last executing test programs: 7m31.243684057s ago: executing program 1 (id=834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x900, @loopback}, 0x1c) 7m31.243075657s ago: executing program 1 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x314, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "15d5740d10868abec8ad5e2433d548760d8a300ab67c7048dff0ded4135f006efc701271"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2a}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b02}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90c00000}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb39b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}]}, 0x314}}, 0x851) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000140), 0x102000, &(0x7f0000000380)={[{@redirect_dir_on}, {@verity_require}, {@uuid_on}, {@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file1'}}], [{@uid_eq={'uid', 0x3d, r2}}, {@audit}, {@permit_directio}, {@euid_lt={'euid<', r4}}, {@pcr={'pcr', 0x3d, 0x1b}}]}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x8606, 0x5, 0x6, 0x7, 0x2, 0x7e71, 0x1, 0x6, 0x95}) 7m31.17497237s ago: executing program 1 (id=836): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) userfaultfd(0x801) (async) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0x1d}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0x1d}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x8, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x8, 0x30}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) exit(0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300), 0x0}) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) (async) syz_open_dev$midi(0x0, 0x500, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000140)=@x86={0x3, 0xe, 0x8, 0x0, 0x7, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 7m30.864582421s ago: executing program 1 (id=842): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a5ee0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b417354335f8cf20d0d96ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x860, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @opaque="0b80d010da6a"}}}}}, 0x0) 7m30.864379396s ago: executing program 1 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x1c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x0, r2, 0x31, {0x5, 0x10001}, 0x6}, 0x1) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 7m30.78952771s ago: executing program 1 (id=845): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r2, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x3f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) sendmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="28f87f2a0ebc7c9da70addd8dab71d81f6ab8874f6ad0a1bf7dadd2400cb3dae3d59bfec4f203248bc0ac51a28bb625ec7e19f18b204968502d75965b41f3e68a1699a6509f5ba15d852bc232642c0f0f22ffd0aa6370150a21d18570171e02c780078c7ebf84e87147b275087cd5da3715be8d08e71aa5af0a26b875473ac98520d7022e7bc44f2a60b3fc1cbe42a1ddded5746cda8cddaf2f10be9f80dc8b670a8e6daeed965d797b82d73b9df9f648e0c87c2346d06be6df8dbcdf58af2d10043a2a737f1897ac5bde1679616b9b15327ad0916f7a7ed94a0515dc146ad79cb85300265360dbc1a2febc20890110129f0dbb5a18474fb98bf98f2d03ebca96925e0b00b302bf3035e80cc272b15f5d9ef3fdec7e3ad7fc51c47a087024f2b6b0482957c16c6a5db7acdb65f6b5ad0e18dada267f21394099c82ffc840c3d5bcd90b9c8e6dd670023ea0a16229f9500d54bce3cf50466e129dd1a0929a5bbc0de95634883ac5e7cf342334eac93a1977a89cf22a15afed738d7f160ecf61f1fa8791bcd17f21f7d38b500de6f5cd2ba25885ee006974a81a13b76b8c2452e65be9a851874fc1f4903da02120b0c893740c5a863bfc56e2022bce2cf94ef88b90b8073470d029b8b393928ab0fd25755afaf129be062048add0f4fa6e1ae42c9e4f4198f1910adcb0070d4c22ab7acca533c3c010a241c1f1341c46f5aaea9377278b2a5b0fe011f05e6cd66860807422ca1a599e925cfbfa29bbbe29ef95166529ff74344453259ead232986aa630cc94b56edae511348724e2adbb5bcee09ed19b3289c19fa8d1e460a37d30d3b2e2c13b49d5659ffc1a343c90b64a11f21498c7ecba04ceeed79f075ac58b01c5267955d4de19356bdc2ac5823ff277778723795ec125c5e6cf739a8a8d2702e29d2999f44c0670523ce2df0052d255d6e953cbe8fe4bb7e4dfad637dead4c14441559f34f89889f6412a895a29200dc4193ecd4457e89846b5d2a7c55fa57f269e7788895a51a2b195b1f1ae6fd5c957882ca1cd9e503f9c653ec91c0df9837c21af6960e41bf6bfdcebbf0055aeb61eb748c0eb199757ad97a1ea8d525940e789fffe9bf9861cd4e09cb2b61605a3181b8c472524b280c21b9db9151d4e3a1e83d1332166bdc31e7c5f00be46f34242e91f94ebc24bc0d2d785d11326bc6bd17f9c8ce54ac1015924cb639da758fb7a4530dc4c0ce814c031f230ff1367997f911886b46af4dcbb409c090fcaea8db8757ea2bd964a83931379062b88f5af8590520d9fcde26f168087a3870e89646ea02dd362db197d807616ecf532f27766bc252208ee02a2a91eacb77c9790909212e6c8d7c894f706e9835dd7f6bcd1954e92fdefe5b2d77f8f8dd418b255b48ecf179355a15c711ffa5ab2d01dccb8738d108b91d425aab13d90b581ee4317e93abc3471d5e03b4fc3a6edc10b5227ed5f8ce1249aef0587c05494ba2231e209e31a7335990c11a81e19b55db5e86d08c7ca9ee31596b70baf1aed6ff6cb9103f387fac23a775b9e2efd23c2e90ea00ca6255b95f5e667eff6295a306dc565a343e85f32a648d2206f1b88da13af604d96f6e6662522a7d462ddae139e0cc8ffc2210fd9f8a02736a622de917a711b4a4d3add8da2b78f1ab7f626b18747d63e572b9487616d8b30fae12b20c7e23c472feb77b8c87b0587b4a2a7a33f44e48bff7411dc0dace18a3816078d079955b71b78bba6f10df0c321bf159dda7e2468c8b7e1cf15aba9a6e31a08513fb54851a8691bdf6c21aeae02c96b05a273a391d748f989ed9c1a7a5ea10e9066af87694ed9f12d0a6fd67c6a4cf106f11926312c2cc1491d3325bb6a6829f45f916880716ba3cd874bcdb75a1fc825337f4fe53569883d4345231c4a7836eb698a47b2a35ce8eeee31372879ddfd89719f1d67456710753d4d83ff91d0a6ac99bebcffa3328458b8c32db2bd21c1aedfc6c77bc9ee2c0b18b5e4c3622be2bb61c82b5cd105526697bbcea395a6d12594bcc40469e226afd9638a56a099194d7df32955dae410df5872c6b00c5e7ec279b36c7187fc277490ed3b4779f5a1bb1ac8b4759486287cd0ea5832264125c2678551db25be2651e17491144c27da9e8379f3b4cad657bfa174c22a2e96a116daa413f87f8bcbe6e8d9a214c4efbe9e0819da5fc6f951e78c90353917162da6310741aa4017a1c9b1f166cfffb824f7c3c2ae64d42a1cb70bf4a2a5493e80dc5a1410279804c14529f86bb8121cefe5e1ebf2ccf5c10b6c62ee0660bcf00a253e8173727ed7dececf1970fadf67af08db997c7cf4369bab5442d55444269ac8ee7bc8901a16782d54da7b3bdc727f77974ccf8f3668c131a1dfb193ee4f9be986f2dc1ed4cbd79cede349ed90c979ca2444b96a39b5781c963153708ffad98712e3967d4e2a16c7283a9325cb95389271da0103786e524c9748b1ae1518093fc7d3c886a6a460212d08210e54f4e2904382dfaf06034bd909709f591a62e961e669a85ae05f5dc91d2cb5bd1b49b7690916fb33d3e7349461fe5166c76c92fde2eca5c9d3e8d56f847e1a6d5f1e93354f86be5d130bbea2c7b2c4987f1545ff65e82b771cc5e92262a59b95cf519fb0819265b890a3e42d66c8a66e817d228259858dca15ff4ae8f87d585501bb9070d4b5fab24c6ff4e92ea595db47d07e9011f1da98a9b57fa8ee8a0e3fcc7e1aea6a46fc3a0bbde3ff692291c55b9497a2f6d72204f8ce960486c4ec0c0c253af563ceb57f7bcdaab5ce251bc3cb9e42eb5941bbfec14a2ab56a2a20e55136976335cfd339bfc272df9a45ed50478d3418593955dae194797b027c0c23ca07d37b07e330999bf91af7ecfbabb6a5361a774d079739813cb3154c83d73fe223b057551fbf833ef13eb63bd3ecb21b9a1c312c7588733ffb5bc5819d35cb5c6927adb6a7624a5ffc65a659ecb030ae74e10abaa161e41b496da02758c710c059b3c96959ace64d74758a9724cfba3c60786a54a58ad5345c9accf708ed6b5e301b2aac23d544c377d6d7893db67f7b3f61c17816603ad9fe29b6ea956595837cc83262c056beb2b67c7b9d813f476e4d4a74fe7a7e844eccf30df7d4daa3e23b7a899ef9a427c5f43af8f28d25a8fc064a6986d74134475a8c79df3f2ffb3b6aa71e84d5bea0256ce58f083f7e750bebff85eefe6ffd4027efd7aa0581c9d2c704cb5528b88c33b2c61b4ab41ffa7365e16a7dd40215556385f8eb36d94c702ef03ecc0671c0ef094949569004572abbaad33afb8cfdbd55c856e0df09a847542c8e0b2d78f0e19237f30e433b5ae36598ff818f3e08eeb02d82ae7aeb05258115348d8a4077f757226710b6b1e173a9cbaa2311b48d45ab3d92b74ce1db03e3c971715fd95ecc78f0fccb487fa4d7e12dfe0751edb93d98d76b55939b059e0e64a1583663734688a0f179af2de4aac96c2e2a9e3773749bd8df213916fe98fe0dcc0754330f2832ea69c69e335c2104cdc40f1cc3ca2710ed33765ae237649c771f2f71999d944c33bb1f751a77cbaa0ab9105f6e5865a505d409066f4ae326c669dcdb386bab342758fa3bdadd5e6a7a0ba2873db15ad9c75cd036c01c1fae5b552923437dd30029541e06faa4eac31a59707805330b19ceb3637775558dc21ee0a31e253cb03025529cde3f41358b6c85c750f86a955b0d4a7f1a670552c6d090d2b218c9f1f9a80a7e5a21903b4008524c14c3d1a4aa7c6efae7f69405340110b9e294e38e74517976940f0d752014e5e709c3194a283e728a0113cc0dff8ee4a5699c4da5934f214805d4498a8f091f42ba1a8ecca438c85a30bfee4e6e92c577c78474f7fa266ff3e0f3435f016862718239775bc2ffe172a409819c3c2f69f7e4619741fdf866612cca5d66c66dff358fbc639bce031e40850a9de483dc6d79770e211ed210a355485ddd982d9bc4e44b6f8738ae321f3dd4efbd08d8f4090556bf03b595c2b9ea05dfcc226a17e23c6a579ad86f7a08834df2260f81d19f2f3f182a9ff098c6e2e1fc81418d57fddf030b7564a017df681e9802083a46b1be7fed3c2d5b76580e8f04da6b44214e74e4c76e3d87f2933157a6a1cf3b7ec468bde5a2eafde3c2ff0f4f114fb0174c1c36d0524956cb4248703c565191be2013600aa4ab821b4cc5c55c072196ef0063d3727afdd315fdac331af9da9fc396a9932201d5ef0b597f0c1233980a08c5e72c54ca10259cddbce5cbf7372882e9b24ad0f5e05cbfcb39e258d172ca3a36bbe59d9f2019695e0a0c32685bcb67b6259902f2fc3cbf7cbd7e69b56740b206fbb0fa82cce7a141ec7c46f6db95f9a319174a97ba230808bd613100c1c6acf315c910d62492c94904cc3d3458a9793753d5f7fbe70c2a897d9db5bdd01a4af1fe9d977ddfa5c4a1dd523cdfb817e724d9177eb6a98c09021b32ebf67c7245f938fc214805e4b8468ece9b2488c6a95a71c862aa7e66dc109a3bfc9164d984ff4c6df0e0bcb9a1574a7454cce36e90ba6a317390827ea9582077b171d1be2775811bca900fb8cc9a672ccabede0237c1c28cad7474a5dd9447cdc35639d2f21fbb6d74d6bc524e064175902777992ab2a88c1fe33e71af0371cbe331275c0e79f385642b2e2edf49cc4dae56d0f1bedfa0582343226f4aa163de45bcf764eaba704017cf9734f509bd7d6cb813fa1639ce7035e28ce357a522dfcfa60843f86b25529ea65aba048abcb6f2cd4ce13094e7775052d42d093a65df19a3fab698aec7104983c9ea1a7b1e883b9a41bc77c4790cbea65ff05929ea2b3fc50d43dccb60389eb754ebab36e6faffe4df608b4b4ff7ffd6ddd8ae925c5e8acd8e90a8d5b4d9533b19e87f6f5e8c620c234678a42e649890e15580944936f5a64a3b6c7fcd65a6e8409a4e0166b889c9ac287fe5e57e47f7fb7600cb197c0735f2ff50aca699faeafc77491eebfe7f9281b8a75acd91105fc490254d058086dfe78ed536f988de6939f9c3e783be1234d2d58c21d9fe3a0fad397b950f1854dfedc00222b312d32116385ce6d47ed8204cbafb945da251fdbea28e7405cfb0f4b21cc00d66233a561819c1148afed706ce8b2dbab606488f030a754e6d059865977727fc7a8506807c3d7b1336a847757f627cbe47ca0335c07956d7f9783d92eaf3b37375639f7b9df132359631120b5b06f6f5e2bac048da6ce458a8180bb1bb8c63a10460ce1479a711b35e9982e36707d80cbbbcc54a374471fd0d044a32167e486741c5d26836a5f75df67616adbe316035874c2c506449ac694442bef64be211b8d216b65ddca3cc8f89b4909ffcac59c26509446941d887d35ad89fd46c16b7f3b8ce81dd0975f76fb16a5d7a4e78393f686d1960e7d341e46f452fe3f30a4b1d3da49e39c879d3d2b1d9c722e22581d4af508747d6f3cca4b4a7c512033ecab701c2790e500cb8dfe9a5f7289deccf7889860668c7b72d32d07e3ffe52dd0511302a2166add244318c1b5c69674656c844add838ffc6eeeee18c553eda6a2cfd0e6f99aa7ab58304555630419d012d81f3bb561c5ee5a6550565d71a4f53721c4881612af2eee7911f9ae548a2ec114", 0xf8b}], 0x3}, 0x4) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8802}, 0x8800) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) 7m15.738168954s ago: executing program 32 (id=845): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r2, &(0x7f00000000c0)=""/20, 0x14) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x3f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) sendmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8802}, 0x8800) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9) 4m52.23238779s ago: executing program 3 (id=1911): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000340)) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYRES32=0x41424344, @ANYRESHEX=r3, @ANYBLOB], 0x0) quotactl_fd$Q_QUOTAON(r2, 0x0, r3, &(0x7f0000000100)='./cgroup\x00') fsmount(0xffffffffffffffff, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) 4m52.128220556s ago: executing program 3 (id=1915): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000200), 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xa) 4m50.502345882s ago: executing program 3 (id=1922): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4m49.246181037s ago: executing program 3 (id=1927): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xa53, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x400, 0x3, 0x1, {0x22, 0x5fe}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xe, 0x0, 0x9f, 0x40, 0x9}, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0800d503100b62b791c65ac28913378fa62a870cfed5d7701dcca547f6e680b6eeafaeb4c2e42bf1fae7ae4621d1831388d52467ce7b8f4d296760b5fc7e0fb4fc5e0e790902e876ca4e552029e3d8a421635b58b51e14af9a29fe977ca2454c96e4252ffc29e9e455e713f98dd6e71769e5acc7508c6b9e23a4236757616576adc8c7da9c1abfa8ad94c3dc81bc5caa7e310f85ea643a96fd39a413269d5077ff617d2d44994d730093028a340b2ed926409223ba79c2c30038e77d751385bc34fc7e82b00e4af9c8f1f62a373fd7cb9eaa392d9ddb8446a79eef86361904c00f3165ace396d38e"], 0x4, [{0x61, &(0x7f0000000440)=@string={0x61, 0x3, "558495868ce75dfdedeae95bf10f8b3bd27e9eb9c3191ce2fd088983c6a39cbeb744af9a38ee9c1d766869e9f2c89fe680ab7a1c5d7dca90ad5e468fa6593c483e1f5677cf2c8bd38388ef0dc12649c13f5c50f7bccaf60000000000000000"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x7d, &(0x7f00000005c0)=@string={0x7d, 0x3, "9432c14f97d6f198606b9bf3f53c074caa777de156a60a9c1989d463a2c5e895fe148563758b22cb213c10865a1677405d654635a8391e2f83de62f8b33f6359976027d0ce29f80b9d16a5f2fe4457d6d3432f5edcb02ae52247f519e4aa9a6d2ff71eba9eefb85d8a681fd3999c0771378e0d9d06c84a27b43eb7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x200a}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) openat(r4, &(0x7f0000000280)='./file0\x00', 0x208000, 0xd5) syz_emit_ethernet(0x56, &(0x7f00000007c0)=ANY=[@ANYBLOB="ab3819e62145ffffffffffff86dd6000000000200600fe0104679f4530e680d4dc80000000000000000000000000005602aafe8000000000000000000000000000aa0000aaa75fa1ed688a6b82b0eed67ef66c4a901149b27c6601166dc9abccacd178668e63fefdb0603ed2d0d331d9c7e38f576b3912ee4d5387a777a881604c142e0309608b0e31e1c46ff0b896a965cdc96078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402080a0000000000000002"], 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x20, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @typed={0x8, 0x125, 0x0, 0x0, @fd}]}, 0x20}}, 0xc000) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) listen(r8, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r9, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) 4m48.563423286s ago: executing program 3 (id=1931): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e0025080054"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400001, 0x10) mknodat$loop(r2, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x8, 0x2, 0x1000, 0x8, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m48.288268322s ago: executing program 3 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (fail_nth: 5) 4m48.172767574s ago: executing program 33 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (fail_nth: 5) 4m12.574716484s ago: executing program 2 (id=2205): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xa9, 0x6, 0xfffffffa, 0x59455247, [0x4, 0x9], [0x5, 0x1000], 0x13a}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES64=r6, @ANYBLOB="cdb919c55a40a0fa8d5840d1fa2f9b93478fbf1096a0a57bd82840b8ed017761e792d77037afe49cca246b11da4f7db234156233fd6c08993e5a87425f6b334b53e060cd7bc0432ead2f18bf8ed01465b93b68577af4ce5a0156ffa45399d479d0564f710acccb232bc1ac30d34a0c1812b61de70d6bca6749c229de529e6d60efe9afa84dba4a8e8bf94507c3e006479e3d2e408c81a1d07f0159584d137e78e8a0cd5f496c8d24d8c0ddf5799e850ebdcf0cdfe35309a15711436339760c3607bfdecf765019c028c99d0edc0cc699"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) read(r2, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0x3fff}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000010427812468dd3b78d1a923f70e866f4e85c98745a7ff4f4dce35c4211a23092623f9d31989e651ca88880688d37e6508520763ebf5f890509da44c00e15d5d526cad72ac7639f330705d97dcfb260a9229d382fe257d6d197d1b928515dc991c70c5912813bde3e9192f45ea79ed1cd6b97fccae075950ee2e2f1cdfb64bf83fd1a8e8fd752f0a73742122a40608777c0c9eaca2dd51fc32e5c42a764c916bd623c6aa2d809dca150807a4438562cac6f4e86b8a5182da281dcb99da42eed4e9ac971390f609595e10", @ANYRES16=r10, @ANYBLOB="0b062dbd700000400000300000000a0001007770616e310000000500330003000000"], 0x28}, 0x1, 0x8000000, 0x0, 0x20000064}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00\n', @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf2503000000050001000100000008000500ac14142708000400ac1e0001140002000000000000000000000000000000000014000200"/78], 0x54}, 0x1, 0x0, 0x0, 0x200080c5}, 0x24000848) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffc, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) 4m11.66492757s ago: executing program 2 (id=2212): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xe, 0x10000) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/235) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000240)={r0, &(0x7f0000000140)='/dev/usb/hiddev#\x00', 0x8ac00, &(0x7f0000000180)={@_ha_fsid={[0x1, 0x4]}, {0x2, 0x7, 0x2, 0x4}}, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0xffffffff}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x1015, 0x8, 0x2, "65abb7b733aeee5585d75e898f99879c", "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"}, 0x1015, 0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001300)="53cf1f1cbe59e3296cdd93743484194e8f8f6ad1e1a453ec0b1e3e765c2a87057027", 0x22}, {&(0x7f0000001340)="1cdd57ee1940045c6c4b6b62c7f22d00d2869a8e305375d14fb1565ddf2b67dc531eeb5c52959347accfecfb3fa7adc76872db765ee7be4e44bb00e3d1fd85e2a8db29d725ee4f95e0a0454ab9833b8d4bee06e77c454bf03779acaf5bc646beb770cd3f84fd15f4426528262612ffd86e971cb7552f16897565fef98e68719ef559c5387681a9523057137fb192a72bbd19c21d860cee4d1a8c066f656dbd2b84afee50fc3f87b09842", 0xaa}], 0x2, &(0x7f0000001440)=[{0x60, 0x10c, 0x1, "e0bd931087d8c15642774915115e5b69a1e2b662088e66943d3c2c51565f3eccea49e07e62f939c82c6949fe9d31085ec61d7a524bccdb2408b31d732df74a1156247293bbb356ec9aaa3e76e809e05bc8ab"}, {0x100c, 0x116, 0x10, "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"}, {0x1c, 0x104, 0xffffffff, "bdc3aaf18cf0d932bc6894169b131396"}, {0x74, 0x101, 0x0, "2e0893db312794b7ee6172587b327008c3586a2e095f648797497bb459c72e0beceb2662678d832eaa84f4ddad67c071d21d4554fe5a989115de9201b30a93a269c796949cd1105afe45849c4e0007bcee65667b984b1c080a0581707425b3f884a52911d0295a37"}, {0xe8, 0x115, 0x3, "db4125a73f6ed00870f31ec07f5423b4fb0a36fc4c9c93bce01185e26e7e7df348bb7eb69fa2f7498158b588407a8269f9794502079893936b00e59e0aa89b4c7dd957fa77c06c8021514f732f5f702fb9763c203d52480028b70f9c6ba40e5aff17261bb537e414fc96603f4f9b787b7d2d2ba42649c471d1c6e8e79b00f0bbaa25113c18daba7b46da74c254f43e6f7330e4803d5d513542eaf6c6cc65b9a24e0c64b64127ed8babfe1213e6cdaa9d3784c288630e33b191ffe9a12cc99ede3083094a292c79aad246439d92ef905a474cd424cae943681ca2"}, {0xe8, 0x84, 0x5, "32e085670a1fcfaad43b975e7d2ef9c6320a1b27e5a008eb84df8aac95edddf2e72d559807c54ce9e62ba22be64ccf8d61d3d074e90e9a950bde35ea0fbd6b1c194af234ba5757cef092b083c03eead7afac6f1061dc64fde2b5fb0f1637203d80d85acf532fe6b3ca6ed73a2e25ca6cd31de9bd48a8b2de183d20529b21b494a76992e9b0c657a5241029e682a006a84e805544e3deb2ca2ea2365d8c03f05d4f53f8da0759c6d34aa01c13bacc7fb1148eb50f515e0c43b86c2e87b0a96b8fe2df578298cf54a070c5d3df97c2fa448e9549996c04ea8bd0b138"}, {0x10, 0x10c, 0x24b00000, "8d5c"}], 0x12dc, 0x48005}, 0x1c) ioctl$DVB_DEMUX_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f0000002780)={0x8b4, 0x6, 0x8, 0x0, 0x10, 0xfffff001}) syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0), r1) syz_open_dev$video(&(0x7f0000002800), 0x100, 0xc0800) r3 = openat$vcsu(0xffffff9c, &(0x7f0000002840), 0x400, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000002880)=0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x2, 0x4, &(0x7f00000028c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x3, 0x5, 0x5, 0x3, 0x30, 0x8}]}, &(0x7f0000002900)='GPL\x00', 0x200, 0xf7, &(0x7f0000002940)=""/247, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, r3, 0x8, &(0x7f0000002a40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002a80)={0x3, 