last executing test programs: 17m47.069914927s ago: executing program 32 (id=1250): r0 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x2, 0x42}, &(0x7f0000000340), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff6a) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 17m29.793072937s ago: executing program 3 (id=1388): r0 = socket(0x23, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x4e, 0x2f]}}}, 0x4e}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x63, 0x35}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x44000811) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0xf, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) 17m29.761868091s ago: executing program 3 (id=1389): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioperm(0x6, 0x9, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r6, r5, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @msi={0xc, 0xfffffffc, 0x6, 0x6}}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m29.482801597s ago: executing program 3 (id=1390): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = io_uring_setup(0x2cf2, &(0x7f0000000200)={0x0, 0x93b0, 0x2, 0x0, 0x315}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) mmap(&(0x7f0000b20000/0x4000)=nil, 0x4000, 0xb635773f07ebbeee, 0x4012030, 0xffffffffffffffff, 0xbab85000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000090a030000000000000000000a0000040900010073797a31000000000800064000000000140000001100010000000000000000000100000a"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x4800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x25) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01002dbd7000fbdbdf251000000005000f004f00000008000100", @ANYRES32=0x0, @ANYBLOB="a53b4572ca41f75adce0ea2e16ff1d2a737d41b38bb4b10992eefd893b065dae2ab99dae72c72737bed6350da2b42af1a5ad3fae4cae6597c953ff7570c4fa0311e236081abaa4724e2564bd7ebac86c8be2fbdbb15572996f70f4e4bb57999e844e8695b6950634da78f9b432f727fbbc7b958053ec80c9bcf394e91983ea99d87c760aa2c38ce2536dc4a0105fac808b8947e0f1210b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x5000) sendfile(r3, r3, 0x0, 0x201f00) 17m28.984597457s ago: executing program 2 (id=1392): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002480)=@newchain={0x43c, 0x64, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffef}, {0xffe0, 0x3}, {0x8, 0x9}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x6, 0xddf433fe, 0x7, 0x7fffffff, 0x40, 0x7, 0x0, 0x7fffffff, 0x40, 0xed, 0x8, 0x8, 0x6, 0x1, 0x6, 0x8, 0x4f000, 0x101, 0x1, 0x7, 0x900, 0x401, 0x1ff, 0xf3, 0xe, 0x5, 0x5, 0x401, 0x1, 0x2, 0x4, 0x3, 0x9f09, 0x0, 0x401, 0x9, 0xe, 0x3, 0xfe, 0x0, 0x1, 0x4, 0x4, 0x0, 0x23f1, 0x1, 0x8000, 0x4, 0xc00, 0x9, 0x8, 0x7fff, 0x6, 0x5, 0xfff1, 0x3, 0x1, 0x81, 0x9, 0x4, 0x0, 0xd, 0x8, 0x5, 0x6, 0x9, 0x80, 0x7, 0x7ff, 0x5, 0xd29c, 0x6, 0x2, 0xffffffff, 0x6, 0x0, 0xcf8, 0x4, 0x6a8c, 0x4, 0x200, 0x8, 0xd, 0x1c00000, 0x800, 0xfff, 0x5, 0x8001, 0x7fff, 0x0, 0xd, 0x7, 0x1, 0x6, 0x9, 0xc8ab, 0x2, 0x3, 0x9, 0xf5, 0x8, 0x9, 0x7ff, 0x2, 0x2, 0x5, 0x1, 0x4338, 0x6a010c8e, 0x0, 0xfff, 0x6, 0x5, 0x2, 0x1000, 0x2, 0x0, 0x7, 0xc, 0x1, 0x10001, 0x1, 0x7, 0x3, 0x40, 0x70000000, 0x1, 0x8000, 0x7, 0x40, 0xc3, 0x4, 0x9, 0x0, 0x8, 0x8, 0x8000, 0xfffffff7, 0x0, 0x9, 0xf42, 0x4, 0xc, 0x4, 0x8, 0x3, 0x0, 0x5ffffe, 0x0, 0xfffffffd, 0x800, 0x200, 0x0, 0x3ff, 0x1, 0xb3, 0x0, 0x8, 0x4, 0x2, 0x4, 0xe, 0x6, 0x48, 0x80000000, 0x8000, 0x9, 0x6, 0x951c, 0x5, 0x0, 0x6, 0x2, 0xf44, 0x7fffffff, 0x400, 0x6, 0x2, 0x9, 0x100, 0x4, 0x8001, 0x7, 0xc, 0x5, 0x1698e070, 0x1, 0x6, 0x400, 0x7fff, 0x0, 0x0, 0x0, 0x773e, 0x2, 0x1000, 0x2, 0x3, 0x411101c7, 0xc, 0x1, 0xc, 0x6143, 0x5, 0x6, 0x1, 0xc, 0x7ffb, 0x101, 0x8b1, 0xb48, 0x5, 0x2, 0xfec9, 0xeaa3, 0xfffffffe, 0xa932, 0xfffffff8, 0x7fffffff, 0x7, 0x3, 0x6, 0x9, 0x3, 0xe633, 0x0, 0xe, 0x1, 0x66c419be, 0x3ff, 0xb120, 0x6, 0x7ff, 0x6, 0xfffffffa, 0x0, 0x72cdab50, 0x6, 0x9, 0x6, 0x0, 0x5, 0x4791, 0x0, 0x7, 0x4, 0x329f, 0xffffffff, 0x1, 0x10000, 0x7fff, 0x9, 0xff, 0x6]}]}]}}]}, 0x43c}}, 0x4000000) recvmmsg(r3, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000600)=""/165, 0xa5}], 0x3}, 0x9cd}], 0x1, 0x2002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r5, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000aa82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200)) 17m28.692762218s ago: executing program 3 (id=1396): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df60000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000007100)={0x78, 0x0, r4, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x13f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 17m28.632772878s ago: executing program 2 (id=1397): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 17m28.489987438s ago: executing program 2 (id=1398): r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x701104, 0x1, 0x37}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x5}, {0x8, 0x10}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10080}, 0x50) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2d, 0x82, 0x88, 0x40, 0x6737, 0x1, 0xada7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xe3, 0x30, 0x8, [{{0x9, 0x4, 0xc2, 0x6, 0x0, 0x49, 0x68, 0x23}}]}}]}}, 0x0) (fail_nth: 4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) 17m28.41128606s ago: executing program 3 (id=1399): ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x56000, 0xc) read(r0, &(0x7f00000000c0)=""/101, 0x65) fcntl$getflags(r0, 0x408) r1 = socket$kcm(0x29, 0x3a2a18101da80fc0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x240000) fchdir(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000001c0)={0x4, 0x1, 0xb, 0x4080, 0xffffffffffffffff}) writev(r4, &(0x7f00000015c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="cdc50771677f50761b571a5a75e720221e0fd66bd12cc14b66699f8d7183d52efd62c6fea1c905a8eeca6855a5b682c9e494680b053b64ad01c33b52b35abd02a916e312a28c1bf8e8fa5d", 0x4b}, {&(0x7f00000012c0)="84f9b1614d5c9d629b178c75d2ab44df87afff7fb452f08ca24e31bba6e17cb0fbaa392be589c8416815a59838436442f37f2580b82c9bf836f6716dc7279f9fdafc9df08b1961692687b33914edb4f1d7b6fd8b03b717349bf81322c28da9cf40ad677ec5c83622baf5b61e986ac2", 0x6f}, {&(0x7f0000001340)="12b237190de78b71a4bbdc007a48f73dd8ea94629bd79cf74b008c7d0bca6db0b9255ea3bc89b1369b75178bcde0d7f7ecf5f3cfe85630506c3f57b9eebbf01c978b3e92c8695b928418e55b2ce3529350df6b3926a0c0f71c9b440cc0963cdff7aa0afc0f153e3d6b38dc1cbfdaddd02101ab3085ba0844dce0816478ded6fb252c13695923876e9d0e81c50b04b89dd0d39084e99908786f", 0x99}, {&(0x7f0000001400)="1f4223108e5821268ed7849b915c1adc125ea2c34b1de8d6144a09d7dc7f210f794645228bceb8ab04784793ff08ff8880d68edab19defd3a3189e93e07f3320f02a25aada2a0adab5bd27a1b6bc28b0adbe48315f9e8aee9d44a637ad7ef14ee060ff57e100c87e28d5e1d300c62f8cc247ef6af23ef158682f3794dfea3aeef1338c04b0ab58c5e49120addd7ca49139dd4c37d3faccad7d3cf1b095b2a3ed0af317c9b60e6fa24c21454ff94960b98d423a0896943802d423d7bc4390809bc04b11714cf67ac8451f1d9bece6d5f3d3bf7e0982d79ae45b4be50fcd762e75c20fbe03768139", 0xe7}, {&(0x7f0000001500)="747b50cee0a3cc3dfe6bc22b5102dceafbf21c488a924ab1508662d845f704390f23d08976efcf4064411f65c4f2534f22ea0430ea8c5fe78da025111b8a9f1af3f7a144d5c7c6fb1029b7f3dabde7682549573b5ab3e33ed837f195af9160be11868d3e2bd68f7524d70b2787a83c50d4b41689676d8f356d47b013f17b7a3f92d7f254606dfedb0b3982c78a90c091eb866b380a94ceb6c714ebab6b8c519f25a802a712da8ecc2f2af53cc5b92f0a19d4e7f1", 0xb4}], 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r3) getpid() r5 = syz_open_dev$vbi(&(0x7f0000001640), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000001680)={0x8, 0x5, "cdad46ea60947c781f90fae3b889ea5be158159fe116699b7864e0bd416f372f", 0xffff, 0x7, 0x2, 0xfffffffb, 0x3ba}) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f0000001700)=@ax25={{0x3, @rose}, [@netrom, @null, @null, @rose, @null, @rose, @rose, @netrom]}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/175, 0xaf}, {&(0x7f0000002840)=""/65, 0x41}, {&(0x7f00000028c0)=""/168, 0xa8}], 0x4}, 0xff}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/93, 0x5d}], 0x1, &(0x7f0000002a80)=""/4096, 0x1000}, 0xcc}], 0x2, 0x40000041, &(0x7f0000003b00)={r6, r7+10000000}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003b40)={@private0, 0x0}, &(0x7f0000003b80)=0x14) ioctl$TCFLSH(r3, 0x540b, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000003bc0)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x1, @loopback, 0xea4}, @in6={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}], 0xb0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000003c80)={'icmp\x00'}, &(0x7f0000003cc0)=0x1e) ioctl$VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f0000003d40)=@userptr={0x9, 0xc, 0x4, 0x40, 0x8, {}, {0x1, 0xc, 0xa2, 0xc, 0x3, 0x2, "1fb97cb9"}, 0x0, 0x2, {&(0x7f0000003d00)}, 0x10000, 0x0, r3}) socket(0x1a, 0x3, 0x80000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e00), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003ec0)={'ip6_vti0\x00', &(0x7f0000003e40)={'syztnl2\x00', 0x0, 0x2f, 0xd, 0x0, 0x3, 0x68, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, 0x7800, 0x1, 0xfffffff7, 0x400000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000041c0)={r3, 0xe0, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003f80)=[0x0], 0x0, 0x69, &(0x7f0000003fc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004000), &(0x7f0000004040), 0x8, 0x75, 0x8, 0x8, &(0x7f0000004080)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000004340)={&(0x7f0000003dc0), 0xc, &(0x7f0000004300)={&(0x7f0000004200)={0xec, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 17m28.032225655s ago: executing program 3 (id=1400): r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x701104, 0x1, 0x37}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x5}, {0x8, 0x10}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10080}, 0x50) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad5688b3b354177d19627d00"/24, 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000040)="0d1a86cc32dd0e67710ab1b0f853b7eafd", 0x11}, {&(0x7f0000000340)="3f0db6af014595d1f65170bfefbed24c216e380371f93f73c39ffcdbba39ecba1dfa5ee16d51d5fb3951c198de34e7a0a8c3dc9bcbd390430c109d800259118dc0d7ea71b09a8316ab633a7bbdf715c088d069ea8aed190ce0ddc5e1880b558e2b12140b578df6727846608967a23b0aa48200c07cba4217fc6674a2e79648d0475ebfd38f52c2dd48", 0x89}], 0x2, &(0x7f0000000680)=[@iv={0xac, 0x117, 0x2, 0x9c, "fa4c2e73c84da94377f6ae17805bb5b6085e6cac47aeb85c7dfb333ac03f7a964879e0f4a20b0504f743598606c62f567c4ad412b25b18c5e3989ba8ee7e88a4ba86237e56fd8d05809127844de8834b58df2cdadff6701218a1f4e96406da0f2cc66252538a577e301e36121b176f462304120159b906fc66e6d1ab2bb38db7083af3093a9fcb806c1d8dc573be401fd687a3cb05040dad7ea3a9e0"}], 0xac, 0x20000810}], 0x1, 0x20010001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x402, 0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/72, 0x48}], 0x2}, 0x42) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {0x9, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) read$msr(r5, &(0x7f0000019880)=""/102392, 0xffffff7d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket$inet(0x2, 0x2, 0x0) 17m24.958753997s ago: executing program 2 (id=1401): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xd}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514"], 0xe8}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x25}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x50}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 17m23.342958054s ago: executing program 2 (id=1402): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20240, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00"/268], 0x10c) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x0, 0x0, 0x0, 0xd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3565, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x100000, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xdbf0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0xc, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0xde11, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x916, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x2, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0xfffffffe, 