1684719f0eec92fbda6cd91b22f88e2dbc086a18d34183a43660b19a3a70"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x2, [0x6, 0x5, 0x4, 0x4, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0x47, "20351a5ef3fab12766cca767ef589aeb258694f2f35fb7f158a88de2d8ec1d0e8082c92477688b4e12c965c94d65b5fa61a652987075f2aa8fec444464eb2a683a6408bf9f213a"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x200, [0xff, 0x2, 0x9c79, 0x9, 0x2]}}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x3}}, @rthdr={{0x54, 0x29, 0x39, {0x1d, 0x8, 0x2, 0x4, 0x0, [@private1, @empty, @loopback, @mcast1]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x4}}, @flowinfo={{0x10, 0x29, 0xb, 0x8}}, @hopopts={{0x4c, 0x29, 0x36, {0x40, 0x7, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x22ec}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002700)="4802f3bfb6dcde40bab6fcf249ce5d89239219f536372b177dbd6b469d2c8fa56ed2f9d24290c0a1080b79bb956d057b1fe458eaf160c7bc8c846b7559c7e7ba08e42893d7034bef5c5ebb861bd03ce3dbb34ff110", 0x55}, {&(0x7f0000002780)="a29486c117ba21f0bfd2e1b765be5e26c812b695f96ac774a3281ccfea17c6", 0x1f}, {&(0x7f00000027c0)="e8283aa82c5784a2b329177cbd3d2deda8e673c151be29770b8e91b11b3678c2861a75fce8b74962c8c6b0f61a280efe68f1ae819078a5317aa3c1b00804fba11af2ef387eecbce5ddb858641dfb", 0x4e}, {&(0x7f0000002840)="425b63ce8c6fc095f056a17f57e0f1181073c5a7addc520f23246ce4a0e31d5ee18f43034883d4ded180b35291762579ebbcccaf308758e21efc7e40db116b60", 0x40}, {&(0x7f0000002880)="c0891656729451e58b27bb43e0524e36c8933b36c7ec836796384332f697cb436e20f3f1ef1056b32fce8e9a0654286e892873ae1115f35c789bfd0f29a2d60a62212a7e7d17c772d16652bb9e7058e6ae607ad1625d434770c025a08e1c73e2c958a785ba1803d4583c690e06d1788af099062d6b63ef1f312542a7ff108e07509347dc3d9f4f9e11b0318da59a3e1c4e339616951a0e147b40aee14dd42c3f61b105ae18c3285749b39884f013819ac5d4dc915ce3dd26b8c8a31cdb6940d1bcad6374b3eb1d11ca8f86e8b2d449b11066d8f2e503e581", 0xd8}, {&(0x7f0000002980)="bafac7e89a00ed9b7e633df75571ff17d8c492545057a669e4e954c1a60a3f8ca64b38093777553cdb2cfa737668ac0d889d7b8e1066f6fef13bfacf6a276c255c6e39db49bbb449949f9c352b513e3700c44ff679c10c3e7588edb5a451edd8b5bc31649e05db7d0d29efebd30c236b3f63ebaf6c60aa241e3e34f3a5b28b1d4e", 0x81}], 0x6, &(0x7f0000002b00)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x80000001}}, @hoplimit={{0x10}}, @dstopts_2292={{0xdc, 0x29, 0x4, {0x87, 0x18, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x47, "e2ca9c3e7d050f7d5f185dc3b7dcbea9ae1d59d876c15978707014a39b8e6e0fec13c06b7b002ae7e608a5e20c341dd535a2658f4e302184e6667e81867d11c64e19ea7d490f69"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0x8, [0x0, 0x5fe, 0xc8d, 0x4, 0x2]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x3, 0x3, [0x2, 0x0, 0xb0, 0x5, 0x100000000, 0xfffffffffffffff8, 0x8]}}]}}}, @dstopts={{0x2c, 0x29, 0x37, {0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xa}, @hao={0xc9, 0x10, @loopback}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x1000}}, @pktinfo={{0x20, 0x29, 0x32, {@local, r1}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x2b}}}, @dontfrag={{0x10, 0x29, 0x3e, 0xff}}, @dontfrag={{0x10, 0x29, 0x3e, 0xff}}], 0x19c}}, {{&(0x7f0000002cc0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000004000)=[{&(0x7f0000002d00)='+', 0x1}, {&(0x7f0000002d40)="7428b270b7237b291ab1aeafd89204fb4d37f20ac7a579be8f740bb93c52dace", 0x20}, {&(0x7f0000002d80)="643a98ebd7f68838877501e029ad5d6ba719db7afb4a434bed53cd59bd6352164859a6d8a63fff6a53d9c2e720cd2091746ee21697685d50662dc9b70d169cd41d62ff701d8cb6ed6a798c818522c90d43e4ce075073fe8f8c3041661005dd01af258257f869266d6b7ec51603ee934b0ed9b9a68f34c766d1bc924e22bc10d80c2e3587a7ee06b2972921f869722214aaefc375c99d98c712534343c35805547cff6f92166b97af197919e30e202736a4eaa02b29ca7108afab47c26e5e8ba9b075690c68605aa09dd6d8bda62c46ab152a67f4683c9182fa41ebf2ca3d377c46d9bc933fa756b6755369dea3e5c31f2c31c3", 0xf3}, {&(0x7f0000002e80)="08675301c56bb9b77f9b9110a32386e77e60dfc55fbd1931be0060c4e5bc09152a7cde39001e2fd8949c2117eace0ec1e4d8ba4d414aeaa48f9b19d091d17aff3ca82ec93a0acaeb695e0f7a7e6076afc5210743eb72662a6f744adebb78e18ea15989f8e79b6d98e33489430eb6ee5819e19cc04d169bb36b6c50e046073e5fe7a8f3e9908b651dd911941e42b69fef7bc20a4622a8da67d32245366e859e46b96e8ee6219e273799b8af1b29a0594a144d", 0xb2}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="2d9890329994ece574eb8cc41da105132cdfacd166387b3ab25b542f8d647295faf1", 0x22}, {&(0x7f0000003f80)="d32775b4a2b03cfae3f7dfdc1bd10f126a5517dc8e437193395d5af2264a0e93e808956f77ae2dc957578c7b4beae23763b4a6a372e4e8bf8fdd21c39126de6934e93514a03589370332eadea534", 0x4e}], 0x7, &(0x7f00000040c0)=[@pktinfo={{0x20, 0x29, 0x32, {@local, r2}}}, @dstopts={{0x34, 0x29, 0x37, {0x0, 0x3, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x9}}], 0x64}}], 0x3, 0x840) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04fd7e010123d21c782d80cc00000000bab498b10d7f083866f94a2046536c72c610aa575956b1bb782639022a0b0b717e3e9c6967461d26e88ddb46f3d372c952c5b543d812ac9ba1f8d8fe62d3fa448cd4000b0a8a9b887076b4c051be40dcbd1116e58f0bf145c7df5453446ceb2c8b638a63cb35f5468fcb263c00a374c682"], 0x81) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 1.914630409s ago: executing program 5 (id=4997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) pause() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) read$msr(r1, &(0x7f00000001c0)=""/179, 0xb3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000) ioctl$XFS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000280)) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 1.902016089s ago: executing program 1 (id=4998): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) 1.615914053s ago: executing program 1 (id=4999): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {0x0, 0x100000, 0x3}, {0x0, 0x0, 0x100000}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, 0x8, 0x4, 0x100, 0x2, 0xa}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r2, 0x0) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00011000"], 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40025b0c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x400000, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000100), 0x0}) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 985.669206ms ago: executing program 0 (id=5000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000040)='!^\x00', 0x50a40, &(0x7f00000000c0)={@align, {0xa3, 0x4, 0x4, 0x53d}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000280)=0x8}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000400)={0x2, 0x6, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) (fail_nth: 3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 259.860463ms ago: executing program 5 (id=5001): mkdir(&(0x7f0000000500)='./file0\x00', 0x84) (async) r0 = socket(0x1d, 0x3, 0x1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800001100000000fdffffff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x0, &(0x7f00000001c0)='\x01') 30.66056ms ago: executing program 3 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x100000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xff}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x6, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x200000}, {0x0, 0x3}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000000, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x8000000001cb, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x40000000003, {0x2, 0x1, 0x4}, 0xff}, 0x18) 0s ago: executing program 5 (id=5003): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75706461746529bb2a08bb036f28206563727970746673"], 0x17, 0x0) add_key(&(0x7f0000000740)='trusted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xfffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980200000000001800128008000100677265000c00028008000100", @ANYRES16], 0x44}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x11, 0xc, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@bridge_dellink={0xec, 0x11, 0x4, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x20}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_PORT_SELF={0x84, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80000000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "db655ce1b9e697557aa4ba0cbd7d4a23"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bfc0846ff7221c3633aca04d94f6c057"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "45291c460ab632627b510c96cb98bf5d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0xd, 0x2, 'rpfilter\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f03bbde43f84a9eb57550000779800"}]}, @IFLA_WEIGHT={0x8, 0xf, 0xffff29e1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffb}, @IFLA_WEIGHT={0x8, 0xf, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x0) accept4(r3, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x10c, 0xffffffff, 0xffffffff, 0x10c, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [0x0, 0xff0001fe, 0xffffff00], [0xff, 0xff000000, 0xffffffff, 0xff], 'wlan1\x00', 'dummy0\x00', {}, {0xff}, 0x67, 0xa2, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xa, 0xd, 0x60, 'syz1\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@mcast2, @mcast2, [0xffffff00, 0xff, 0xffffff00, 0xffffff], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'ip_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x1, 0x1, 0x51}, 0x0, 0xec, 0x114, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xcea5, 0xfa}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x344) kernel console output (not intermixed with test programs): le:128kB inactive_file:2296kB unevictable:3536kB writepending:16kB zspages:880kB present:1032196kB managed:292544kB mlocked:0kB bounce:0kB free_pcp:2308kB local_pcp:0kB free_cma:0kB [ 1099.539459][T22497] lowmem_reserve[]: 0 0 0 0 0 [ 1099.541175][T22497] Node 1 DMA32 free:86168kB boost:30720kB min:77860kB low:89644kB high:101428kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3784kB inactive_anon:5648kB active_file:18840kB inactive_file:32684kB unevictable:3536kB writepending:840kB zspages:7868kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2268kB local_pcp:128kB free_cma:0kB [ 1099.552005][T22497] lowmem_reserve[]: 0 0 0 0 0 [ 1099.553680][T22497] Node 0 DMA: 30*4kB (U) 20*8kB (U) 10*16kB (U) 7*32kB (UE) 4*64kB (UE) 1*128kB (E) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2584kB [ 1099.558627][T22497] Node 0 DMA32: 917*4kB (U) 558*8kB (UE) 211*16kB (UE) 159*32kB (UE) 35*64kB (UE) 13*128kB (U) 9*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 23316kB [ 1099.564427][T22497] Node 1 DMA32: 1763*4kB (UME) 2091*8kB (UME) 1108*16kB (UME) 388*32kB (UME) 89*64kB (UME) 49*128kB (UME) 30*256kB (UME) 23*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 87396kB [ 1099.592062][T22497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.606872][T22497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1099.616610][T22497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1099.619871][T22497] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1099.634331][T22497] 18617 total pagecache pages [ 1099.636170][T22497] 795 pages in swap cache [ 1099.637696][T22497] Free swap = 49312kB [ 1099.639322][T22497] Total swap = 124996kB [ 1099.640818][T22497] 524155 pages RAM [ 1099.642170][T22497] 0 pages HighMem/MovableOnly [ 1099.643903][T22497] 210126 pages reserved [ 1099.780012][T22497] 0 pages cma reserved [ 1100.749598][T22509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1100.752532][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1100.976949][T22497] kexec: Could not allocate control_code_buffer [ 1101.297646][T22516] FAULT_INJECTION: forcing a failure. [ 1101.297646][T22516] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.319659][T22516] CPU: 1 UID: 0 PID: 22516 Comm: syz.0.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.319680][T22516] Tainted: [L]=SOFTLOCKUP [ 1101.319684][T22516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1101.319690][T22516] Call Trace: [ 1101.319694][T22516] [ 1101.319699][T22516] dump_stack_lvl+0x100/0x190 [ 1101.319722][T22516] should_fail_ex.cold+0x5/0xa [ 1101.319735][T22516] ? kstrdup_quotable+0xc2/0x190 [ 1101.319751][T22516] should_failslab+0xc2/0x120 [ 1101.319763][T22516] __kmalloc_noprof+0xe0/0x850 [ 1101.319783][T22516] kstrdup_quotable+0xc2/0x190 [ 1101.319799][T22516] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1101.319815][T22516] ? get_cmdline+0x86/0x360 [ 1101.319841][T22516] kstrdup_quotable_cmdline+0x127/0x210 [ 1101.319861][T22516] __report_access+0x4b/0x230 [ 1101.319876][T22516] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.319892][T22516] task_work_run+0x150/0x240 [ 1101.319909][T22516] ? __pfx_task_work_run+0x10/0x10 [ 1101.319929][T22516] exit_to_user_mode_loop+0x100/0x4a0 [ 1101.319946][T22516] __do_fast_syscall_32+0x578/0x8c0 [ 1101.319965][T22516] do_fast_syscall_32+0x32/0x70 [ 1101.319976][T22516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.319990][T22516] RIP: 0023:0xf7fe4f6c [ 1101.320000][T22516] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1101.320013][T22516] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000001a [ 1101.320029][T22516] RAX: ffffffffffffffff RBX: 0000000000000010 RCX: 0000000000000472 [ 1101.320038][T22516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.320046][T22516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.320054][T22516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1101.320062][T22516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.320083][T22516] [ 1101.320145][T22516] ptrace attach of "(null)"[22519] was attempted by "/syz-executor exec"[22516] [ 1101.732590][T22530] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4353'. [ 1101.735594][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4353'. [ 1102.391360][ T7013] libceph: connect (1)[c::]:6789 error -101 [ 1102.393486][ T7013] libceph: mon0 (1)[c::]:6789 connect error [ 1102.402050][ T6032] usb 11-1: new low-speed USB device number 41 using dummy_hcd [ 1102.443898][T22538] ceph: No mds server is up or the cluster is laggy [ 1102.543445][T22545] overlayfs: failed to clone upperpath [ 1102.584956][ T6032] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 1102.588598][ T6032] usb 11-1: config 0 has no interface number 0 [ 1102.594367][ T6032] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.597850][ T6032] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1102.601184][ T6032] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1102.604812][ T6032] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1102.626429][ T6032] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1102.629817][ T6032] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1102.633856][ T6032] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1102.636737][ T6032] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.654269][ T6032] usb 11-1: config 0 descriptor?? [ 1102.659016][T22534] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1102.662059][T22534] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1102.670524][ T6032] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1102.708058][T22547] (syz.1.4357,22547,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1102.712060][T22547] (syz.1.4357,22547,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1102.787493][T22550] bond5: entered allmulticast mode [ 1102.897903][T14539] usb 11-1: USB disconnect, device number 41 [ 1102.901363][T14539] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 1102.974567][T22547] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1103.000410][T22560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4361'. [ 1103.003329][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4361'. [ 1104.949785][T22601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1104.952713][T22601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4372'. [ 1105.795935][T22605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.888041][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4376'. [ 1105.987015][ T40] audit: type=1326 audit(1774350544.677:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1105.994690][ T40] audit: type=1326 audit(1774350544.677:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.002352][T22616] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4379'. [ 1106.003852][ T40] audit: type=1326 audit(1774350544.677:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.016932][ T40] audit: type=1326 audit(1774350544.677:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.025440][ T40] audit: type=1326 audit(1774350544.677:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.032864][ T40] audit: type=1326 audit(1774350544.677:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.039938][ T40] audit: type=1326 audit(1774350544.677:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.047562][ T40] audit: type=1326 audit(1774350544.677:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.054794][ T40] audit: type=1326 audit(1774350544.677:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1106.061837][ T40] audit: type=1326 audit(1774350544.677:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22613 comm="syz.0.4379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1108.517017][T22630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1108.520058][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1108.746632][T22637] FAULT_INJECTION: forcing a failure. [ 1108.746632][T22637] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.750643][T22637] CPU: 3 UID: 0 PID: 22637 Comm: syz.6.