0x0, 0x4, 0x4ad3}, 0x10, 0x0, r1, 0x2, &(0x7f0000002ac0)=[r1, r3, r1, r1], &(0x7f0000002b00)=[{0x0, 0x5, 0xa, 0x5}, {0x2, 0x24, 0x2, 0x6}], 0x10, 0x9}, 0x94) syz_open_dev$media(&(0x7f0000002c00), 0x2, 0x101003) connect$pppl2tp(r1, &(0x7f0000002c40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x2, 0x1, {0xa, 0x4e24, 0x9, @private1, 0x1}}}, 0x32) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x87) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000002c80)={'pimreg1\x00', {0x2, 0x4e23, @empty}}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000002cc0)) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000002d00)={0x3, ""/3}) r5 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r5, &(0x7f0000003240)={&(0x7f0000002d40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002dc0)=""/35, 0x23}, {&(0x7f0000002e00)=""/138, 0x8a}, {&(0x7f0000002ec0)=""/160, 0xa0}, {&(0x7f0000002f80)=""/164, 0xa4}, {&(0x7f0000003040)=""/145, 0x91}, {&(0x7f0000003100)=""/171, 0xab}, {&(0x7f00000031c0)=""/24, 0x18}], 0x7}, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000003280)={0x2000000, 0x2}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4014f50b, &(0x7f00000032c0)={0x1, 0x7fffffff, 0x61ea3777}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000003300)=0x3000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000003340)={'nat\x00', 0x2, [{}, {}]}, 0x44) r7 = pidfd_getfd(r1, r4, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f00000033c0)={0x1, 0x0, 0x2, 0x3, {0x0, 0x8, 0x200, 0x7}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000003400)={0x2, @local, 0x4e24, 0x0, 'lblcr\x00', 0x3, 0x1, 0x11}, 0x2c) 4m11.615172871s ago: executing program 2 (id=2213): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0xfeda, &(0x7f0000005280)={@random="5b685c7e778f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xffffffffffffffba, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, {[], {0x4e1d, 0x4e20, 0x1018, 0x0, @opaque="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"}}}}}}, 0x0) r1 = timerfd_create(0x0, 0x80800) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240), 0x3) timerfd_gettime(r1, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000003240)={0x2020}, 0x2049) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc0fc4110, &(0x7f0000000340)={0x4, [0xfffffffb, 0x3, 0xe], [{0x5, 0xffdffff8, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x2d137abd, 0x0, 0x1, 0x1}, {0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3}, {0x4a9e, 0x800, 0x1, 0x0, 0x1}, {0x10001, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xffff8000, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x1, 0x0, 0x1}, {0xf6, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1}, {0x1, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x1}], 0x445}) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12, 0x18, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0x2e, 0x30]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x26) pwritev2(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)="1d1c", 0x2}], 0x1, 0x7ff, 0x5, 0x0) read$FUSE(r6, &(0x7f0000000c00)={0x2020}, 0x2020) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="0800040400000000"], 0x8) fchdir(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) 4m11.545550342s ago: executing program 2 (id=2214): r0 = open(&(0x7f0000000000)='./bus\x00', 0x50a42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x800000000000000) socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1b0}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x2e, &(0x7f0000000280)=""/46, 0x41100, 0x1d, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xb, 0xebc, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000380)=[r1, r1, r4, r6], &(0x7f00000003c0)=[{0x2, 0x3, 0xb, 0x6}, {0x5, 0x5, 0xf, 0x5}, {0x0, 0x1, 0xc, 0xb}, {0x4, 0x4, 0x2, 0x7}, {0x1, 0x1, 0x5, 0xc}, {0x0, 0x2, 0x6, 0x1}, {0x1, 0x1, 0x2, 0x9}, {0x3, 0x2, 0xa, 0x8}, {0x5, 0x1, 0x0, 0x4}, {0x5, 0x5, 0xd, 0x4}], 0x10, 0x2}, 0x94) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f00000000c0)=0x85, 0x4) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010142, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) 4m11.445679349s ago: executing program 2 (id=2215): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000a40)="e402004470d8d400eb2fc15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 9) 4m11.443944482s ago: executing program 2 (id=2216): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x44, 0x7ffc1ffb}]}) timer_gettime(0x0, &(0x7f0000000300)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x181f, 0x401, 0xe2, 0x5, 0x88d7, 0x80000001, 0x1007, 0x800001, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x9, 0x8, 0x3, 0x1, 0x9, 0x10c, 0x4001, 0x2, 0xa, 0x2, 0x1, 0xb0c0, 0xe, 0xff, 0x400002, 0x4000004]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/locks\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r8, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500010006000000050005000200000005000400000000000900030073797a31000000001500d300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1df}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f", 0x42}], 0x2}}], 0x2, 0x2090) 3m56.379294697s ago: executing program 34 (id=2216): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x20182) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x44, 0x7ffc1ffb}]}) timer_gettime(0x0, &(0x7f0000000300)) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x181f, 0x401, 0xe2, 0x5, 0x88d7, 0x80000001, 0x1007, 0x800001, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x5, 0x9, 0x8, 0x3, 0x1, 0x9, 0x10c, 0x4001, 0x2, 0xa, 0x2, 0x1, 0xb0c0, 0xe, 0xff, 0x400002, 0x4000004]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/locks\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) write$P9_RVERSION(r8, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500010006000000050005000200000005000400000000000900030073797a31000000001500d300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) sendmmsg$inet(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bf", 0x1df}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f", 0x42}], 0x2}}], 0x2, 0x2090) 39.729645387s ago: executing program 6 (id=3221): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000440)=@svm={0x2, 0x1, 0x1080, {0xf000}, {"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"}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000019a800000c0000000700000005000000f87558050006040000000000000000"], 0x0, 0x2b, 0x0, 0x1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000003fb4b9ca679748f9000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="3d25ab555b19c47dd064f26a0503", 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB="000000000000d500000080000000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x110) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x2000008, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r9, 0xb101, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r11 = dup(0xffffffffffffffff) openat$audio(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r11, 0x3b83, &(0x7f0000000180)={0x28, 0x4, 0x0, r12, 0x3f6e8, 0x0, 0xa, 0x1d9492}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008010) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f00000001c0)={0x8000000, 0x200006, 0x2}) 38.618616627s ago: executing program 6 (id=3229): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x30}}, 0x2) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 38.181944668s ago: executing program 6 (id=3232): syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x54c}}, 0x0) (async) io_setup(0xfff, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000340)={0x8, 0x0, [{0x16d, 0x0, 0x8}, {0x35a, 0x0, 0xffffffff}, {0xb80, 0x0, 0xd}, {0x9ae, 0x0, 0x3}, {0xb3e, 0x0, 0x8}, {0x36d, 0x0, 0xa7c}, {0x34a, 0x0, 0x85}, {0x9e9, 0x0, 0x2}]}) (async) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r10, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x800) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x1c, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @call={0x85, 0x0, 0x0, 0x66}, @map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @ldst={0x2, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff80}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x881, 0x690402a6faea20db) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r14) sendmsg$DEVLINK_CMD_RATE_GET(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r15, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (async) sendmmsg$inet(r12, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.832199184s ago: executing program 6 (id=3239): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002140)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715be861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a420c35322f9cf8060550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x0, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000080)={0x4ae, 0x1, 0x80000005, 0x3, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000007"], 0x10}}], 0x2, 0x4800) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000008000/0x3000)=nil) 33.477456503s ago: executing program 6 (id=3241): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000005b00), 0x6, 0x20000) ioctl$BLKPG(r6, 0x1269, &(0x7f0000005c00)={0x3, 0x0, 0x98, &(0x7f0000005b40)={0x5, 0xfffffffffffff988, 0xd}}) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x40000082}]}) listen(r5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) readahead(r6, 0x6, 0x560) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)='%pK \x00'}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000000200)="b1657f98b3eb05196a6d4b9b44c5b75da609d528e9a049f26def115bf6779e4bece127fae480a0f60e16f07187b0adef5145f9865aeb6ebd751a25689e3ba5803f71475060d1ea33ff795490e0731795900092fcf3f806fcd25e998190d63e04452ed86f9e796b19ea93ca8115459ba74b2b42b485a7c4f6c08b79c01db84ab85b3d5bb2b82e2ec7641a069defd993f354729576dc07ea4bf6a5a25d68fdadbf04c34f0caec672505cc9ccb14defa125136b0b2e296c3e1b95286dc3a93bfe131cf42a773d20484dd170a3952391243084cf5b1a0504dd6c00f218c0673ba72c2b7aa354b73390fc8f7a", &(0x7f0000000300)=""/4096, &(0x7f0000001300)="5756af20a645f841c1e4138a9c714257194afcc4f2f2a5fb0f325239d9a36be6fa74b99d1de6dee9897e4ea5adcffa7e2fa95187788e947afe47442a514a3886a492e7826dbf893ff24bd5724115905d9a6736f09a5f5b63bc8a20c4bd82d9cda9d9cc0d405a43ff20765827e764b2e37856b5dcbf1c3556870afc4daf475db5f8ddbf8da09b36d1c889121c59eae1b129d59dabee7585392dc6e7121f61fa839c491e2a68fc37cfc72e2f172ecb42048c5c9b31305fd6f751f9ea6616e78dfc048e8acc85162aebd3bd9eea99411c", &(0x7f0000001400)="cf73f8ddb7611a4702aa3c5c6f98a5bfa4", 0x2, r11}, 0x38) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @broadcast}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaf6bf4635f1f51375213c20c61ac3e9aaaaaa3e8100220086000000000000081100000000000000000000002c0000000000ff0200000000000000000000000000014f1c1b5900089078ca1b"], 0x42) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5, 0x5, 0xb0c, 0xffffffffffffff01, 0x3, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1, r12}) 31.843110825s ago: executing program 6 (id=3248): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0xaf}}}, 0x104) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x48884, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmmsg$inet(r3, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e9e8be3d8b4fdc7a5ca1448a52572fe22fffb6663ab90a6ad867c56ac507cf71902d3a1bbb5686907bd434fbd57fa3e70c499a2f90acae7f06c3e0b1e8c07c5215ddca71ca383bf24ebc58538594bf8b34d83a80b3d68909b83cae35aba4b4a71c8d8e902b0bc948d0472ceaef7e813e9b5c85a4a88854eac68e58802c110fb5d32e4d6fd37b87fff1bd66ed44646d0f493de4f3542e9bbd1774fdcf5331ffce8e42c77010bac014b1225b81b4c4e1c6c1fd581df4561cf9e804f1f56b493ad9d8c1d270b232469d26d48f3b9d5b071b92b83fe99c5520828ccffe23c2607", 0xdf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="734e539eeace39b7864f2348b3a2f7c87fbd281905bb4ad329e3369a9fd4bf1deb9be2f68c266950887c1b611af6f8e0ffb634cc1f53977adbbe1c0fb8dc4d24bfbb3fdbb19fbe79d0189c25df44eed11376491d6bb65c5acfc51cbad2a626dcbe758371dc100a8f871e2ea5d9deb60b6ed541b6488bcdd8973cf4bb7b2c50c7b4009322a474f089c8c09b6eb0e15cd08b5fe4e6faf864444d9b9959250d8b5a1a", 0xa1}, {&(0x7f00000001c0)="0175c9703d21b42f38a519165505418fa88371aaf8eeae1c56bf621237071d949b566dbf9542bb2ca2f55d899e67e1", 0x2f}], 0x2}}], 0x2, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) 16.786902669s ago: executing program 35 (id=3248): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0xaf}}}, 0x104) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0), 0x0, 0x48884, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmmsg$inet(r3, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e9e8be3d8b4fdc7a5ca1448a52572fe22fffb6663ab90a6ad867c56ac507cf71902d3a1bbb5686907bd434fbd57fa3e70c499a2f90acae7f06c3e0b1e8c07c5215ddca71ca383bf24ebc58538594bf8b34d83a80b3d68909b83cae35aba4b4a71c8d8e902b0bc948d0472ceaef7e813e9b5c85a4a88854eac68e58802c110fb5d32e4d6fd37b87fff1bd66ed44646d0f493de4f3542e9bbd1774fdcf5331ffce8e42c77010bac014b1225b81b4c4e1c6c1fd581df4561cf9e804f1f56b493ad9d8c1d270b232469d26d48f3b9d5b071b92b83fe99c5520828ccffe23c2607", 0xdf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="734e539eeace39b7864f2348b3a2f7c87fbd281905bb4ad329e3369a9fd4bf1deb9be2f68c266950887c1b611af6f8e0ffb634cc1f53977adbbe1c0fb8dc4d24bfbb3fdbb19fbe79d0189c25df44eed11376491d6bb65c5acfc51cbad2a626dcbe758371dc100a8f871e2ea5d9deb60b6ed541b6488bcdd8973cf4bb7b2c50c7b4009322a474f089c8c09b6eb0e15cd08b5fe4e6faf864444d9b9959250d8b5a1a", 0xa1}, {&(0x7f00000001c0)="0175c9703d21b42f38a519165505418fa88371aaf8eeae1c56bf621237071d949b566dbf9542bb2ca2f55d899e67e1", 0x2f}], 0x2}}], 0x2, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) 12.352373986s ago: executing program 4 (id=3313): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f00000002c0)={0x4, 0x8, '\x00Td', 0xd, 0x4}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x140b, 0xc4108f9a2f067999, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x8855) 12.161773464s ago: executing program 4 (id=3314): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote, 0xfffffffc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x8}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) shutdown(r6, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) bpf$MAP_CREATE(0x0, 0x0, 0x50) 10.492111201s ago: executing program 5 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}}}]}]}], {0x14}}, 0xc8}}, 0x4000040) 10.366131778s ago: executing program 5 (id=3319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = shmget$private(0x0, 0xd000, 0x0, &(0x7f0000009000/0xd000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1c, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x37303250}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x3e, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4040080) 10.199730917s ago: executing program 5 (id=3320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r5, 0x0, 0x0, 0x4010, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="d80400001000090500000000000000000ee22b92069b2a2dfaa46c88eda40000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2828290a9416debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8be0f001731aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa09100000000606d2e4cc898739218c5d3a83cb6b707f333631400f90020010000000000000000000000000002000000"], 0xd8}], 0x1}, 0x40040) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000200200"}) unshare(0x22020600) socket(0x2000000015, 0x80005, 0x0) r8 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000040)) 4.248692933s ago: executing program 4 (id=3324): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0xfffffffffffffffe) r1 = socket(0x2b, 0x80801, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ccdeb607c3fa4e910ce3e60d380f", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x1e, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 3.978680555s ago: executing program 5 (id=3325): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) io_submit(r0, 0x5, &(0x7f0000000240)=[&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f0000000300)="31e4117a6f54a9fa4362e3974c7fc7793ed39a64ca66936dde45aac38ace4abf37176ff5dc70d417310ad3cfd23b59adb75b38978f8aed4e77544ec851a529f8be6a458386a6bb1d663781f249518335b0d38014582c0d42405ab2ec91c09b324175e4e5795d842ad00e1e68720b97a6f2ef3c614fb36e993152a7a2103f946c736f02356933bbcd5b9c9d10c1a4f1e87c5dab38356c87da1b4f624f961ebd4cd3f006a426cb3b1e88f5304def3f3d099a9fd68849c2b2c5fa3208de0b5bf17cc8227da4a17bf0398473006cfc0f567d3690618cf51e3396ed218e9c23", 0xdd, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x1, 0x6, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x101, 0xffffffffffffffff, &(0x7f0000000000)="f0c28ae849de60ffbc0173d047a2d6772256852daf8bf5e8001d091087b9be2dab5c1def4c3b", 0x26, 0x10}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f0000000400)="a3c7c34da9270f6367e3760b95249f613e09e309ba91a4d6af74c3979ecba7643f33fd6b40c280bbf40147c06917380677cb80cfa050821f238c10afbaff076928514c99a051f19d360d0d5fa3b54c734448ef22", 0x54, 0x3, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000480)="773a6b15a9ba9aef4235dcce3c32940a6d65fdfe9b398d6991994c318bcc761865eb2cee00db35713f88178b298d6e1a58e93bd6a415ab17d73ed0e2ef7836ad4845f6808a36273f89479d30a7c0a5a4d22f65f2ae7020d18f73c15df6333953dec3c5f7ff3d2638657cd5e4d6e9ecb8b9b170e79cd936b9fa4d18338478209a8564ac1c62500a6fa2bfa8001bfbb1a306716e50ebc8a826ac8db4b771228c07a1e3ce61ab8d9b184601e82c1951d3e1c3af8b10c31c7345a3bf1b", 0xbb, 0x8, 0x0, 0x1}]) 3.91675562s ago: executing program 0 (id=3326): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x7c, r0, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a266c9b4c4a99c8ba8037fd6729127fedce330d2e5f89e8b2661492c613c9985"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fc32b3bbdf65b90fa28f7d8544a0466f"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xf}]}]}, 0x28}}, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048000}, 0x40) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r4 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x1006e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, &(0x7f0000000440)={0x7, "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"}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r8) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}]}, 0xac}, 0x1, 0x0, 0x0, 0x800c}, 0x20004004) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r4}) io_uring_enter(r4, 0x66ab, 0x4, 0x2, 0x0, 0x0) r10 = mmap$IORING_OFF_SQES(&(0x7f00002eb000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x10000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x468}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r10, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2c, 0x0, r11, 0x0, &(0x7f0000000000)="bd9f685e36f2f1b46cd1d208930aab258e2753e1e27175d3b47312d31a98ead58b2bb686e56cb6c3d6d782b508d15bca05ef0ff7682faf37d3b19228dd14dad1", 0x40, 0x10000, 0x1, {0x0, r12}}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}]}}}]}]}], {0x14}}, 0xc8}}, 0x4000040) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000240)={r11}, 0x1) 3.916450604s ago: executing program 4 (id=3327): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x5, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x80000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448dc, 0x0) close(r6) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x3}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xd, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 3.777383208s ago: executing program 5 (id=3328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000800000008500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) setrlimit(0xc, &(0x7f0000000100)={0x8001, 0xfffff9f4}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x0, 0x2, 0x1, 0x6, r2}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) 2.605964601s ago: executing program 0 (id=3329): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r5, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 2.251474867s ago: executing program 0 (id=3330): r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1.614386545s ago: executing program 0 (id=3331): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_clone(0x2000400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)='!') ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x2, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x40203) 1.61384391s ago: executing program 4 (id=3332): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setxattr$incfs_size(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f00000001c0), &(0x7f0000000280)=0x2, 0x8, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f0000000100)=@v3={0x3000000, [{0x10000, 0x7}, {0x59260e2e, 0x5}], r1}, 0x18, 0x0) close(r2) lsetxattr(0x0, &(0x7f0000000600)=@random={'trusted.', '^p@!-^/\x00'}, &(0x7f0000000640)='&[{}-\x00', 0x6, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) 717.702164ms ago: executing program 0 (id=3333): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x40203) 216.321236ms ago: executing program 4 (id=3334): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000680009"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_create1(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x4004040) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) 91.470661ms ago: executing program 5 (id=3335): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) io_submit(r0, 0x5, &(0x7f0000000240)=[&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x6417, r1, &(0x7f0000000300)="31e4117a6f54a9fa4362e3974c7fc7793ed39a64ca66936dde45aac38ace4abf37176ff5dc70d417310ad3cfd23b59adb75b38978f8aed4e77544ec851a529f8be6a458386a6bb1d663781f249518335b0d38014582c0d42405ab2ec91c09b324175e4e5795d842ad00e1e68720b97a6f2ef3c614fb36e993152a7a2103f946c736f02356933bbcd5b9c9d10c1a4f1e87c5dab38356c87da1b4f624f961ebd4cd3f006a426cb3b1e88f5304def3f3d099a9fd68849c2b2c5fa3208de0b5bf17cc8227da4a17bf0398473006cfc0f567d3690618cf51e3396ed218e9c23", 0xdd, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x1, 0x6, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x101, 0xffffffffffffffff, &(0x7f0000000000)="f0c28ae849de60ffbc0173d047a2d6772256852daf8bf5e8001d091087b9be2dab5c1def4c3b", 0x26, 0x10}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f0000000400)="a3c7c34da9270f6367e3760b95249f613e09e309ba91a4d6af74c3979ecba7643f33fd6b40c280bbf40147c06917380677cb80cfa050821f238c10afbaff076928514c99a051f19d360d0d5fa3b54c734448ef22", 0x54, 0x3, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000480)="773a6b15a9ba9aef4235dcce3c32940a6d65fdfe9b398d6991994c318bcc761865eb2cee00db35713f88178b298d6e1a58e93bd6a415ab17d73ed0e2ef7836ad4845f6808a36273f89479d30a7c0a5a4d22f65f2ae7020d18f73c15df6333953dec3c5f7ff3d2638657cd5e4d6e9ecb8b9b170e79cd936b9fa4d18338478209a8564ac1c62500a6fa2bfa8001bfbb1a306716e50ebc8a826ac8db4b771228c07a1e3ce61ab8d9b184601e82c1951d3e1c3af8b10c31c7345a3bf1b", 0xbb, 0x8, 0x0, 0x1}]) 0s ago: executing program 0 (id=3336): r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): tack_lvl+0x100/0x190 [ 479.540209][T16380] should_fail_ex.cold+0x5/0xa [ 479.540230][T16380] _copy_from_user+0x2e/0xd0 [ 479.540248][T16380] kstrtouint_from_user+0xd6/0x1d0 [ 479.540270][T16380] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 479.540291][T16380] ? __lock_acquire+0x4a5/0x2630 [ 479.540311][T16380] ? lock_acquire+0x17c/0x330 [ 479.540333][T16380] proc_fail_nth_write+0x83/0x220 [ 479.540352][T16380] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 479.540374][T16380] vfs_write+0x2aa/0x1070 [ 479.540391][T16380] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 479.540410][T16380] ? __pfx_vfs_write+0x10/0x10 [ 479.540423][T16380] ? find_held_lock+0x2b/0x80 [ 479.540444][T16380] ? __fget_files+0x215/0x3d0 [ 479.540467][T16380] ? __fget_files+0x21f/0x3d0 [ 479.540489][T16380] ksys_write+0x12a/0x250 [ 479.540506][T16380] ? __pfx_ksys_write+0x10/0x10 [ 479.540529][T16380] do_int80_emulation+0x141/0x6b0 [ 479.540549][T16380] asm_int80_emulation+0x1a/0x20 [ 479.540566][T16380] RIP: 0023:0xf71e572b [ 479.540580][T16380] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 479.540596][T16380] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 479.540614][T16380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 479.540625][T16380] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.540635][T16380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.540645][T16380] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 479.540656][T16380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.540681][T16380] [ 479.795491][ T830] usb 11-1: USB disconnect, device number 16 [ 479.863164][T14975] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 480.108516][T14975] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 480.133191][T14975] usb 10-1: config 0 has no interface number 0 [ 480.135821][T14975] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 480.176962][T14975] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 480.183580][T14975] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.275004][T14975] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 480.281404][T14975] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 480.288780][T14975] usb 10-1: Product: syz [ 480.292380][T14975] usb 10-1: SerialNumber: syz [ 480.315327][T14975] usb 10-1: config 0 descriptor?? [ 480.348178][T16398] Cannot find add_set index 2 as target [ 480.351402][T14975] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 480.395631][T14975] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input40 [ 480.433796][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 480.577286][T16384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.623850][T16384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.638314][T16401] tipc: Enabling of bearer rejected, failed to enable media [ 480.788800][ C3] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 481.092490][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.113280][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.121665][ T830] usb 10-1: USB disconnect, device number 11 [ 481.147428][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.271228][ T830] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 481.587562][T14975] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 481.939833][T14975] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.945346][T14975] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.968099][T14975] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.972654][T14975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.019236][T16414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.026873][T14975] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.236832][T16414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.247948][T16414] FAULT_INJECTION: forcing a failure. [ 482.247948][T16414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.289400][T16414] CPU: 2 UID: 0 PID: 16414 Comm: syz.4.2931 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.289429][T16414] Tainted: [L]=SOFTLOCKUP [ 482.289435][T16414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.289445][T16414] Call Trace: [ 482.289451][T16414] [ 482.289458][T16414] dump_stack_lvl+0x100/0x190 [ 482.289487][T16414] should_fail_ex.cold+0x5/0xa [ 482.289507][T16414] strncpy_from_user+0x3b/0x2d0 [ 482.289527][T16414] do_getname+0x78/0x390 [ 482.289550][T16414] do_sys_openat2+0xc5/0x1e0 [ 482.289573][T16414] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.289593][T16414] ? __fget_files+0x215/0x3d0 [ 482.289613][T16414] ? __fget_files+0x21f/0x3d0 [ 482.289631][T16414] __ia32_compat_sys_openat+0x12d/0x210 [ 482.289654][T16414] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 482.289679][T16414] ? __pfx_ksys_write+0x10/0x10 [ 482.289700][T16414] __do_fast_syscall_32+0xe3/0x8c0 [ 482.289729][T16414] do_fast_syscall_32+0x32/0x70 [ 482.289745][T16414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 482.289766][T16414] RIP: 0023:0xf7fe6579 [ 482.289781][T16414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 482.289807][T16414] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 482.289825][T16414] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 482.289837][T16414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.289848][T16414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.289858][T16414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.289868][T16414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.289891][T16414] [ 482.291441][ T1152] usb 9-1: USB disconnect, device number 17 [ 482.432178][T16442] FAULT_INJECTION: forcing a failure. [ 482.432178][T16442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.465182][T16442] CPU: 0 UID: 0 PID: 16442 Comm: syz.5.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.465214][T16442] Tainted: [L]=SOFTLOCKUP [ 482.465220][T16442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.465230][T16442] Call Trace: [ 482.465236][T16442] [ 482.465244][T16442] dump_stack_lvl+0x100/0x190 [ 482.465275][T16442] should_fail_ex.cold+0x5/0xa [ 482.465295][T16442] _copy_to_user+0x32/0xd0 [ 482.465314][T16442] simple_read_from_buffer+0xcb/0x170 [ 482.465340][T16442] proc_fail_nth_read+0x1af/0x230 [ 482.465360][T16442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.465380][T16442] ? rw_verify_area+0xce/0x6d0 [ 482.465403][T16442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.465422][T16442] vfs_read+0x1e4/0xb30 [ 482.465441][T16442] ? __pfx_vfs_read+0x10/0x10 [ 482.465455][T16442] ? find_held_lock+0x2b/0x80 [ 482.465479][T16442] ? __fget_files+0x215/0x3d0 [ 482.465501][T16442] ? __fget_files+0x21f/0x3d0 [ 482.465524][T16442] ksys_read+0x12a/0x250 [ 482.465540][T16442] ? __pfx_ksys_read+0x10/0x10 [ 482.465564][T16442] do_int80_emulation+0x141/0x6b0 [ 482.465583][T16442] asm_int80_emulation+0x1a/0x20 [ 482.465601][T16442] RIP: 0023:0xf712572b [ 482.465615][T16442] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 482.465631][T16442] RSP: 002b:00000000f53bc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 482.465649][T16442] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f53bc5d0 [ 482.465661][T16442] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 482.465671][T16442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.465682][T16442] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 482.465694][T16442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.465716][T16442] [ 482.795089][T16454] FAULT_INJECTION: forcing a failure. [ 482.795089][T16454] name failslab, interval 1, probability 0, space 0, times 0 [ 482.803026][T16454] CPU: 1 UID: 0 PID: 16454 Comm: syz.6.2943 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.803059][T16454] Tainted: [L]=SOFTLOCKUP [ 482.803066][T16454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 482.803077][T16454] Call Trace: [ 482.803084][T16454] [ 482.803091][T16454] dump_stack_lvl+0x100/0x190 [ 482.803122][T16454] should_fail_ex.cold+0x5/0xa [ 482.803144][T16454] should_failslab+0xc2/0x120 [ 482.803166][T16454] ? qp_host_alloc_queue+0x4e/0x210 [ 482.803192][T16454] __kmalloc_noprof+0xf6/0x9c0 [ 482.803227][T16454] ? qp_host_alloc_queue+0x4e/0x210 [ 482.803250][T16454] qp_host_alloc_queue+0x4e/0x210 [ 482.803277][T16454] qp_broker_alloc+0xefa/0x1bc0 [ 482.803314][T16454] ? __pfx_qp_broker_alloc+0x10/0x10 [ 482.803343][T16454] ? find_held_lock+0x2b/0x80 [ 482.803368][T16454] vmci_qp_broker_alloc+0x93/0xc0 [ 482.803403][T16454] vmci_host_do_alloc_queuepair.constprop.0+0x1ad/0x3f0 [ 482.803434][T16454] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 482.803465][T16454] ? kasan_quarantine_put+0x104/0x240 [ 482.803483][T16454] ? lockdep_hardirqs_on+0x78/0x100 [ 482.803523][T16454] ? tomoyo_path_number_perm+0x188/0x580 [ 482.803546][T16454] vmci_host_unlocked_ioctl+0x697/0x2070 [ 482.803574][T16454] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 482.803604][T16454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 482.803632][T16454] ? do_vfs_ioctl+0x226/0x13e0 [ 482.803665][T16454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 482.803697][T16454] ? find_held_lock+0x2b/0x80 [ 482.803720][T16454] ? hook_file_ioctl_common+0x146/0x410 [ 482.803745][T16454] ? __fget_files+0x21f/0x3d0 [ 482.803767][T16454] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 482.803792][T16454] compat_ptr_ioctl+0x6e/0xa0 [ 482.803817][T16454] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 482.803841][T16454] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 482.803871][T16454] __do_fast_syscall_32+0xe3/0x8c0 [ 482.803902][T16454] do_fast_syscall_32+0x32/0x70 [ 482.803919][T16454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 482.803941][T16454] RIP: 0023:0xf7f34579 [ 482.803956][T16454] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 482.803973][T16454] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 482.803992][T16454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007a8 [ 482.804003][T16454] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.804013][T16454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 482.804023][T16454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 482.804034][T16454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 482.804059][T16454] [ 482.831762][T16456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.373638][T16498] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2953'. [ 490.709233][T16514] overlayfs: failed to resolve './file0': -2 [ 490.784658][T16512] gre0: entered allmulticast mode [ 491.039145][T16522] netlink: 'syz.0.2958': attribute type 2 has an invalid length. [ 491.377133][ T5942] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 492.287407][T16545] input: syz1 as /devices/virtual/input/input41 [ 493.212209][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 494.011601][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2966'. [ 494.051163][T16558] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.464137][T16570] overlayfs: failed to clone upperpath [ 494.543082][T16572] fuse: Bad value for 'user_id' [ 494.545258][T16572] fuse: Bad value for 'user_id' [ 495.066796][T16583] netlink: 'syz.6.2975': attribute type 21 has an invalid length. [ 495.071050][T16583] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2975'. [ 495.144371][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2976'. [ 495.152316][T16590] netlink: 'syz.0.2976': attribute type 7 has an invalid length. [ 495.188366][T16590] netlink: 'syz.0.2976': attribute type 8 has an invalid length. [ 495.192282][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 495.344193][T16585] ocfs2: Unknown parameter 'usrquotaN÷‚ÛD¹' [ 495.447393][ T5942] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 495.451055][ T5942] Bluetooth: hci5: Injecting HCI hardware error event [ 495.458435][ T5942] Bluetooth: hci5: hardware error 0x00 [ 495.897057][T16609] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 495.938713][T16609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2979'. [ 495.998417][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 496.590157][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2984'. [ 497.309771][T16632] input: syz0 as /devices/virtual/input/input42 [ 497.606143][T16636] netlink: 'syz.0.2988': attribute type 10 has an invalid length. [ 497.636628][T16636] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 497.661256][ T5942] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 497.959649][T16636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.474267][T16653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2992'. [ 498.931076][ C1] hrtimer: interrupt took 4917512 ns [ 500.007512][ T1334] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 500.162326][ T1334] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 500.165759][ T1334] usb 9-1: config 0 has no interface number 0 [ 500.169610][ T1334] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 500.174278][ T1334] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 500.210692][ T1334] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.216831][ T1334] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 500.221281][ T1334] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 500.282829][ T1334] usb 9-1: Product: syz [ 500.284647][ T1334] usb 9-1: SerialNumber: syz [ 500.462862][ T1334] usb 9-1: config 0 descriptor?? [ 500.492444][ T1334] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 500.497931][ T1334] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input43 [ 500.888392][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.917033][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.094098][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 501.367029][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.371410][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.375324][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.379618][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.383509][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.389259][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.393332][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.398531][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.403079][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.423582][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 501.426910][T14975] usb 9-1: USB disconnect, device number 18 [ 501.426995][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 501.458462][T14975] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 502.112084][T16687] ªªªªªª: renamed from wg2 [ 502.321782][T16689] FAULT_INJECTION: forcing a failure. [ 502.321782][T16689] name failslab, interval 1, probability 0, space 0, times 0 [ 502.349991][T16689] CPU: 1 UID: 0 PID: 16689 Comm: syz.5.3003 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.350021][T16689] Tainted: [L]=SOFTLOCKUP [ 502.350026][T16689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.350035][T16689] Call Trace: [ 502.350041][T16689] [ 502.350048][T16689] dump_stack_lvl+0x100/0x190 [ 502.350074][T16689] should_fail_ex.cold+0x5/0xa [ 502.350091][T16689] should_failslab+0xc2/0x120 [ 502.350110][T16689] __kvmalloc_node_noprof+0x101/0xac0 [ 502.350126][T16689] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 502.350150][T16689] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 502.350165][T16689] __nf_hook_entries_try_shrink+0x164/0x400 [ 502.350187][T16689] __nf_unregister_net_hook+0x1d2/0x6a0 [ 502.350207][T16689] nf_unregister_net_hooks+0x11b/0x170 [ 502.350226][T16689] ip_vs_unregister_hooks+0xd9/0x140 [ 502.350245][T16689] ip_vs_unlink_service+0x980/0xbd0 [ 502.350270][T16689] ip_vs_flush.isra.0+0x1be/0x230 [ 502.350291][T16689] do_ip_vs_set_ctl+0xd7f/0x10c0 [ 502.350316][T16689] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 502.350337][T16689] ? trace_contention_end+0xd6/0x110 [ 502.350354][T16689] ? __mutex_lock+0x26a/0x1b90 [ 502.350384][T16689] ? nf_sockopt_find.isra.0+0x222/0x290 [ 502.350433][T16689] ? nf_sockopt_find.isra.0+0x222/0x290 [ 502.350457][T16689] ? __mutex_unlock_slowpath+0x15c/0x790 [ 502.350497][T16689] ? nf_setsockopt+0x8d/0xf0 [ 502.350518][T16689] nf_setsockopt+0x8d/0xf0 [ 502.350540][T16689] ip_setsockopt+0xcb/0xf0 [ 502.350564][T16689] sctp_setsockopt+0x161/0xb370 [ 502.350588][T16689] ? __pfx_aa_sk_perm+0x10/0x10 [ 502.350607][T16689] ? __pfx_sctp_setsockopt+0x10/0x10 [ 502.350632][T16689] ? aa_sock_opt_perm+0xfe/0x1b0 [ 502.350653][T16689] ? sock_common_setsockopt+0x2e/0xf0 [ 502.350673][T16689] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 502.350698][T16689] do_sock_setsockopt+0xf3/0x1d0 [ 502.350724][T16689] __sys_setsockopt+0x119/0x190 [ 502.350747][T16689] __ia32_sys_setsockopt+0xbc/0x160 [ 502.350764][T16689] ? __do_fast_syscall_32+0x94/0x8c0 [ 502.350792][T16689] ? lockdep_hardirqs_on+0x78/0x100 [ 502.350814][T16689] __do_fast_syscall_32+0xe3/0x8c0 [ 502.350841][T16689] do_fast_syscall_32+0x32/0x70 [ 502.350856][T16689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.350877][T16689] RIP: 0023:0xf6fed579 [ 502.350890][T16689] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 502.350906][T16689] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 502.350922][T16689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 502.350933][T16689] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.350943][T16689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.350954][T16689] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 502.350964][T16689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.350988][T16689] [ 502.353087][T14975] IPVS: starting estimator thread 0... [ 502.488887][T16696] FAULT_INJECTION: forcing a failure. [ 502.488887][T16696] name failslab, interval 1, probability 0, space 0, times 0 [ 502.686896][T16696] CPU: 1 UID: 0 PID: 16696 Comm: syz.5.3006 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.686927][T16696] Tainted: [L]=SOFTLOCKUP [ 502.686933][T16696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.686942][T16696] Call Trace: [ 502.686948][T16696] [ 502.686955][T16696] dump_stack_lvl+0x100/0x190 [ 502.686985][T16696] should_fail_ex.cold+0x5/0xa [ 502.687005][T16696] should_failslab+0xc2/0x120 [ 502.687024][T16696] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 502.687044][T16696] ? kstrdup_const+0x63/0x80 [ 502.687064][T16696] ? kstrdup+0x51/0xe0 [ 502.687078][T16696] kstrdup+0x51/0xe0 [ 502.687095][T16696] kstrdup_const+0x63/0x80 [ 502.687111][T16696] alloc_vfsmnt+0xe5/0x6a0 [ 502.687133][T16696] clone_mnt+0x4b/0x930 [ 502.687155][T16696] ? is_subdir+0x1a8/0x3e0 [ 502.687177][T16696] copy_tree+0x329/0xbf0 [ 502.687199][T16696] copy_mnt_ns+0x2bd/0xc30 [ 502.687216][T16696] ? rcu_read_lock_any_held+0x6a/0xa0 [ 502.687257][T16696] create_new_namespaces+0xd3/0xac0 [ 502.687281][T16696] ? bpf_lsm_capable+0x9/0x10 [ 502.687302][T16696] ? security_capable+0x80/0x260 [ 502.687328][T16696] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 502.687352][T16696] ksys_unshare+0x455/0xab0 [ 502.687370][T16696] ? __pfx_ksys_unshare+0x10/0x10 [ 502.687389][T16696] ? __pfx_ksys_write+0x10/0x10 [ 502.687409][T16696] __ia32_sys_unshare+0x30/0x40 [ 502.687431][T16696] __do_fast_syscall_32+0xe3/0x8c0 [ 502.687458][T16696] do_fast_syscall_32+0x32/0x70 [ 502.687472][T16696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.687492][T16696] RIP: 0023:0xf6fed579 [ 502.687505][T16696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 502.687520][T16696] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 502.687536][T16696] RAX: ffffffffffffffda RBX: 000000002a020400 RCX: 0000000000000000 [ 502.687546][T16696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.687556][T16696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.687566][T16696] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 502.687575][T16696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.687596][T16696] [ 502.747812][T16692] IPVS: using max 28 ests per chain, 67200 per kthread [ 502.956646][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'. [ 503.076250][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 504.918854][T16729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.897483][ T6027] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 507.058438][ T6027] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 507.065893][ T6027] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.070681][ T6027] usb 11-1: Product: syz [ 507.074642][ T6027] usb 11-1: Manufacturer: syz [ 507.133083][ T6027] usb 11-1: SerialNumber: syz [ 507.152314][ T6027] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 507.598160][T14975] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 508.709462][T16762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3021'. [ 508.729144][T14975] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 508.734665][T14975] ath9k_htc: Failed to initialize the device [ 508.881825][T14975] usb 11-1: ath9k_htc: USB layer deinitialized [ 509.167632][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 509.544306][T16774] fuse: Unknown parameter ' [ 509.544306][T16774] ' [ 509.731920][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'. [ 510.286841][T16785] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 510.429834][T16785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.597542][T16789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.608238][T16789] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 510.618703][T16789] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 510.622767][ T6445] usb 11-1: USB disconnect, device number 17 [ 510.693070][T16785] gretap1: entered promiscuous mode [ 510.726055][T16785] bond2: (slave gretap1): making interface the new active one [ 510.733037][T16785] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 510.759089][T16791] macvlan3: entered promiscuous mode [ 510.805936][T16791] macvlan3: entered allmulticast mode [ 510.853394][T16791] bond2: entered promiscuous mode [ 510.859494][T16791] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 510.894582][T16791] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 510.939243][T16791] bond2: left promiscuous mode [ 511.302933][T16792] syzkaller0: entered promiscuous mode [ 511.305477][T16792] syzkaller0: entered allmulticast mode [ 511.481579][T16805] syz.6.3032: vmalloc error: size 3500662784, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 511.503611][T16805] CPU: 1 UID: 0 PID: 16805 Comm: syz.6.3032 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.503645][T16805] Tainted: [L]=SOFTLOCKUP [ 511.503652][T16805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.503664][T16805] Call Trace: [ 511.503672][T16805] [ 511.503681][T16805] dump_stack_lvl+0x100/0x190 [ 511.503712][T16805] warn_alloc.cold+0x95/0x1c1 [ 511.503744][T16805] ? __pfx_warn_alloc+0x10/0x10 [ 511.503775][T16805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 511.503801][T16805] ? lockdep_hardirqs_on+0x78/0x100 [ 511.503828][T16805] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 511.503861][T16805] ? kasan_save_stack+0x3f/0x50 [ 511.503880][T16805] ? kasan_save_stack+0x30/0x50 [ 511.503897][T16805] ? kasan_save_track+0x14/0x30 [ 511.503917][T16805] ? vb2_vmalloc_alloc+0x135/0x410 [ 511.503940][T16805] __vmalloc_node_range_noprof+0x1252/0x1530 [ 511.503966][T16805] ? __do_fast_syscall_32+0xe3/0x8c0 [ 511.503995][T16805] ? do_fast_syscall_32+0x32/0x70 [ 511.504011][T16805] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.504042][T16805] ? vb2_vmalloc_alloc+0x135/0x410 [ 511.504073][T16805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 511.504113][T16805] ? vb2_vmalloc_alloc+0x135/0x410 [ 511.504137][T16805] vmalloc_user_noprof+0x9e/0xe0 [ 511.504164][T16805] ? vb2_vmalloc_alloc+0x135/0x410 [ 511.504188][T16805] vb2_vmalloc_alloc+0x135/0x410 [ 511.504210][T16805] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 511.504235][T16805] __vb2_queue_alloc+0x8cc/0x1150 [ 511.504271][T16805] vb2_core_create_bufs+0x5fa/0xa30 [ 511.504297][T16805] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 511.504320][T16805] ? rcu_is_watching+0x12/0xc0 [ 511.504348][T16805] ? __mutex_lock+0x26a/0x1b90 [ 511.504511][T16805] vb2_create_bufs+0x40c/0x830 [ 511.504550][T16805] ? __pfx_vb2_create_bufs+0x10/0x10 [ 511.504588][T16805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 511.504617][T16805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 511.504647][T16805] v4l_create_bufs+0x17d/0x270 [ 511.504675][T16805] __video_do_ioctl+0xaf8/0xdc0 [ 511.504709][T16805] ? __pfx___video_do_ioctl+0x10/0x10 [ 511.504750][T16805] video_usercopy+0x3d3/0x1400 [ 511.504781][T16805] ? __pfx___video_do_ioctl+0x10/0x10 [ 511.504816][T16805] ? __pfx_video_usercopy+0x10/0x10 [ 511.504855][T16805] ? hook_file_ioctl_common+0x146/0x410 [ 511.504885][T16805] v4l2_ioctl+0x1bd/0x250 [ 511.504918][T16805] v4l2_compat_ioctl32+0x20f/0x2d0 [ 511.504943][T16805] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 511.504969][T16805] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 511.505004][T16805] __do_fast_syscall_32+0xe3/0x8c0 [ 511.505038][T16805] do_fast_syscall_32+0x32/0x70 [ 511.505058][T16805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.505082][T16805] RIP: 0023:0xf7f34579 [ 511.505098][T16805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 511.505117][T16805] RSP: 002b:00000000f530c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 511.505136][T16805] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0f8565c [ 511.505149][T16805] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.505160][T16805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.505172][T16805] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 511.505183][T16805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.505211][T16805] [ 511.505219][T16805] Mem-Info: [ 511.934760][T16805] active_anon:5147 inactive_anon:2554 isolated_anon:0 [ 511.934760][T16805] active_file:3573 inactive_file:11671 isolated_file:0 [ 511.934760][T16805] unevictable:1768 dirty:109 writeback:0 [ 511.934760][T16805] slab_reclaimable:7044 slab_unreclaimable:78959 [ 511.934760][T16805] mapped:31704 shmem:3107 pagetables:1593 [ 511.934760][T16805] sec_pagetables:326 bounce:0 [ 511.934760][T16805] kernel_misc_reclaimable:0 [ 511.934760][T16805] free:32738 free_pcp:12693 free_cma:0 [ 511.970474][T16805] Node 0 active_anon:240kB inactive_anon:144kB active_file:280kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:4kB writeback:0kB shmem:5400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9472kB pagetables:1620kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 511.997487][T16805] Node 1 active_anon:20348kB inactive_anon:10072kB active_file:14012kB inactive_file:46684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:126624kB dirty:432kB writeback:0kB shmem:7028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6036kB pagetables:4852kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB [ 512.029205][T16805] Node 0 DMA free:2068kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:32kB free_cma:0kB [ 512.053027][T16805] lowmem_reserve[]: 0 285 285 285 285 [ 512.057656][T16805] Node 0 DMA32 free:17208kB boost:0kB min:13104kB low:16380kB high:19656kB reserved_highatomic:2048KB free_highatomic:1084KB active_anon:240kB inactive_anon:140kB active_file:248kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1696kB present:1032196kB managed:292540kB mlocked:0kB bounce:0kB free_pcp:12920kB local_pcp:3980kB free_cma:0kB [ 512.091920][T16805] lowmem_reserve[]: 0 0 0 0 0 [ 512.094710][T16805] Node 1 DMA32 free:113724kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:1224KB active_anon:20348kB inactive_anon:10072kB active_file:14012kB inactive_file:46684kB unevictable:3536kB writepending:432kB zspages:5444kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37956kB local_pcp:10560kB free_cma:0kB [ 512.141909][T16805] lowmem_reserve[]: 0 0 0 0 0 [ 512.144333][T16805] Node 0 DMA: 23*4kB (UM) 7*8kB (UM) 4*16kB (UM) 2*32kB (UM) 2*64kB (M) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2068kB [ 512.153318][T16805] Node 0 DMA32: 508*4kB (UMEH) 471*8kB (UMEH) 361*16kB (UMEH) 48*32kB (UMEH) 22*64kB (MEH) 15*128kB (UMEH) 3*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17208kB [ 512.177735][T16805] Node 1 DMA32: 1011*4kB (UMEH) 3144*8kB (UMEH) 1799*16kB (UMEH) 60*32kB (UMH) 85*64kB (UMH) 28*128kB (MEH) 85*256kB (UMEH) 11*512kB (UM) 13*1024kB (UM) 2*2048kB (M) 0*4096kB = 113724kB [ 512.184900][T16805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.201863][T16805] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 512.206318][T16805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.212022][T16805] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 512.221222][T16805] 19141 total pagecache pages [ 512.226496][T16805] 792 pages in swap cache [ 512.228536][T16805] Free swap = 59000kB [ 512.237840][T16805] Total swap = 124996kB [ 512.239557][T16805] 524155 pages RAM [ 512.241136][T16805] 0 pages HighMem/MovableOnly [ 512.246242][T16805] 210127 pages reserved [ 512.248414][T16805] 0 pages cma reserved [ 512.305012][T16804] geneve2: entered promiscuous mode [ 512.316895][T16804] geneve2: entered allmulticast mode [ 512.629787][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.698281][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.704822][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.727378][ T1144] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.961676][T16830] FAULT_INJECTION: forcing a failure. [ 512.961676][T16830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.968540][T16830] CPU: 3 UID: 0 PID: 16830 Comm: syz.5.3038 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.968579][T16830] Tainted: [L]=SOFTLOCKUP [ 512.968585][T16830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.968595][T16830] Call Trace: [ 512.968602][T16830] [ 512.968609][T16830] dump_stack_lvl+0x100/0x190 [ 512.968637][T16830] should_fail_ex.cold+0x5/0xa [ 512.968655][T16830] _copy_from_user+0x2e/0xd0 [ 512.968674][T16830] move_addr_to_kernel+0x65/0x170 [ 512.968893][T16830] __sys_bind+0x11d/0x260 [ 512.968919][T16830] ? __pfx___sys_bind+0x10/0x10 [ 512.968954][T16830] ? ksys_write+0x1ac/0x250 [ 512.968970][T16830] ? __pfx_ksys_write+0x10/0x10 [ 512.968990][T16830] __ia32_sys_bind+0x71/0xb0 [ 512.969014][T16830] ? lockdep_hardirqs_on+0x78/0x100 [ 512.969155][T16830] __do_fast_syscall_32+0xe3/0x8c0 [ 512.969186][T16830] do_fast_syscall_32+0x32/0x70 [ 512.969201][T16830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.969222][T16830] RIP: 0023:0xf6fed579 [ 512.969236][T16830] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 512.969252][T16830] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 512.969270][T16830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 512.969283][T16830] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 512.969293][T16830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.969302][T16830] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.969311][T16830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.969360][T16830] [ 513.644717][T16842] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 513.904170][T16848] netlink: 'syz.6.3044': attribute type 1 has an invalid length. [ 514.036886][T16848] bond1: entered promiscuous mode [ 514.039924][T16848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.465503][T16850] bond1: (slave bridge2): making interface the new active one [ 514.516837][T16850] bridge2: entered promiscuous mode [ 514.535528][T16850] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 515.508093][T16880] FAULT_INJECTION: forcing a failure. [ 515.508093][T16880] name failslab, interval 1, probability 0, space 0, times 0 [ 515.518430][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.5.3050 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.518494][T16880] Tainted: [L]=SOFTLOCKUP [ 515.518500][T16880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.518510][T16880] Call Trace: [ 515.518516][T16880] [ 515.518523][T16880] dump_stack_lvl+0x100/0x190 [ 515.518617][T16880] should_fail_ex.cold+0x5/0xa [ 515.518637][T16880] should_failslab+0xc2/0x120 [ 515.518656][T16880] kmem_cache_alloc_noprof+0x83/0x780 [ 515.518706][T16880] ? skb_clone+0x190/0x400 [ 515.518784][T16880] ? skb_clone+0x190/0x400 [ 515.518800][T16880] skb_clone+0x190/0x400 [ 515.518817][T16880] nfnetlink_rcv_batch+0x1cc/0x2880 [ 515.519103][T16880] ? kmem_cache_free+0x143/0x720 [ 515.519131][T16880] ? kfree_skbmem+0x19a/0x210 [ 515.519928][T16880] ? kfree_skbmem+0x19f/0x210 [ 515.519954][T16880] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 515.520198][T16880] ? find_held_lock+0x2b/0x80 [ 515.520265][T16880] ? __dev_queue_xmit+0x7dc/0x46f0 [ 515.520290][T16880] ? __local_bh_enable_ip+0x9e/0x120 [ 515.520389][T16880] ? lockdep_hardirqs_on+0x78/0x100 [ 515.520415][T16880] ? __dev_queue_xmit+0x7dc/0x46f0 [ 515.520524][T16880] ? __asan_memset+0x23/0x50 [ 515.520551][T16880] ? __nla_validate_parse+0x1e7/0x28b0 [ 515.520652][T16880] ? __pfx___nla_validate_parse+0x10/0x10 [ 515.520677][T16880] ? apparmor_capable+0x1d7/0x4e0 [ 515.520708][T16880] ? __nla_parse+0x40/0x60 [ 515.520732][T16880] nfnetlink_rcv+0x3bd/0x440 [ 515.520759][T16880] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 515.520789][T16880] netlink_unicast+0x5aa/0x870 [ 515.520813][T16880] ? __pfx_netlink_unicast+0x10/0x10 [ 515.520842][T16880] netlink_sendmsg+0x8b0/0xda0 [ 515.520907][T16880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.520931][T16880] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 515.521000][T16880] ____sys_sendmsg+0xa54/0xc30 [ 515.521063][T16880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.521099][T16880] ___sys_sendmsg+0x190/0x1e0 [ 515.521166][T16880] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.521473][T16880] __sys_sendmsg+0x170/0x220 [ 515.521531][T16880] ? __pfx___sys_sendmsg+0x10/0x10 [ 515.521559][T16880] ? __pfx_ksys_write+0x10/0x10 [ 515.521580][T16880] __do_fast_syscall_32+0xe3/0x8c0 [ 515.521609][T16880] do_fast_syscall_32+0x32/0x70 [ 515.521624][T16880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.521646][T16880] RIP: 0023:0xf6fed579 [ 515.521695][T16880] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 515.521713][T16880] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 515.521731][T16880] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 515.521742][T16880] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.521790][T16880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.521801][T16880] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 515.521810][T16880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.521833][T16880] [ 516.191188][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3053'. [ 516.195918][T16890] FAULT_INJECTION: forcing a failure. [ 516.195918][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 516.204980][T16890] CPU: 2 UID: 0 PID: 16890 Comm: syz.5.3053 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.205008][T16890] Tainted: [L]=SOFTLOCKUP [ 516.205014][T16890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.205024][T16890] Call Trace: [ 516.205030][T16890] [ 516.205036][T16890] dump_stack_lvl+0x100/0x190 [ 516.205065][T16890] should_fail_ex.cold+0x5/0xa [ 516.205084][T16890] should_failslab+0xc2/0x120 [ 516.205104][T16890] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 516.205124][T16890] ? __alloc_skb+0x156/0x410 [ 516.205146][T16890] ? __alloc_skb+0x156/0x410 [ 516.205160][T16890] __alloc_skb+0x156/0x410 [ 516.205175][T16890] ? __alloc_skb+0x35d/0x410 [ 516.205190][T16890] ? __pfx___alloc_skb+0x10/0x10 [ 516.205216][T16890] netlink_ack+0x117/0xb80 [ 516.205244][T16890] netlink_rcv_skb+0x333/0x420 [ 516.205264][T16890] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 516.205291][T16890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.205331][T16890] ? ns_capable+0xd2/0xf0 [ 516.205357][T16890] nfnetlink_rcv+0x1b3/0x440 [ 516.205381][T16890] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 516.205404][T16890] ? netlink_deliver_tap+0x1ae/0xcc0 [ 516.205428][T16890] netlink_unicast+0x5aa/0x870 [ 516.205452][T16890] ? __pfx_netlink_unicast+0x10/0x10 [ 516.205482][T16890] netlink_sendmsg+0x8b0/0xda0 [ 516.205506][T16890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.205529][T16890] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 516.205556][T16890] ____sys_sendmsg+0xa54/0xc30 [ 516.205583][T16890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.205617][T16890] ___sys_sendmsg+0x190/0x1e0 [ 516.205644][T16890] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.205699][T16890] __sys_sendmsg+0x170/0x220 [ 516.205719][T16890] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.205747][T16890] ? __pfx_ksys_write+0x10/0x10 [ 516.205769][T16890] __do_fast_syscall_32+0xe3/0x8c0 [ 516.205799][T16890] do_fast_syscall_32+0x32/0x70 [ 516.205815][T16890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 516.205835][T16890] RIP: 0023:0xf6fed579 [ 516.205849][T16890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 516.205865][T16890] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 516.205882][T16890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 516.205892][T16890] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.205903][T16890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.205913][T16890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 516.205923][T16890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.205947][T16890] [ 516.522429][T16888] hub 1-0:1.0: USB hub found [ 516.535596][T16888] hub 1-0:1.0: 2 ports detected [ 516.678079][T16888] syzkaller1: entered promiscuous mode [ 516.689076][T16888] syzkaller1: entered allmulticast mode [ 517.057967][T16903] tipc: Enabled bearer , priority 0 [ 517.062915][T16903] syzkaller0: entered promiscuous mode [ 517.080132][T16903] syzkaller0: entered allmulticast mode [ 517.131193][T16900] syzkaller1: entered promiscuous mode [ 517.149046][T16900] syzkaller1: entered allmulticast mode [ 517.166384][T16906] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3056'. [ 517.174320][T16903] syzkaller0: MTU too low for tipc bearer [ 517.189071][T16909] NILFS (nullb0): couldn't find nilfs on the device [ 517.195272][T16903] tipc: Disabling bearer [ 517.216032][T16597] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 517.222880][T16907] 9p: Bad value for 'rfdno' [ 517.381579][T16907] wg2 speed is unknown, defaulting to 1000 [ 517.457111][T16913] FAULT_INJECTION: forcing a failure. [ 517.457111][T16913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.478477][T16913] CPU: 2 UID: 0 PID: 16913 Comm: syz.6.