0xfffffffd, 0x2, 0x8ce, 0x7, 0x1, 0x0, 0x0, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 17m23.342403582s ago: executing program 2 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = openat$audio1(0xffffff9c, &(0x7f0000000380), 0x44000, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x810, r4, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x80, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) 17m16.228909812s ago: executing program 33 (id=1380): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004ca, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0xc, 0x2], 0x10000, 0x200302}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x5a5042, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8004, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 17m12.727225144s ago: executing program 34 (id=1395): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xe743, 0x220401) mmap$snddsp_status(&(0x7f000019e000/0x4000)=nil, 0x1000, 0x2000004, 0x8010, r1, 0x82000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000300)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) r6 = socket(0x2a, 0xa, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000006380)={0x2020}, 0x2020) 17m12.716355552s ago: executing program 35 (id=1400): r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x701104, 0x1, 0x37}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x5}, {0x8, 0x10}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10080}, 0x50) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad5688b3b354177d19627d00"/24, 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000040)="0d1a86cc32dd0e67710ab1b0f853b7eafd", 0x11}, {&(0x7f0000000340)="3f0db6af014595d1f65170bfefbed24c216e380371f93f73c39ffcdbba39ecba1dfa5ee16d51d5fb3951c198de34e7a0a8c3dc9bcbd390430c109d800259118dc0d7ea71b09a8316ab633a7bbdf715c088d069ea8aed190ce0ddc5e1880b558e2b12140b578df6727846608967a23b0aa48200c07cba4217fc6674a2e79648d0475ebfd38f52c2dd48", 0x89}], 0x2, &(0x7f0000000680)=[@iv={0xac, 0x117, 0x2, 0x9c, "fa4c2e73c84da94377f6ae17805bb5b6085e6cac47aeb85c7dfb333ac03f7a964879e0f4a20b0504f743598606c62f567c4ad412b25b18c5e3989ba8ee7e88a4ba86237e56fd8d05809127844de8834b58df2cdadff6701218a1f4e96406da0f2cc66252538a577e301e36121b176f462304120159b906fc66e6d1ab2bb38db7083af3093a9fcb806c1d8dc573be401fd687a3cb05040dad7ea3a9e0"}], 0xac, 0x20000810}], 0x1, 0x20010001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x402, 0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/72, 0x48}], 0x2}, 0x42) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {0x9, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) read$msr(r5, &(0x7f0000019880)=""/102392, 0xffffff7d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) socket$inet(0x2, 0x2, 0x0) 17m8.221094487s ago: executing program 36 (id=1403): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = openat$audio1(0xffffff9c, &(0x7f0000000380), 0x44000, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x810, r4, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x80, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x8001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x3, 0x1, 0x4000, 0xfffffffffffffffe, 0x0, 0x0, 0x2]}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) 15m45.170823661s ago: executing program 5 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d500140001"], 0xec}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0xa1, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77"}}}}, 0xc9) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8100106}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x64, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xebe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m45.081297204s ago: executing program 5 (id=1841): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20240, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00"/250], 0x10c) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x104) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {0x0, 0x0, 0x0, 0xd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3565, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x100000, 0x8, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xdbf0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0xc, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0xde11, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x916, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x2, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0xfffffffe, 0xfffffffd, 0x2, 0x8ce, 0x7, 0x1, 0x0, 0x0, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb0}}, 0x0) 15m44.251317839s ago: executing program 5 (id=1846): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="3bd913e92b63de31b5133be54e4f811134e1af28248b7e46827b3eaf4235fdfc1426a6ca008290d155c82399006a6c1a35000044508184a93f2840a9dbf7d0fb375de37ec6fd03550b9ec2dfcf"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) syz_emit_ethernet(0xff, &(0x7f0000001fc0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}], @ipv4=@igmp={{0x8, 0x4, 0x3, 0x21, 0xed, 0x66, 0x0, 0xbe, 0x2, 0x0, @remote, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x7, 0xe6, [@remote]}]}}, {0x15, 0x80, 0x0, @private=0xa010100, "85c6219b95c53a6d944d6199635af4e008570261e81574f7f399c6168437a5f8252056bf1bd58bf31184e5feeb5c7b5c3804627a1a53486b7e385d6ebfcc7a15191bbec5d1b69ff9a5014e33ecdd09e492f04e6b708b243933d6a3974311f5664ca88dabc4208ac0df8479ec363c1cd167043e716c0a1e7ef09615e9a84eb8206b7e5e2fb2d1fdaa6f5a506e0c1e00b0e88b658148880a3e1f1138150720b36336d2f810b18d6d2757190094324d7648a162f7581065b3a7a40a408f3090818fc930341693"}}}}}}, 0x0) 15m44.15153443s ago: executing program 5 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x30}, @hci_rp_read_local_commands={{}, {0xa5, "962b5366af008ccfefd61674e250baae1b2096829d74b19d046b6cbe66a03375204cff89923b48c1d80b4c469e2de3f6ddb7e6ab4f2e9db0bd0b95594f0f5bd1"}}}}, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0xfffffff7, 0x0, '\x00', {0x1, 0x801, 0x8000000000000000, 0x804, r3, 0x0, 0x1000, '\x00', 0x6, 0x81, 0xffffffff, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x2f, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x4}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x6000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) rename(&(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0\x00') mq_notify(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x7f}, {0x9, [{@none, 0xf7, 0xba, 0x1, "5d06b3", 0x7}, {@any, 0x3, 0x81, 0x4, "b76687", 0x8}, {@none, 0xf6, 0x85, 0x5, "133c56", 0x2}, {@any, 0x6, 0x5, 0x8b, "fcfbbc", 0x4}, {@any, 0x2, 0x60, 0xe, "c04328", 0xbf}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x1, 0x7f, "1419f3", 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xd6, 0x5, 0x4, '9l3', 0x3}, {@none, 0xb, 0x5, 0x0, "84980b", 0x7}, {@any, 0xe7, 0x10, 0x8c, "fc603e", 0x1}]}}}, 0x82) 15m44.034405562s ago: executing program 5 (id=1853): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc532a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e310000000000000000000000bfdb60c594546c18e604a6739d4acce8854f579770a4d89d81c4645cdde5b7bedcb85a7a629182bb31cbe7ac1adbd92f3a1eadf5a9702a96f7c41212f64802f41ce190e624cd68c53f7292307f0d8e3d98f880fdfaa8df92d67030c7ff61d0262ae765c2386918945330eec547780e69481f55086dc3ef703b43ad9a7e60e74e3c138558f7b93d2f7569c0906ce495ce256879d8ccaaf37acc62e4f94c2dae9b"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r6, 0x0}]) recvmmsg(r5, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') syz_fuse_handle_req(r8, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m43.571843098s ago: executing program 5 (id=1856): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8d02008239213c4d23edfcbe6d55b57cb15e63c15cee7ae7c53d570d81c3d624c716334e82788d"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) socket$vsock_stream(0x28, 0x1, 0x0) bind$llc(r0, &(0x7f00000004c0), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r2, r3+10000000}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0xff0f0000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000140)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x665, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x4, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0xfffffffd, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x400, 0x8, 0x8}, {0xfffffff6, 0xfffffffd, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd0, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x7039a3d3, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x6}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x0, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x1, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x6}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0xa, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x5, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0x8, 0x2d4, 0x2, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x3}, {0x6, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x9, 0xda, 0x5, 0x80003, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa7, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0xfda12483f4dc2e51}, {0x3}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c4500004300ffffe5004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r9 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="21bf2be6b6afab1d18000000a5f0000b00000000000000006301500000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 15m43.535982564s ago: executing program 37 (id=1856): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8d02008239213c4d23edfcbe6d55b57cb15e63c15cee7ae7c53d570d81c3d624c716334e82788d"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000) socket$vsock_stream(0x28, 0x1, 0x0) bind$llc(r0, &(0x7f00000004c0), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r2, r3+10000000}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0xff0f0000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000140)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) epoll_create1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x665, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x4, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0xfffffffd, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x400, 0x8, 0x8}, {0xfffffff6, 0xfffffffd, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd0, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x7039a3d3, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x6}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x0, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x1, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x6}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0xa, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x5, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0x8, 0x2d4, 0x2, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x3}, {0x6, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x9, 0xda, 0x5, 0x80003, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa7, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0xfda12483f4dc2e51}, {0x3}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c4500004300ffffe5004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r9 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="21bf2be6b6afab1d18000000a5f0000b00000000000000006301500000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) bind$unix(r9, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 9m52.889666197s ago: executing program 6 (id=3799): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000f4fafb1a888802607826f226b9338389da8e5ca40bcd4a1197123f86eafa0a78ce4187a2dd2fb22e72466eb3cfda3d632829ecc12eb5c8f9fa402796288af7e06760edaeabcb699cccc610be34b12f1d7ab4faddd6f58a874b6f31fe56f20bbb68f6743fdb7ebf103381b99cadc017be5fb49b817fbc19b144a3a5a7fef3d05d636a37f022a958a1a1f4bef11d40f3ec1db2b2636754192575fbc3059bb9c6894ef84248956b3fa11b107862b179106cdbd9db70200cc8d1cf4a4be7a99e29394d227350557020000000000000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x0, 