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.750661][T22637] Tainted: [L]=SOFTLOCKUP [ 1108.750665][T22637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1108.750671][T22637] Call Trace: [ 1108.750675][T22637] [ 1108.750680][T22637] dump_stack_lvl+0x100/0x190 [ 1108.750701][T22637] should_fail_ex.cold+0x5/0xa [ 1108.750715][T22637] should_failslab+0xc2/0x120 [ 1108.750728][T22637] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1108.750743][T22637] ? tcf_block_get_ext+0x94d/0x1950 [ 1108.750760][T22637] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1108.750776][T22637] ? lockdep_hardirqs_on+0x78/0x100 [ 1108.750794][T22637] tcf_block_get_ext+0x94d/0x1950 [ 1108.750816][T22637] tcf_block_get+0xa8/0x100 [ 1108.750832][T22637] ? __pfx_tcf_block_get+0x10/0x10 [ 1108.750849][T22637] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1108.750879][T22637] ? lockdep_init_map_type+0x5c/0x250 [ 1108.750896][T22637] ? timer_init_key+0x150/0x340 [ 1108.750911][T22637] sfq_init+0xed/0x2500 [ 1108.750924][T22637] ? rtnetlink_rcv_msg+0x3c9/0xe90 [ 1108.750941][T22637] ? netlink_rcv_skb+0x159/0x420 [ 1108.750951][T22637] ? netlink_unicast+0x5aa/0x870 [ 1108.750967][T22637] ? ____sys_sendmsg+0x9e1/0xb70 [ 1108.750978][T22637] ? ___sys_sendmsg+0x190/0x1e0 [ 1108.750989][T22637] ? __sys_sendmsg+0x170/0x220 [ 1108.751004][T22637] ? __do_fast_syscall_32+0xe3/0x8c0 [ 1108.751021][T22637] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.751037][T22637] ? lockdep_init_map_type+0x5c/0x250 [ 1108.751052][T22637] ? __pfx_sfq_init+0x10/0x10 [ 1108.751066][T22637] ? qdisc_alloc+0x81b/0xb30 [ 1108.751081][T22637] ? __pfx_sfq_init+0x10/0x10 [ 1108.751094][T22637] qdisc_create+0x47b/0x1090 [ 1108.751109][T22637] tc_modify_qdisc+0xdcf/0x2120 [ 1108.751126][T22637] ? __mutex_lock+0x26a/0x1b90 [ 1108.751144][T22637] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1108.751157][T22637] ? __lock_acquire+0x4a5/0x2630 [ 1108.751182][T22637] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1108.751195][T22637] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1108.751213][T22637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.751234][T22637] ? ref_tracker_free+0x37e/0x6c0 [ 1108.751250][T22637] netlink_rcv_skb+0x159/0x420 [ 1108.751260][T22637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.751278][T22637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1108.751294][T22637] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1108.751314][T22637] netlink_unicast+0x5aa/0x870 [ 1108.751334][T22637] ? __pfx_netlink_unicast+0x10/0x10 [ 1108.751357][T22637] netlink_sendmsg+0x8b0/0xda0 [ 1108.751370][T22637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.751382][T22637] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1108.751402][T22637] ____sys_sendmsg+0x9e1/0xb70 [ 1108.751414][T22637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.751425][T22637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.751445][T22637] ___sys_sendmsg+0x190/0x1e0 [ 1108.751458][T22637] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.751489][T22637] __sys_sendmsg+0x170/0x220 [ 1108.751506][T22637] ? __pfx___sys_sendmsg+0x10/0x10 [ 1108.751528][T22637] ? __pfx_ksys_write+0x10/0x10 [ 1108.751542][T22637] __do_fast_syscall_32+0xe3/0x8c0 [ 1108.751561][T22637] do_fast_syscall_32+0x32/0x70 [ 1108.751571][T22637] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.751586][T22637] RIP: 0023:0xf7fe4f6c [ 1108.751596][T22637] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1108.751607][T22637] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1108.751618][T22637] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800007c0 [ 1108.751625][T22637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.751631][T22637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.751637][T22637] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1108.751643][T22637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.751658][T22637] [ 1109.102167][ T6044] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1109.295829][ T6044] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1109.298460][ T6044] usb 6-1: config 0 has no interface number 0 [ 1109.300384][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1109.303659][ T6044] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1109.307401][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1109.310907][ T6044] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1109.314261][ T6044] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1109.317880][ T6044] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1109.321847][ T6044] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1109.324659][ T6044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.329262][ T6044] usb 6-1: config 0 descriptor?? [ 1109.331418][T22639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.333729][T22639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.344967][ T6044] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1109.565239][ T7013] usb 6-1: USB disconnect, device number 23 [ 1109.575414][ T7013] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1110.124986][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4396'. [ 1110.139093][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4396'. [ 1110.612451][T22684] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1110.614368][T22684] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1110.621936][T22687] FAULT_INJECTION: forcing a failure. [ 1110.621936][T22687] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.625631][T22687] CPU: 1 UID: 0 PID: 22687 Comm: syz.1.4399 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.625660][T22687] Tainted: [L]=SOFTLOCKUP [ 1110.625664][T22687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.625671][T22687] Call Trace: [ 1110.625676][T22687] [ 1110.625682][T22687] dump_stack_lvl+0x100/0x190 [ 1110.625702][T22687] should_fail_ex.cold+0x5/0xa [ 1110.625716][T22687] should_failslab+0xc2/0x120 [ 1110.625729][T22687] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1110.625745][T22687] ? alloc_ucounts+0x13d/0x5c0 [ 1110.625762][T22687] alloc_ucounts+0x13d/0x5c0 [ 1110.625776][T22687] ? __pfx_alloc_ucounts+0x10/0x10 [ 1110.625794][T22687] set_cred_ucounts+0xcd/0x200 [ 1110.625814][T22687] __sys_setresuid+0x666/0x1280 [ 1110.625825][T22687] ? __ia32_sys_setresuid16+0xf7/0x130 [ 1110.625841][T22687] __do_fast_syscall_32+0xe3/0x8c0 [ 1110.625861][T22687] do_fast_syscall_32+0x32/0x70 [ 1110.625871][T22687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.625885][T22687] RIP: 0023:0xf704ef6c [ 1110.625894][T22687] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1110.625904][T22687] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 00000000000000a4 [ 1110.625916][T22687] RAX: ffffffffffffffda RBX: 000000000000ee01 RCX: 0000000000000000 [ 1110.625923][T22687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.625929][T22687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.625935][T22687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1110.625941][T22687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.625955][T22687] [ 1110.729461][T22684] vhci_hcd vhci_hcd.0: Device attached [ 1110.860219][T22692] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4401'. [ 1110.863767][T22692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4401'. [ 1111.014958][ T6044] usb 38-1: SetAddress Request (23) to port 0 [ 1111.016962][ T6044] usb 38-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1111.282370][T22685] vhci_hcd: connection reset by peer [ 1111.285159][ T60] vhci_hcd vhci_hcd.0: stop threads [ 1111.287608][ T60] vhci_hcd vhci_hcd.0: release socket [ 1111.290153][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 1112.380191][T22719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1112.384738][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1112.855532][T22723] 9p: Invalid uid '0x00000000ffffffff' [ 1113.195137][ T5975] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1113.239120][T22734] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4414'. [ 1113.242169][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4414'. [ 1113.378951][ T5975] usb 6-1: config 0 has no interfaces? [ 1113.382725][ T5975] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1113.386320][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1113.389171][ T5975] usb 6-1: Product: syz [ 1113.390510][ T5975] usb 6-1: Manufacturer: syz [ 1113.392115][ T5975] usb 6-1: SerialNumber: syz [ 1113.395998][ T5975] usb 6-1: config 0 descriptor?? [ 1113.623193][ T5975] usb 6-1: USB disconnect, device number 24 [ 1115.664186][T22772] FAULT_INJECTION: forcing a failure. [ 1115.664186][T22772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.668084][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.6.4425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.668101][T22772] Tainted: [L]=SOFTLOCKUP [ 1115.668105][T22772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1115.668112][T22772] Call Trace: [ 1115.668116][T22772] [ 1115.668121][T22772] dump_stack_lvl+0x100/0x190 [ 1115.668141][T22772] should_fail_ex.cold+0x5/0xa [ 1115.668155][T22772] _copy_from_iter+0x1f4/0x1690 [ 1115.668171][T22772] ? __asan_memset+0x23/0x50 [ 1115.668189][T22772] ? __pfx__copy_from_iter+0x10/0x10 [ 1115.668208][T22772] ? __pfx___alloc_skb+0x10/0x10 [ 1115.668241][T22772] netlink_sendmsg+0x808/0xda0 [ 1115.668264][T22772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.668285][T22772] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1115.668316][T22772] ____sys_sendmsg+0x9e1/0xb70 [ 1115.668327][T22772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.668339][T22772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.668357][T22772] ___sys_sendmsg+0x190/0x1e0 [ 1115.668370][T22772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.668410][T22772] __sys_sendmsg+0x170/0x220 [ 1115.668428][T22772] ? __pfx___sys_sendmsg+0x10/0x10 [ 1115.668449][T22772] ? __pfx_ksys_write+0x10/0x10 [ 1115.668463][T22772] __do_fast_syscall_32+0xe3/0x8c0 [ 1115.668482][T22772] do_fast_syscall_32+0x32/0x70 [ 1115.668492][T22772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1115.668506][T22772] RIP: 0023:0xf7fe4f6c [ 1115.668516][T22772] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1115.668526][T22772] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1115.668536][T22772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1115.668543][T22772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1115.668549][T22772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1115.668555][T22772] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1115.668561][T22772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1115.668574][T22772] [ 1115.995419][T22774] overlay: ./file0 is not a directory [ 1116.111273][T22780] overlayfs: failed to resolve './file0': -2 [ 1116.454270][ T6044] usb 38-1: device descriptor read/8, error -110 [ 1116.530699][T22798] ufs: You didn't specify the type of your ufs filesystem [ 1116.530699][T22798] [ 1116.530699][T22798] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1116.530699][T22798] [ 1116.530699][T22798] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1116.540245][T22798] ufs: ufstype=old is supported read-only [ 1116.560187][T22800] 9p: Invalid uid '0x00000000ffffffff' [ 1116.881589][T12056] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1116.886363][ T6044] usb usb38-port1: attempt power cycle [ 1117.065926][T12056] usb 6-1: config 0 has no interfaces? [ 1117.072109][T12056] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1117.076122][T12056] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1117.079526][T12056] usb 6-1: Product: syz [ 1117.081367][T12056] usb 6-1: Manufacturer: syz [ 1117.083457][T12056] usb 6-1: SerialNumber: syz [ 1117.088651][T12056] usb 6-1: config 0 descriptor?? [ 1117.208643][T22811] vti0: entered promiscuous mode [ 1117.307022][T14539] usb 6-1: USB disconnect, device number 25 [ 1117.383589][T22820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4444'. [ 1117.390012][T22820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4444'. [ 1117.418670][T22818] input: syz1 as /devices/virtual/input/input91 [ 1117.511061][ T6044] usb usb38-port1: unable to enumerate USB device [ 1118.102840][T22845] ufs: You didn't specify the type of your ufs filesystem [ 1118.102840][T22845] [ 1118.102840][T22845] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1118.102840][T22845] [ 1118.102840][T22845] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1118.112576][T22845] ufs: ufstype=old is supported read-only [ 1118.174658][ T5943] Bluetooth: hci2: command 0x0405 tx timeout [ 1119.844053][T22860] binder: 22859:22860 unknown command 0 [ 1119.846495][T22860] binder: 22859:22860 ioctl c0306201 800001c0 returned -22 [ 1120.508198][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4459'. [ 1120.971471][T22882] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.973339][T22882] binder: 22881:22882 ioctl 4018620d 80004a80 returned -16 [ 1121.203016][T22888] ufs: You didn't specify the type of your ufs filesystem [ 1121.203016][T22888] [ 1121.203016][T22888] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1121.203016][T22888] [ 1121.203016][T22888] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1121.203112][T22888] ufs: ufstype=old is supported read-only [ 1122.037531][T22902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1122.040861][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1122.599026][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4468'. [ 1122.701940][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 1122.792860][T22918] netlink: 'syz.0.4473': attribute type 1 has an invalid length. [ 1122.796231][T22918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1122.814297][T22918] tmpfs: Unknown parameter 'usrquota@' [ 1122.991303][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4472'. [ 1123.324682][T22932] ufs: You didn't specify the type of your ufs filesystem [ 1123.324682][T22932] [ 1123.324682][T22932] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1123.324682][T22932] [ 1123.324682][T22932] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1123.329705][T22933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1123.337401][T22932] ufs: ufstype=old is supported read-only [ 1123.808319][T22935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4477'. [ 1123.812049][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4477'. [ 1124.087340][T22940] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1124.091728][T22940] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1124.102888][T22940] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off. [ 1124.280019][T22946] orangefs: client-core tried to read wrong size [ 1125.200323][T22959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4485'. [ 1125.807210][T22972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1125.811257][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1125.923233][T22974] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4489'. [ 1126.137863][T22981] 9p: Invalid uid '0x00000000ffffffff' [ 1126.478140][T14539] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1126.660654][T14539] usb 5-1: config 0 has no interfaces? [ 