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.478507][T16913] Tainted: [L]=SOFTLOCKUP [ 517.478513][T16913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 517.478522][T16913] Call Trace: [ 517.478530][T16913] [ 517.478537][T16913] dump_stack_lvl+0x100/0x190 [ 517.478567][T16913] should_fail_ex.cold+0x5/0xa [ 517.478587][T16913] _copy_from_iter+0x1f4/0x1690 [ 517.478612][T16913] ? __pfx__copy_from_iter+0x10/0x10 [ 517.478636][T16913] ? find_held_lock+0x2b/0x80 [ 517.478658][T16913] ? aa_file_perm+0x268/0x1530 [ 517.478682][T16913] tun_get_user+0x265/0x3e10 [ 517.478715][T16913] ? __pfx_tun_get_user+0x10/0x10 [ 517.478739][T16913] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 517.478768][T16913] ? find_held_lock+0x2b/0x80 [ 517.478789][T16913] ? tun_get+0x191/0x370 [ 517.478806][T16913] ? tun_get+0x191/0x370 [ 517.478831][T16913] tun_chr_write_iter+0xdc/0x200 [ 517.478853][T16913] vfs_write+0x6ac/0x1070 [ 517.478871][T16913] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 517.478894][T16913] ? __pfx_vfs_write+0x10/0x10 [ 517.478909][T16913] ? find_held_lock+0x2b/0x80 [ 517.478947][T16913] ksys_write+0x12a/0x250 [ 517.478964][T16913] ? __pfx_ksys_write+0x10/0x10 [ 517.478980][T16913] ? __pfx_ksys_write+0x10/0x10 [ 517.479019][T16913] __do_fast_syscall_32+0xe3/0x8c0 [ 517.479051][T16913] do_fast_syscall_32+0x32/0x70 [ 517.479067][T16913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.479089][T16913] RIP: 0023:0xf7f34579 [ 517.479103][T16913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 517.479119][T16913] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 517.479138][T16913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002240 [ 517.479149][T16913] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 517.479160][T16913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.479171][T16913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.479181][T16913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.479205][T16913] [ 517.732744][T16912] syzkaller1: entered promiscuous mode [ 517.735126][T16912] syzkaller1: entered allmulticast mode [ 517.750514][T16907] wg2 speed is unknown, defaulting to 1000 [ 517.754198][T16907] wg2 speed is unknown, defaulting to 1000 [ 517.754603][T16915] syzkaller1: entered promiscuous mode [ 517.791760][T16915] syzkaller1: entered allmulticast mode [ 518.240804][T16907] infiniband syz2: set down [ 518.257608][ T1152] wg2 speed is unknown, defaulting to 1000 [ 518.263450][T16907] infiniband syz2: added wg2 [ 518.315242][T16919] FAULT_INJECTION: forcing a failure. [ 518.315242][T16919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.328039][T16919] CPU: 3 UID: 0 PID: 16919 Comm: syz.6.3061 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.328071][T16919] Tainted: [L]=SOFTLOCKUP [ 518.328078][T16919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 518.328089][T16919] Call Trace: [ 518.328096][T16919] [ 518.328103][T16919] dump_stack_lvl+0x100/0x190 [ 518.328133][T16919] should_fail_ex.cold+0x5/0xa [ 518.328152][T16919] ? __pfx_binder_ioctl+0x10/0x10 [ 518.328177][T16919] _copy_to_user+0x32/0xd0 [ 518.328195][T16919] ? __pfx_binder_ioctl+0x10/0x10 [ 518.328225][T16919] binder_ioctl+0x286d/0x7450 [ 518.328253][T16919] ? tomoyo_path_number_perm+0x28f/0x580 [ 518.328272][T16919] ? tomoyo_path_number_perm+0x28f/0x580 [ 518.328291][T16919] ? tomoyo_path_number_perm+0x188/0x580 [ 518.328309][T16919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.328326][T16919] ? __pfx_binder_ioctl+0x10/0x10 [ 518.328353][T16919] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 518.328376][T16919] ? do_vfs_ioctl+0x226/0x13e0 [ 518.328399][T16919] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 518.328428][T16919] ? find_held_lock+0x2b/0x80 [ 518.328449][T16919] ? hook_file_ioctl_common+0x146/0x410 [ 518.328470][T16919] ? __fget_files+0x21f/0x3d0 [ 518.328489][T16919] ? __pfx_binder_ioctl+0x10/0x10 [ 518.328511][T16919] compat_ptr_ioctl+0x6e/0xa0 [ 518.328534][T16919] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 518.328556][T16919] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 518.328583][T16919] __do_fast_syscall_32+0xe3/0x8c0 [ 518.328612][T16919] do_fast_syscall_32+0x32/0x70 [ 518.328627][T16919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.328648][T16919] RIP: 0023:0xf7f34579 [ 518.328661][T16919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 518.328678][T16919] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 518.328695][T16919] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 518.328706][T16919] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.328716][T16919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.328726][T16919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 518.328735][T16919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.328757][T16919] [ 518.328765][T16919] binder: 16918:16919 ioctl c0306201 800006c0 returned -14 [ 518.363846][T16907] RDS/IB: syz2: added [ 518.611206][T16907] smc: adding ib device syz2 with port count 1 [ 518.623341][T16907] smc: ib device syz2 port 1 has no pnetid [ 518.633669][ T1152] wg2 speed is unknown, defaulting to 1000 [ 518.678682][T16907] wg2 speed is unknown, defaulting to 1000 [ 518.707906][ T6178] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 518.915681][ T6178] usb 9-1: Using ep0 maxpacket: 8 [ 518.923389][ T6178] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 518.927140][ T6178] usb 9-1: config 0 has no interface number 0 [ 518.930392][ T6445] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 518.971364][ T6178] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.976169][ T6178] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 518.994595][ T6178] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.020611][ T6178] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.030396][ T6178] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 519.055321][ T6178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.071549][ T6178] usb 9-1: config 0 descriptor?? [ 519.159592][ T6178] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 519.195221][ T6445] usb 11-1: Using ep0 maxpacket: 8 [ 519.203360][ T6445] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 519.218609][ T6445] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.230034][ T6445] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.255635][ T6445] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.270391][T16907] wg2 speed is unknown, defaulting to 1000 [ 519.283986][ T6445] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.284029][ T6445] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.284048][ T6445] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.525699][ T6445] usb 11-1: GET_CAPABILITIES returned 0 [ 519.529009][ T6445] usbtmc 11-1:16.0: can't read capabilities [ 519.598130][ T6445] usb 9-1: USB disconnect, device number 19 [ 519.598158][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 519.658791][ T6445] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 519.942870][T16907] wg2 speed is unknown, defaulting to 1000 [ 520.137340][T16907] wg2 speed is unknown, defaulting to 1000 [ 520.335508][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3066'. [ 520.339629][T16942] netlink: 'syz.5.3066': attribute type 21 has an invalid length. [ 520.650886][T16907] wg2 speed is unknown, defaulting to 1000 [ 520.711708][T16950] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3068'. [ 520.798123][ T830] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 520.997652][ T830] usb 9-1: Using ep0 maxpacket: 8 [ 521.013995][ T830] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 521.019055][ T830] usb 9-1: config 0 has no interface number 0 [ 521.030625][ T830] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.040153][ T830] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 521.055953][ T830] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.062156][ T830] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.072135][ T830] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 521.078277][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.089236][ T830] usb 9-1: config 0 descriptor?? [ 521.098617][ T830] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 521.136825][T16907] wg2 speed is unknown, defaulting to 1000 [ 521.467453][T16952] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 521.482437][T16907] wg2 speed is unknown, defaulting to 1000 [ 521.498795][T16597] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 521.505917][T16597] Bluetooth: hci2: Injecting HCI hardware error event [ 521.522794][ T5942] Bluetooth: hci2: hardware error 0x00 [ 521.886141][T16907] wg2 speed is unknown, defaulting to 1000 [ 522.404620][ T1152] usb 9-1: USB disconnect, device number 20 [ 522.422369][ T1152] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 523.053038][T16960] FAULT_INJECTION: forcing a failure. [ 523.053038][T16960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.064576][T16960] CPU: 2 UID: 0 PID: 16960 Comm: syz.5.3071 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.064604][T16960] Tainted: [L]=SOFTLOCKUP [ 523.064610][T16960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.064619][T16960] Call Trace: [ 523.064625][T16960] [ 523.064632][T16960] dump_stack_lvl+0x100/0x190 [ 523.064662][T16960] should_fail_ex.cold+0x5/0xa [ 523.064682][T16960] _copy_to_user+0x32/0xd0 [ 523.064702][T16960] simple_read_from_buffer+0xcb/0x170 [ 523.064729][T16960] proc_fail_nth_read+0x1af/0x230 [ 523.064747][T16960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.064768][T16960] ? rw_verify_area+0xce/0x6d0 [ 523.064793][T16960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.064811][T16960] vfs_read+0x1e4/0xb30 [ 523.064832][T16960] ? __pfx_vfs_read+0x10/0x10 [ 523.064846][T16960] ? find_held_lock+0x2b/0x80 [ 523.064867][T16960] ? __fget_files+0x215/0x3d0 [ 523.064888][T16960] ? __fget_files+0x21f/0x3d0 [ 523.064912][T16960] ksys_read+0x12a/0x250 [ 523.064928][T16960] ? __pfx_ksys_read+0x10/0x10 [ 523.064943][T16960] ? fput+0x79/0x100 [ 523.064968][T16960] do_int80_emulation+0x141/0x6b0 [ 523.064987][T16960] asm_int80_emulation+0x1a/0x20 [ 523.065005][T16960] RIP: 0023:0xf712572b [ 523.065018][T16960] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 523.065035][T16960] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 523.065053][T16960] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 523.065065][T16960] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 523.065075][T16960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.065084][T16960] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 523.065092][T16960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.065117][T16960] [ 523.095557][T16961] tipc: Enabling of bearer rejected, failed to enable media [ 523.331975][ T6445] usb 11-1: USB disconnect, device number 18 [ 523.512685][T16958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3070'. [ 523.588317][T16977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3074'. [ 523.607453][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 524.203732][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3073'. [ 524.325169][T16989] program syz.5.3076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.567490][T14975] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 524.767151][T14975] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.778938][T14975] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.936760][T14975] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.986531][T14975] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.991207][T14975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.998469][T14975] usb 10-1: config 0 descriptor?? [ 525.439182][T14975] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 525.461737][T14975] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 525.529997][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3079'. [ 525.927699][ T1152] usb 10-1: USB disconnect, device number 12 [ 526.411352][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'. [ 526.645326][T17013] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 526.651940][T17013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.671023][T17013] vhci_hcd vhci_hcd.0: Device attached [ 526.937481][T14975] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 527.061659][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 527.309200][T17031] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.346263][T16935] block nbd64: NBD_DISCONNECT [ 527.347422][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 527.352427][T17033] nbd: device at index 64 is going down [ 527.954750][T17040] input: syz0 as /devices/virtual/input/input45 [ 528.494800][T17014] vhci_hcd: connection reset by peer [ 528.501939][T16361] vhci_hcd vhci_hcd.6: stop threads [ 528.510294][T16361] vhci_hcd vhci_hcd.6: release socket [ 528.529964][T16361] vhci_hcd vhci_hcd.6: disconnect device [ 529.804865][T17013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.818043][T17013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 530.462283][ T40] audit: type=1326 audit(2000000683.209:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17047 comm="syz.0.3088" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 530.464534][T17013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.566380][T17013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 530.868752][T17013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.886116][T17013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.004567][ T40] audit: type=1326 audit(2000000683.749:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.5.3089" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fed579 code=0x0 [ 531.307082][T17013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.313162][T17013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 531.402938][T17061] FAULT_INJECTION: forcing a failure. [ 531.402938][T17061] name failslab, interval 1, probability 0, space 0, times 0 [ 531.425392][T17061] CPU: 2 UID: 0 PID: 17061 Comm: syz.4.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.425428][T17061] Tainted: [L]=SOFTLOCKUP [ 531.425433][T17061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.425445][T17061] Call Trace: [ 531.425451][T17061] [ 531.425458][T17061] dump_stack_lvl+0x100/0x190 [ 531.425489][T17061] should_fail_ex.cold+0x5/0xa [ 531.425510][T17061] should_failslab+0xc2/0x120 [ 531.425532][T17061] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 531.425553][T17061] ? alloc_vmap_area+0xb46/0x2a00 [ 531.425571][T17061] ? __pfx___might_resched+0x10/0x10 [ 531.425596][T17061] ? alloc_vmap_area+0xb46/0x2a00 [ 531.425616][T17061] alloc_vmap_area+0xb46/0x2a00 [ 531.425644][T17061] ? __pfx_alloc_vmap_area+0x10/0x10 [ 531.425672][T17061] __get_vm_area_node+0x1ca/0x330 [ 531.425699][T17061] __vmalloc_node_range_noprof+0x213/0x1530 [ 531.425722][T17061] ? vhost_task_create+0x1db/0x370 [ 531.425750][T17061] ? vhost_task_create+0x1db/0x370 [ 531.425770][T17061] ? rcu_read_unlock+0x17/0x60 [ 531.425790][T17061] ? rcu_read_unlock+0x17/0x60 [ 531.425815][T17061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.425836][T17061] ? __memcg_slab_post_alloc_hook+0x473/0x880 [ 531.425864][T17061] ? rcu_is_watching+0x12/0xc0 [ 531.425886][T17061] ? trace_kmem_cache_alloc+0x80/0xb0 [ 531.425908][T17061] ? vhost_task_create+0x1db/0x370 [ 531.425926][T17061] __vmalloc_node_noprof+0xad/0xf0 [ 531.425950][T17061] ? vhost_task_create+0x1db/0x370 [ 531.425972][T17061] copy_process+0x5ec/0x79b0 [ 531.426002][T17061] ? __pfx_copy_process+0x10/0x10 [ 531.426020][T17061] ? lockdep_init_map_type+0x5c/0x250 [ 531.426040][T17061] ? lockdep_init_map_type+0x5c/0x250 [ 531.426059][T17061] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 531.426080][T17061] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 531.426101][T17061] vhost_task_create+0x1db/0x370 [ 531.426121][T17061] ? __pfx_vhost_task_create+0x10/0x10 [ 531.426158][T17061] ? register_lock_class+0x40/0x560 [ 531.426183][T17061] ? __pfx_vhost_task_fn+0x10/0x10 [ 531.426206][T17061] ? __pfx___mutex_lock+0x10/0x10 [ 531.426239][T17061] kvm_mmu_post_init_vm+0x1b3/0x370 [ 531.426268][T17061] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 531.426284][T17061] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 531.426311][T17061] kvm_vcpu_ioctl+0x730/0x16d0 [ 531.426334][T17061] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.426357][T17061] ? tomoyo_path_number_perm+0x188/0x580 [ 531.426378][T17061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.426409][T17061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.426446][T17061] ? do_vfs_ioctl+0x226/0x13e0 [ 531.426471][T17061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 531.426505][T17061] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 531.426528][T17061] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 531.426551][T17061] ? __fget_files+0x21f/0x3d0 [ 531.426571][T17061] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 531.426594][T17061] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 531.426622][T17061] __do_fast_syscall_32+0xe3/0x8c0 [ 531.426648][T17061] do_fast_syscall_32+0x32/0x70 [ 