0x3, 0x3}, 0x36) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000140)) 9m52.759617155s ago: executing program 6 (id=3800): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x2c, 0x32, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x40000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030303030303030301d09c98414daa1880a000008"], 0x2a) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_usbip_server_init(0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) 9m50.284087349s ago: executing program 6 (id=3809): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000380), 0x203600a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x8a, 0x0, 0x10000058, 0x8001, 0x0, 0x109, 0x0, 0xfffffe0000000003, 0xfa11, 0x4}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00ed0225bd70dad8ffffff06000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="000002000180c2bb0000000000000000"]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9m49.079345822s ago: executing program 6 (id=3815): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x5204) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030302c0030ecc0b1cf731fbd4a01e4d2f1385df0cb6d7365f891e572935d190e25843fa0bbf20f0d183a0477b32c4786ef8621300ba6d1df89f668b7258271079d98adc9e34249e88809abe03edff80327594599297a30151f9d2a2b839905fbe9095f"]) ioctl$BTRFS_IOC_SEND(r0, 0x40449426, &(0x7f0000000180)={{r0}, 0x8, &(0x7f0000000140)=[0x100000001, 0x100000000, 0x5, 0x0, 0x7, 0x9, 0x4, 0x3], 0x0, 0xa}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x2, r4, 0x5, 0xc, 0x8, 0x80000000, 0x8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x26020480) madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x88281, 0x0) setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) 9m48.998294695s ago: executing program 6 (id=3817): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x90000003, 0x80) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000700)={0xfffffff, 0x5, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x9c0905, 0x1, '\x00', @p_u16=0x0}}) 9m48.569786821s ago: executing program 6 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_loaded', 0x404000, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 9m48.410689967s ago: executing program 38 (id=3819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_loaded', 0x404000, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5m20.362510261s ago: executing program 0 (id=4943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x5c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r8 = msgget$private(0x0, 0x4a0) msgsnd(r8, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0xf}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m19.286394418s ago: executing program 0 (id=4946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x100a, 0x7fffffffff}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0x1a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m18.985645888s ago: executing program 0 (id=4949): setresgid(0xee00, 0xee01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc8, "b1bcf91d5daf6ef5"}}}, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000000)='stat\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x9) 5m18.017073833s ago: executing program 0 (id=4951): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/fs/cgroup', 0x8000, 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000300)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r6, 0x0, 0x0, 0xf5) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) 5m16.236584513s ago: executing program 0 (id=4957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) getdents(r2, &(0x7f0000000200)=""/32, 0x6d) getdents64(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0xc048aec8, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xd8, 0x0, &(0x7f0000000680)=[@exit_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x5, 0x0, 0x27}, @fda={0x66646185, 0x2, 0x0, 0xd}, @flat=@weak_handle={0x77682a85, 0x1100, 0x3}}, &(0x7f0000000580)={0x0, 0x1c, 0x38}}}, @request_death={0x400c630e, 0xfbfffffd}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x102, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0xffffffffffffffff, 0x2, 0x40}}, &(0x7f0000000640)={0x0, 0x18, 0x34}}}, @acquire_done={0x40106309, 0x2}, @exit_looper, @exit_looper, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x80000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 5m16.097193667s ago: executing program 9 (id=4959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x5c, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) msgsnd(0x0, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0xf}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m16.071088461s ago: executing program 0 (id=4960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000000000000000000370000000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000180c2000011aaaaaaaaaa12bb5674d51d030a6c5bdb582183405a17d760efe220df3cae1fb84e46741a8aae9a23a69ee29b8420014657eb10d5156634dcfc08339768c2cc18917f20f5ad633b23dc4abdf303a902fe8a2022e02c14c31534c2a07af8a45abe38eeb3156af5def43c0f2bf1000000000000"]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x8000, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000f0ffffffffffffff000000181100009d64c4a0a38ada8343fc80456fb30388fb76e405fae47f9472f6ca2e945912937b58979e30fbc5949cb3f4f346b1bcfaaf13b8fab2f6d105ff140440666bf3f185af2505c52a504b0477", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050d2bbd7000fedbdf251500200028002b8008000100030000000c00050008b15a1d25f37ceff72f14450000000000000045000200000000000500020002000000050029000000000008002a0000000000080004000000dc6e41be2ca6c817844e"], 0x64}, 0x1, 0x0, 0x0, 0x488c1}, 0x811) 5m14.467124202s ago: executing program 9 (id=4964): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) syz_emit_ethernet(0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5m13.171481077s ago: executing program 9 (id=4971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a0000000030000000b000000000000010000000041007701060000000000000e04000002020000001000000000000007000000000300000000000007000000000a000400030000060400000006000000f80c00000c000000dd0300000f00000007000000000000000400000d00000000010000000208000000000000030000000b0000000300000005000000030000001000000001000004ff00000010000000000000000800000000c200"], &(0x7f00000008c0)=""/4096, 0xbb, 0x1000, 0x0, 0x7f, 0x10000}, 0x28) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0xffffffff, 0xfffffff8}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000540)) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000580)={0xa, @raw_data="1fb318db0207525bff0758069d50b9263ce357786831c06b7c9880411fc0b902f9d519ceabad0f0b368d582f998bdacd51d00dadd1a75417c3d7af9f4730ff548bf8844ba68358a0875adfc93aba2c49097606a2e891b583ea3c22f8fd9fbd78c8532c3e32ec06521f06c8ee8f03b85b3d7d9d1134a3a2a21d78e2ea185ebef8c70b40d2d30674fffb8d002c4ad3a9b6d6eadbbfb35e642b3a64345c996e84678da249752c604939b7b2eb7de0d846e4570003c0e0d86892908728340e0c61363f7a626c1e49e958"}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 5m11.697417422s ago: executing program 9 (id=4976): setresgid(0xee00, 0xee01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000040), 0x4) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc8, "b1bcf91d5daf6ef5"}}}, 0xe) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r6 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000000)='stat\x00') pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x9) 5m11.049405624s ago: executing program 9 (id=4980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) getdents(r2, &(0x7f0000000200)=""/32, 0x6d) getdents64(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0xc048aec8, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xd8, 0x0, &(0x7f0000000680)=[@exit_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x5, 0x0, 0x27}, @fda={0x66646185, 0x2, 0x0, 0xd}, @flat=@weak_handle={0x77682a85, 0x1100, 0x3}}, &(0x7f0000000580)={0x0, 0x1c, 0x38}}}, @request_death={0x400c630e, 0xfbfffffd}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x102, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0xffffffffffffffff, 0x2, 0x40}}, &(0x7f0000000640)={0x0, 0x18, 0x34}}}, @acquire_done={0x40106309, 0x2}, @exit_looper, @exit_looper, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x80000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 5m10.946877796s ago: executing program 9 (id=4981): unshare(0x400) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) (async) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xae) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_dma_map_rw_err\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 5m0.752260258s ago: executing program 39 (id=4960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000000000000000000370000000000"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000180c2000011aaaaaaaaaa12bb5674d51d030a6c5bdb582183405a17d760efe220df3cae1fb84e46741a8aae9a23a69ee29b8420014657eb10d5156634dcfc08339768c2cc18917f20f5ad633b23dc4abdf303a902fe8a2022e02c14c31534c2a07af8a45abe38eeb3156af5def43c0f2bf1000000000000"]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x8000, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000f0ffffffffffffff000000181100009d64c4a0a38ada8343fc80456fb30388fb76e405fae47f9472f6ca2e945912937b58979e30fbc5949cb3f4f346b1bcfaaf13b8fab2f6d105ff140440666bf3f185af2505c52a504b0477", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050d2bbd7000fedbdf251500200028002b8008000100030000000c00050008b15a1d25f37ceff72f14450000000000000045000200000000000500020002000000050029000000000008002a0000000000080004000000dc6e41be2ca6c817844e"], 0x64}, 0x1, 0x0, 0x0, 0x488c1}, 0x811) 4m55.635554679s ago: executing program 40 (id=4981): unshare(0x400) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) (async) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xae) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_dma_map_rw_err\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 14.833900676s ago: executing program 1 (id=6543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') exit(0xffff) write$cgroup_int(r1, &(0x7f0000000080)=0x1c0, 0x12) setsockopt$inet_buf(r1, 0x0, 0x25, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x4bfb, &(0x7f0000000380)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000001f00001c0200b1d78bad1549d6ade55bc700c50000a2bf000001000000", @ANYRES16=r0, @ANYBLOB="00000045d39236b0010000f913fe42e8d7453bd2b800c6ece57ae41c1218b40b7eaab02e25ac8174c90c23fd59e5da6f50aadfb8f7be94b45fe77bbc76704966eea9836200000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 13.802923874s ago: executing program 1 (id=6548): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x800000}, 0x18) socket(0x1d, 0x2, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x82c82}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x88c0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r6, &(0x7f0000000000)="2e000000010002", 0x7) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05000000000000000000220000000a0001007770616e310000002added7e3c7b46fc98e1952a709be4a8871f781eae5fa0a5e441"], 0x20}}, 0x2000c094) rseq(&(0x7f00000000c0), 0xffffffffffffff6d, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12.854042109s ago: executing program 1 (id=6549): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e000000810000000180", @ANYRES32, @ANYBLOB='e\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040b0000040000000000000000c74c3479d3dd34660bd6b997686a3f170000000055cb0f000200000ba99554381d1ff353a3da1ef9f617159f00301be51fba0168ee09eeb731f3575f996f8f1979bddf083e0f14af826c6acfcfdfdcafcc2758d9d69233ec6bdbba10cbd1d05a9e5250d5c248cc81e46c5cc7"], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xe0, 