1126.664031][T14539] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1126.667159][T14539] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1126.669752][T14539] usb 5-1: Product: syz [ 1126.671231][T14539] usb 5-1: Manufacturer: syz [ 1126.672738][T14539] usb 5-1: SerialNumber: syz [ 1126.693206][T14539] usb 5-1: config 0 descriptor?? [ 1127.118157][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1127.121356][T22995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1127.158521][T22996] binder: 22992:22996 ioctl 5382 80000340 returned -22 [ 1128.095830][T23006] bridge0: entered promiscuous mode [ 1128.098261][T23006] bridge0: entered allmulticast mode [ 1129.135032][T23021] ufs: You didn't specify the type of your ufs filesystem [ 1129.135032][T23021] [ 1129.135032][T23021] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1129.135032][T23021] [ 1129.135032][T23021] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1129.147167][T23021] ufs: ufstype=old is supported read-only [ 1129.331151][T23031] __nla_validate_parse: 4 callbacks suppressed [ 1129.331170][T23031] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4503'. [ 1129.367082][ T6044] usb 5-1: USB disconnect, device number 19 [ 1129.758590][ T6032] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 1129.918593][ T6032] usb 11-1: Using ep0 maxpacket: 32 [ 1129.921676][ T6032] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.925150][ T6032] usb 11-1: config 0 has no interfaces? [ 1129.931460][ T6032] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1129.935307][ T6032] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1129.938661][ T6032] usb 11-1: Product: syz [ 1129.940153][ T6032] usb 11-1: Manufacturer: syz [ 1129.941695][ T6032] usb 11-1: SerialNumber: syz [ 1129.945163][ T6032] usb 11-1: config 0 descriptor?? [ 1130.351809][ T6032] usb 11-1: USB disconnect, device number 42 [ 1130.731827][T23062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1130.740112][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1131.026830][T23067] netlink: 'syz.6.4514': attribute type 1 has an invalid length. [ 1131.039600][T23067] bond2: entered promiscuous mode [ 1131.041648][T23067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1131.050938][T23067] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4514'. [ 1131.060851][T23067] bond2: (slave bridge2): making interface the new active one [ 1131.065405][T23067] bridge2: entered promiscuous mode [ 1131.067607][T23067] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1133.681149][T23117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1133.690858][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1134.263062][T23123] syzkaller1: tun_chr_ioctl cmd 35108 [ 1134.510737][T23140] FAULT_INJECTION: forcing a failure. [ 1134.510737][T23140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.524372][T23140] CPU: 2 UID: 0 PID: 23140 Comm: syz.1.4534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.524406][T23140] Tainted: [L]=SOFTLOCKUP [ 1134.524414][T23140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1134.524426][T23140] Call Trace: [ 1134.524434][T23140] [ 1134.524442][T23140] dump_stack_lvl+0x100/0x190 [ 1134.524482][T23140] should_fail_ex.cold+0x5/0xa [ 1134.524507][T23140] _copy_from_user+0x2e/0xd0 [ 1134.524552][T23140] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 1134.524592][T23140] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1134.524621][T23140] ? __import_iovec+0x1d2/0x640 [ 1134.524654][T23140] ____sys_sendmsg+0x607/0xb70 [ 1134.524680][T23140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.524716][T23140] ___sys_sendmsg+0x190/0x1e0 [ 1134.524741][T23140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.524799][T23140] __sys_sendmsg+0x170/0x220 [ 1134.524830][T23140] ? __pfx___sys_sendmsg+0x10/0x10 [ 1134.524868][T23140] ? __pfx_ksys_write+0x10/0x10 [ 1134.524895][T23140] __do_fast_syscall_32+0xe3/0x8c0 [ 1134.524935][T23140] do_fast_syscall_32+0x32/0x70 [ 1134.524955][T23140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1134.524980][T23140] RIP: 0023:0xf704ef6c [ 1134.524996][T23140] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1134.525015][T23140] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1134.525034][T23140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 1134.525047][T23140] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.525059][T23140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.525071][T23140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1134.525083][T23140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.525110][T23140] [ 1134.719850][T23143] NILFS (nbd1): device size too small [ 1134.776813][T23144] input: syz1 as /devices/virtual/input/input93 [ 1134.839782][T23145] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1135.106452][T23150] ufs: You didn't specify the type of your ufs filesystem [ 1135.106452][T23150] [ 1135.106452][T23150] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1135.106452][T23150] [ 1135.106452][T23150] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1135.117402][T23150] ufs: ufstype=old is supported read-only [ 1135.955898][T23164] Invalid logical block size (53355) [ 1136.036180][T23175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.251869][T23185] loop4: detected capacity change from 0 to 7 [ 1136.273372][ C0] blk_print_req_error: 25 callbacks suppressed [ 1136.273390][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.280197][ C0] buffer_io_error: 25 callbacks suppressed [ 1136.280213][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.287583][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.291785][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.295614][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.299511][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.303102][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.307227][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.310993][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.315583][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.329237][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.334032][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.338231][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.342207][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.345188][T23052] ldm_validate_partition_table(): Disk read failed. [ 1136.350875][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.354198][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.357437][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.361046][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.364320][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1136.367731][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 1136.370714][T23052] Dev loop4: unable to read RDB block 0 [ 1136.379553][T23052] loop4: unable to read partition table [ 1136.381673][T23052] loop4: partition table beyond EOD, truncated [ 1136.387779][T23185] ldm_validate_partition_table(): Disk read failed. [ 1136.392029][T23185] Dev loop4: unable to read RDB block 0 [ 1136.394973][T23185] loop4: unable to read partition table [ 1136.397225][T23185] loop4: partition table beyond EOD, truncated [ 1136.401047][T23185] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 1136.921684][T23198] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1137.186803][T23212] FAULT_INJECTION: forcing a failure. [ 1137.186803][T23212] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.192107][T23212] CPU: 3 UID: 0 PID: 23212 Comm: syz.0.4553 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.192131][T23212] Tainted: [L]=SOFTLOCKUP [ 1137.192142][T23212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1137.192149][T23212] Call Trace: [ 1137.192155][T23212] [ 1137.192160][T23212] dump_stack_lvl+0x100/0x190 [ 1137.192185][T23212] should_fail_ex.cold+0x5/0xa [ 1137.192203][T23212] should_failslab+0xc2/0x120 [ 1137.192218][T23212] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1137.192239][T23212] ? __kernfs_new_node+0xd2/0x960 [ 1137.192263][T23212] __kernfs_new_node+0xd2/0x960 [ 1137.192284][T23212] ? __pfx___kernfs_new_node+0x10/0x10 [ 1137.192307][T23212] ? find_held_lock+0x2b/0x80 [ 1137.192320][T23212] ? kernfs_root+0xee/0x2a0 [ 1137.192338][T23212] ? kernfs_root+0xee/0x2a0 [ 1137.192361][T23212] kernfs_new_node+0x11b/0x1a0 [ 1137.192376][T23212] __kernfs_create_file+0x53/0x350 [ 1137.192394][T23212] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1137.192416][T23212] internal_create_group+0x593/0xf40 [ 1137.192441][T23212] ? __pfx_internal_create_group+0x10/0x10 [ 1137.192463][T23212] ? kernfs_create_link+0x1bd/0x240 [ 1137.192482][T23212] internal_create_groups+0x9d/0x150 [ 1137.192504][T23212] device_add+0xf5b/0x1950 [ 1137.192523][T23212] ? __pfx_device_add+0x10/0x10 [ 1137.192539][T23212] ? lockdep_init_map_type+0x5c/0x250 [ 1137.192557][T23212] ? __init_waitqueue_head+0xca/0x150 [ 1137.192582][T23212] wakeup_source_device_create+0x243/0x2e0 [ 1137.192600][T23212] wakeup_source_sysfs_add+0x1c/0x90 [ 1137.192616][T23212] wakeup_source_register+0x154/0x3e0 [ 1137.192631][T23212] ep_create_wakeup_source+0x1df/0x2e0 [ 1137.192646][T23212] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1137.192662][T23212] ? do_epoll_ctl+0x1012/0x36a0 [ 1137.192676][T23212] ? do_epoll_ctl+0x1012/0x36a0 [ 1137.192694][T23212] do_epoll_ctl+0x1eee/0x36a0 [ 1137.192715][T23212] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1137.192728][T23212] ? find_held_lock+0x2b/0x80 [ 1137.192741][T23212] ? __might_fault+0xc5/0x140 [ 1137.192760][T23212] ? __might_fault+0xc5/0x140 [ 1137.192785][T23212] ? __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 1137.192799][T23212] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 1137.192814][T23212] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 1137.192835][T23212] __do_fast_syscall_32+0xe3/0x8c0 [ 1137.192858][T23212] do_fast_syscall_32+0x32/0x70 [ 1137.192871][T23212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1137.192888][T23212] RIP: 0023:0xf7fe4f6c [ 1137.192900][T23212] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1137.192917][T23212] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 1137.192936][T23212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 1137.192947][T23212] RDX: 0000000000000004 RSI: 00000000800002c0 RDI: 0000000000000000 [ 1137.192957][T23212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1137.192967][T23212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.192977][T23212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1137.193003][T23212] [ 1137.328602][T23213] ufs: You didn't specify the type of your ufs filesystem [ 1137.328602][T23213] [ 1137.328602][T23213] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1137.328602][T23213] [ 1137.328602][T23213] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1137.338554][T23213] ufs: ufstype=old is supported read-only [ 1137.650922][ T34] hid (null): report_id 60759 is invalid [ 1137.656464][ T34] hid (null): unknown global tag 0xe [ 1137.667636][ T34] hid-generic 0080:0005:FFFF0001.000D: report_id 60759 is invalid [ 1137.674407][ T34] hid-generic 0080:0005:FFFF0001.000D: item 0 2 1 8 parsing failed [ 1137.681866][ T34] hid-generic 0080:0005:FFFF0001.000D: probe with driver hid-generic failed with error -22 [ 1139.497832][T23236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.572096][T23241] SET target dimension over the limit! [ 1139.634396][T23247] overlay: ./file1 is not a directory [ 1139.906760][T23266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1140.517285][T23287] ufs: You didn't specify the type of your ufs filesystem [ 1140.517285][T23287] [ 1140.517285][T23287] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1140.517285][T23287] [ 1140.517285][T23287] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1140.530227][T23287] ufs: ufstype=old is supported read-only [ 1141.620384][T23314] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4573'. [ 1141.633840][T23315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4571'. [ 1141.636998][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4571'. [ 1141.889876][T23320] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4575'. [ 1141.926454][T23320] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4575'. [ 1141.943046][T23320] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1141.957963][T23320] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4575'. [ 1142.135545][T23323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.138189][T23323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.195133][T23323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.203573][T23323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.251231][ T46] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.255927][ T46] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.259804][ T46] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.265871][ T46] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.594277][T23336] netlink: 'syz.5.4581': attribute type 1 has an invalid length. [ 1142.622030][T23336] raw_sendmsg: syz.5.4581 forgot to set AF_INET. Fix it! [ 1143.739920][T23359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1143.935960][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 1143.996200][T23379] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1143.998327][T23379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1144.007999][T23379] vhci_hcd vhci_hcd.0: Device attached [ 1144.017336][T23375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1144.043715][T23379] random: crng reseeded on system resumption [ 1144.334186][T14539] usb 40-1: SetAddress Request (10) to port 0 [ 1144.336799][T14539] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1144.396245][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 1144.396262][ T40] audit: type=1326 audit(1774350580.621:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23391 comm="syz.5.4596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 1144.399298][ T961] libceph: connect (1)[c::]:6789 error -101 [ 1144.399407][ T961] libceph: mon0 (1)[c::]:6789 connect error [ 1144.410262][T23392] ceph: No mds server is up or the cluster is laggy [ 1144.420498][ T40] audit: type=1326 audit(1774350580.621:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23391 comm="syz.5.4596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 1144.679082][T23381] vhci_hcd: connection reset by peer [ 1144.688839][ T46] vhci_hcd vhci_hcd.1: stop threads [ 1144.690805][ T46] vhci_hcd vhci_hcd.1: release socket [ 1144.697125][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 1144.867047][T23405] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 1144.870172][T23405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.875056][T23405] vhci_hcd vhci_hcd.0: Device attached [ 1144.880601][T23405] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(22) [ 1144.883731][T23405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.886335][T23405] vhci_hcd vhci_hcd.0: Device attached [ 1144.889960][T23405] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(24) [ 1144.892254][T23405] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1144.894992][T23405] vhci_hcd vhci_hcd.0: Device attached [ 1144.898091][T23405] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(26) [ 1144.900415][T23405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.904420][T23405] vhci_hcd vhci_hcd.0: Device attached [ 1144.909403][T23405] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(28) [ 1144.912321][T23405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1144.916244][T23405] vhci_hcd vhci_hcd.0: Device attached [ 1144.919717][T23405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.924524][T23405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.928639][T23405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1144.955136][T23416] vhci_hcd: connection closed [ 1144.955227][T23412] vhci_hcd: connection closed [ 1144.955359][T23414] vhci_hcd: connection closed [ 1144.957607][T23410] vhci_hcd: connection closed [ 1144.961621][T23408] vhci_hcd: connection closed [ 1144.964148][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1144.968970][ T12] vhci_hcd vhci_hcd.0: release socket [ 1144.975364][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1144.981454][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1144.983667][ T12] vhci_hcd vhci_hcd.0: release socket [ 