531.426664][T17061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.426684][T17061] RIP: 0023:0xf7fe6579 [ 531.426700][T17061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 531.426718][T17061] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 531.426735][T17061] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 531.426745][T17061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.426756][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.426766][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.426778][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.426802][T17061] [ 531.426928][T17061] syz.4.3091: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 531.893999][T17061] CPU: 2 UID: 0 PID: 17061 Comm: syz.4.3091 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.894110][T17061] Tainted: [L]=SOFTLOCKUP [ 531.894116][T17061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.894186][T17061] Call Trace: [ 531.894335][T17061] [ 531.894345][T17061] dump_stack_lvl+0x100/0x190 [ 531.894555][T17061] warn_alloc.cold+0x95/0x1c1 [ 531.894588][T17061] ? __pfx_warn_alloc+0x10/0x10 [ 531.894623][T17061] ? __get_vm_area_node+0x2c5/0x330 [ 531.894645][T17061] ? __get_vm_area_node+0x208/0x330 [ 531.894670][T17061] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 531.894700][T17061] ? vhost_task_create+0x1db/0x370 [ 531.894721][T17061] ? rcu_read_unlock+0x17/0x60 [ 531.894864][T17061] ? rcu_read_unlock+0x17/0x60 [ 531.894888][T17061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.894908][T17061] ? __memcg_slab_post_alloc_hook+0x473/0x880 [ 531.894935][T17061] ? rcu_is_watching+0x12/0xc0 [ 531.894955][T17061] ? trace_kmem_cache_alloc+0x80/0xb0 [ 531.894977][T17061] ? vhost_task_create+0x1db/0x370 [ 531.894995][T17061] __vmalloc_node_noprof+0xad/0xf0 [ 531.895017][T17061] ? vhost_task_create+0x1db/0x370 [ 531.895039][T17061] copy_process+0x5ec/0x79b0 [ 531.895069][T17061] ? __pfx_copy_process+0x10/0x10 [ 531.895089][T17061] ? lockdep_init_map_type+0x5c/0x250 [ 531.895108][T17061] ? lockdep_init_map_type+0x5c/0x250 [ 531.895127][T17061] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 531.895159][T17061] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 531.895179][T17061] vhost_task_create+0x1db/0x370 [ 531.895199][T17061] ? __pfx_vhost_task_create+0x10/0x10 [ 531.895218][T17061] ? register_lock_class+0x40/0x560 [ 531.895242][T17061] ? __pfx_vhost_task_fn+0x10/0x10 [ 531.895265][T17061] ? __pfx___mutex_lock+0x10/0x10 [ 531.895298][T17061] kvm_mmu_post_init_vm+0x1b3/0x370 [ 531.895326][T17061] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 531.895342][T17061] ? kvm_vcpu_ioctl+0x150f/0x16d0 [ 531.895369][T17061] kvm_vcpu_ioctl+0x730/0x16d0 [ 531.895391][T17061] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.895412][T17061] ? tomoyo_path_number_perm+0x188/0x580 [ 531.895432][T17061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.895458][T17061] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.895481][T17061] ? do_vfs_ioctl+0x226/0x13e0 [ 531.895503][T17061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 531.895535][T17061] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 531.895556][T17061] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 531.895575][T17061] ? __fget_files+0x21f/0x3d0 [ 531.895594][T17061] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 531.895615][T17061] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 531.895643][T17061] __do_fast_syscall_32+0xe3/0x8c0 [ 531.895672][T17061] do_fast_syscall_32+0x32/0x70 [ 531.895686][T17061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.897042][T17061] RIP: 0023:0xf7fe6579 [ 531.897066][T17061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 531.897082][T17061] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 531.897098][T17061] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 531.897108][T17061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.897117][T17061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.897126][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.897143][T17061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.897166][T17061] [ 531.897173][T17061] Mem-Info: [ 532.125921][T14975] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 532.168494][T17061] active_anon:10693 inactive_anon:823 isolated_anon:0 [ 532.168494][T17061] active_file:4303 inactive_file:11060 isolated_file:0 [ 532.168494][T17061] unevictable:1768 dirty:332 writeback:0 [ 532.168494][T17061] slab_reclaimable:7088 slab_unreclaimable:82474 [ 532.168494][T17061] mapped:38977 shmem:11059 pagetables:1584 [ 532.168494][T17061] sec_pagetables:327 bounce:0 [ 532.168494][T17061] kernel_misc_reclaimable:0 [ 532.168494][T17061] free:27516 free_pcp:10399 free_cma:0 [ 532.285569][T17061] Node 0 active_anon:668kB inactive_anon:144kB active_file:536kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:320kB dirty:4kB writeback:0kB shmem:5404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9556kB pagetables:1668kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 532.326020][T17061] Node 1 active_anon:43256kB inactive_anon:3148kB active_file:16676kB inactive_file:44240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:156844kB dirty:1324kB writeback:0kB shmem:40064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5788kB pagetables:4648kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 532.355195][ T40] audit: type=1326 audit(2000000685.079:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17067 comm="syz.0.3094" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 532.367427][T17061] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:4kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:28kB free_cma:0kB [ 532.428692][T17061] lowmem_reserve[]: 0 285 285 285 285 [ 532.431103][T17061] Node 0 DMA32 free:17816kB boost:2048kB min:15152kB low:18428kB high:21704kB reserved_highatomic:0KB free_highatomic:0KB active_anon:660kB inactive_anon:140kB active_file:504kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1816kB present:1032196kB managed:292540kB mlocked:0kB bounce:0kB free_pcp:10120kB local_pcp:1788kB free_cma:0kB [ 532.531508][T17061] lowmem_reserve[]: 0 0 0 0 0 [ 532.533649][T17061] Node 1 DMA32 free:100452kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38992kB inactive_anon:2748kB active_file:16676kB inactive_file:44240kB unevictable:3536kB writepending:1332kB zspages:5444kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:16028kB local_pcp:372kB free_cma:0kB [ 532.558720][ T8746] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.593777][T17061] lowmem_reserve[]: 0 0 0 0 0 [ 532.593825][T17061] Node 0 DMA: 14*4kB (UM) 7*8kB (UM) 3*16kB (UM) 2*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2080kB [ 532.679722][T17061] Node 0 DMA32: 60*4kB (UME) 537*8kB (UME) 398*16kB (UME) 76*32kB (UME) 42*64kB (UME) 12*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17816kB [ 532.690536][ T8746] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.720091][ T8746] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.727175][ T8746] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.742477][T17061] Node 1 DMA32: 386*4kB (UME) 1501*8kB (UME) 1880*16kB (UME) 290*32kB (UME) 80*64kB (UME) 38*128kB (UME) 87*256kB (UME) 18*512kB (UM) 8*1024kB (UM) 2*2048kB (UM) 0*4096kB = 106672kB [ 532.753810][ T8743] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.753826][T17061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.753846][T17061] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 532.759720][ T8743] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.777478][T17061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 532.792721][T17061] Node 1 hugepages_total=7 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 532.801476][T17061] 23580 total pagecache pages [ 532.816775][T17061] 703 pages in swap cache [ 532.819179][T17061] Free swap = 58700kB [ 532.820951][T17061] Total swap = 124996kB [ 532.822975][T17061] 524155 pages RAM [ 532.824876][T17061] 0 pages HighMem/MovableOnly [ 532.838718][T17061] 210127 pages reserved [ 532.841025][T17061] 0 pages cma reserved [ 532.856466][ T8746] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.877424][ T8746] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 533.468541][T17091] binder: 17089:17091 ioctl c018620c 800002c0 returned -22 [ 533.473673][ T40] audit: type=1326 audit(2000000686.219:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.486869][ T40] audit: type=1326 audit(2000000686.219:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.516677][ T40] audit: type=1326 audit(2000000686.229:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.543742][ T40] audit: type=1326 audit(2000000686.229:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.582628][ T40] audit: type=1326 audit(2000000686.229:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.604467][ T40] audit: type=1326 audit(2000000686.249:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 533.632637][ T40] audit: type=1326 audit(2000000686.249:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.4.3101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6579 code=0x7ffc0000 [ 535.573907][T17119] input: syz1 as /devices/virtual/input/input46 [ 535.965346][ T6023] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 536.212965][ T6023] usb 10-1: Using ep0 maxpacket: 8 [ 536.249133][ T6023] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 536.279046][ T6023] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.317038][ T6023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.779510][T17141] bridge1: entered promiscuous mode [ 537.781897][T17141] bridge1: entered allmulticast mode [ 537.791901][T17141] team0: Port device bridge1 added [ 537.810338][T17141] bridge0: port 3(team0) entered blocking state [ 537.816494][T17141] bridge0: port 3(team0) entered disabled state [ 537.820617][T17141] team0: entered allmulticast mode [ 537.828714][T17141] team_slave_0: entered allmulticast mode [ 537.830949][T17141] team_slave_1: entered allmulticast mode [ 537.861545][T17141] team0: entered promiscuous mode [ 537.864664][T17141] team_slave_0: entered promiscuous mode [ 537.869763][T17141] team_slave_1: entered promiscuous mode [ 538.652960][T14975] usb 10-1: USB disconnect, device number 13 [ 539.359618][T17162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 539.581713][T17166] FAULT_INJECTION: forcing a failure. [ 539.581713][T17166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.588626][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.4.3122 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.588651][T17166] Tainted: [L]=SOFTLOCKUP [ 539.588656][T17166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.588666][T17166] Call Trace: [ 539.588671][T17166] [ 539.588677][T17166] dump_stack_lvl+0x100/0x190 [ 539.588701][T17166] should_fail_ex.cold+0x5/0xa [ 539.588718][T17166] _copy_from_user+0x2e/0xd0 [ 539.588733][T17166] kstrtouint_from_user+0xd6/0x1d0 [ 539.588752][T17166] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 539.588769][T17166] ? __lock_acquire+0x4a5/0x2630 [ 539.588787][T17166] ? lock_acquire+0x17c/0x330 [ 539.588804][T17166] proc_fail_nth_write+0x83/0x220 [ 539.588820][T17166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 539.588840][T17166] vfs_write+0x2aa/0x1070 [ 539.588855][T17166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 539.588872][T17166] ? __pfx_vfs_write+0x10/0x10 [ 539.588883][T17166] ? find_held_lock+0x2b/0x80 [ 539.588902][T17166] ? __fget_files+0x215/0x3d0 [ 539.588920][T17166] ? __fget_files+0x21f/0x3d0 [ 539.588939][T17166] ksys_write+0x12a/0x250 [ 539.588952][T17166] ? __pfx_ksys_write+0x10/0x10 [ 539.588964][T17166] ? fput+0x79/0x100 [ 539.588986][T17166] do_int80_emulation+0x141/0x6b0 [ 539.589002][T17166] asm_int80_emulation+0x1a/0x20 [ 539.589017][T17166] RIP: 0023:0xf71e572b [ 539.589029][T17166] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 539.589043][T17166] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 539.589058][T17166] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 539.589067][T17166] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.589075][T17166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.589083][T17166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 539.589092][T17166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.589111][T17166] [ 540.294897][ T1334] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 540.497422][ T1334] usb 10-1: Using ep0 maxpacket: 32 [ 540.502915][ T1334] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 540.507428][ T1334] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 540.522481][ T1334] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 540.537479][ T1334] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 540.549716][ T1334] usb 10-1: config 0 interface 0 has no altsetting 0 [ 540.559045][ T1334] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 540.563771][ T1334] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 540.567918][ T1334] usb 10-1: Product: syz [ 540.570468][ T1334] usb 10-1: Manufacturer: syz [ 540.576454][ T1334] usb 10-1: SerialNumber: syz [ 540.583047][ T1334] usb 10-1: config 0 descriptor?? [ 540.591830][ T1334] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 540.597207][ T1334] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 540.853236][T17183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.877797][T17183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.897539][T17183] ldusb 10-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 541.668195][T17188] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 541.679861][T17189] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 541.770924][T17192] TCP: TCP_TX_DELAY enabled [ 542.594178][T17210] wg2 speed is unknown, defaulting to 1000 [ 544.098889][T16597] Bluetooth: hci4: command 0x0406 tx timeout [ 544.247390][ T830] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 544.518464][ T830] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 544.523330][ T830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.558233][ T830] usb 9-1: Product: syz [ 544.560269][ T830] usb 9-1: Manufacturer: syz [ 544.563388][ T830] usb 9-1: SerialNumber: syz [ 544.574050][ T830] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 544.627178][ T6023] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 544.675028][T14975] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 544.848498][T17226] FAULT_INJECTION: forcing a failure. [ 544.848498][T17226] name failslab, interval 1, probability 0, space 0, times 0 [ 544.856752][T17226] CPU: 2 UID: 0 PID: 17226 Comm: syz.4.3136 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.856782][T17226] Tainted: [L]=SOFTLOCKUP [ 544.856788][T17226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.856798][T17226] Call Trace: [ 544.856806][T17226] [ 544.856817][T17226] dump_stack_lvl+0x100/0x190 [ 544.856861][T17226] should_fail_ex.cold+0x5/0xa [ 544.856882][T17226] should_failslab+0xc2/0x120 [ 544.856902][T17226] ? tomoyo_realpath_from_path+0xb6/0x690 [ 544.856923][T17226] __kmalloc_noprof+0xf6/0x9c0 [ 544.856955][T17226] ? tomoyo_realpath_from_path+0xb6/0x690 [ 544.856973][T17226] tomoyo_realpath_from_path+0xb6/0x690 [ 544.857000][T17226] tomoyo_path_number_perm+0x23c/0x580 [ 544.857016][T17226] ? tomoyo_path_number_perm+0x22e/0x580 [ 544.857033][T17226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 544.857080][T17226] ? find_held_lock+0x2b/0x80 [ 544.857103][T17226] ? hook_file_ioctl_common+0x146/0x410 [ 544.857119][T17226] ? __fget_files+0x215/0x3d0 [ 544.857141][T17226] ? __fget_files+0x21f/0x3d0 [ 544.857161][T17226] security_file_ioctl_compat+0xd3/0x230 [ 544.857183][T17226] __ia32_compat_sys_ioctl+0xc2/0x360 [ 544.857212][T17226] __do_fast_syscall_32+0xe3/0x8c0 [ 544.857242][T17226] do_fast_syscall_32+0x32/0x70 [ 544.857258][T17226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.857279][T17226] RIP: 0023:0xf7fe6579 [ 544.857293][T17226] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 544.857309][T17226] RSP: 002b:00000000f54a54b4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 544.857326][T17226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507 [ 544.857337][T17226] RDX: 00000000f54a54f8 RSI: 00000000f7470ff4 RDI: 0000000000000000 [ 544.857348][T17226] RBP: 00000000f54a6518 R08: 0000000000000000 R09: 0000000000000000 [ 544.857374][T17226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 544.857385][T17226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.857410][T17226] [ 545.160301][T14975] usb 11-1: too many configurations: 199, using maximum allowed: 8 [ 545.169068][T14975] usb 11-1: config index 0 descriptor too short (expected 65424, got 139) [ 545.169280][T17226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 545.172504][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.187391][T14975] usb 11-1: config index 1 descriptor too short (expected 65424, got 139) [ 545.229740][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.236816][T14975] usb 11-1: config index 2 descriptor too short (expected 65424, got 139) [ 545.244536][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.257741][ T830] usb 9-1: USB disconnect, device number 21 [ 545.295250][T14975] usb 11-1: config index 3 descriptor too short (expected 65424, got 139) [ 545.303251][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.330960][T14975] usb 11-1: config index 4 descriptor too short (expected 65424, got 139) [ 545.333819][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.350050][T14975] usb 11-1: config index 5 descriptor too short (expected 65424, got 139) [ 545.353705][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.359195][T14975] usb 11-1: config index 6 descriptor too short (expected 65424, got 139) [ 545.369213][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.377322][T14975] usb 11-1: config index 7 descriptor too short (expected 65424, got 139) [ 545.384872][T14975] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.422485][T14975] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.426966][T14975] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.430324][T14975] usb 11-1: Product: syz [ 545.431923][T14975] usb 11-1: Manufacturer: syz [ 545.443729][T14975] usb 11-1: SerialNumber: syz [ 545.497016][T14975] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 545.538179][ T6027] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 545.757446][ T6023] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 545.759850][ T6023] ath9k_htc: Failed to initialize the device [ 545.764156][ T830] usb 9-1: ath9k_htc: USB layer deinitialized [ 545.924230][T17183] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 546.031582][T14975] usb 10-1: USB disconnect, device number 14 [ 546.072931][T14975] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 546.563177][ T6027] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 546.569523][ T6027] ath9k_htc: Failed to initialize the device [ 546.648623][ T6027] usb 11-1: ath9k_htc: USB layer deinitialized [ 546.714059][T17241] wg2 speed is unknown, defaulting to 1000 [ 547.564441][ T830] usb 11-1: USB disconnect, device number 19 [ 548.037468][ T830] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 548.197391][ T830] usb 11-1: Using ep0 maxpacket: 8 [ 548.201363][ T830] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 548.204382][ T830] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.208546][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.212276][ T830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.244946][ T830] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.277927][ T830] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 