0xfb, 0x9, 0x0, @remote, @private2, 0x40, 0x40, 0xf, 0x3b8e}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000060000000f0000000400000000000000", @ANYRES32=r1, @ANYBLOB="f9ffffff00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000040000000500e2ff0200"/28], 0x50) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 12.820202774s ago: executing program 1 (id=6550): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0xf0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) 12.712731383s ago: executing program 1 (id=6551): semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x89) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24008400}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000440)={0x0, 0x57, &(0x7f0000000400)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xfc, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe1800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf98}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc42b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6af}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400}, 0x20040000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 12.702972032s ago: executing program 1 (id=6552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x80fe, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) 4.710633752s ago: executing program 8 (id=6590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x5a, 0x3ff, 0xffff1a37, 0x3, 0x5, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16=r9, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) read$msr(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.167665735s ago: executing program 7 (id=6591): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000ffdbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="1c002d80050004000000feff040001"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20044010) (fail_nth: 7) 3.968693273s ago: executing program 7 (id=6592): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0000008100000001800000010000000423", @ANYRES32, @ANYBLOB='e\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040b0000040000000000000000c74c3479d3dd34660bd6b997686a3f170000000055cb0f000200000ba99554381d1ff353a3da1ef9f617159f00301be51fba0168ee09eeb731f3575f996f8f1979bddf083e0f14af826c6acfcfdfdcafcc2758d9d69233ec6bdbba10cbd1d05a9e5250d5c248cc81e46c5cc7"], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xe0, 0xfb, 0x9, 0x0, @remote, @private2, 0x40, 0x40, 0xf, 0x3b8e}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000060000000f0000000400000000000000", @ANYRES32=r1, @ANYBLOB="f9ffffff00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000040000000500e2ff0200"/28], 0x50) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 3.959655164s ago: executing program 7 (id=6593): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0xfc, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x48000) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r9 = openat$ptmx(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSIG(r9, 0x40045436, 0x3d) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r11) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}}, 0x40) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000180)={0x1, 0x0, @ioapic={0xeeee0000, 0x8, 0x8, 0x29, 0x0, [{0x3, 0x5, 0xd, '\x00', 0x6}, {0x6, 0x1, 0x5, '\x00', 0xff}, {0x7f, 0x81, 0xf9, '\x00', 0x4}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x0, 0x7f, 0xf2, '\x00', 0xb}, {0xa, 0x0, 0x8d, '\x00', 0x2}, {0x26, 0x5, 0x6, '\x00', 0x8}, {0xd5, 0x3, 0xc, '\x00', 0x6}, {0x2, 0x7, 0x9, '\x00', 0xf8}, {0xb2, 0x9, 0x4, '\x00', 0x9}, {0x4, 0x3, 0x2, '\x00', 0x81}, {0x9, 0x2, 0x5, '\x00', 0x1}, {0x4, 0x7, 0x9, '\x00', 0x1}, {0x0, 0x7, 0x10, '\x00', 0x4c}, {0x7, 0x1, 0xa2, '\x00', 0x95}, {0x3, 0x1a, 0x1, '\x00', 0xee}, {0x6, 0x1, 0x4, '\x00', 0x1}, {0xa, 0x82, 0x7, '\x00', 0x9}, {0x7f, 0x5, 0x4, '\x00', 0x8}, {0x7, 0xfe, 0x22, '\x00', 0x10}, {0x6, 0x1, 0xb2, '\x00', 0x8}, {0x96, 0x2, 0x80, '\x00', 0x6}, {0x3, 0x1, 0x1, '\x00', 0x2}, {0x2, 0xa, 0x4, '\x00', 0xf}]}}) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000006c0)={&(0x7f0000000640)=[{0x8, 0x4000, 0x0, 0x0}, {0x81, 0x800, 0x0, 0x0}], 0x20}) 3.693087238s ago: executing program 8 (id=6594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 3.634370473s ago: executing program 8 (id=6595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x5a, 0x3ff, 0xffff1a37, 0x3, 0x5, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYRES16=r9, @ANYBLOB="887f318e60836ab46228ae6901ddbf4c74dc42e3f6c119b67036b2f6af787d03a6812a8a134fba001a30cae6c50d7a195bbfba06aa"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) read$msr(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.609852061s ago: executing program 8 (id=6596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x60b17f360213d71e, 0x3, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x10}, {0x7}, {0x3}}}, 0x24}}, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00L \x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES64=0x0], 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14, 0x80000) getsockname$packet(r5, &(0x7f0000000580), &(0x7f00000005c0)=0x14) socket(0x848000000015, 0x805, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x240001a0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2.304335525s ago: executing program 4 (id=6597): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1/../file0\x00'}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[], 0x104}}, 0x451) bind(r2, &(0x7f00000002c0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000400)={0x0, 0x0, 0x10100, 0x2, 0x308}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x4, 0x3, 0x8, 0x2, 0x6, 0x1, 0x6, 0x7fffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, 0x0, 0x118) write$UHID_CREATE2(r8, 0x0, 0x118) 1.683281356s ago: executing program 4 (id=6598): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x410400, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x10000, 0x2, 0x40000, r2, 0x3, '\x00', r3, r4, 0x2, 0x1, 0x3, 0x5}, 0x50) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = socket$caif_stream(0x25, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000001c0)={0x8000001b}) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) 1.18892182s ago: executing program 4 (id=6599): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc, 0x1, {0x0, 0x446}}, 0x0, 0x1200) 1.135696323s ago: executing program 8 (id=6600): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x5, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c0800"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) 1.077454566s ago: executing program 4 (id=6601): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x4800, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x5fb4, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0xfffffffffffffe7a) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) write$P9_RGETLOCK(r3, &(0x7f00000094c0)=ANY=[], 0x200002e6) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x7ffd, 0xc95a, 0xf, 0x0, 0x80, 0x5, 0x3, 0x8, 0x20000006, 0x2, 0x8, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x46, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000003, 0x24, 0x1d, 0x2, 0x0, 0xffffffff, 0xe661, 0x7, 0x7, 0x3, 0x8, 0x4c74, 0xe91, 0x30000000, 0x3, 0xe, 0x8, 0x8000806f, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x4, 0x3, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8, 0x867, 0x4, 0x1, 0x40], [0x10000007, 0xd, 0x80000133, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf6, 0xe, 0x8, 0x6c7, 0x9, 0xd, 0x3, 0x0, 0x1, 0x5, 0x2f, 0xe, 0x40000310, 0x78, 0x141, 0xfffffff9, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x10, 0x7, 0x2, 0x7, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfffc, 0xffffffff, 0x4, 0x9, 0x3, 0x7fffffff, 0x1, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x47, 0x103], [0x7, 0xa, 0x4, 0x5, 0x1, 0x100, 0x8d2, 0x809, 0x8, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x7, 0xb, 0x5, 0x2, 0x10000002, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xad, 0x7, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x8], [0x9, 0xbb33, 0x5, 0x2000000b, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0xfffffffe, 0x5, 0x1, 0x2, 0x14c, 0xe, 0x1, 0x96, 0xffffffff, 0x800000, 0x0, 0x4, 0xc8, 0x2, 0xfffff000, 0x10080, 0x3, 0x7f, 0xfc, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xe, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@lba=0x8, 0x3, 0x0, 0x0}) 293.305676ms ago: executing program 7 (id=6602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82180, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000200)=""/154) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x2108, r2}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r4, 0x0, 0x5, 0x0, &(0x7f00000000c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2a) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r9 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1/file2\x00', 0x42, 0x22) read$FUSE(r9, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x4042, 0x0) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='bdev\x00', 0x0, &(0x7f0000000380)='acl') close_range(r5, r7, 0x0) close(0xffffffffffffffff) 98.292663ms ago: executing program 7 (id=6603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 83.52977ms ago: executing program 7 (id=6604): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = userfaultfd(0x80801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000009000000020800000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, r5, 0x2}) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f0000000100)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) close_range(r4, 0xffffffffffffffff, 0x0) 67.459216ms ago: executing program 4 (id=6605): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_delrule={0x34, 0x21, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x2, 0x6, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_FLOW={0x8, 0xb, 0x1ff}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x34}}, 0x0) (async) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) close(r0) 362.696µs ago: executing program 8 (id=6606): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101303, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, r0, 'id0\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfdffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)="8d", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f00000000c0)={r6}) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'c6xdigio\x00', [0x8001, 0x5, 0x1, 0x0, 0x40000000, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0xffffffff, 0x28, 0x0, 0x6, 0x22, 0x101, 0x49, 0x43, 0x40000003, 0xf, 0xa, 0xf27, 0x7, 0x2, 0x8, 0x3, 0x6, 0x8, 0x10000, 0xfffffff4]}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f0000000240)=""/31, 0x9149}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xa}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x67, 0x61, 0x5f, 0x30, 0x0]}}, &(0x7f0000000300)=""/54, 0x46, 0x36, 0x1, 0x3}, 0x28) pwritev(r3, 0x0, 0x0, 0x9, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 0s ago: executing program 4 (id=6607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = io_uring_setup(0x549d, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x20a000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', r7, 0x700, 0x40, 0x8000, 0xfffffffd, {{0x38, 0x4, 0x1, 0x2f, 0xe0, 0x68, 0x0, 0x7b, 0x29, 0x0, @remote, @broadcast, {[@end, @timestamp={0x44, 0x1c, 0xa8, 0x0, 0x5, [0x7, 0xb, 0x40, 0x0, 0x9d, 0x554303dd]}, @timestamp_addr={0x44, 0xc, 0x35, 0x1, 0x1, [{@empty, 0xffff22d8}]}, @cipso={0x86, 0x53, 0x1, [{0x5, 0xa, "a7877998ed5e6f32"}, {0x7, 0x6, "7c593ff0"}, {0x0, 0x6, "6324cc32"}, {0x5, 0x5, "a70204"}, {0x2, 0x7, "f1c18ea802"}, {0x6, 0x7, "a79c93ec93"}, {0x2, 0x3, "14"}, {0x6, 0xc, "f478c3d152c2ac0e3fa6"}, {0x7, 0x10, "e9483e8b8d315cba98958ecebe8f"}, {0x7, 0x5, "a1fae8"}]}, @timestamp_addr={0x44, 