1144.985368][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1144.987981][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1144.989832][ T12] vhci_hcd vhci_hcd.0: release socket [ 1144.991578][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1144.993553][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1144.995456][ T12] vhci_hcd vhci_hcd.0: release socket [ 1144.997399][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1144.999281][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1145.000942][ T12] vhci_hcd vhci_hcd.0: release socket [ 1145.002911][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1145.071346][ T961] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1145.339238][T23420] overlayfs: failed to clone lowerpath [ 1145.542659][T23429] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4603'. [ 1145.590267][T23431] netlink: 'syz.0.4604': attribute type 4 has an invalid length. [ 1145.650283][T23434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1145.655101][T23434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1145.828277][T23434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.936037][T23434] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.973613][T23447] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1146.047580][T23434] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.132959][T23434] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.195916][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.252028][ T1230] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.309779][ T1230] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.317249][ T1230] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.320765][ T1230] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.367544][T23462] netlink: 'syz.6.4612': attribute type 10 has an invalid length. [ 1147.542319][T23483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4616'. [ 1147.545524][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 1148.157342][T23494] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1148.159765][T23494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1148.163941][T23494] vhci_hcd vhci_hcd.0: Device attached [ 1148.312423][T23498] netlink: 'syz.0.4619': attribute type 32 has an invalid length. [ 1148.315359][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1148.479540][ T40] audit: type=1326 audit(1774350584.439:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.488872][ T40] audit: type=1326 audit(1774350584.439:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.498887][ T40] audit: type=1326 audit(1774350584.439:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.501638][ T6032] usb 50-1: SetAddress Request (71) to port 0 [ 1148.508209][ T40] audit: type=1326 audit(1774350584.439:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.510201][ T6032] usb 50-1: new SuperSpeed USB device number 71 using vhci_hcd [ 1148.519470][ T40] audit: type=1326 audit(1774350584.439:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.531614][ T40] audit: type=1326 audit(1774350584.439:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.540725][ T40] audit: type=1326 audit(1774350584.458:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.550072][ T40] audit: type=1326 audit(1774350584.458:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23499 comm="syz.0.4620" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 1148.886599][T23495] vhci_hcd: connection reset by peer [ 1148.889097][T23255] vhci_hcd vhci_hcd.6: stop threads [ 1148.891314][T23255] vhci_hcd vhci_hcd.6: release socket [ 1148.893604][T23255] vhci_hcd vhci_hcd.6: disconnect device [ 1149.749548][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1149.757602][T23513] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1149.761525][T23513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1149.783928][T14539] usb 40-1: device descriptor read/8, error -110 [ 1150.212176][T14539] usb usb40-port1: attempt power cycle [ 1150.836513][T14539] usb usb40-port1: unable to enumerate USB device [ 1150.893885][T23525] ufs: You didn't specify the type of your ufs filesystem [ 1150.893885][T23525] [ 1150.893885][T23525] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1150.893885][T23525] [ 1150.893885][T23525] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1150.906692][T23525] ufs: ufstype=old is supported read-only [ 1151.489612][T23538] syzkaller0: entered promiscuous mode [ 1151.491411][T23538] syzkaller0: entered allmulticast mode [ 1151.505920][T23540] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4630'. [ 1151.518350][T23540] fuse: Unknown parameter 'fÂd0x0000000000000008' [ 1151.525315][T23540] tmpfs: Unknown parameter 'grpqu'õÃû?"ŽhE¼%^_½mTa' [ 1151.604078][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4629'. [ 1151.607272][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4629'. [ 1151.623849][T23547] 9p: Invalid uid '0x00000000ffffffff' [ 1152.338627][T23556] ufs: You didn't specify the type of your ufs filesystem [ 1152.338627][T23556] [ 1152.338627][T23556] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1152.338627][T23556] [ 1152.338627][T23556] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1152.348813][T23556] ufs: ufstype=old is supported read-only [ 1152.693843][T23567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4638'. [ 1153.900818][ T6032] usb 50-1: device descriptor read/8, error -110 [ 1153.975666][T23594] __nla_validate_parse: 3 callbacks suppressed [ 1153.975678][T23594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1153.981037][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1154.329557][ T6032] usb usb50-port1: attempt power cycle [ 1154.692992][T23609] comedi: valid board names for 8255 driver are: [ 1154.696656][T23609] 8255 [ 1154.697758][T23609] comedi: valid board names for vmk80xx driver are: [ 1154.701112][T23609] vmk80xx [ 1154.702404][T23609] comedi: valid board names for usbduxsigma driver are: [ 1154.704801][T23609] usbduxsigma [ 1154.706041][T23609] comedi: valid board names for usbduxfast driver are: [ 1154.708786][T23609] usbduxfast [ 1154.709922][T23609] comedi: valid board names for usbdux driver are: [ 1154.712539][T23609] usbdux [ 1154.713506][T23609] comedi: valid board names for ni6501 driver are: [ 1154.715681][T23609] ni6501 [ 1154.716631][T23609] comedi: valid board names for dt9812 driver are: [ 1154.718681][T23609] dt9812 [ 1154.719746][T23609] comedi: valid board names for ni_labpc_cs driver are: [ 1154.724301][T23609] ni_labpc_cs [ 1154.726310][T23609] comedi: valid board names for ni_daq_700 driver are: [ 1154.728969][T23609] ni_daq_700 [ 1154.730209][T23609] comedi: valid board names for labpc_pci driver are: [ 1154.734705][T23609] labpc_pci [ 1154.735967][T23609] comedi: valid board names for adl_pci9118 driver are: [ 1154.738118][T23609] pci9118dg [ 1154.739182][T23609] pci9118hg [ 1154.740239][T23609] pci9118hr [ 1154.741296][T23609] comedi: valid board names for 8255_pci driver are: [ 1154.743710][T23609] 8255_pci [ 1154.744797][T23609] comedi: valid board names for s526 driver are: [ 1154.747010][T23609] s526 [ 1154.747919][T23609] comedi: valid board names for multiq3 driver are: [ 1154.750028][T23609] multiq3 [ 1154.751126][T23609] comedi: valid board names for pcmuio driver are: [ 1154.757652][T23609] pcmuio48 [ 1154.758852][T23609] pcmuio96 [ 1154.759898][T23609] comedi: valid board names for pcmmio driver are: [ 1154.761950][T23609] pcmmio [ 1154.762920][T23609] comedi: valid board names for pcmda12 driver are: [ 1154.765185][T23609] pcmda12 [ 1154.766171][T23609] comedi: valid board names for pcmad driver are: [ 1154.768177][T23609] pcmad12 [ 1154.769219][T23609] pcmad16 [ 1154.770708][T23609] comedi: valid board names for ni_labpc driver are: [ 1154.772772][T23609] lab-pc-1200 [ 1154.773884][T23609] lab-pc-1200ai [ 1154.775820][T23609] lab-pc+ [ 1154.777817][T23609] comedi: valid board names for atmio16 driver are: [ 1154.780032][T23609] atmio16 [ 1154.781085][T23609] atmio16d [ 1154.782244][T23609] comedi: valid board names for ni_at_ao driver are: [ 1154.784396][T23609] at-ao-6 [ 1154.785916][T23609] at-ao-10 [ 1154.787023][T23609] comedi: valid board names for ni_at_a2150 driver are: [ 1154.789194][T23609] ni_at_a2150 [ 1154.790323][T23609] comedi: valid board names for adq12b driver are: [ 1154.792397][T23609] adq12b [ 1154.793482][T23609] comedi: valid board names for mpc624 driver are: [ 1154.796045][T23609] mpc624 [ 1154.797008][T23609] comedi: valid board names for c6xdigio driver are: [ 1154.799417][T23609] c6xdigio [ 1154.800593][T23609] comedi: valid board names for aio_iiro_16 driver are: [ 1154.803013][T23609] aio_iiro_16 [ 1154.804497][T23609] comedi: valid board names for aio_aio12_8 driver are: [ 1154.808750][T23609] aio_aio12_8 [ 1154.809898][T23609] aio_ai12_8 [ 1154.810983][T23609] aio_ao12_4 [ 1154.826147][T23609] comedi: valid board names for fl512 driver are: [ 1154.828546][T23609] fl512 [ 1154.829484][T23609] comedi: valid board names for dmm32at driver are: [ 1154.831596][T23609] dmm32at [ 1154.832591][T23609] comedi: valid board names for dt282x driver are: [ 1154.834641][T23609] dt2821 [ 1154.835671][T23609] dt2821-f [ 1154.866400][T23609] dt2821-g [ 1154.924963][T23609] dt2823 [ 1154.926031][T23609] dt2824-pgh [ 1154.927150][T23609] dt2824-pgl [ 1154.929867][T23609] dt2825 [ 1154.931033][T23609] dt2827 [ 1154.932213][T23609] dt2828 [ 1154.945422][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4651'. [ 1154.948459][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4651'. [ 1154.955874][T23609] dt2829 [ 1154.956895][T23609] dt21-ez [ 1154.957939][T23609] dt23-ez [ 1154.958995][T23609] dt24-ez [ 1154.960044][T23609] dt24-ez-pgl [ 1154.961203][T23609] comedi: valid board names for dt2817 driver are: [ 1154.963313][T23609] dt2817 [ 1154.988064][T23609] comedi: valid board names for dt2815 driver are: [ 1154.990173][T23609] dt2815 [ 1154.991332][T23609] comedi: valid board names for dt2814 driver are: [ 1154.993566][T23609] dt2814 [ 1154.994625][T23609] comedi: valid board names for dt2811 driver are: [ 1154.996777][T23609] dt2811-pgh [ 1154.997922][T23609] dt2811-pgl [ 1155.000982][ T6032] usb usb50-port1: unable to enumerate USB device [ 1155.035445][T23609] comedi: valid board names for dt2801 driver are: [ 1155.037581][T23609] dt2801 [ 1155.038564][T23609] comedi: valid board names for das6402 driver are: [ 1155.040710][T23609] das6402-12 [ 1155.064513][T23609] das6402-16 [ 1155.066090][T23609] comedi: valid board names for das1800 driver are: [ 1155.068862][T23609] das-1701st [ 1155.075057][T23609] das-1701st-da [ 1155.076327][T23609] das-1702st [ 1155.077440][T23609] das-1702st-da [ 1155.078601][T23609] das-1702hr [ 1155.079721][T23609] das-1702hr-da [ 1155.096078][T23609] das-1701ao [ 1155.097499][T23609] das-1702ao [ 1155.098698][T23609] das-1801st [ 1155.099863][T23609] das-1801st-da [ 1155.101004][T23609] das-1802st [ 1155.102072][T23609] das-1802st-da [ 1155.137175][T23609] das-1802hr [ 1155.138514][T23609] das-1802hr-da [ 1155.139692][T23609] das-1801hc [ 1155.140777][T23609] das-1802hc [ 1155.141835][T23609] das-1801ao [ 1155.142988][T23609] das-1802ao [ 1155.144141][T23609] comedi: valid board names for das800 driver are: [ 1155.146342][T23609] das-800 [ 1155.180297][T23609] cio-das800 [ 1155.181407][T23609] das-801 [ 1155.182428][T23609] cio-das801 [ 1155.183567][T23609] das-802 [ 1155.184691][T23609] cio-das802 [ 1155.185822][T23609] cio-das802/16 [ 1155.187005][T23609] comedi: valid board names for isa-das08 driver are: [ 1155.189115][T23609] isa-das08 [ 1155.190189][T23609] das08-pgm [ 1155.191328][T23609] das08-pgh [ 1155.192383][T23609] das08-pgl [ 1155.193438][T23609] das08-aoh [ 1155.194509][T23609] das08-aol [ 1155.195768][T23609] das08-aom [ 1155.196899][T23609] das08/jr-ao [ 1155.198010][T23609] das08jr-16-ao [ 1155.200935][T23609] pc104-das08 [ 1155.202109][T23609] das08jr/16 [ 1155.203197][T23609] comedi: valid board names for das16m1 driver are: [ 1155.205286][T23609] das16m1 [ 1155.206357][T23609] comedi: valid board names for dac02 driver are: [ 1155.208522][T23609] dac02 [ 1155.209471][T23609] comedi: valid board names for rti802 driver are: [ 1155.211565][T23609] rti802 [ 1155.213054][T23609] comedi: valid board names for rti800 driver are: [ 1155.215237][T23609] rti800 [ 1155.216282][T23609] rti815 [ 1155.217278][T23609] comedi: valid board names for pcm3724 driver are: [ 1155.219577][T23609] pcm3724 [ 1155.220613][T23609] comedi: valid board names for pcl818 driver are: [ 1155.222699][T23609] pcl818l [ 1155.224672][T23609] pcl818h [ 1155.225877][T23609] pcl818hd [ 1155.227060][T23609] pcl818hg [ 1155.228266][T23609] pcl818 [ 1155.229472][T23609] pcl718 [ 1155.231563][T23609] pcm3718 [ 1155.233017][T23609] comedi: valid board names for pcl816 driver are: [ 1155.242965][T23609] pcl816 [ 1155.244114][T23609] pcl814b [ 1155.246422][T23609] comedi: valid board names for pcl812 driver are: [ 1155.249891][T23609] pcl812 [ 1155.251027][T23609] pcl812pg [ 1155.252185][T23609] acl8112pg [ 1155.255395][T23609] acl8112dg [ 1155.256529][T23609] acl8112hg [ 1155.257575][T23609] a821pgl [ 1155.258570][T23609] a821pglnda [ 1155.260083][T23609] a821pgh [ 1155.261270][T23609] a822pgl [ 1155.262480][T23609] a822pgh [ 1155.263687][T23609] a823pgl [ 1155.264995][T23609] a823pgh [ 1155.267267][T23609] pcl813 [ 1155.268442][T23609] pcl813b [ 1155.269611][T23609] acl8113 [ 1155.270662][T23609] iso813 [ 1155.271618][T23609] acl8216 [ 1155.272603][T23609] a826pg [ 1155.273567][T23609] comedi: valid board names for pcl730 driver are: [ 1155.275803][T23609] pcl730 [ 1155.278233][T23609] iso730 [ 1155.279220][T23609] acl7130 [ 1155.280186][T23609] pcm3730 [ 1155.281187][T23609] pcl725 [ 1155.282174][T23609] p8r8dio [ 1155.283199][T23609] acl7225b [ 1155.284225][T23609] p16r16dio [ 1155.285347][T23609] pcl733 [ 1155.286331][T23609] pcl734 [ 1155.288020][T23609] opmm-1616-xt [ 1155.289163][T23609] pearl-mm-p [ 1155.290302][T23609] ir104-pbf [ 1155.291383][T23609] comedi: valid board names for pcl726 driver are: [ 1155.293434][T23609] pcl726 [ 1155.294402][T23609] pcl727 [ 1155.295401][T23609] pcl728 [ 1155.296395][T23609] acl6126 [ 1155.297443][T23609] acl6128 [ 1155.298910][T23609] comedi: valid board names for pcl724 driver are: [ 1155.300977][T23609] pcl724 [ 1155.301938][T23609] pcl722 [ 1155.302958][T23609] pcl731 [ 1155.303973][T23609] acl7122 [ 1155.304999][T23609] acl7124 [ 1155.306027][T23609] pet48dio [ 1155.307114][T23609] pcmio48 [ 1155.308240][T23609] onyx-mm-dio [ 1155.309897][T23609] comedi: valid board names for pcl711 driver are: [ 1155.312094][T23609] pcl711 [ 1155.313110][T23609] pcl711b [ 1155.314147][T23609] acl8112hg [ 1155.315262][T23609] acl8112dg [ 1155.316375][T23609] comedi: valid board names for amplc_pc263 driver are: [ 1155.318616][T23609] pc263 [ 1155.319859][T23609] comedi: valid board names for amplc_pc236 driver are: [ 1155.322169][T23609] pc36at [ 1155.323177][T23609] comedi: valid board names for amplc_dio200 driver are: [ 1155.325495][T23609] pc212e [ 1155.326566][T23609] pc214e [ 1155.327593][T23609] pc215e [ 1155.328623][T23609] pc218e [ 1155.329640][T23609] pc272e [ 1155.330976][T23609] comedi: valid board names for comedi_parport driver are: [ 1155.333352][T23609] comedi_parport [ 1155.334652][T23609] comedi: valid board names for comedi_test driver are: [ 1155.337092][T23609] comedi_test [ 1155.338265][T23609] comedi: valid board names for comedi_bond driver are: [ 1155.341278][T23609] comedi_bond [ 1155.718645][T23626] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1155.721591][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4654'. [ 1156.109625][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 1156.109643][ T40] audit: type=1800 audit(1774350591.579:6664): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4665" name="file1" dev="tmpfs" ino=2525 res=0 errno=0 [ 1156.172377][ T5298] Bluetooth: hci2: unexpected event for opcode 0x8af2 [ 1156.361318][T23661] netlink: 'syz.5.4667': attribute type 7 has an invalid length. [ 1156.365351][T23661] CIFS: VFS: Malformed UNC in devname [ 1156.625474][T23678] netlink: 'syz.6.4672': attribute type 10 has an invalid length. [ 1156.634383][T23678] team0: Failed to send options change via netlink (err -105) [ 1156.637501][T23678] team0: Port device dummy0 added [ 1157.245425][T23695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4677'. [ 