548.302433][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.544279][ T830] usb 11-1: usb_control_msg returned -32 [ 548.634497][ T830] usbtmc 11-1:16.0: can't read capabilities [ 549.029095][T17264] wg2 speed is unknown, defaulting to 1000 [ 549.107706][ T830] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 549.329922][ T830] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 549.390664][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.507519][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 549.515951][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 549.543474][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.554363][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 549.567722][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 549.655827][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.668742][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 549.673280][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 549.810873][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.868202][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 549.898911][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 549.913220][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.920353][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 549.932222][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 549.968916][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 549.999911][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.040307][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 550.045633][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.050716][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.071269][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 550.076782][ T830] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 550.080406][ T830] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 550.086656][ T830] usb 9-1: config 0 interface 0 has no altsetting 0 [ 550.112052][ T830] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 550.128591][ T830] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 550.166720][ T830] usb 9-1: Product: syz [ 550.169704][ T830] usb 9-1: Manufacturer: syz [ 550.174788][ T830] usb 9-1: SerialNumber: syz [ 550.182126][ T830] usb 9-1: config 0 descriptor?? [ 550.195032][ T830] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 550.660773][ T6178] usb 9-1: USB disconnect, device number 22 [ 550.669010][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 550.690275][ T6178] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 550.764713][T17280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.593037][ T1334] usb 11-1: USB disconnect, device number 20 [ 551.595200][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 551.595220][ T40] audit: type=1326 audit(2000000704.339:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.0.3152" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d579 code=0x0 [ 552.275228][T17301] FAULT_INJECTION: forcing a failure. [ 552.275228][T17301] name failslab, interval 1, probability 0, space 0, times 0 [ 552.285395][T17301] CPU: 3 UID: 0 PID: 17301 Comm: syz.6.3157 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.285431][T17301] Tainted: [L]=SOFTLOCKUP [ 552.285437][T17301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 552.285452][T17301] Call Trace: [ 552.285459][T17301] [ 552.285468][T17301] dump_stack_lvl+0x100/0x190 [ 552.285498][T17301] should_fail_ex.cold+0x5/0xa [ 552.285519][T17301] should_failslab+0xc2/0x120 [ 552.285539][T17301] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 552.285560][T17301] ? __alloc_skb+0x156/0x410 [ 552.285582][T17301] ? __alloc_skb+0x156/0x410 [ 552.285597][T17301] __alloc_skb+0x156/0x410 [ 552.285610][T17301] ? __alloc_skb+0x35d/0x410 [ 552.285624][T17301] ? __pfx___alloc_skb+0x10/0x10 [ 552.285638][T17301] ? genl_rcv_msg+0x4f0/0x800 [ 552.285657][T17301] ? genl_rcv_msg+0x4be/0x800 [ 552.285681][T17301] netlink_ack+0x117/0xb80 [ 552.285706][T17301] netlink_rcv_skb+0x333/0x420 [ 552.285724][T17301] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.285745][T17301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.285772][T17301] ? netlink_deliver_tap+0x1ae/0xcc0 [ 552.285791][T17301] genl_rcv+0x28/0x40 [ 552.285809][T17301] netlink_unicast+0x5aa/0x870 [ 552.285831][T17301] ? __pfx_netlink_unicast+0x10/0x10 [ 552.285856][T17301] netlink_sendmsg+0x8b0/0xda0 [ 552.285878][T17301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.285899][T17301] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 552.285964][T17301] ____sys_sendmsg+0xa54/0xc30 [ 552.285991][T17301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.286021][T17301] ___sys_sendmsg+0x190/0x1e0 [ 552.286047][T17301] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.286099][T17301] __sys_sendmsg+0x170/0x220 [ 552.286120][T17301] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.286146][T17301] ? __pfx_ksys_write+0x10/0x10 [ 552.286167][T17301] __do_fast_syscall_32+0xe3/0x8c0 [ 552.286198][T17301] do_fast_syscall_32+0x32/0x70 [ 552.286214][T17301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.286236][T17301] RIP: 0023:0xf7f34579 [ 552.286251][T17301] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 552.286269][T17301] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 552.286286][T17301] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001080 [ 552.286297][T17301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.286308][T17301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.286318][T17301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.286328][T17301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.286352][T17301] [ 552.683481][T17297] xt_CT: No such helper "snmp" [ 553.736750][T17312] wg2 speed is unknown, defaulting to 1000 [ 553.873892][T17320] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.880281][T17320] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.538227][T17331] misc userio: Begin command sent, but we're already running [ 554.771201][ T6178] psmouse serio4: Failed to reset mouse on : -5 [ 554.908591][T17334] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3166'. [ 555.076197][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 555.089780][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 555.095819][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 555.102380][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 555.108597][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 555.499413][T17348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3170'. [ 555.540602][T17352] FAULT_INJECTION: forcing a failure. [ 555.540602][T17352] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.546295][T17352] CPU: 3 UID: 0 PID: 17352 Comm: syz.4.3171 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.546324][T17352] Tainted: [L]=SOFTLOCKUP [ 555.546330][T17352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.546341][T17352] Call Trace: [ 555.546348][T17352] [ 555.546357][T17352] dump_stack_lvl+0x100/0x190 [ 555.546388][T17352] should_fail_ex.cold+0x5/0xa [ 555.546407][T17352] get_futex_key+0x106f/0x1620 [ 555.546437][T17352] ? __pfx_get_futex_key+0x10/0x10 [ 555.546470][T17352] futex_wait_setup+0x81/0x500 [ 555.546496][T17352] __futex_wait+0x19f/0x300 [ 555.546518][T17352] ? __pfx___futex_wait+0x10/0x10 [ 555.546541][T17352] ? __pfx_futex_wake_mark+0x10/0x10 [ 555.546565][T17352] ? __hrtimer_setup+0x178/0x280 [ 555.546584][T17352] ? ktime_add_safe+0x60/0x70 [ 555.546604][T17352] futex_wait+0xed/0x380 [ 555.546623][T17352] ? __pfx_futex_wait+0x10/0x10 [ 555.546645][T17352] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 555.546671][T17352] futex_wait_restart+0x110/0x160 [ 555.546693][T17352] do_int80_emulation+0x141/0x6b0 [ 555.546713][T17352] asm_int80_emulation+0x1a/0x20 [ 555.546730][T17352] RIP: 0023:0xf7fe6579 [ 555.546744][T17352] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 555.546760][T17352] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000000 [ 555.546777][T17352] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000000 [ 555.546788][T17352] RDX: 0000000000000004 RSI: 0000000080edfff0 RDI: 0000000000000000 [ 555.546799][T17352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.546809][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.546820][T17352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.546843][T17352] [ 556.268804][T17359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3173'. [ 556.372402][T17361] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3174'. [ 556.737797][ T6445] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 556.911610][ T6445] usb 9-1: Using ep0 maxpacket: 8 [ 556.949479][ T6445] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 556.953369][ T6445] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.969385][ T6445] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 557.020421][ T6445] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.028882][ T6445] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.057628][ T6445] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 557.060763][ T6445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.315594][ T6445] usb 9-1: usb_control_msg returned -32 [ 557.320677][ T6445] usbtmc 9-1:16.0: can't read capabilities [ 557.723795][T17386] wg2 speed is unknown, defaulting to 1000 [ 558.637494][ T6178] misc userio: Buffer overflowed, userio client isn't keeping up [ 559.533314][T14974] usb 9-1: USB disconnect, device number 23 [ 559.793641][ T6178] input: PS/2 Generic Mouse as /devices/serio4/input/input47 [ 560.877690][ T6178] psmouse serio4: Failed to enable mouse on [ 563.341539][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 563.358278][T17436] FAULT_INJECTION: forcing a failure. [ 563.358278][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 563.363692][T17436] CPU: 0 UID: 0 PID: 17436 Comm: syz.4.3196 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.363718][T17436] Tainted: [L]=SOFTLOCKUP [ 563.363723][T17436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 563.363732][T17436] Call Trace: [ 563.363738][T17436] [ 563.363744][T17436] dump_stack_lvl+0x100/0x190 [ 563.363768][T17436] should_fail_ex.cold+0x5/0xa [ 563.363784][T17436] should_failslab+0xc2/0x120 [ 563.363800][T17436] ? tomoyo_encode2+0xfb/0x3c0 [ 563.363815][T17436] __kmalloc_noprof+0xf6/0x9c0 [ 563.363840][T17436] ? tomoyo_encode2+0xfb/0x3c0 [ 563.363855][T17436] tomoyo_encode2+0xfb/0x3c0 [ 563.363873][T17436] tomoyo_encode+0x29/0x50 [ 563.363888][T17436] tomoyo_mount_acl+0x14c/0x8b0 [ 563.363902][T17436] ? bpf_ksym_find+0x124/0x1c0 [ 563.363926][T17436] ? is_bpf_text_address+0x94/0x1a0 [ 563.363943][T17436] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 563.363956][T17436] ? __kernel_text_address+0xd/0x30 [ 563.363972][T17436] ? unwind_get_return_address+0x59/0xa0 [ 563.363994][T17436] ? arch_stack_walk+0xa6/0xf0 [ 563.364031][T17436] ? tomoyo_domain+0xb2/0x150 [ 563.364049][T17436] ? tomoyo_profile+0x47/0x60 [ 563.364068][T17436] tomoyo_mount_permission+0x214/0x460 [ 563.364082][T17436] ? tomoyo_mount_permission+0x1f6/0x460 [ 563.364098][T17436] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 563.364125][T17436] security_sb_mount+0xdd/0x270 [ 563.364147][T17436] path_mount+0x158/0x23d0 [ 563.364172][T17436] ? __pfx_path_mount+0x10/0x10 [ 563.364189][T17436] ? kmem_cache_free+0x143/0x720 [ 563.364207][T17436] ? strncpy_from_user+0x19d/0x2d0 [ 563.364221][T17436] ? putname+0xb1/0x110 [ 563.364241][T17436] ? __ia32_sys_mount+0x292/0x310 [ 563.364256][T17436] __ia32_sys_mount+0x292/0x310 [ 563.364273][T17436] ? __pfx___ia32_sys_mount+0x10/0x10 [ 563.364295][T17436] __do_fast_syscall_32+0xe3/0x8c0 [ 563.364324][T17436] do_fast_syscall_32+0x32/0x70 [ 563.364342][T17436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.364363][T17436] RIP: 0023:0xf7fe6579 [ 563.364380][T17436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 563.364395][T17436] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 563.364411][T17436] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000480 [ 563.364422][T17436] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.364432][T17436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.364441][T17436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 563.364451][T17436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.364476][T17436] [ 563.963041][T17437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3195'. [ 564.117398][ T6178] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 564.295991][ T6178] usb 11-1: Using ep0 maxpacket: 8 [ 564.310706][ T6178] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 564.324120][ T6178] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.338672][ T6178] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.352505][ T6178] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 564.365788][ T6178] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.383033][ T6178] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 564.396076][ T6178] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.638238][ T6178] usb 11-1: usb_control_msg returned -32 [ 564.644862][ T6178] usbtmc 11-1:16.0: can't read capabilities [ 565.235419][T17445] wg2 speed is unknown, defaulting to 1000 [ 566.609012][ T1334] usb 11-1: USB disconnect, device number 21 [ 567.074581][T17466] fuse: Bad value for 'group_id' [ 567.080486][T17466] fuse: Bad value for 'group_id' [ 567.157364][ T40] audit: type=1326 audit(2000000719.829:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.247677][ T40] audit: type=1326 audit(2000000719.829:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.297385][ T40] audit: type=1326 audit(2000000719.899:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.391583][ T40] audit: type=1326 audit(2000000719.899:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.596211][ T40] audit: type=1326 audit(2000000719.899:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.642915][ T40] audit: type=1326 audit(2000000719.899:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.827440][ T40] audit: type=1326 audit(2000000719.899:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 567.845752][ T40] audit: type=1326 audit(2000000719.899:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.6.3202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 568.354961][ T1144] bridge_slave_1: left allmulticast mode [ 568.377318][ T1144] bridge_slave_1: left promiscuous mode [ 568.380189][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.390130][ T1144] bridge_slave_0: left allmulticast mode [ 568.392898][ T1144] bridge_slave_0: left promiscuous mode [ 568.410715][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.543356][ T1144] veth0_to_bond: left allmulticast mode [ 568.558517][ T1144] veth0_to_bond: left promiscuous mode [ 568.564407][ T1144] bridge1: port 2(veth0_to_bond) entered disabled state [ 568.583746][ T1144] veth3: left allmulticast mode [ 568.597209][ T1144] veth3: left promiscuous mode [ 568.608400][ T1144] bridge1: port 1(veth3) entered disabled state [ 569.127501][T17467] Bluetooth: hci3: command 0x1003 tx timeout [ 569.142218][ T5942] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 571.639896][ T1144] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.658377][ T1144] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.667208][ T1144] . (unregistering): Released all slaves [ 572.238138][ T1144] bond1 (unregistering): Released all slaves [ 572.747138][ T1144] bond2 (unregistering): Released all slaves [ 573.184796][ T1144] bond3 (unregistering): Released all slaves [ 573.235584][T17484] bridge_slave_0: left allmulticast mode [ 573.254207][T17484] bridge_slave_0: left promiscuous mode [ 573.260852][T17484] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.294525][T17484] bridge_slave_1: left allmulticast mode [ 573.297040][T17484] bridge_slave_1: left promiscuous mode [ 573.303402][T17484] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.365423][T17484] bond0: (slave bond_slave_0): Releasing backup interface [ 573.396769][T17484] bond0: (slave bond_slave_1): Releasing backup interface [ 573.421930][T17484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.448499][T17484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.455857][T17484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.491711][T17490] wg2 speed is unknown, defaulting to 1000 [ 574.046009][T17534] overlayfs: missing 'lowerdir' [ 575.019504][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3227'. [ 575.681038][T17573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3231'. [ 575.911264][ T1144] hsr_slave_0: left promiscuous mode [ 575.985823][ T1144] hsr_slave_1: left promiscuous mode [ 575.989581][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.404229][T17588] wg2 speed is unknown, defaulting to 1000 [ 580.852931][T17608] syz_tun: entered promiscuous mode [ 580.856716][T17608] syz_tun: entered allmulticast mode [ 580.867076][ T1144] IPVS: stop unused estimator thread 0... [ 581.617733][ T830] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 581.798139][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.804076][ T830] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 581.819392][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.180092][ T830] usb 9-1: config 0 descriptor?? [ 582.303741][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 582.321566][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 582.326681][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 582.359756][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 582.365310][T17646] netlink: 'syz.6.3248': attribute type 27 has an invalid length. [ 582.454744][ T830] usbhid 9-1:0.0: can't add hid device: -71 [ 582.457524][ T830] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 582.459916][T17649] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3249'. [ 582.478221][ T830] usb 9-1: USB disconnect, device number 24 [ 582.608845][T17646] syz_tun: left promiscuous mode [ 582.616566][T17646] syz_tun: left allmulticast mode [ 582.804489][T17646] vxcan1: left promiscuous mode [ 582.967904][ T830] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 583.036603][T17646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.047162][T17646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.117788][ T830] usb 9-1: Using ep0 maxpacket: 32 [ 583.128162][ T830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.134149][ T830] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 583.141817][ T830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.154416][ T830] usb 9-1: config 0 descriptor?? [ 583.185705][ T830] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 583.202320][ T830] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 583.494776][T17646] geneve2: left promiscuous mode [ 583.500146][T17646] geneve2: left allmulticast mode [ 583.535029][T17646] bond1: left promiscuous mode [ 583.541051][T17646] bridge2: left promiscuous mode [ 583.605230][T17651] wg2 speed is unknown, defaulting to 1000 [ 583.607660][ T8771] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 583.607700][ T8771] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.624174][T16361] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 583.657381][T16361] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.665177][T16361] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 583.687315][T16361] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 583.690040][ T830] usb 9-1: USB disconnect, device number 25 [ 583.752868][ T830] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 583.762185][T16361] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 583.765586][T16361] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 584.658458][T17675] FAULT_INJECTION: forcing a failure. [ 584.658458][T17675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.669517][T17675] CPU: 2 UID: 0 PID: 17675 Comm: syz.4.3257 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.669549][T17675] Tainted: [L]=SOFTLOCKUP [ 584.669555][T17675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.669566][T17675] Call Trace: [ 584.669574][T17675] [ 584.669582][T17675] dump_stack_lvl+0x100/0x190 [ 584.669615][T17675] should_fail_ex.cold+0x5/0xa [ 584.669636][T17675] _copy_from_user+0x2e/0xd0 [ 584.669678][T17675] kstrtouint_from_user+0xd6/0x1d0 [ 584.669702][T17675] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 584.669732][T17675] ? __lock_acquire+0x4a5/0x2630 [ 584.669754][T17675] ? lock_acquire+0x17c/0x330 [ 584.669777][T17675] proc_fail_nth_write+0x83/0x220 [ 584.669798][T17675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 584.669825][T17675] vfs_write+0x2aa/0x1070 [ 584.669844][T17675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 584.669866][T17675] ? __pfx_vfs_write+0x10/0x10 [ 584.669882][T17675] ? find_held_lock+0x2b/0x80 [ 584.669905][T17675] ? __fget_files+0x215/0x3d0 [ 584.669928][T17675] ? __fget_files+0x21f/0x3d0 [ 584.669952][T17675] ksys_write+0x12a/0x250 [ 584.669969][T17675] ? __pfx_ksys_write+0x10/0x10 [ 584.669994][T17675] do_int80_emulation+0x141/0x6b0 [ 584.670015][T17675] asm_int80_emulation+0x1a/0x20 [ 584.670034][T17675] RIP: 0023:0xf71e572b [ 584.670050][T17675] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 584.670068][T17675] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 584.670085][T17675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 584.670097][T17675] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.670107][T17675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.670116][T17675] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 584.670126][T17675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.670151][T17675] [ 586.275272][T17703] netlink: zone id is out of range [ 586.277501][T17703] netlink: zone id is out of range [ 586.279413][T17703] netlink: zone id is out of range [ 586.281350][T17703] netlink: zone id is out of range [ 586.284961][T17703] netlink: zone id is out of range [ 586.288915][T17703] netlink: zone id is out of range [ 586.298854][T17703] netlink: zone id is out of range [ 587.274171][T17703] netlink: zone id is out of range [ 587.284050][T17703] netlink: zone id is out of range [ 587.286565][T17703] netlink: zone id is out of range [ 589.069989][T17711] FAULT_INJECTION: forcing a failure. [ 589.069989][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 589.078959][T17711] CPU: 3 UID: 0 PID: 17711 Comm: syz.4.