0x1c, 0xe3, 0x1, 0x5, [{@rand_addr=0x64010100}, {@loopback, 0x10000}, {@rand_addr=0x64010101, 0x3}]}, @cipso={0x86, 0x21, 0x0, [{0xc1d8a38c3c90ad8e, 0xc, "aaf06dfe8b415f59be9b"}, {0x6, 0xf, "cb1e4ab02f8b62b1fdce8e10a5"}]}, @generic={0xc2, 0xa, "7de6c221ebac58af"}, @timestamp={0x44, 0x8, 0xbd, 0x0, 0xb, [0xf]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x80000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x2}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x9}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x200}]}}]}, 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mknodat(r6, &(0x7f00000002c0)='./file0\x00', 0x200, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x5, 0xb}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x20) kernel console output (not intermixed with test programs): 9][T29482] ? __pfx_ieee802154_llsec_getparams+0x10/0x10 [ 1242.357235][T29482] ? rcu_is_watching+0x12/0xc0 [ 1242.357258][T29482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1242.357275][T29482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1242.357296][T29482] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1242.357313][T29482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1242.357330][T29482] ? genl_get_cmd+0x194/0x580 [ 1242.357349][T29482] ? bpf_lsm_capable+0x9/0x10 [ 1242.357365][T29482] ? security_capable+0x7e/0x260 [ 1242.357382][T29482] genl_rcv_msg+0x55c/0x800 [ 1242.357400][T29482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.357416][T29482] ? __pfx_ieee802154_llsec_getparams+0x10/0x10 [ 1242.357435][T29482] ? __lock_acquire+0x433/0x22f0 [ 1242.357449][T29482] netlink_rcv_skb+0x158/0x420 [ 1242.357463][T29482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.357480][T29482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.357501][T29482] ? netlink_deliver_tap+0x1ae/0xd30 [ 1242.357516][T29482] genl_rcv+0x28/0x40 [ 1242.357531][T29482] netlink_unicast+0x5aa/0x870 [ 1242.357547][T29482] ? __pfx_netlink_unicast+0x10/0x10 [ 1242.357561][T29482] ? __pfx___might_resched+0x10/0x10 [ 1242.357583][T29482] netlink_sendmsg+0x8c8/0xdd0 [ 1242.357599][T29482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.357616][T29482] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1242.357639][T29482] ____sys_sendmsg+0xa5d/0xc30 [ 1242.357663][T29482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.357683][T29482] ? get_compat_msghdr+0x11a/0x170 [ 1242.357713][T29482] ___sys_sendmsg+0x134/0x1d0 [ 1242.357734][T29482] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.357764][T29482] ? find_held_lock+0x2b/0x80 [ 1242.357803][T29482] __sys_sendmsg+0x16d/0x220 [ 1242.357821][T29482] ? __pfx___sys_sendmsg+0x10/0x10 [ 1242.357855][T29482] __do_fast_syscall_32+0xe8/0x680 [ 1242.357875][T29482] do_fast_syscall_32+0x32/0x80 [ 1242.357891][T29482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.357910][T29482] RIP: 0023:0xf7ff1579 [ 1242.357924][T29482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1242.357939][T29482] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1242.357955][T29482] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1242.357965][T29482] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.357975][T29482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.357984][T29482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1242.357994][T29482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.358017][T29482] [ 1242.475421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1242.635575][T29494] netlink: 'syz.7.6050': attribute type 4 has an invalid length. [ 1242.642671][T29494] netlink: 'syz.7.6050': attribute type 1 has an invalid length. [ 1242.646135][T29494] netlink: 15506 bytes leftover after parsing attributes in process `syz.7.6050'. [ 1242.959816][T29514] FAULT_INJECTION: forcing a failure. [ 1242.959816][T29514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.964196][T29514] CPU: 1 UID: 0 PID: 29514 Comm: syz.8.6057 Not tainted syzkaller #0 PREEMPT(full) [ 1242.964211][T29514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1242.964218][T29514] Call Trace: [ 1242.964222][T29514] [ 1242.964227][T29514] dump_stack_lvl+0x16c/0x1f0 [ 1242.964253][T29514] should_fail_ex+0x512/0x640 [ 1242.964273][T29514] _copy_to_user+0x32/0xd0 [ 1242.964290][T29514] simple_read_from_buffer+0xcb/0x170 [ 1242.964308][T29514] proc_fail_nth_read+0x197/0x240 [ 1242.964322][T29514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1242.964336][T29514] ? rw_verify_area+0xcf/0x6c0 [ 1242.964351][T29514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1242.964363][T29514] vfs_read+0x1e4/0xcf0 [ 1242.964373][T29514] ? __pfx___mutex_lock+0x10/0x10 [ 1242.964385][T29514] ? __pfx_vfs_read+0x10/0x10 [ 1242.964393][T29514] ? find_held_lock+0x2b/0x80 [ 1242.964412][T29514] ? __fget_files+0x20e/0x3c0 [ 1242.964421][T29514] ? io_schedule+0x100/0x130 [ 1242.964439][T29514] ksys_read+0x12a/0x250 [ 1242.964449][T29514] ? __pfx_ksys_read+0x10/0x10 [ 1242.964458][T29514] ? fput+0x70/0xf0 [ 1242.964473][T29514] __do_fast_syscall_32+0xe8/0x680 [ 1242.964485][T29514] do_fast_syscall_32+0x32/0x80 [ 1242.964495][T29514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.964508][T29514] RIP: 0023:0xf7ff1579 [ 1242.964517][T29514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1242.964527][T29514] RSP: 002b:00000000f54c5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1242.964537][T29514] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54c5620 [ 1242.964544][T29514] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1242.964550][T29514] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1242.964556][T29514] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1242.964562][T29514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.964576][T29514] [ 1242.990569][T29512] syz.8.6057: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1243.056594][T29512] CPU: 0 UID: 0 PID: 29512 Comm: syz.8.6057 Not tainted syzkaller #0 PREEMPT(full) [ 1243.056609][T29512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1243.056616][T29512] Call Trace: [ 1243.056621][T29512] [ 1243.056626][T29512] dump_stack_lvl+0x16c/0x1f0 [ 1243.056646][T29512] warn_alloc+0x248/0x3a0 [ 1243.056662][T29512] ? __pfx_warn_alloc+0x10/0x10 [ 1243.056681][T29512] ? newary+0x185/0xc50 [ 1243.056696][T29512] ? __vmalloc_node_noprof+0xad/0xf0 [ 1243.056710][T29512] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1243.056726][T29512] ? newary+0x185/0xc50 [ 1243.056744][T29512] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1243.056758][T29512] ? ___kmalloc_large_node+0x130/0x1a0 [ 1243.056772][T29512] __kvmalloc_node_noprof+0x42c/0xa50 [ 1243.056788][T29512] ? newary+0x185/0xc50 [ 1243.056803][T29512] ? newary+0x185/0xc50 [ 1243.056816][T29512] ? futex_wake+0x1ad/0x530 [ 1243.056834][T29512] ? newary+0x185/0xc50 [ 1243.056847][T29512] newary+0x185/0xc50 [ 1243.056862][T29512] ? __pfx_perf_event_namespaces+0x10/0x10 [ 1243.056879][T29512] ipcget+0xf6/0xfa0 [ 1243.056891][T29512] ? do_futex+0x122/0x350 [ 1243.056904][T29512] ? __pfx_do_futex+0x10/0x10 [ 1243.056919][T29512] ? __pfx_ipcget+0x10/0x10 [ 1243.056932][T29512] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1243.056948][T29512] __ia32_sys_semget+0x1cb/0x260 [ 1243.056976][T29512] ? __pfx___ia32_sys_semget+0x10/0x10 [ 1243.056996][T29512] __do_fast_syscall_32+0xe8/0x680 [ 1243.057009][T29512] do_fast_syscall_32+0x32/0x80 [ 1243.057019][T29512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.057033][T29512] RIP: 0023:0xf7ff1579 [ 1243.057043][T29512] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1243.057053][T29512] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000189 [ 1243.057064][T29512] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000004000 [ 1243.057072][T29512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.057078][T29512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.057084][T29512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.057090][T29512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.057104][T29512] [ 1243.057108][T29512] Mem-Info: [ 1243.134848][T29512] active_anon:342 inactive_anon:4189 isolated_anon:0 [ 1243.134848][T29512] active_file:1988 inactive_file:824 isolated_file:0 [ 1243.134848][T29512] unevictable:18117 dirty:225 writeback:0 [ 1243.134848][T29512] slab_reclaimable:6958 slab_unreclaimable:67750 [ 1243.134848][T29512] mapped:27591 shmem:4654 pagetables:1198 [ 1243.134848][T29512] sec_pagetables:348 bounce:0 [ 1243.134848][T29512] kernel_misc_reclaimable:0 [ 1243.134848][T29512] free:63913 free_pcp:4080 free_cma:0 [ 1243.154325][T29512] Node 0 active_anon:1152kB inactive_anon:260kB active_file:6984kB inactive_file:36kB unevictable:5132kB isolated(anon):0kB isolated(file):0kB mapped:3616kB dirty:368kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7536kB pagetables:1148kB sec_pagetables:1168kB all_unreclaimable? yes Balloon:0kB [ 1243.164798][T29512] Node 1 active_anon:216kB inactive_anon:16496kB active_file:1672kB inactive_file:2756kB unevictable:72036kB isolated(anon):0kB isolated(file):0kB mapped:106748kB dirty:532kB writeback:0kB shmem:14732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9376kB pagetables:3644kB sec_pagetables:224kB all_unreclaimable? no Balloon:0kB [ 1243.181140][T29512] Node 0 DMA free:2772kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1243.191930][T29512] lowmem_reserve[]: 0 291 291 291 291 [ 1243.197558][T29512] Node 0 DMA32 free:23720kB boost:8192kB min:21524kB low:24856kB high:28188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1152kB inactive_anon:260kB active_file:6984kB inactive_file:36kB unevictable:5132kB writepending:368kB zspages:804kB present:1032196kB managed:298040kB mlocked:1596kB bounce:0kB free_pcp:2100kB local_pcp:0kB free_cma:0kB [ 1243.209067][T29512] lowmem_reserve[]: 0 0 0 0 0 [ 1243.213126][T29512] Node 1 DMA32 free:212560kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:216kB inactive_anon:16496kB active_file:2172kB inactive_file:2756kB unevictable:81736kB writepending:532kB zspages:12052kB present:1048432kB managed:948212kB mlocked:78200kB bounce:0kB free_pcp:16444kB local_pcp:872kB free_cma:0kB [ 1243.224937][T29512] lowmem_reserve[]: 0 0 0 0 0 [ 1243.226559][T29512] Node 0 DMA: 65*4kB (U) 30*8kB (U) 8*16kB (U) 7*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2772kB [ 1243.232198][T29512] Node 0 DMA32: 335*4kB (UE) 369*8kB (UME) 77*16kB (UE) 229*32kB (UME) 59*64kB (UE) 25*128kB (UME) 5*256kB (UME) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 23668kB [ 1243.238397][T29512] Node 1 DMA32: 58*4kB (UE) 22*8kB (UME) 71*16kB (UE) 227*32kB (UE) 259*64kB (UE) 148*128kB (UME) 170*256kB (UME) 107*512kB (UM) 68*1024kB (UME) 0*2048kB 0*4096kB = 212264kB [ 1243.248525][T29512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.255782][T29512] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1243.260589][T29512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.269245][T29512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1243.272619][T29512] 8928 total pagecache pages [ 1243.276513][T29512] 1219 pages in swap cache [ 1243.279041][T29512] Free swap = 21612kB [ 1243.282759][T29512] Total swap = 124996kB [ 1243.286045][T29512] 524155 pages RAM [ 1243.288463][T29512] 0 pages HighMem/MovableOnly [ 1243.292206][T29512] 208752 pages reserved [ 1243.293762][T29512] 0 pages cma reserved [ 1243.794336][T29535] 9pnet_fd: p9_fd_create_unix (29535): problem connecting socket: éq‰Y’3aK: -111 [ 1243.808757][T29537] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(74) [ 1243.811009][T29537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1243.816816][T29537] vhci_hcd vhci_hcd.0: Device attached [ 1244.068302][T21303] usb 51-1: new low-speed USB device number 21 using vhci_hcd [ 1244.418279][ T53] usb 13-1: new high-speed USB device number 47 using dummy_hcd [ 1244.578269][ T53] usb 13-1: Using ep0 maxpacket: 16 [ 1244.587317][ T53] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1244.623819][T29539] vhci_hcd: connection reset by peer [ 1244.625979][ T6075] vhci_hcd: stop threads [ 1244.627639][ T6075] vhci_hcd: release socket [ 1244.633969][ T6075] vhci_hcd: disconnect device [ 1244.645225][ T53] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1244.648735][ T53] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.652533][ T53] usb 13-1: Product: syz [ 1244.654485][ T53] usb 13-1: Manufacturer: syz [ 1244.656451][ T53] usb 13-1: SerialNumber: syz [ 1244.676711][ T53] usb 13-1: config 0 descriptor?? [ 1244.696882][ T53] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1244.706113][ T53] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1244.794719][T29564] ubi: mtd0 is already attached to ubi31 [ 1244.801174][T29564] input: syz1 as /devices/virtual/input/input175 [ 1244.887447][T29566] netlink: 'syz.7.6074': attribute type 1 has an invalid length. [ 1244.890239][T29566] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.6074'. [ 1244.894520][T29566] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6074'. [ 1245.024983][T29570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1245.126468][T29577] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1245.136591][T29575] netlink: 'syz.7.6076': attribute type 58 has an invalid length. [ 1245.140469][T29575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6076'. [ 1245.300248][ T53] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1245.661187][T29589] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1245.870343][ T53] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1245.873765][ T53] em28xx 13-1:0.0: board has no eeprom [ 1246.145364][T29591] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1246.274246][T29597] : renamed from bond_slave_0 (while UP) [ 1246.308176][ T53] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1246.311051][ T53] em28xx 13-1:0.0: dvb set to bulk mode. [ 1246.314707][T20216] em28xx 13-1:0.0: Binding DVB extension [ 1246.569334][T22048] usb 46-1: device descriptor read/8, error -110 [ 1246.959096][T22048] usb usb46-port1: attempt power cycle [ 1247.153017][T29607] bond10: (slave veth0_to_bond): Releasing backup interface [ 1247.156739][T29607] veth0_to_bond: left promiscuous mode [ 1247.159598][T29607] veth0_to_bond: left allmulticast mode [ 1247.288447][T29557] em28xx 13-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1247.299346][ T6025] usb 13-1: USB disconnect, device number 47 [ 1247.301951][ T6025] em28xx 13-1:0.0: Disconnecting em28xx [ 1247.308699][T20216] em28xx 13-1:0.0: Registering input extension [ 1247.316159][ T6025] em28xx 13-1:0.0: Closing input extension [ 1247.336838][ T6025] em28xx 13-1:0.0: Freeing device [ 1247.538722][T22048] usb usb46-port1: unable to enumerate USB device [ 1247.988970][T29626] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1247.991117][T29626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1247.998235][T29626] vhci_hcd vhci_hcd.0: Device attached [ 1248.013999][T29626] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6091'. [ 1248.259118][ T6025] usb 53-1: new low-speed USB device number 27 using vhci_hcd [ 1248.686410][T29627] vhci_hcd: connection reset by peer [ 1248.697595][T12354] vhci_hcd: stop threads [ 1248.699297][T12354] vhci_hcd: release socket [ 1248.701267][T12354] vhci_hcd: disconnect device [ 1249.263599][T21303] vhci_hcd: vhci_device speed not set [ 1249.883618][T29651] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1249.886524][T29651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1249.908252][T29651] vhci_hcd vhci_hcd.0: Device attached [ 1250.218246][ T8026] usb 52-1: SetAddress Request (10) to port 0 [ 1250.220361][ T8026] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1250.589556][T29652] vhci_hcd: connection reset by peer [ 1250.591734][T12354] vhci_hcd: stop threads [ 1250.593227][T12354] vhci_hcd: release socket [ 1250.595179][T12354] vhci_hcd: disconnect device [ 1251.196932][T29670] netlink: 'syz.7.6103': attribute type 1 has an invalid length. [ 1251.214800][T29670] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.6103'. [ 1251.225430][T29670] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6103'. [ 1251.233681][T29672] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6102'. [ 1251.433804][T29680] netlink: 'syz.7.6106': attribute type 1 has an invalid length. [ 1251.436499][T29680] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.6106'. [ 1251.446730][T29680] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6106'. [ 1251.551011][T29687] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1251.554154][T29687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1251.568143][T29687] vhci_hcd vhci_hcd.0: Device attached [ 1251.607011][T29687] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6104'. [ 1252.838215][T29688] vhci_hcd: connection closed [ 1252.838475][T27644] vhci_hcd: stop threads [ 1252.851981][T27644] vhci_hcd: release socket [ 1252.853799][T27644] vhci_hcd: disconnect device [ 1253.368186][ T6025] vhci_hcd: vhci_device speed not set [ 1253.430195][T29716] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1253.451324][T29718] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1253.476754][T29718] devpts: Bad value for 'max' [ 1254.253254][T29729] netlink: 'syz.4.6119': attribute type 1 has an invalid length. [ 1254.256201][T29729] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1254.262177][T29729] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1255.288995][ T8026] usb 52-1: device descriptor read/8, error -110 [ 1255.689840][T29748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6124'. [ 1255.728593][ T8026] usb usb52-port1: attempt power cycle [ 1256.163034][T29754] program syz.4.6126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.181920][T29753] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(16) [ 1256.184182][T29753] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1256.191254][T29753] vhci_hcd vhci_hcd.0: Device attached [ 1256.288560][ T8026] usb usb52-port1: unable to enumerate USB device [ 1256.388205][ T6025] vhci_hcd: vhci_device speed not set [ 1256.431799][T29754] netlink: 'syz.4.6126': attribute type 39 has an invalid length. [ 1256.448142][ T6025] usb 51-1: new full-speed USB device number 22 using vhci_hcd [ 1256.566825][T29755] vhci_hcd: connection reset by peer [ 1256.568917][T28474] vhci_hcd: stop threads [ 1256.570436][T28474] vhci_hcd: release socket [ 1256.572033][T28474] vhci_hcd: disconnect device [ 1256.641218][T29767] program syz.1.6129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1256.891933][T29769] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1256.956350][T29767] netlink: 'syz.1.6129': attribute type 39 has an invalid length. [ 1257.714671][T29778] sch_tbf: burst 274 is lower than device lo mtu (1294) ! [ 1257.896568][ T40] kauditd_printk_skb: 708 callbacks suppressed [ 1257.896580][ T40] audit: type=1326 audit(1764860260.191:30700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.907498][ T40] audit: type=1326 audit(1764860260.201:30701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.924492][ T40] audit: type=1326 audit(1764860260.201:30702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.934420][ T40] audit: type=1326 audit(1764860260.211:30703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.943100][ T40] audit: type=1326 audit(1764860260.211:30704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.954226][ T40] audit: type=1326 audit(1764860260.211:30705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.961387][ T40] audit: type=1326 audit(1764860260.211:30706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.968381][ T40] audit: type=1326 audit(1764860260.211:30707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.975509][ T40] audit: type=1326 audit(1764860260.211:30708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1257.986778][ T40] audit: type=1326 audit(1764860260.211:30709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29781 comm="syz.8.6132" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1258.024714][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6135'. [ 1258.613927][T29807] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1258.869278][T29810] program syz.4.6138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.069278][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6139'. [ 1259.187162][T29810] netlink: 'syz.4.6138': attribute type 39 has an invalid length. [ 1259.769639][T29841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1261.201564][T29851] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6148'. [ 1261.225136][T29861] netlink: 'syz.1.6158': attribute type 1 has an invalid length. [ 1261.227764][T29861] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6158'. [ 1261.242332][T29861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6158'. [ 1261.372078][T29867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6151'. [ 1261.598132][ T6025] vhci_hcd: vhci_device speed not set [ 1261.674518][T29882] bond4: option mode: unable to set because the bond device is up [ 1261.683539][T29882] FAULT_INJECTION: forcing a failure. [ 1261.683539][T29882] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.687946][T29882] CPU: 2 UID: 0 PID: 29882 Comm: syz.1.6156 Not tainted syzkaller #0 PREEMPT(full) [ 1261.687962][T29882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1261.687969][T29882] Call Trace: [ 1261.687973][T29882] [ 1261.687978][T29882] dump_stack_lvl+0x16c/0x1f0 [ 1261.687999][T29882] should_fail_ex+0x512/0x640 [ 1261.688016][T29882] ? __kvmalloc_node_noprof+0x129/0xa50 [ 1261.688046][T29882] should_failslab+0xc2/0x120 [ 1261.688060][T29882] __kvmalloc_node_noprof+0x13c/0xa50 [ 1261.688076][T29882] ? alloc_netdev_mqs+0xf8a/0x1550 [ 1261.688094][T29882] ? alloc_netdev_mqs+0xf8a/0x1550 [ 1261.688106][T29882] alloc_netdev_mqs+0xf8a/0x1550 [ 1261.688122][T29882] rtnl_create_link+0xc08/0xf60 [ 1261.688140][T29882] rtnl_newlink+0xb3b/0x1f50 [ 1261.688158][T29882] ? __pfx_rtnl_newlink+0x10/0x10 [ 1261.688171][T29882] ? lockdep_hardirqs_on+0x7c/0x110 [ 1261.688190][T29882] ? kmem_cache_free+0x2d8/0x770 [ 1261.688205][T29882] ? kfree_skbmem+0x1a4/0x1f0 [ 1261.688227][T29882] ? find_held_lock+0x2b/0x80 [ 1261.688244][T29882] ? __dev_queue_xmit+0x782/0x4650 [ 1261.688258][T29882] ? find_held_lock+0x2b/0x80 [ 1261.688272][T29882] ? __pfx_rtnl_newlink+0x10/0x10 [ 1261.688285][T29882] ? __pfx_rtnl_newlink+0x10/0x10 [ 1261.688297][T29882] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1261.688311][T29882] ? __pfx_rtnl_newlink+0x10/0x10 [ 1261.688324][T29882] rtnetlink_rcv_msg+0x95e/0xe90 [ 1261.688339][T29882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1261.688356][T29882] ? ref_tracker_free+0x37c/0x830 [ 1261.688369][T29882] netlink_rcv_skb+0x158/0x420 [ 1261.688384][T29882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1261.688398][T29882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1261.688418][T29882] ? netlink_deliver_tap+0x1ae/0xd30 [ 1261.688435][T29882] netlink_unicast+0x5aa/0x870 [ 1261.688452][T29882] ? __pfx_netlink_unicast+0x10/0x10 [ 1261.688472][T29882] netlink_sendmsg+0x8c8/0xdd0 [ 1261.688489][T29882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1261.688506][T29882] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1261.688523][T29882] ____sys_sendmsg+0xa5d/0xc30 [ 1261.688540][T29882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1261.688554][T29882] ? get_compat_msghdr+0x11a/0x170 [ 1261.688574][T29882] ___sys_sendmsg+0x134/0x1d0 [ 1261.688587][T29882] ? __pfx____sys_sendmsg+0x10/0x10 [ 1261.688606][T29882] ? find_held_lock+0x2b/0x80 [ 1261.688631][T29882] __sys_sendmsg+0x16d/0x220 [ 1261.688643][T29882] ? __pfx___sys_sendmsg+0x10/0x10 [ 1261.688665][T29882] __do_fast_syscall_32+0xe8/0x680 [ 1261.688676][T29882] do_fast_syscall_32+0x32/0x80 [ 