1157.245491][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'. [ 1158.216886][T23712] FAULT_INJECTION: forcing a failure. [ 1158.216886][T23712] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.217013][T23712] CPU: 1 UID: 0 PID: 23712 Comm: syz.1.4683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1158.217041][T23712] Tainted: [L]=SOFTLOCKUP [ 1158.217045][T23712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1158.217052][T23712] Call Trace: [ 1158.217056][T23712] [ 1158.217061][T23712] dump_stack_lvl+0x100/0x190 [ 1158.217082][T23712] should_fail_ex.cold+0x5/0xa [ 1158.217097][T23712] should_failslab+0xc2/0x120 [ 1158.217110][T23712] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1158.217125][T23712] ? drm_atomic_state_alloc+0xb8/0x120 [ 1158.217143][T23712] drm_atomic_state_alloc+0xb8/0x120 [ 1158.217158][T23712] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1158.217176][T23712] ? trace_contention_end+0x140/0x180 [ 1158.217192][T23712] ? __mutex_lock+0x26a/0x1b90 [ 1158.217210][T23712] ? __mutex_lock+0x26a/0x1b90 [ 1158.217227][T23712] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1158.217244][T23712] ? drm_master_internal_acquire+0x21/0x80 [ 1158.217272][T23712] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1158.217287][T23712] drm_client_modeset_commit_locked+0x14d/0x580 [ 1158.217305][T23712] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1158.217320][T23712] drm_client_modeset_commit+0x4f/0x80 [ 1158.217337][T23712] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1158.217355][T23712] drm_fb_helper_set_par+0x15a/0x1b0 [ 1158.217370][T23712] set_con2fb_map+0x655/0x1040 [ 1158.217387][T23712] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 1158.217401][T23712] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 1158.217416][T23712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1158.217430][T23712] do_fb_ioctl+0x25b/0x7e0 [ 1158.217445][T23712] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1158.217460][T23712] ? kasan_quarantine_put+0x104/0x240 [ 1158.217478][T23712] ? find_held_lock+0x2b/0x80 [ 1158.217489][T23712] ? tomoyo_path_number_perm+0x28f/0x580 [ 1158.217509][T23712] ? find_held_lock+0x2b/0x80 [ 1158.217528][T23712] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1158.217549][T23712] fb_compat_ioctl+0x4f5/0x680 [ 1158.217564][T23712] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1158.217583][T23712] ? __fget_files+0x21f/0x3d0 [ 1158.217597][T23712] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 1158.217613][T23712] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1158.217631][T23712] __do_fast_syscall_32+0xe3/0x8c0 [ 1158.217651][T23712] do_fast_syscall_32+0x32/0x70 [ 1158.217661][T23712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1158.217675][T23712] RIP: 0023:0xf704ef6c [ 1158.217684][T23712] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1158.217695][T23712] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1158.217705][T23712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004610 [ 1158.217712][T23712] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1158.217719][T23712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1158.217725][T23712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1158.217731][T23712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1158.217750][T23712] [ 1158.753213][T23721] 9p: Invalid uid '0x00000000ffffffff' [ 1158.912624][T23725] ptrace attach of "/syz-executor exec"[18185] was attempted by " [ 1158.914405][T23725] CUSE: info not properly terminated [ 1159.181891][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4689'. [ 1159.859725][T23740] dvmrp0: entered allmulticast mode [ 1160.276749][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1160.279931][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1160.907512][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1160.911664][T23761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1161.196666][ T7013] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1161.285469][T23765] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1161.381974][ T7013] usb 6-1: Using ep0 maxpacket: 32 [ 1161.391029][ T7013] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.414037][ T7013] usb 6-1: config 0 has no interfaces? [ 1161.418251][ T7013] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1161.422642][ T7013] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1161.426030][ T7013] usb 6-1: Product: syz [ 1161.429567][ T7013] usb 6-1: Manufacturer: syz [ 1161.432426][ T7013] usb 6-1: SerialNumber: syz [ 1161.435240][ T7013] usb 6-1: config 0 descriptor?? [ 1161.649996][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 1161.818138][T23791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.279493][ T6071] usb 6-1: USB disconnect, device number 26 [ 1162.388972][T23795] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1162.392091][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1162.775179][T23808] ufs: You didn't specify the type of your ufs filesystem [ 1162.775179][T23808] [ 1162.775179][T23808] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1162.775179][T23808] [ 1162.775179][T23808] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1162.785702][T23808] ufs: ufstype=old is supported read-only [ 1162.832894][T23810] 9p: Invalid uid '0x00000000ffffffff' [ 1163.090112][T23831] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4719'. [ 1163.136241][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'. [ 1163.224752][T23835] tipc: Can't bind to reserved service type 1 [ 1163.233544][T23835] tipc: Failed to remove unknown binding: 66,0,0/0:3942709527/3942709528 [ 1163.238191][T23835] tipc: Failed to remove unknown binding: 66,0,0/0:3942709527/3942709528 [ 1163.498808][T23841] 9p: Invalid uid '0x00000000ffffffff' [ 1163.538092][T23843] loop5: detected capacity change from 0 to 7 [ 1163.656682][T23602] Dev loop5: unable to read RDB block 7 [ 1163.658516][T23602] loop5: unable to read partition table [ 1163.660404][T23602] loop5: partition table beyond EOD, truncated [ 1163.666570][ C1] blk_print_req_error: 25 callbacks suppressed [ 1163.666583][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1163.671654][ C1] buffer_io_error: 25 callbacks suppressed [ 1163.671664][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1163.676763][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 1163.679880][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 1163.850721][T23843] Dev loop5: unable to read RDB block 7 [ 1163.854969][T23843] loop5: unable to read partition table [ 1163.868139][T23843] loop5: partition table beyond EOD, truncated [ 1163.870173][T23843] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1164.284954][T23857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1165.047643][T23876] ceph: Path missing in source [ 1165.247129][T23885] 9p: Invalid uid '0x00000000ffffffff' [ 1165.346593][T23887] ufs: You didn't specify the type of your ufs filesystem [ 1165.346593][T23887] [ 1165.346593][T23887] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1165.346593][T23887] [ 1165.346593][T23887] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1165.357038][T23887] ufs: ufstype=old is supported read-only [ 1165.828143][T23890] tipc: Enabled bearer , priority 0 [ 1165.859733][T23898] __nla_validate_parse: 1 callbacks suppressed [ 1165.859753][T23898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4740'. [ 1165.867349][T23898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4740'. [ 1165.902578][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.908667][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.913261][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.916264][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.919379][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.042996][T23897] chnl_net:caif_netlink_parms(): no params data found [ 1166.060566][T23904] FAULT_INJECTION: forcing a failure. [ 1166.060566][T23904] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.065302][T23904] CPU: 2 UID: 0 PID: 23904 Comm: syz.0.4743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.065331][T23904] Tainted: [L]=SOFTLOCKUP [ 1166.065339][T23904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1166.065350][T23904] Call Trace: [ 1166.065357][T23904] [ 1166.065365][T23904] dump_stack_lvl+0x100/0x190 [ 1166.065399][T23904] should_fail_ex.cold+0x5/0xa [ 1166.065423][T23904] should_failslab+0xc2/0x120 [ 1166.065444][T23904] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1166.065470][T23904] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 1166.065503][T23904] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 1166.065536][T23904] mmu_topup_memory_caches+0x25/0x170 [ 1166.065559][T23904] kvm_mmu_load+0xd6/0x23e0 [ 1166.065588][T23904] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 1166.065611][T23904] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 1166.065639][T23904] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1166.065667][T23904] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 1166.065694][T23904] ? kvm_check_and_inject_events+0x961/0x10c0 [ 1166.065714][T23904] ? record_steal_time+0x430/0xbe0 [ 1166.065747][T23904] vcpu_run+0x39f4/0x5ca0 [ 1166.065770][T23904] ? __lock_acquire+0x4a5/0x2630 [ 1166.065799][T23904] ? __pfx_vcpu_run+0x10/0x10 [ 1166.065828][T23904] ? rcu_is_watching+0x12/0xc0 [ 1166.065860][T23904] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 1166.065880][T23904] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 1166.065907][T23904] kvm_vcpu_ioctl+0x730/0x1730 [ 1166.065935][T23904] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1166.065962][T23904] ? tomoyo_path_number_perm+0x188/0x580 [ 1166.065986][T23904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1166.066017][T23904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1166.066039][T23904] ? do_vfs_ioctl+0x226/0x13e0 [ 1166.066067][T23904] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1166.066105][T23904] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1166.066133][T23904] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1166.066159][T23904] ? __fget_files+0x21f/0x3d0 [ 1166.066183][T23904] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1166.066210][T23904] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1166.066240][T23904] __do_fast_syscall_32+0xe3/0x8c0 [ 1166.066273][T23904] do_fast_syscall_32+0x32/0x70 [ 1166.066291][T23904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1166.066315][T23904] RIP: 0023:0xf7fe4f6c [ 1166.066331][T23904] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1166.066348][T23904] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1166.066367][T23904] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1166.066379][T23904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1166.066389][T23904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1166.066400][T23904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.066411][T23904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1166.066436][T23904] [ 1166.109864][T23897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.200953][T23897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.204132][T23897] bridge_slave_0: entered allmulticast mode [ 1166.207888][T23897] bridge_slave_0: entered promiscuous mode [ 1166.213380][T23897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.216508][T23897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.219490][T23897] bridge_slave_1: entered allmulticast mode [ 1166.223433][T23897] bridge_slave_1: entered promiscuous mode [ 1166.247730][T23897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.252523][T23897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.268517][T23897] team0: Port device team_slave_0 added [ 1166.271773][T23897] team0: Port device team_slave_1 added [ 1166.286885][T23897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.289139][T23897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.301098][T23897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.307348][T23897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.310324][T23897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.321204][T23897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.347297][T23897] hsr_slave_0: entered promiscuous mode [ 1166.349620][T23897] hsr_slave_1: entered promiscuous mode [ 1166.351802][T23897] debugfs: 'hsr0' already exists in 'hsr' [ 1166.353710][T23897] Cannot create hsr debugfs directory [ 1166.855105][T23940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1166.940658][T23945] tipc: Enabled bearer , priority 0 [ 1166.943610][T23945] syzkaller0: entered promiscuous mode [ 1166.945420][T23945] syzkaller0: entered allmulticast mode [ 1166.961746][T23945] tipc: Resetting bearer [ 1166.993868][T23944] tipc: Resetting bearer [ 1167.004457][T23944] tipc: Disabling bearer [ 1167.101739][T23897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1167.109273][T23897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1167.116157][T23897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1167.130443][T23897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1167.262424][T23897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.274745][T23897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.293068][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.296283][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.302465][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.304831][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.333368][T23897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1167.519502][T23897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.546633][T23897] veth0_vlan: entered promiscuous mode [ 1167.553575][T23897] veth1_vlan: entered promiscuous mode [ 1167.587057][T23897] veth0_macvtap: entered promiscuous mode [ 1167.594794][T23897] veth1_macvtap: entered promiscuous mode [ 1167.605645][T23897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.612486][T23897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.618729][ T103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.623237][ T103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.629874][ T103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.632921][ T103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.725304][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.738842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.771912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.774427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.876666][T24000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1167.879652][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1168.079938][ T5943] Bluetooth: hci0: command tx timeout [ 1169.167608][T16897] Bluetooth: hci3: Frame reassembly failed (-84) [ 1169.330491][T24043] fuse: Bad value for 'fd' [ 1169.501339][T24050] 9p: Invalid uid '0x00000000ffffffff' [ 1169.846885][T24063] Invalid logical block size (3) [ 1170.314709][ T5298] Bluetooth: hci0: command tx timeout [ 1171.326958][ T5943] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1171.362099][T24083] 9p: Invalid uid '0x00000000ffffffff' [ 1171.571542][T24089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1171.574061][T24089] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1171.604085][T24089] vhci_hcd vhci_hcd.0: Device attached [ 1171.885782][T24092] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1171.909436][ T6032] usb 40-1: SetAddress Request (14) to port 0 [ 1171.912287][ T6032] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1171.918441][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1171.925082][T24089] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1171.931940][T24089] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1172.237118][T24090] vhci_hcd: connection reset by peer [ 1172.239306][ T103] vhci_hcd vhci_hcd.1: stop threads [ 1172.241074][ T103] vhci_hcd vhci_hcd.1: release socket [ 1172.243030][ T103] vhci_hcd vhci_hcd.1: disconnect device [ 1172.255821][T24105] xt_CT: No such helper "pptp" [ 1172.355007][T24107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1172.534472][ T5943] Bluetooth: hci0: command tx timeout [ 1172.662014][T24118] overlayfs: failed to resolve './file0': -2 [ 1172.835663][T24124] 9p: Invalid uid '0x00000000ffffffff' [ 1172.876963][T24102] delete_channel: no stack [ 