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.078987][T17711] Tainted: [L]=SOFTLOCKUP [ 589.078992][T17711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 589.079001][T17711] Call Trace: [ 589.079008][T17711] [ 589.079016][T17711] dump_stack_lvl+0x100/0x190 [ 589.079043][T17711] should_fail_ex.cold+0x5/0xa [ 589.079059][T17711] should_failslab+0xc2/0x120 [ 589.079076][T17711] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 589.079094][T17711] ? __alloc_skb+0x156/0x410 [ 589.079107][T17711] ? __alloc_skb+0x35d/0x410 [ 589.079123][T17711] ? __alloc_skb+0x156/0x410 [ 589.079136][T17711] __alloc_skb+0x156/0x410 [ 589.079148][T17711] ? __alloc_skb+0x35d/0x410 [ 589.079161][T17711] ? __pfx___alloc_skb+0x10/0x10 [ 589.079175][T17711] ? netlink_autobind.isra.0+0x90/0x370 [ 589.079198][T17711] netlink_alloc_large_skb+0x69/0x150 [ 589.079217][T17711] netlink_sendmsg+0x680/0xda0 [ 589.079237][T17711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.079257][T17711] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 589.079281][T17711] ____sys_sendmsg+0xa54/0xc30 [ 589.079306][T17711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.079334][T17711] ___sys_sendmsg+0x190/0x1e0 [ 589.079356][T17711] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.079400][T17711] __sys_sendmsg+0x170/0x220 [ 589.079416][T17711] ? __pfx___sys_sendmsg+0x10/0x10 [ 589.079438][T17711] ? __pfx_ksys_write+0x10/0x10 [ 589.079456][T17711] __do_fast_syscall_32+0xe3/0x8c0 [ 589.079482][T17711] do_fast_syscall_32+0x32/0x70 [ 589.079495][T17711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.079513][T17711] RIP: 0023:0xf7fe6579 [ 589.079525][T17711] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 589.079539][T17711] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 589.079556][T17711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 589.079565][T17711] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 589.079574][T17711] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.079582][T17711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 589.079591][T17711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.079609][T17711] [ 589.406087][T17715] FAULT_INJECTION: forcing a failure. [ 589.406087][T17715] name failslab, interval 1, probability 0, space 0, times 0 [ 589.435163][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.4.3274 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.435194][T17715] Tainted: [L]=SOFTLOCKUP [ 589.435201][T17715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 589.435211][T17715] Call Trace: [ 589.435218][T17715] [ 589.435224][T17715] dump_stack_lvl+0x100/0x190 [ 589.435252][T17715] should_fail_ex.cold+0x5/0xa [ 589.435273][T17715] should_failslab+0xc2/0x120 [ 589.435295][T17715] __kmalloc_cache_noprof+0x80/0x810 [ 589.435321][T17715] ? tcf_exts_init_ex+0x113/0x690 [ 589.435352][T17715] ? tcf_exts_init_ex+0x113/0x690 [ 589.435378][T17715] tcf_exts_init_ex+0x113/0x690 [ 589.435409][T17715] basic_change+0x261/0x1200 [ 589.435436][T17715] ? __pfx_basic_change+0x10/0x10 [ 589.435468][T17715] ? __pfx_basic_change+0x10/0x10 [ 589.435486][T17715] tc_new_tfilter+0x978/0x23b0 [ 589.435527][T17715] ? __pfx_tc_new_tfilter+0x10/0x10 [ 589.435559][T17715] ? __lock_acquire+0x4a5/0x2630 [ 589.435589][T17715] ? find_held_lock+0x2b/0x80 [ 589.435613][T17715] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 589.435635][T17715] ? __pfx_tc_new_tfilter+0x10/0x10 [ 589.435656][T17715] rtnetlink_rcv_msg+0x95e/0xe90 [ 589.435679][T17715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 589.435704][T17715] ? __lock_acquire+0x4a5/0x2630 [ 589.435724][T17715] netlink_rcv_skb+0x159/0x420 [ 589.435749][T17715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 589.435773][T17715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.435806][T17715] ? netlink_deliver_tap+0x1ae/0xcc0 [ 589.435828][T17715] netlink_unicast+0x5aa/0x870 [ 589.435850][T17715] ? __pfx_netlink_unicast+0x10/0x10 [ 589.435875][T17715] ? __pfx___might_resched+0x10/0x10 [ 589.435903][T17715] netlink_sendmsg+0x8b0/0xda0 [ 589.435927][T17715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.435949][T17715] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 589.435977][T17715] ____sys_sendmsg+0xa54/0xc30 [ 589.436004][T17715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.436039][T17715] ___sys_sendmsg+0x190/0x1e0 [ 589.436065][T17715] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.436118][T17715] __sys_sendmsg+0x170/0x220 [ 589.436141][T17715] ? __pfx___sys_sendmsg+0x10/0x10 [ 589.436168][T17715] ? __pfx_ksys_write+0x10/0x10 [ 589.436191][T17715] __do_fast_syscall_32+0xe3/0x8c0 [ 589.436220][T17715] do_fast_syscall_32+0x32/0x70 [ 589.436234][T17715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.436257][T17715] RIP: 0023:0xf7fe6579 [ 589.436271][T17715] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 589.436288][T17715] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 589.436307][T17715] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 589.436317][T17715] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 589.436328][T17715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.436338][T17715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.436348][T17715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.436374][T17715] [ 589.705054][T17720] syzkaller0: entered promiscuous mode [ 589.707705][T17720] syzkaller0: entered allmulticast mode [ 589.793966][T17720] tipc: Enabled bearer , priority 0 [ 589.821965][T17717] tipc: Resetting bearer [ 589.841727][T17717] tipc: Disabling bearer [ 590.098209][T17726] syzkaller0: entered promiscuous mode [ 590.106326][T17726] syzkaller0: entered allmulticast mode [ 590.280955][T17734] netlink: 'syz.5.3278': attribute type 11 has an invalid length. [ 590.660757][T17743] wg2 speed is unknown, defaulting to 1000 [ 591.198613][T17740] Falling back ldisc for ttyS3. [ 593.407929][T17780] wg2 speed is unknown, defaulting to 1000 [ 593.449468][T17784] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 595.186809][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 597.452370][T17467] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.490206][T17467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.501994][T17467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.529564][T17467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.586437][T17467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.686962][T17828] wg2 speed is unknown, defaulting to 1000 [ 598.292558][T17840] slcan: can't register candev [ 598.413411][T17850] 8021q: VLANs not supported on ip6gre0 [ 598.430065][T17828] chnl_net:caif_netlink_parms(): no params data found [ 599.045922][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.049297][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.057942][T17828] bridge_slave_0: entered allmulticast mode [ 599.065285][T17828] bridge_slave_0: entered promiscuous mode [ 599.086844][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.090585][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.094850][T17828] bridge_slave_1: entered allmulticast mode [ 599.106496][T17828] bridge_slave_1: entered promiscuous mode [ 599.189332][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.224786][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.371228][T17828] team0: Port device team_slave_0 added [ 599.389362][T17828] team0: Port device team_slave_1 added [ 599.697373][ T5942] Bluetooth: hci3: command tx timeout [ 599.700976][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.728977][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.763571][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.787937][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.793271][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.823744][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.704081][T17869] tipc: Enabling of bearer rejected, failed to enable media [ 600.779245][T17828] hsr_slave_0: entered promiscuous mode [ 600.785334][T17828] hsr_slave_1: entered promiscuous mode [ 600.795522][T17828] debugfs: 'hsr0' already exists in 'hsr' [ 600.799598][T17828] Cannot create hsr debugfs directory [ 601.458593][T17880] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 601.729588][T17828] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.757687][ T5942] Bluetooth: hci3: command tx timeout [ 601.919501][T17828] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.027005][T17828] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.040561][T17828] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.487753][ T8771] bridge_slave_1: left allmulticast mode [ 602.490709][ T8771] bridge_slave_1: left promiscuous mode [ 602.494119][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.503877][ T8771] bridge_slave_0: left allmulticast mode [ 602.509851][ T8771] bridge_slave_0: left promiscuous mode [ 602.515269][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.530607][T17893] FAT-fs (sr0): bogus number of reserved sectors [ 602.534290][T17893] FAT-fs (sr0): Can't find a valid FAT filesystem [ 603.867292][ T5942] Bluetooth: hci3: command tx timeout [ 605.947537][ T5942] Bluetooth: hci3: command tx timeout [ 608.586932][ T8771] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 608.758763][ T8771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.765327][ T8771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.839585][ T8771] bond0 (unregistering): Released all slaves [ 609.145939][ T8771] bond1 (unregistering): Released all slaves [ 609.174730][T17920] tipc: Enabling of bearer rejected, failed to enable media [ 609.333946][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.352174][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.545477][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.549890][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.569677][ T8771] tipc: Left network mode [ 609.634464][T17931] gretap2: entered promiscuous mode [ 609.662487][ T8771] IPVS: stopping master sync thread 15937 ... [ 609.700090][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.702721][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.366933][T17947] syzkaller0: entered promiscuous mode [ 610.374123][T17947] syzkaller0: entered allmulticast mode [ 610.579340][T17962] overlay: Unknown parameter '/' [ 610.604692][T17962] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 610.756627][T17962] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 610.779226][T17962] overlayfs: failed to look up (tracing) for ino (-66) [ 611.811324][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.100612][ T8771] hsr_slave_0: left promiscuous mode [ 612.104732][ T8771] hsr_slave_1: left promiscuous mode [ 612.138100][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.148281][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.068006][ T1142] ------------[ cut here ]------------ [ 614.116630][ T1142] time_after(jiffies, timeout) [ 614.116646][ T1142] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x42d/0xcdb, CPU#3: kworker/u32:5/1142 [ 614.157921][ T1142] Modules linked in: [ 614.160880][ T1142] CPU: 3 UID: 0 PID: 1142 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.182869][ T1142] Tainted: [L]=SOFTLOCKUP [ 614.185248][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.190530][ T1142] Workqueue: iou_exit io_ring_exit_work [ 614.208443][ T1142] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 614.211656][ T1142] Code: 8e e8 d7 de 3b 01 48 8b 05 10 f6 eb 0c 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 1e 6e d1 00 4d 85 ed 79 12 e8 34 73 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 22 73 d1 00 48 8b 74 24 38 [ 614.222408][ T1142] RSP: 0000:ffffc90006fefab0 EFLAGS: 00010293 [ 614.226472][ T1142] RAX: 0000000000000000 RBX: ffff88806686c778 RCX: ffffffff81351c82 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 614.243284][ T1142] RDX: ffff8880275d2480 RSI: ffffffff81351c8c RDI: ffff8880275d2480 [ 614.255222][ T1142] RBP: ffffc90006fefc40 R08: 0000000000000007 R09: 0000000000000000 [ 614.266549][ T1142] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88806686c000 [ 614.272051][ T1142] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 614.282155][ T1142] FS: 0000000000000000(0000) GS:ffff8880976bf000(0000) knlGS:0000000000000000 [ 614.298563][ T1142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.302779][ T1142] CR2: 00000000802b8000 CR3: 000000006a9c0000 CR4: 0000000000352ef0 [ 614.307559][ T1142] Call Trace: [ 614.310287][ T1142] [ 614.311455][ T1142] ? __pfx_io_ring_exit_work+0x10/0x10 [ 614.316916][ T1142] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 614.339504][ T1142] ? debug_object_deactivate+0x2e4/0x3b0 [ 614.341721][ T1142] ? process_one_work+0x80b/0x1840 [ 614.343674][ T1142] ? rcu_is_watching+0x12/0xc0 [ 614.346751][ T1142] process_one_work+0x9c2/0x1840 [ 614.351322][ T1142] ? __pfx_process_one_work+0x10/0x10 [ 614.355855][ T1142] ? assign_work+0x19c/0x250 [ 614.368070][ T1142] worker_thread+0x5da/0xe40 [ 614.371145][ T1142] ? kthread+0x13a/0x450 [ 614.374006][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 614.377665][ T1142] kthread+0x370/0x450 [ 614.387500][ T1142] ? __pfx_kthread+0x10/0x10 [ 614.390643][ T1142] ret_from_fork+0x754/0xd80 [ 614.393781][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 614.407234][ T1142] ? __switch_to+0x7b9/0x10c0 [ 614.410509][ T1142] ? __pfx_kthread+0x10/0x10 [ 614.413577][ T1142] ret_from_fork_asm+0x1a/0x30 [ 614.416783][ T1142] [ 614.418974][ T1142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.436618][ T1142] CPU: 3 UID: 0 PID: 1142 Comm: kworker/u32:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.440820][ T1142] Tainted: [L]=SOFTLOCKUP [ 614.442491][ T1142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.446390][ T1142] Workqueue: iou_exit io_ring_exit_work [ 614.448834][ T1142] Call Trace: [ 614.450392][ T1142] [ 614.451776][ T1142] dump_stack_lvl+0x100/0x190 [ 614.465331][ T1142] vpanic+0x20d/0x630 [ 614.467116][ T1142] panic+0xd1/0xd1 [ 614.469048][ T1142] ? __pfx_panic+0x10/0x10 [ 614.471855][ T1142] ? check_panic_on_warn+0x1f/0x90 [ 614.474094][ T1142] check_panic_on_warn.cold+0x19/0x34 [ 614.479618][ T1142] ? io_ring_exit_work+0x42d/0xcdb [ 614.482849][ T1142] __warn.cold+0x191/0x2f8 [ 614.484821][ T1142] __report_bug+0x296/0x3d0 [ 614.507766][ T1142] ? io_ring_exit_work+0x42d/0xcdb [ 614.513419][ T1142] ? __pfx___report_bug+0x10/0x10 [ 614.515923][ T1142] ? rcu_is_watching+0x12/0xc0 [ 614.518307][ T1142] ? trace_contention_end+0xd6/0x110 [ 614.521628][ T1142] ? __mutex_lock+0x26a/0x1b90 [ 614.549731][ T1142] ? find_held_lock+0x2b/0x80 [ 614.552316][ T1142] ? io_req_caches_free+0x49/0x60 [ 614.554523][ T1142] ? io_req_caches_free+0x49/0x60 [ 614.557205][ T1142] ? io_ring_exit_work+0x42d/0xcdb [ 614.560249][ T1142] report_bug+0xb2/0x220 [ 614.562984][ T1142] ? io_ring_exit_work+0x42d/0xcdb [ 614.565890][ T1142] handle_bug+0x166/0x2a0 [ 614.568414][ T1142] exc_invalid_op+0x17/0x50 [ 614.571951][ T1142] asm_exc_invalid_op+0x1a/0x20 [ 614.575107][ T1142] RIP: 0010:io_ring_exit_work+0x42d/0xcdb [ 614.588399][ T1142] Code: 8e e8 d7 de 3b 01 48 8b 05 10 f6 eb 0c 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 1e 6e d1 00 4d 85 ed 79 12 e8 34 73 d1 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 22 73 d1 00 48 8b 74 24 38 [ 614.611052][ T1142] RSP: 0000:ffffc90006fefab0 EFLAGS: 00010293 [ 614.621176][ T1142] RAX: 0000000000000000 RBX: ffff88806686c778 RCX: ffffffff81351c82 [ 614.626059][ T1142] RDX: ffff8880275d2480 RSI: ffffffff81351c8c RDI: ffff8880275d2480 [ 614.635140][ T1142] RBP: ffffc90006fefc40 R08: 0000000000000007 R09: 0000000000000000 [ 614.644699][ T1142] R10: fffffffffffffffc R11: 0000000000000000 R12: ffff88806686c000 [ 614.652572][ T1142] R13: fffffffffffffffc R14: dffffc0000000000 R15: 0000000000000000 [ 614.656448][ T1142] ? io_ring_exit_work+0x422/0xcdb [ 614.658958][ T1142] ? io_ring_exit_work+0x42c/0xcdb [ 614.662012][ T1142] ? __pfx_io_ring_exit_work+0x10/0x10 [ 614.664682][ T1142] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 614.668063][ T1142] ? debug_object_deactivate+0x2e4/0x3b0 [ 614.671928][ T1142] ? process_one_work+0x80b/0x1840 [ 614.675288][ T1142] ? rcu_is_watching+0x12/0xc0 [ 614.678415][ T1142] process_one_work+0x9c2/0x1840 [ 614.681980][ T1142] ? __pfx_process_one_work+0x10/0x10 [ 614.685911][ T1142] ? assign_work+0x19c/0x250 [ 614.689031][ T1142] worker_thread+0x5da/0xe40 [ 614.691738][ T1142] ? kthread+0x13a/0x450 [ 614.694242][ T1142] ? __pfx_worker_thread+0x10/0x10 [ 614.697596][ T1142] kthread+0x370/0x450 [ 614.700231][ T1142] ? __pfx_kthread+0x10/0x10 [ 614.703482][ T1142] ret_from_fork+0x754/0xd80 [ 614.706499][ T1142] ? __pfx_ret_from_fork+0x10/0x10 [ 614.709935][ T1142] ? __switch_to+0x7b9/0x10c0 [ 614.712976][ T1142] ? __pfx_kthread+0x10/0x10 [ 614.715957][ T1142] ret_from_fork_asm+0x1a/0x30 [ 614.719066][ T1142] [ 614.722291][ T1142] Kernel Offset: disabled [ 614.725129][ T1142] Rebooting in 86400 seconds..