1172.922735][T24129] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4790'. [ 1173.035370][T24133] Invalid logical block size (-2) [ 1173.358130][ T5975] IPVS: starting estimator thread 0... [ 1173.474989][T24146] IPVS: using max 48 ests per chain, 115200 per kthread [ 1173.639224][T24150] overlayfs: failed to resolve './file0': -2 [ 1173.800695][T24155] 9p: Invalid uid '0x00000000ffffffff' [ 1174.219788][T23602] udevd[23602]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 1174.304051][T24175] FAULT_INJECTION: forcing a failure. [ 1174.304051][T24175] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.308147][T24175] CPU: 1 UID: 0 PID: 24175 Comm: syz.3.4805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.308165][T24175] Tainted: [L]=SOFTLOCKUP [ 1174.308170][T24175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1174.308176][T24175] Call Trace: [ 1174.308182][T24175] [ 1174.308186][T24175] dump_stack_lvl+0x100/0x190 [ 1174.308208][T24175] should_fail_ex.cold+0x5/0xa [ 1174.308223][T24175] should_failslab+0xc2/0x120 [ 1174.308236][T24175] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1174.308267][T24175] ? __alloc_skb+0x140/0x710 [ 1174.308286][T24175] __alloc_skb+0x140/0x710 [ 1174.308300][T24175] ? __alloc_skb+0x5b7/0x710 [ 1174.308314][T24175] ? __pfx___alloc_skb+0x10/0x10 [ 1174.308334][T24175] hci_sock_sendmsg+0x1b01/0x2620 [ 1174.308353][T24175] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1174.308368][T24175] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1174.308389][T24175] sock_write_iter+0x524/0x5a0 [ 1174.308402][T24175] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1174.308416][T24175] ? __pfx_sock_write_iter+0x10/0x10 [ 1174.308428][T24175] ? get_pid_task+0xfc/0x250 [ 1174.308447][T24175] ? bpf_lsm_file_permission+0x9/0x10 [ 1174.308457][T24175] ? security_file_permission+0x76/0x210 [ 1174.308472][T24175] ? rw_verify_area+0xce/0x6d0 [ 1174.308490][T24175] vfs_write+0x6ac/0x1070 [ 1174.308501][T24175] ? __pfx_sock_write_iter+0x10/0x10 [ 1174.308515][T24175] ? __pfx_vfs_write+0x10/0x10 [ 1174.308524][T24175] ? find_held_lock+0x2b/0x80 [ 1174.308544][T24175] ksys_write+0x1f8/0x250 [ 1174.308554][T24175] ? __pfx_ksys_write+0x10/0x10 [ 1174.308565][T24175] ? __pfx_ksys_write+0x10/0x10 [ 1174.308578][T24175] __do_fast_syscall_32+0xe3/0x8c0 [ 1174.308597][T24175] do_fast_syscall_32+0x32/0x70 [ 1174.308608][T24175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1174.308622][T24175] RIP: 0023:0xf6ffef6c [ 1174.308632][T24175] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1174.308642][T24175] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1174.308653][T24175] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 1174.308660][T24175] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.308666][T24175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1174.308672][T24175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1174.308677][T24175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1174.308696][T24175] [ 1174.389558][T24175] Bluetooth: MGMT ver 1.23 [ 1174.768051][ T5943] Bluetooth: hci0: command tx timeout [ 1175.347139][T24205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4813'. [ 1175.350364][T24205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4813'. [ 1175.590191][T24207] FAULT_INJECTION: forcing a failure. [ 1175.590191][T24207] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.594524][T24207] CPU: 2 UID: 0 PID: 24207 Comm: syz.1.4814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.594544][T24207] Tainted: [L]=SOFTLOCKUP [ 1175.594548][T24207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1175.594555][T24207] Call Trace: [ 1175.594561][T24207] [ 1175.594567][T24207] dump_stack_lvl+0x100/0x190 [ 1175.594590][T24207] should_fail_ex.cold+0x5/0xa [ 1175.594606][T24207] should_failslab+0xc2/0x120 [ 1175.594619][T24207] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1175.594636][T24207] ? alloc_netdev_mqs+0xd95/0x14f0 [ 1175.594655][T24207] ? __asan_memset+0x23/0x50 [ 1175.594674][T24207] alloc_netdev_mqs+0xd95/0x14f0 [ 1175.594696][T24207] rtnl_create_link+0xc13/0xf80 [ 1175.594716][T24207] rtnl_newlink+0x13b8/0x2380 [ 1175.594740][T24207] ? __pfx_rtnl_newlink+0x10/0x10 [ 1175.594758][T24207] ? rcu_is_watching+0x12/0xc0 [ 1175.594782][T24207] ? kasan_quarantine_put+0x104/0x240 [ 1175.594803][T24207] ? kfree_skbmem+0x19a/0x210 [ 1175.594816][T24207] ? kmem_cache_free+0x124/0x6a0 [ 1175.594839][T24207] ? find_held_lock+0x2b/0x80 [ 1175.594857][T24207] ? find_held_lock+0x2b/0x80 [ 1175.594868][T24207] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1175.594886][T24207] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1175.594905][T24207] ? __pfx_rtnl_newlink+0x10/0x10 [ 1175.594928][T24207] rtnetlink_rcv_msg+0x95e/0xe90 [ 1175.594947][T24207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1175.594970][T24207] ? ref_tracker_free+0x37e/0x6c0 [ 1175.594988][T24207] netlink_rcv_skb+0x159/0x420 [ 1175.595000][T24207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1175.595019][T24207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1175.595036][T24207] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1175.595058][T24207] netlink_unicast+0x5aa/0x870 [ 1175.595079][T24207] ? __pfx_netlink_unicast+0x10/0x10 [ 1175.595104][T24207] netlink_sendmsg+0x8b0/0xda0 [ 1175.595118][T24207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.595132][T24207] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1175.595154][T24207] ____sys_sendmsg+0x9e1/0xb70 [ 1175.595166][T24207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.595179][T24207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.595200][T24207] ___sys_sendmsg+0x190/0x1e0 [ 1175.595215][T24207] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.595248][T24207] __sys_sendmsg+0x170/0x220 [ 1175.595267][T24207] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.595290][T24207] ? __pfx_ksys_write+0x10/0x10 [ 1175.595305][T24207] __do_fast_syscall_32+0xe3/0x8c0 [ 1175.595327][T24207] do_fast_syscall_32+0x32/0x70 [ 1175.595338][T24207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1175.595354][T24207] RIP: 0023:0xf704ef6c [ 1175.595364][T24207] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1175.595376][T24207] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1175.595388][T24207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1175.595395][T24207] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 1175.595402][T24207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1175.595409][T24207] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1175.595415][T24207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1175.595431][T24207] [ 1175.772630][T16897] bridge_slave_1: left allmulticast mode [ 1175.775152][T16897] bridge_slave_1: left promiscuous mode [ 1175.777146][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.782185][T16897] bridge_slave_0: left allmulticast mode [ 1175.784933][T16897] bridge_slave_0: left promiscuous mode [ 1175.786984][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.801315][T24213] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1176.044419][T16897] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1176.047999][T16897] bridge2 (unregistering): left promiscuous mode [ 1176.169105][T16897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.173882][T16897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.177252][T16897] bond0 (unregistering): Released all slaves [ 1176.210857][T16897] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1176.213664][T16897] vcan1: left promiscuous mode [ 1176.221549][T16897] bond1 (unregistering): Released all slaves [ 1176.228407][T16897] bond2 (unregistering): Released all slaves [ 1176.248986][T24213] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4816'. [ 1176.420793][T24225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1176.506407][T24232] bridge3: entered promiscuous mode [ 1176.772285][T24242] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4821'. [ 1176.869589][T16897] hsr_slave_0: left promiscuous mode [ 1176.872524][T16897] hsr_slave_1: left promiscuous mode [ 1176.878442][T16897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.882409][T16897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.127831][T16897] team0 (unregistering): Port device team_slave_1 removed [ 1177.147081][T16897] team0 (unregistering): Port device team_slave_0 removed [ 1177.311879][ T6032] usb 40-1: device descriptor read/8, error -110 [ 1177.321016][T16897] team0 (unregistering): Port device dummy0 removed [ 1177.508114][T24262] xt_CT: No such helper "pptp" [ 1177.728978][ T6032] usb usb40-port1: attempt power cycle [ 1177.805689][T16897] IPVS: stop unused estimator thread 0... [ 1177.810112][ T40] audit: type=1326 audit(1774350611.886:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.0.4827" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x0 [ 1177.918283][T24279] __nla_validate_parse: 1 callbacks suppressed [ 1177.918297][T24279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4826'. [ 1177.923875][T24279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4826'. [ 1178.118491][T24253] delete_channel: no stack [ 1178.211392][T24282] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1178.337843][ T6032] usb usb40-port1: unable to enumerate USB device [ 1178.650625][T24291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4830'. [ 1178.654075][T24291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4830'. [ 1179.250707][T24305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4831'. [ 1179.787657][T24321] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 1179.899525][T24331] bond2: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 1179.943381][T24331] bond2 (unregistering): Released all slaves [ 1180.037493][T24335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1180.040949][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1180.090521][T24336] ufs: You didn't specify the type of your ufs filesystem [ 1180.090521][T24336] [ 1180.090521][T24336] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1180.090521][T24336] [ 1180.090521][T24336] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1180.100540][T24336] ufs: ufstype=old is supported read-only [ 1180.511740][T24346] cgroup: No subsys list or none specified [ 1180.544253][T24347] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1180.547052][T24347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1180.553327][T24347] vhci_hcd vhci_hcd.0: Device attached [ 1180.838095][T10029] usb 40-1: SetAddress Request (18) to port 0 [ 1180.840892][T10029] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1181.224873][T24348] vhci_hcd: connection reset by peer [ 1181.227854][ T103] vhci_hcd vhci_hcd.1: stop threads [ 1181.230180][ T103] vhci_hcd vhci_hcd.1: release socket [ 1181.232785][ T103] vhci_hcd vhci_hcd.1: disconnect device [ 1181.638551][T24371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4850'. [ 1181.643187][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4850'. [ 1182.010415][ T40] audit: type=1400 audit(1774350615.816:6666): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=24381 comm="syz.3.4855" [ 1182.748928][T24392] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 1182.751718][T24392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1183.664151][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 1184.502895][T14278] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1184.665030][T14278] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.670054][T14278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.674960][T14278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1184.680596][T14278] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.706275][T14278] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.710194][T14278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.715808][T14278] usb 8-1: config 0 descriptor?? [ 1184.751951][T24428] __nla_validate_parse: 1 callbacks suppressed [ 1184.751970][T24428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1184.771979][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1185.161238][T14278] hid_parser_main: 14 callbacks suppressed [ 1185.161251][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161275][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161288][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161300][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161313][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161325][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161337][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161349][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161362][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.161374][T14278] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1185.170014][T14278] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1185.439765][ T59] usb 8-1: USB disconnect, device number 3 [ 1185.575622][T24433] fuse: Unknown parameter 'ÿ' [ 1185.604215][ T5943] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1185.702290][T24439] (syz.1.4869,24439,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1185.705857][T24439] (syz.1.4869,24439,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 1185.761663][T24442] syzkaller0: entered promiscuous mode [ 1185.764293][T24442] syzkaller0: entered allmulticast mode [ 1185.798877][T24439] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1186.298178][T10029] usb 40-1: device descriptor read/8, error -110 [ 1186.308299][T24453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1186.382187][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1187.525392][T10029] usb usb40-port1: attempt power cycle [ 1187.631570][T24470] loop5: detected capacity change from 0 to 7 [ 1187.841241][T24470] Dev loop5: unable to read RDB block 7 [ 1187.844220][T24470] loop5: unable to read partition table [ 1187.847118][T24470] loop5: partition table beyond EOD, truncated [ 1187.850010][T24470] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1187.963774][T24477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1187.967810][ T59] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1188.110279][ T40] audit: type=1326 audit(1774350621.525:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24480 comm="syz.5.4881" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 1188.148521][ T59] usb 6-1: config 0 has no interfaces? [ 1188.152579][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1188.163055][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.166566][ T59] usb 6-1: Product: syz [ 1188.176225][ T59] usb 6-1: Manufacturer: syz [ 1188.179344][ T59] usb 6-1: SerialNumber: syz [ 1188.190016][ T59] usb 6-1: config 0 descriptor?? [ 1188.434647][T24470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.443521][ T59] usb 6-1: USB disconnect, device number 27 [ 1188.532642][T10029] usb usb40-port1: unable to enumerate USB device [ 1189.145768][T24500] fuse: Unknown parameter 'ÿ' [ 1189.290522][T24502] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4884'. [ 1189.944414][T24511] loop5: detected capacity change from 0 to 7 [ 1190.075576][T23602] Dev loop5: unable to read RDB block 7 [ 1190.077426][T23602] loop5: unable to read partition table [ 1190.079496][T23602] loop5: partition table beyond EOD, truncated [ 1190.090783][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1190.094568][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1190.097708][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1190.100815][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1190.107959][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4887'. [ 1190.230610][T24511] Dev loop5: unable to read RDB block 7 [ 1190.232486][T24511] loop5: unable to read partition table [ 1190.234387][T24511] loop5: partition table beyond EOD, truncated [ 1190.236553][T24511] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1190.352502][T24527] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1190.356754][T24528] ufs: You didn't specify the type of your ufs filesystem [ 1190.356754][T24528] [ 1190.356754][T24528] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1190.356754][T24528] [ 1190.356754][T24528] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1190.366524][T24528] ufs: ufstype=old is supported read-only [ 1190.401609][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1191.714893][T24539] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1192.132667][ T5975] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1192.315010][ T5975] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1192.319624][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.323468][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.328645][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.333033][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.337090][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.341403][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.345087][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.348111][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.353399][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.364520][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.370278][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.375330][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.380426][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.384297][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.389857][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.394378][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.399350][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.404110][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.408215][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.411924][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.415801][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.419151][ T5975] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.423617][ T5975] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.427291][ T5975] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1192.431350][ T5975] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1192.435388][ T5975] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1192.438681][ T5975] usb 8-1: Product: syz [ 1192.440140][ T5975] usb 8-1: Manufacturer: syz [ 1192.441881][ T5975] usb 8-1: SerialNumber: syz [ 1192.449934][ T5975] usb 8-1: config 0 descriptor?? [ 1192.457604][ T5975] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1192.587494][T24577] ufs: You didn't specify the type of your ufs filesystem [ 1192.587494][T24577] [ 1192.587494][T24577] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1192.587494][T24577] [ 1192.587494][T24577] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1192.668348][T24577] ufs: ufstype=old is supported read-only [ 1192.723786][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4905'. [ 1192.750745][T24559] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1192.755935][T24559] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1192.763882][T24559] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1192.766434][T24559] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1192.828737][T24582] tmpfs: Bad value for 'mpol' [ 1192.937871][T24587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1192.939969][T24587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1192.943852][T24587] vhci_hcd vhci_hcd.0: Device attached [ 1193.244106][ T5942] usb 38-1: SetAddress Request (27) to port 0 [ 1193.246315][ T5942] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd [ 1193.404715][T24588] vhci_hcd: connection reset by peer [ 1193.406663][T23255] vhci_hcd vhci_hcd.0: stop threads [ 1193.408416][T23255] vhci_hcd vhci_hcd.0: release socket [ 1193.410390][T23255] vhci_hcd vhci_hcd.0: disconnect device [ 1193.541501][T24599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4911'. [ 1193.545946][T24599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4911'. [ 1193.551520][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4911'. [ 1193.558287][T24599] nfs: Unknown parameter ']¤m˜ntext' [ 1193.595890][T24601] lo: Caught tx_queue_len zero misconfig [ 1193.896008][T23930] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1194.068206][T23930] usb 6-1: Using ep0 maxpacket: 32 [ 1194.071664][T23930] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.075048][T23930] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1194.079278][T23930] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.082994][T23930] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1194.088895][T23930] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1194.091883][T23930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.094478][T23930] usb 6-1: Product: syz [ 1194.095996][T23930] usb 6-1: Manufacturer: syz [ 1194.097613][T23930] usb 6-1: SerialNumber: syz [ 1194.104524][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1194.109417][T23930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input94 [ 1194.344685][T23930] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1194.347334][T23930] (id 0x00) [ 1194.398230][T23930] rc_core: IR keymap rc-imon-pad not found [ 1194.400717][T23930] Registered IR keymap rc-empty [ 1194.403605][T23930] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1194.407669][T23930] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1194.546015][T24612] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1194.549838][T24612] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1194.568292][T23930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 1194.574044][T23930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input95 [ 1194.582378][T23930] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:28> initialized [ 1194.932827][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 1194.938257][ T5975] usb 8-1: USB disconnect, device number 4 [ 1194.941893][ T5975] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1195.094787][T24626] ptrace attach of "/syz-executor exec"[17196] was attempted by " [ 1195.131623][ T40] audit: type=1804 audit(1774350628.103:6668): pid=24626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4916" name="/newroot/476/bus/bus" dev="overlay" ino=2615 res=1 errno=0 [ 1195.199568][ T40] audit: type=1804 audit(1774350628.160:6669): pid=24630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4916" name="/newroot/476/bus/bus" dev="overlay" ino=2615 res=1 errno=0 [ 1195.607464][T24636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1195.611994][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1196.382062][ T40] audit: type=1800 audit(1774350629.273:6670): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4919" name="file0" dev="9p" ino=74711117 res=0 errno=0 [ 1196.387009][T24644] netfs: Couldn't get user pages (rc=-14) [ 1196.594496][T24649] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1196.653636][T24651] ufs: You didn't specify the type of your ufs filesystem [ 1196.653636][T24651] [ 1196.653636][T24651] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1196.653636][T24651] [ 1196.653636][T24651] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1196.667208][T24651] ufs: ufstype=old is supported read-only [ 1196.749311][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1196.863429][ T5975] usb 6-1: USB disconnect, device number 28 [ 1196.923980][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.928247][ T9] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1196.946351][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1196.951605][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.048053][T24654] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1197.069384][T24654] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1197.165856][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4924'. [ 1198.476257][T24672] ipvlan2: entered promiscuous mode [ 1198.478189][T24672] ipvlan2: entered allmulticast mode [ 1198.483412][T24672] macvlan0: entered allmulticast mode [ 1198.485427][T24672] veth1_vlan: entered allmulticast mode [ 1198.498749][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4926'. [ 1198.510592][T24672] ipvlan3: entered promiscuous mode [ 1198.512614][T24672] ipvlan3: entered allmulticast mode [ 1198.694406][ T5942] usb 38-1: device descriptor read/8, error -110 [ 1198.794425][T24678] syzkaller1: entered promiscuous mode [ 1198.796952][T24678] syzkaller1: entered allmulticast mode [ 1199.011540][T24681] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1199.132566][ T5942] usb usb38-port1: attempt power cycle [ 1199.453128][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 1199.549903][T23930] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1199.557886][ T961] usb 5-1: USB disconnect, device number 20 [ 1199.719812][T23930] usb 6-1: Using ep0 maxpacket: 32 [ 1199.723582][T23930] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1199.727126][T23930] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1199.731246][T23930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1199.735439][T23930] usb 6-1: config 1 has no interface number 0 [ 1199.738278][T23930] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.743640][T23930] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1199.749001][T23930] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1199.753055][T23930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.763614][T23930] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1199.774535][ T5942] usb usb38-port1: unable to enumerate USB device [ 1199.993901][T24701] FAULT_INJECTION: forcing a failure. [ 1199.993901][T24701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.998701][T24701] CPU: 3 UID: 0 PID: 24701 Comm: syz.0.4935 Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.998738][T24701] Tainted: [L]=SOFTLOCKUP [ 1199.998743][T24701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1199.998751][T24701] Call Trace: [ 1199.998758][T24701] [ 1199.998764][T24701] dump_stack_lvl+0x100/0x190 [ 1199.998804][T24701] should_fail_ex.cold+0x5/0xa [ 1199.998823][T24701] _copy_to_user+0x32/0xd0 [ 1199.998841][T24701] simple_read_from_buffer+0xcb/0x170 [ 1199.998864][T24701] proc_fail_nth_read+0x1af/0x230 [ 1199.998881][T24701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1199.998899][T24701] ? rw_verify_area+0xce/0x6d0 [ 1199.998918][T24701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1199.998935][T24701] vfs_read+0x1e4/0xb30 [ 1199.998950][T24701] ? __pfx_vfs_read+0x10/0x10 [ 1199.998961][T24701] ? find_held_lock+0x2b/0x80 [ 1199.998975][T24701] ? __fget_files+0x215/0x3d0 [ 1199.998991][T24701] ? __fget_files+0x21f/0x3d0 [ 1199.999008][T24701] ksys_read+0x12a/0x250 [ 1199.999020][T24701] ? __pfx_ksys_read+0x10/0x10 [ 1199.999038][T24701] do_int80_emulation+0x141/0x6b0 [ 1199.999054][T24701] asm_int80_emulation+0x1a/0x20 [ 1199.999068][T24701] RIP: 0023:0xf71e5cab [ 1199.999079][T24701] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1199.999092][T24701] RSP: 002b:00000000f54854bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1199.999105][T24701] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54855d0 [ 1199.999113][T24701] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1199.999120][T24701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.999127][T24701] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1199.999135][T24701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.999152][T24701] [ 1200.005349][T23930] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1200.121734][T24703] ipvlan2: entered promiscuous mode [ 1200.124078][T24703] ipvlan2: entered allmulticast mode [ 1200.126866][T24703] macvlan0: entered allmulticast mode [ 1200.129678][T24703] veth1_vlan: entered allmulticast mode [ 1200.158351][T24703] ipvlan3: entered promiscuous mode [ 1200.160688][T24703] ipvlan3: entered allmulticast mode [ 1200.449618][T23930] usb 6-1: USB disconnect, device number 29 [ 1200.452246][T23930] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1202.919286][T24736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4945'. [ 1203.882767][T24718] Process accounting resumed [ 1204.054647][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1204.161880][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1205.721916][T24774] FAULT_INJECTION: forcing a failure. [ 1205.721916][T24774] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.726066][T24774] CPU: 1 UID: 0 PID: 24774 Comm: syz.1.4958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1205.726098][T24774] Tainted: [L]=SOFTLOCKUP [ 1205.726103][T24774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1205.726110][T24774] Call Trace: [ 1205.726116][T24774] [ 1205.726121][T24774] dump_stack_lvl+0x100/0x190 [ 1205.726144][T24774] should_fail_ex.cold+0x5/0xa [ 1205.726160][T24774] ? copy_splice_read+0x1a3/0xb90 [ 1205.726172][T24774] should_failslab+0xc2/0x120 [ 1205.726185][T24774] __kmalloc_noprof+0xe0/0x850 [ 1205.726207][T24774] copy_splice_read+0x1a3/0xb90 [ 1205.726222][T24774] ? __pfx_copy_splice_read+0x10/0x10 [ 1205.726236][T24774] ? look_up_lock_class+0x64/0x120 [ 1205.726260][T24774] ? lockdep_init_map_type+0x5c/0x250 [ 1205.726303][T24774] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1205.726332][T24774] ? __pfx_copy_splice_read+0x10/0x10 [ 1205.726346][T24774] do_splice_read+0x285/0x370 [ 1205.726360][T24774] splice_direct_to_actor+0x2a1/0xa30 [ 1205.726374][T24774] ? __pfx_direct_splice_actor+0x10/0x10 [ 1205.726389][T24774] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1205.726406][T24774] do_splice_direct+0x174/0x240 [ 1205.726419][T24774] ? __pfx_do_splice_direct+0x10/0x10 [ 1205.726432][T24774] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1205.726452][T24774] ? bpf_lsm_file_permission+0x9/0x10 [ 1205.726464][T24774] ? security_file_permission+0x76/0x210 [ 1205.726480][T24774] ? rw_verify_area+0xce/0x6d0 [ 1205.726499][T24774] do_sendfile+0xadc/0xe20 [ 1205.726521][T24774] ? __pfx_do_sendfile+0x10/0x10 [ 1205.726542][T24774] ? ksys_write+0x1a2/0x250 [ 1205.726553][T24774] ? fput+0x17/0x100 [ 1205.726568][T24774] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1205.726583][T24774] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1205.726598][T24774] ? __pfx_ksys_write+0x10/0x10 [ 1205.726613][T24774] __do_fast_syscall_32+0xe3/0x8c0 [ 1205.726634][T24774] do_fast_syscall_32+0x32/0x70 [ 1205.726645][T24774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1205.726661][T24774] RIP: 0023:0xf704ef6c [ 1205.726672][T24774] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1205.726683][T24774] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 1205.726695][T24774] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 1205.726702][T24774] RDX: 0000000000000000 RSI: 0000000000023896 RDI: 0000000000000000 [ 1205.726709][T24774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1205.726716][T24774] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1205.726723][T24774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1205.726738][T24774] [ 1206.846056][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1207.054373][T24790] overlayfs: missing 'workdir' [ 1207.370566][T24797] syzkaller0: entered promiscuous mode [ 1207.372416][T24797] syzkaller0: entered allmulticast mode [ 1209.938736][T24830] overlayfs: missing 'workdir' [ 1211.614953][T24834] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1211.724476][T24844] overlayfs: missing 'lowerdir' [ 1211.816413][ T6035] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1211.976671][ T6035] usb 5-1: Using ep0 maxpacket: 32 [ 1211.980608][ T6035] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1211.985530][ T6035] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1211.989071][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1211.992078][ T6035] usb 5-1: Product: syz [ 1211.993678][ T6035] usb 5-1: Manufacturer: syz [ 1212.005728][ T6035] usb 5-1: SerialNumber: syz [ 1212.007301][T24856] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1212.009495][T24856] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1212.017379][ T6035] usb 5-1: config 0 descriptor?? [ 1212.021482][T24856] vhci_hcd vhci_hcd.0: Device attached [ 1212.023846][T24838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1212.027296][ T6035] hub 5-1:0.0: bad descriptor, ignoring hub [ 1212.032323][ T6035] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1212.044789][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4986'. [ 1212.160768][T24866] overlayfs: failed to clone upperpath [ 1212.318875][T14278] usb 40-1: SetAddress Request (22) to port 0 [ 1212.320918][T14278] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1212.372208][T10029] usb 5-1: USB disconnect, device number 21 [ 1212.812725][T24857] vhci_hcd: connection reset by peer [ 1212.815350][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1212.817630][ T13] vhci_hcd vhci_hcd.1: release socket [ 1212.820306][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1214.283607][ T40] audit: type=1800 audit(1774350646.015:6671): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4999" name="file0" dev="9p" ino=74711117 res=0 errno=0 [ 1214.298376][T24904] netfs: Couldn't get user pages (rc=-14) [ 1214.575624][T24909] FAULT_INJECTION: forcing a failure. [ 1214.575624][T24909] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.579725][T24909] CPU: 1 UID: 0 PID: 24909 Comm: syz.0.5000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.579743][T24909] Tainted: [L]=SOFTLOCKUP [ 1214.579747][T24909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1214.579755][T24909] Call Trace: [ 1214.579781][T24909] [ 1214.579788][T24909] dump_stack_lvl+0x100/0x190 [ 1214.579813][T24909] should_fail_ex.cold+0x5/0xa [ 1214.579827][T24909] ? copy_splice_read+0x1a3/0xb90 [ 1214.579838][T24909] should_failslab+0xc2/0x120 [ 1214.579851][T24909] __kmalloc_noprof+0xe0/0x850 [ 1214.579870][T24909] copy_splice_read+0x1a3/0xb90 [ 1214.579885][T24909] ? __pfx_copy_splice_read+0x10/0x10 [ 1214.579897][T24909] ? look_up_lock_class+0x64/0x120 [ 1214.579916][T24909] ? lockdep_init_map_type+0x5c/0x250 [ 1214.579932][T24909] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1214.579951][T24909] ? __pfx_copy_splice_read+0x10/0x10 [ 1214.579962][T24909] do_splice_read+0x285/0x370 [ 1214.579975][T24909] splice_direct_to_actor+0x2a1/0xa30 [ 1214.579987][T24909] ? __pfx_direct_splice_actor+0x10/0x10 [ 1214.580001][T24909] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1214.580017][T24909] do_splice_direct+0x174/0x240 [ 1214.580029][T24909] ? __pfx_do_splice_direct+0x10/0x10 [ 1214.580041][T24909] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1214.580059][T24909] ? bpf_lsm_file_permission+0x9/0x10 [ 1214.580069][T24909] ? security_file_permission+0x76/0x210 [ 1214.580084][T24909] ? rw_verify_area+0xce/0x6d0 [ 1214.580102][T24909] do_sendfile+0xadc/0xe20 [ 1214.580122][T24909] ? __pfx_do_sendfile+0x10/0x10 [ 1214.580144][T24909] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1214.580158][T24909] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1214.580172][T24909] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1214.580190][T24909] __do_fast_syscall_32+0xe3/0x8c0 [ 1214.580209][T24909] do_fast_syscall_32+0x32/0x70 [ 1214.580219][T24909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1214.580233][T24909] RIP: 0023:0xf7fe4f6c [ 1214.580242][T24909] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1214.580253][T24909] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 1214.580264][T24909] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000009 [ 1214.580270][T24909] RDX: 0000000000000000 RSI: 0000000000023896 RDI: 0000000000000000 [ 1214.580276][T24909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.580283][T24909] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1214.580289][T24909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.580303][T24909] [ 1215.243839][T24915] overlayfs: failed lookup in lower (newroot/53, name='file0', err=-40): overlapping layers [ 1215.464343][T24920] [ 1215.465168][T24920] ====================================================== [ 1215.467394][T24920] WARNING: possible circular locking dependency detected [ 1215.469653][T24920] syzkaller #0 Tainted: G L [ 1215.471704][T24920] ------------------------------------------------------ [ 1215.474321][T24920] syz.3.5002/24920 is trying to acquire lock: [ 1215.476267][T24920] ffff88806c523a98 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 1215.479807][T24920] [ 1215.479807][T24920] but task is already holding lock: [ 1215.482802][T24920] ffff888024124c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1215.486469][T24920] [ 1215.486469][T24920] which lock already depends on the new lock. [ 1215.486469][T24920] [ 1215.489683][T24920] [ 1215.489683][T24920] the existing dependency chain (in reverse order) is: [ 1215.492489][T24920] [ 1215.492489][T24920] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1215.494777][T24920] __mutex_lock+0x1a2/0x1b90 [ 1215.496428][T24920] kernfs_fop_write_iter+0x2c2/0x5f0 [ 1215.498309][T24920] iter_file_splice_write+0x830/0x10a0 [ 1215.500201][T24920] do_splice+0x109c/0x1fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1215.501876][T24920] __do_splice+0x33b/0x370 [ 1215.504061][T24920] __ia32_sys_splice+0x189/0x250 [ 1215.507403][T24920] __do_fast_syscall_32+0xe3/0x8c0 [ 1215.510124][T24920] do_fast_syscall_32+0x32/0x70 [ 1215.512224][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.514727][T24920] [ 1215.514727][T24920] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1215.517350][T24920] __mutex_lock+0x1a2/0x1b90 [ 1215.519164][T24920] pipe_lock+0x69/0x80 [ 1215.520838][T24920] iter_file_splice_write+0x1fd/0x10a0 [ 1215.522818][T24920] do_splice+0x109c/0x1fd0 [ 1215.524479][T24920] __do_splice+0x33b/0x370 [ 1215.526053][T24920] __ia32_sys_splice+0x189/0x250 [ 1215.527797][T24920] __do_fast_syscall_32+0xe3/0x8c0 [ 1215.529879][T24920] do_fast_syscall_32+0x32/0x70 [ 1215.531837][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.534277][T24920] [ 1215.534277][T24920] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 1215.537065][T24920] mnt_want_write+0x6f/0x450 [ 1215.538966][T24920] ovl_create_object+0x12b/0x3b0 [ 1215.540695][T24920] lookup_open.isra.0+0xc47/0x11b0 [ 1215.542471][T24920] path_openat+0x2291/0x31a0 [ 1215.544072][T24920] do_file_open+0x20e/0x430 [ 1215.545948][T24920] do_sys_openat2+0x10d/0x1e0 [ 1215.547839][T24920] __ia32_compat_sys_openat+0x12d/0x210 [ 1215.549965][T24920] __do_fast_syscall_32+0xe3/0x8c0 [ 1215.551977][T24920] do_fast_syscall_32+0x32/0x70 [ 1215.553885][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.556476][T24920] [ 1215.556476][T24920] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1215.559985][T24920] __lock_acquire+0x14b8/0x2630 [ 1215.562150][T24920] lock_acquire+0x1cf/0x380 [ 1215.564226][T24920] down_read+0x99/0x460 [ 1215.566375][T24920] lookup_slow+0x42/0x70 [ 1215.568512][T24920] path_lookupat+0x5e8/0xc40 [ 1215.570822][T24920] filename_lookup+0x202/0x590 [ 1215.573109][T24920] kern_path+0x37/0x50 [ 1215.574628][T24920] lookup_bdev+0xd8/0x280 [ 1215.576181][T24920] resume_store+0x1d6/0x460 [ 1215.577818][T24920] kobj_attr_store+0x58/0x80 [ 1215.579621][T24920] sysfs_kf_write+0xf2/0x150 [ 1215.581234][T24920] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1215.583101][T24920] vfs_write+0x6ac/0x1070 [ 1215.584639][T24920] ksys_write+0x12a/0x250 [ 1215.586475][T24920] __do_fast_syscall_32+0xe3/0x8c0 [ 1215.588632][T24920] do_fast_syscall_32+0x32/0x70 [ 1215.590735][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.592995][T24920] [ 1215.592995][T24920] other info that might help us debug this: [ 1215.592995][T24920] [ 1215.596108][T24920] Chain exists of: [ 1215.596108][T24920] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 1215.596108][T24920] [ 1215.600261][T24920] Possible unsafe locking scenario: [ 1215.600261][T24920] [ 1215.602581][T24920] CPU0 CPU1 [ 1215.604214][T24920] ---- ---- [ 1215.605869][T24920] lock(&of->mutex); [ 1215.607132][T24920] lock(&pipe->mutex); [ 1215.609225][T24920] lock(&of->mutex); [ 1215.611393][T24920] rlock(&ovl_i_mutex_dir_key[depth]); [ 1215.613226][T24920] [ 1215.613226][T24920] *** DEADLOCK *** [ 1215.613226][T24920] [ 1215.616087][T24920] 4 locks held by syz.3.5002/24920: [ 1215.617781][T24920] #0: ffff8880291b9b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1215.620711][T24920] #1: ffff888021630420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1215.623592][T24920] #2: ffff888024124c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1215.627193][T24920] #3: ffff88801cfcf788 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1215.631012][T24920] [ 1215.631012][T24920] stack backtrace: [ 1215.633181][T24920] CPU: 1 UID: 0 PID: 24920 Comm: syz.3.5002 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.633203][T24920] Tainted: [L]=SOFTLOCKUP [ 1215.633209][T24920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1215.633217][T24920] Call Trace: [ 1215.633222][T24920] [ 1215.633227][T24920] dump_stack_lvl+0x100/0x190 [ 1215.633247][T24920] print_circular_bug.cold+0x178/0x1c7 [ 1215.633265][T24920] check_noncircular+0x146/0x160 [ 1215.633281][T24920] __lock_acquire+0x14b8/0x2630 [ 1215.633298][T24920] lock_acquire+0x1cf/0x380 [ 1215.633316][T24920] ? lookup_slow+0x42/0x70 [ 1215.633338][T24920] ? __pfx___might_resched+0x10/0x10 [ 1215.633363][T24920] ? try_to_unlazy+0x296/0x910 [ 1215.633390][T24920] down_read+0x99/0x460 [ 1215.633404][T24920] ? lookup_slow+0x42/0x70 [ 1215.633425][T24920] ? __pfx_down_read+0x10/0x10 [ 1215.633438][T24920] lookup_slow+0x42/0x70 [ 1215.633454][T24920] path_lookupat+0x5e8/0xc40 [ 1215.633472][T24920] filename_lookup+0x202/0x590 [ 1215.633486][T24920] ? __pfx_filename_lookup+0x10/0x10 [ 1215.633509][T24920] ? __asan_memcpy+0x3c/0x60 [ 1215.633536][T24920] ? do_getname_kernel+0x1be/0x250 [ 1215.633559][T24920] kern_path+0x37/0x50 [ 1215.633574][T24920] lookup_bdev+0xd8/0x280 [ 1215.633592][T24920] ? __pfx_lookup_bdev+0x10/0x10 [ 1215.633606][T24920] ? __asan_memcpy+0x3c/0x60 [ 1215.633621][T24920] resume_store+0x1d6/0x460 [ 1215.633637][T24920] ? __pfx_resume_store+0x10/0x10 [ 1215.633656][T24920] ? find_held_lock+0x2b/0x80 [ 1215.633669][T24920] ? sysfs_file_kobj+0xe4/0x290 [ 1215.633683][T24920] ? sysfs_file_kobj+0xe4/0x290 [ 1215.633696][T24920] ? __pfx_resume_store+0x10/0x10 [ 1215.633711][T24920] kobj_attr_store+0x58/0x80 [ 1215.633721][T24920] ? __pfx_kobj_attr_store+0x10/0x10 [ 1215.633730][T24920] sysfs_kf_write+0xf2/0x150 [ 1215.633744][T24920] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1215.633756][T24920] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1215.633769][T24920] vfs_write+0x6ac/0x1070 [ 1215.633780][T24920] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1215.633792][T24920] ? __pfx_vfs_write+0x10/0x10 [ 1215.633806][T24920] ksys_write+0x12a/0x250 [ 1215.633816][T24920] ? __pfx_ksys_write+0x10/0x10 [ 1215.633828][T24920] __do_fast_syscall_32+0xe3/0x8c0 [ 1215.633847][T24920] do_fast_syscall_32+0x32/0x70 [ 1215.633856][T24920] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.633870][T24920] RIP: 0023:0xf6ffef6c [ 1215.633880][T24920] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1215.633891][T24920] RSP: 002b:00000000f53ab50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1215.633901][T24920] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 1215.633908][T24920] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.633914][T24920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.633921][T24920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1215.633929][T24920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.633940][T24920] [ 1215.766121][ T5942] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1215.794680][T10029] usb 10-1: USB disconnect, device number 40 [ 1215.953577][T24920] PM: Image not found (code -22) [ 1216.393732][ T103] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.542061][ T103] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.562392][ T5942] usb 6-1: device descriptor read/all, error -71 [ 1216.584879][ T103] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.628870][ T103] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.711069][ T103] bridge_slave_1: left allmulticast mode [ 1216.713628][ T103] bridge_slave_1: left promiscuous mode [ 1216.716249][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.719371][ T103] bridge_slave_0: left allmulticast mode [ 1216.721323][ T103] bridge_slave_0: left promiscuous mode [ 1216.723170][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.968577][ T103] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1217.065887][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.070170][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.076014][ T103] bond0 (unregistering): Released all slaves [ 1217.080668][ T103] bond1 (unregistering): Released all slaves [ 1217.086998][ T103] bond2 (unregistering): Released all slaves [ 1217.420487][ T103] hsr_slave_0: left promiscuous mode [ 1217.423477][ T103] hsr_slave_1: left promiscuous mode [ 1217.429399][ T103] veth1_macvtap: left promiscuous mode [ 1217.432384][ T103] veth0_macvtap: left promiscuous mode [ 1217.435207][ T103] veth1_vlan: left allmulticast mode [ 1217.437751][ T103] veth1_vlan: left promiscuous mode [ 1217.440030][ T103] veth0_vlan: left promiscuous mode [ 1217.571800][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1217.579018][ T103] team0 (unregistering): Port device team_slave_0 removed [ 1217.757850][T14278] usb 40-1: device descriptor read/8, error -110 [ 1218.043086][ T103] IPVS: stop unused estimator thread 0... [ 1218.196675][T14278] usb usb40-port1: attempt power cycle [ 1218.296941][ T103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.371518][ T103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.425714][ T103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.521046][ T103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.586889][ T103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.681500][ T103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.745493][ T103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.795703][T14278] usb usb40-port1: unable to enumerate USB device [ 1218.809461][ T103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.901948][ T103] bridge_slave_1: left allmulticast mode [ 1218.904903][ T103] bridge_slave_1: left promiscuous mode [ 1218.907380][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.911389][ T103] bridge_slave_0: left allmulticast mode [ 1218.914146][ T103] bridge_slave_0: left promiscuous mode [ 1218.916147][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.921103][ T103] bridge_slave_1: left allmulticast mode [ 1218.924659][ T103] bridge_slave_1: left promiscuous mode [ 1218.926678][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.930390][ T103] bridge_slave_0: left allmulticast mode [ 1218.932286][ T103] bridge_slave_0: left promiscuous mode [ 1218.934998][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.032443][ T103] dvmrp0 (unregistering): left allmulticast mode [ 1219.277188][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.280884][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.285049][ T103] bond0 (unregistering): Released all slaves [ 1219.289229][ T103] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1219.292337][ T103] bond1 (unregistering): Released all slaves [ 1219.438108][ T103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.441753][ T103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.445065][ T103] bond0 (unregistering): Released all slaves [ 1219.449422][ T103] bond1 (unregistering): (slave vlan0): Releasing backup interface [ 1219.452675][ T103] bond1 (unregistering): Released all slaves [ 1219.544510][ T103] tipc: Disabling bearer [ 1219.562498][ T103] tipc: Left network mode [ 1219.948734][ T103] hsr_slave_0: left promiscuous mode [ 1219.958592][ T103] hsr_slave_1: left promiscuous mode [ 1219.964591][ T103] hsr_slave_0: left promiscuous mode [ 1219.967435][ T103] hsr_slave_1: left promiscuous mode [ 1219.970587][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.974208][ T103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.977906][ T103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.981107][ T103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.992718][ T103] veth1_macvtap: left promiscuous mode [ 1219.995089][ T103] veth0_macvtap: left promiscuous mode [ 1219.997416][ T103] veth1_vlan: left promiscuous mode [ 1219.999634][ T103] veth0_vlan: left promiscuous mode [ 1220.003828][ T103] veth1_macvtap: left promiscuous mode [ 1220.006715][ T103] veth0_macvtap: left promiscuous mode [ 1220.009776][ T103] veth1_vlan: left allmulticast mode [ 1220.012094][ T103] veth1_vlan: left promiscuous mode [ 1220.014979][ T103] veth0_vlan: left promiscuous mode [ 1220.165684][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1220.292053][ T103] team0 (unregistering): Port device team_slave_1 removed [ 1220.298233][ T103] team0 (unregistering): Port device team_slave_0 removed [ 1220.978759][ T103] IPVS: stop unused estimator thread 0...