1261.688686][T29882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1261.688713][T29882] RIP: 0023:0xf70ed579 [ 1261.688722][T29882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1261.688732][T29882] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1261.688743][T29882] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000240 [ 1261.688749][T29882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.688755][T29882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.688761][T29882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1261.688767][T29882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.688782][T29882] [ 1262.002877][T29886] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1262.770279][ T6005] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1263.118185][ T8026] usb 12-1: new high-speed USB device number 47 using dummy_hcd [ 1263.205075][T29904] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1263.207299][T29904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1263.210787][T29904] vhci_hcd vhci_hcd.0: Device attached [ 1263.280076][ T8026] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1263.296084][ T8026] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1263.314872][ T8026] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1263.329280][ T8026] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1263.343358][ T8026] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1263.361719][ T8026] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1263.368002][ T8026] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1263.377226][ T8026] usb 12-1: Product: syz [ 1263.380258][ T8026] usb 12-1: Manufacturer: syz [ 1263.381242][T29907] vhci_hcd: connection closed [ 1263.382739][T24581] vhci_hcd: stop threads [ 1263.391004][T24581] vhci_hcd: release socket [ 1263.393260][T24581] vhci_hcd: disconnect device [ 1263.418970][ T8026] cdc_wdm 12-1:1.0: skipping garbage [ 1263.421789][ T8026] cdc_wdm 12-1:1.0: skipping garbage [ 1263.443130][ T8026] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1263.447133][ T8026] cdc_wdm 12-1:1.0: Unknown control protocol [ 1263.841170][ T8026] usb 12-1: USB disconnect, device number 47 [ 1263.928247][ T6263] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1264.098157][ T6263] usb 6-1: Using ep0 maxpacket: 16 [ 1264.102628][ T6263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1264.112061][ T6263] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1264.118311][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.126408][ T6263] usb 6-1: Product: syz [ 1264.127986][ T6263] usb 6-1: Manufacturer: syz [ 1264.131146][ T6263] usb 6-1: SerialNumber: syz [ 1264.139428][ T6263] usb 6-1: config 0 descriptor?? [ 1264.143142][ T6263] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1264.151348][ T6263] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1264.759554][ T6263] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1265.178474][ T6263] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1265.184821][ T6263] em28xx 6-1:0.0: board has no eeprom [ 1265.353994][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1265.357983][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1265.363730][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1265.367477][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1265.373426][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1265.402204][T29952] lo speed is unknown, defaulting to 1000 [ 1265.515984][T29952] chnl_net:caif_netlink_parms(): no params data found [ 1265.528551][ T6263] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1265.532353][ T6263] em28xx 6-1:0.0: dvb set to bulk mode. [ 1265.536093][T21303] em28xx 6-1:0.0: Binding DVB extension [ 1265.593472][T28472] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.646611][T29952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.649305][T29952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.651800][T29952] bridge_slave_0: entered allmulticast mode [ 1265.655290][T29952] bridge_slave_0: entered promiscuous mode [ 1265.659865][T29952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.662292][T29952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.664832][T29952] bridge_slave_1: entered allmulticast mode [ 1265.667892][T29952] bridge_slave_1: entered promiscuous mode [ 1265.723114][T28472] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.739229][T29952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.747719][T29952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.784801][T29952] team0: Port device team_slave_0 added [ 1265.788680][T29952] team0: Port device team_slave_1 added [ 1265.864013][T29952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.867440][T29952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.878832][T29952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.901396][T28472] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.913083][T29952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.915910][T29952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.927427][T29952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.967002][T29952] hsr_slave_0: entered promiscuous mode [ 1265.970968][T29952] hsr_slave_1: entered promiscuous mode [ 1265.974694][T29952] debugfs: 'hsr0' already exists in 'hsr' [ 1265.977116][T29952] Cannot create hsr debugfs directory [ 1266.041059][T28472] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.259388][T28472] macsec0: left allmulticast mode [ 1266.261173][T28472] geneve1: left allmulticast mode [ 1266.263426][T28472] macsec0: left promiscuous mode [ 1266.266174][T28472] bridge0: port 2(macsec0) entered disabled state [ 1266.276586][T28472] bridge_slave_0: left allmulticast mode [ 1266.279445][T28472] bridge_slave_0: left promiscuous mode [ 1266.281484][T28472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.489808][T29914] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1266.495677][ T6005] usb 6-1: USB disconnect, device number 23 [ 1266.499610][ T6005] em28xx 6-1:0.0: Disconnecting em28xx [ 1266.573023][T21303] em28xx 6-1:0.0: Registering input extension [ 1266.575264][ T6005] em28xx 6-1:0.0: Closing input extension [ 1266.587937][ T6005] em28xx 6-1:0.0: Freeing device [ 1266.816415][T28472] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.820616][T28472] bond_slave_0: left promiscuous mode [ 1266.823974][T28472] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.827115][T28472] bond_slave_1: left promiscuous mode [ 1266.831790][T28472] .` (unregistering): Released all slaves [ 1267.000891][T28472] bond0 (unregistering): (slave dummy0): Releasing active interface [ 1267.011467][T29978] netlink: 'syz.4.6186': attribute type 1 has an invalid length. [ 1267.014076][T29978] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1267.021015][T28472] bond0 (unregistering): Released all slaves [ 1267.101506][T29980] kAFS: unable to lookup cell '\/' [ 1267.156149][T28472] bond1 (unregistering): Released all slaves [ 1267.312702][T28472] bond2 (unregistering): Released all slaves [ 1267.451066][ T5948] Bluetooth: hci4: command tx timeout [ 1267.474042][T28472] bond3 (unregistering): Released all slaves [ 1267.557175][T29992] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6189'. [ 1267.630714][T28472] bond4 (unregistering): Released all slaves [ 1267.761368][T28472] bond5 (unregistering): Released all slaves [ 1267.897517][T28472] bond6 (unregistering): Released all slaves [ 1268.026484][T28472] bond7 (unregistering): Released all slaves [ 1268.166177][T28472] bond8 (unregistering): Released all slaves [ 1268.317478][T28472] bond9 (unregistering): Released all slaves [ 1268.402665][T30003] FAULT_INJECTION: forcing a failure. [ 1268.402665][T30003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.407625][T30003] CPU: 1 UID: 0 PID: 30003 Comm: syz.1.6190 Not tainted syzkaller #0 PREEMPT(full) [ 1268.407648][T30003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1268.407659][T30003] Call Trace: [ 1268.407665][T30003] [ 1268.407672][T30003] dump_stack_lvl+0x16c/0x1f0 [ 1268.407701][T30003] should_fail_ex+0x512/0x640 [ 1268.407731][T30003] _copy_from_user+0x2e/0xd0 [ 1268.407780][T30003] get_compat_msghdr+0xa7/0x170 [ 1268.407802][T30003] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1268.407831][T30003] ___sys_sendmsg+0x1ae/0x1d0 [ 1268.407853][T30003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.407884][T30003] ? find_held_lock+0x2b/0x80 [ 1268.407926][T30003] __sys_sendmsg+0x16d/0x220 [ 1268.407946][T30003] ? __pfx___sys_sendmsg+0x10/0x10 [ 1268.407981][T30003] __do_fast_syscall_32+0xe8/0x680 [ 1268.408007][T30003] do_fast_syscall_32+0x32/0x80 [ 1268.408024][T30003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.408061][T30003] RIP: 0023:0xf70ed579 [ 1268.408075][T30003] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1268.408091][T30003] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1268.408108][T30003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1268.408118][T30003] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.408128][T30003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.408137][T30003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1268.408147][T30003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.408170][T30003] [ 1268.464491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.514798][T28472] bond10 (unregistering): Released all slaves [ 1268.526147][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 1268.529136][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 1268.547442][T29978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6186'. [ 1268.628317][T30005] ceph: No mds server is up or the cluster is laggy [ 1268.666383][T28472] tipc: Disabling bearer [ 1268.687643][T28472] tipc: Left network mode [ 1268.763179][T30016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 1268.898443][ T6005] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1268.998904][T28472] hsr_slave_0: left promiscuous mode [ 1269.001932][T28472] hsr_slave_1: left promiscuous mode [ 1269.019706][T28472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.023735][T28472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.032357][T28472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.035049][T28472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.048363][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 1269.050839][T28472] veth1_vlan: left promiscuous mode [ 1269.052799][T28472] veth0_vlan: left promiscuous mode [ 1269.057037][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.075397][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.078810][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1269.082940][ T6005] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1269.086147][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.099484][ T6005] usb 6-1: config 0 descriptor?? [ 1269.130501][T28472] pim6reg (unregistering): left allmulticast mode [ 1269.516293][T30005] random: crng reseeded on system resumption [ 1269.526733][ T6005] input: HID 0955:7214 Haptics as /devices/virtual/input/input178 [ 1269.542974][ T6005] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 1269.545715][ T6005] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1269.548247][ T5948] Bluetooth: hci4: command tx timeout [ 1269.617940][T28472] team0 (unregistering): Port device team_slave_1 removed [ 1269.671036][T28472] team0 (unregistering): Port device team_slave_0 removed [ 1269.704423][T30022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6194'. [ 1269.746852][ T6224] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1269.767116][ T6224] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1269.768427][T28446] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1269.771987][T22048] usb 6-1: USB disconnect, device number 24 [ 1269.784328][ T6224] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1269.791524][ T6224] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1270.081020][T29952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1270.088839][T29952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1270.099720][T29952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1270.106530][T29952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1270.235385][T29952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.249998][T29952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.261190][T27644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.263670][T27644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.274272][T27644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.277379][T27644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.346129][T30042] ip6t_srh: unknown srh match flags 448C [ 1270.416635][T28472] IPVS: stop unused estimator thread 0... [ 1270.484290][T29952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1270.599046][T30057] netlink: 'syz.1.6200': attribute type 1 has an invalid length. [ 1270.601946][T30057] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1270.606541][T30057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1270.774088][T29952] veth0_vlan: entered promiscuous mode [ 1270.787688][T29952] veth1_vlan: entered promiscuous mode [ 1270.826686][T29952] veth0_macvtap: entered promiscuous mode [ 1270.832199][T29952] veth1_macvtap: entered promiscuous mode [ 1270.842197][T29952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1270.850249][T29952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.856282][T28474] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.862340][T28474] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.865246][T28474] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.869716][T28474] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.911663][T28474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.917670][T28474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.928495][T28446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.931951][T28446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.988165][T21303] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1271.118327][T21303] usb 6-1: device descriptor read/64, error -71 [ 1271.518169][T21303] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1271.623203][ T5948] Bluetooth: hci4: command tx timeout [ 1271.648241][T21303] usb 6-1: device descriptor read/64, error -71 [ 1271.768404][T21303] usb usb6-port1: attempt power cycle [ 1271.874626][T30092] FAULT_INJECTION: forcing a failure. [ 1271.874626][T30092] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.879642][T30092] CPU: 0 UID: 0 PID: 30092 Comm: syz.8.6208 Not tainted syzkaller #0 PREEMPT(full) [ 1271.879657][T30092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1271.879664][T30092] Call Trace: [ 1271.879668][T30092] [ 1271.879673][T30092] dump_stack_lvl+0x16c/0x1f0 [ 1271.879697][T30092] should_fail_ex+0x512/0x640 [ 1271.879750][T30092] ? __kmalloc_noprof+0xca/0x8f0 [ 1271.879772][T30092] should_failslab+0xc2/0x120 [ 1271.879784][T30092] __kmalloc_noprof+0xdd/0x8f0 [ 1271.879797][T30092] ? lsm_blob_alloc+0x68/0x90 [ 1271.879815][T30092] ? lsm_blob_alloc+0x68/0x90 [ 1271.879826][T30092] lsm_blob_alloc+0x68/0x90 [ 1271.879852][T30092] security_task_alloc+0x2c/0x260 [ 1271.879867][T30092] copy_process+0x21ac/0x74e0 [ 1271.879888][T30092] ? stack_depot_save_flags+0x29/0x9b0 [ 1271.879910][T30092] ? __pfx_copy_process+0x10/0x10 [ 1271.879927][T30092] ? register_lock_class+0x41/0x4b0 [ 1271.879948][T30092] ? __pfx_io_sq_thread+0x10/0x10 [ 1271.879963][T30092] create_io_thread+0xbe/0x100 [ 1271.879979][T30092] ? __pfx_create_io_thread+0x10/0x10 [ 1271.880000][T30092] ? __pfx_io_sq_thread+0x10/0x10 [ 1271.880015][T30092] ? rcu_is_watching+0x12/0xc0 [ 1271.880031][T30092] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1271.880047][T30092] ? lockdep_hardirqs_on+0x7c/0x110 [ 1271.880064][T30092] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1271.880079][T30092] ? __wake_up+0x3f/0x60 [ 1271.880089][T30092] io_sq_offload_create+0xcc6/0x1270 [ 1271.880106][T30092] ? __pfx_io_sq_offload_create+0x10/0x10 [ 1271.880122][T30092] ? bpf_lsm_capable+0x9/0x10 [ 1271.880137][T30092] ? security_capable+0x7e/0x260 [ 1271.880153][T30092] io_uring_setup+0x136f/0x1f60 [ 1271.880166][T30092] ? __pfx_io_uring_setup+0x10/0x10 [ 1271.880181][T30092] ? bpf_trace_run2+0x26b/0x5c0 [ 1271.880198][T30092] ? find_held_lock+0x2b/0x80 [ 1271.880215][T30092] ? syscall_trace_enter+0x1cb/0x220 [ 1271.880237][T30092] __ia32_sys_io_uring_setup+0xc2/0x170 [ 1271.880256][T30092] __do_fast_syscall_32+0xe8/0x680 [ 1271.880268][T30092] do_fast_syscall_32+0x32/0x80 [ 1271.880278][T30092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.880292][T30092] RIP: 0023:0xf7ff1579 [ 1271.880301][T30092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1271.880312][T30092] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 00000000000001a9 [ 1271.880322][T30092] RAX: ffffffffffffffda RBX: 00000000000013f9 RCX: 0000000080000180 [ 1271.880329][T30092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.880335][T30092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.880341][T30092] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1271.880347][T30092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.880361][T30092] [ 1272.022991][T30099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6208'. [ 1272.029749][T30099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6208'. [ 1272.046964][T30101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6211'. [ 1272.052948][T30099] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6208'. [ 1272.055851][T30099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6208'. [ 1272.118267][T21303] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1272.139017][T21303] usb 6-1: device descriptor read/8, error -71 [ 1272.378170][T21303] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1272.398845][T21303] usb 6-1: device descriptor read/8, error -71 [ 1272.508640][T21303] usb usb6-port1: unable to enumerate USB device [ 1272.733326][T20216] IPVS: starting estimator thread 0... [ 1272.818256][T30117] IPVS: using max 45 ests per chain, 108000 per kthread [ 1272.871986][T30120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6217'. [ 1273.398668][T22048] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1273.689242][ T5948] Bluetooth: hci4: command tx timeout [ 1273.914942][T30138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6224'. [ 1273.952144][T30142] dlm: Unknown command passed to DLM device : 131 [ 1273.952144][T30142] [ 1273.956212][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1274.566551][T30159] FAULT_INJECTION: forcing a failure. [ 1274.566551][T30159] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.582149][T30159] CPU: 2 UID: 0 PID: 30159 Comm: syz.4.6229 Not tainted syzkaller #0 PREEMPT(full) [ 1274.582166][T30159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1274.582173][T30159] Call Trace: [ 1274.582177][T30159] [ 1274.582181][T30159] dump_stack_lvl+0x16c/0x1f0 [ 1274.582202][T30159] should_fail_ex+0x512/0x640 [ 1274.582219][T30159] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1274.582234][T30159] should_failslab+0xc2/0x120 [ 1274.582246][T30159] __kmalloc_cache_noprof+0x72/0x800 [ 1274.582260][T30159] ? ima_add_digest_entry+0x52/0x540 [ 1274.582276][T30159] ? ima_add_digest_entry+0x52/0x540 [ 1274.582288][T30159] ima_add_digest_entry+0x52/0x540 [ 1274.582304][T30159] ima_add_template_entry+0x452/0x870 [ 1274.582321][T30159] ? __pfx_ima_add_template_entry+0x10/0x10 [ 1274.582336][T30159] ? ima_calc_field_array_hash+0x371/0x440 [ 1274.582355][T30159] ima_store_template+0xda/0x150 [ 1274.582372][T30159] ima_store_measurement+0x224/0x5c0 [ 1274.582389][T30159] ? __pfx_ima_store_measurement+0x10/0x10 [ 1274.582406][T30159] ? vfs_getxattr_alloc+0xec/0x350 [ 1274.582421][T30159] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1274.582438][T30159] process_measurement+0x17fa/0x22d0 [ 1274.582471][T30159] ? __pfx_process_measurement+0x10/0x10 [ 1274.582491][T30159] ? find_held_lock+0x2b/0x80 [ 1274.582508][T30159] ? aa_file_perm+0x29e/0x1560 [ 1274.582531][T30159] ? get_pid_task+0x106/0x250 [ 1274.582542][T30159] ? proc_fail_nth_write+0x9f/0x220 [ 1274.582559][T30159] ima_file_mmap+0x1b6/0x1e0 [ 1274.582573][T30159] ? __pfx_ima_file_mmap+0x10/0x10 [ 1274.582591][T30159] security_mmap_file+0x88c/0x990 [ 1274.582603][T30159] vm_mmap_pgoff+0xec/0x470 [ 1274.582620][T30159] ? find_held_lock+0x2b/0x80 [ 1274.582635][T30159] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1274.582653][T30159] ? __fget_files+0x20e/0x3c0 [ 1274.582667][T30159] ksys_mmap_pgoff+0x32c/0x5c0 [ 1274.582683][T30159] ? rcu_is_watching+0x12/0xc0 [ 1274.582698][T30159] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1274.582716][T30159] __do_fast_syscall_32+0xe8/0x680 [ 1274.582728][T30159] do_fast_syscall_32+0x32/0x80 [ 1274.582738][T30159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1274.582752][T30159] RIP: 0023:0xf705d579 [ 1274.582760][T30159] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1274.582771][T30159] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1274.582781][T30159] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 1274.582788][T30159] RDX: 0000000000000005 RSI: 0000000000000012 RDI: 0000000000000003 [ 1274.582795][T30159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.582801][T30159] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1274.582807][T30159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.582822][T30159] [ 1274.691220][T30159] ima: OUT OF MEMORY ERROR creating queue entry [ 1274.695684][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 1274.695718][ T40] audit: type=1804 audit(1764860276.991:30719): pid=30159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.4.6229" name="/newroot/297/bus/memory.stat" dev="overlay" ino=1620 res=0 errno=0 [ 1275.910527][T30168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.748505][T30182] FAULT_INJECTION: forcing a failure. [ 1276.748505][T30182] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.763100][T30182] CPU: 2 UID: 0 PID: 30182 Comm: syz.4.6237 Not tainted syzkaller #0 PREEMPT(full) [ 1276.763115][T30182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1276.763122][T30182] Call Trace: [ 1276.763125][T30182] [ 1276.763130][T30182] dump_stack_lvl+0x16c/0x1f0 [ 1276.763151][T30182] should_fail_ex+0x512/0x640 [ 1276.763168][T30182] ? fs_reclaim_acquire+0xae/0x150 [ 1276.763180][T30182] should_failslab+0xc2/0x120 [ 1276.763192][T30182] __kmalloc_noprof+0xdd/0x8f0 [ 1276.763205][T30182] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1276.763220][T30182] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1276.763231][T30182] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1276.763244][T30182] ? tomoyo_profile+0x47/0x60 [ 1276.763259][T30182] tomoyo_path_number_perm+0x245/0x580 [ 1276.763275][T30182] ? tomoyo_path_number_perm+0x237/0x580 [ 1276.763292][T30182] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1276.763323][T30182] ? find_held_lock+0x2b/0x80 [ 1276.763339][T30182] ? hook_file_ioctl_common+0x144/0x410 [ 1276.763359][T30182] ? __fget_files+0x20e/0x3c0 [ 1276.763368][T30182] ? fput+0x30/0xf0 [ 1276.763382][T30182] security_file_ioctl_compat+0x9b/0x240 [ 1276.763394][T30182] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1276.763411][T30182] __do_fast_syscall_32+0xe8/0x680 [ 1276.763423][T30182] do_fast_syscall_32+0x32/0x80 [ 1276.763434][T30182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1276.763447][T30182] RIP: 0023:0xf705d579 [ 1276.763455][T30182] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1276.763465][T30182] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1276.763475][T30182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004c0a [ 1276.763482][T30182] RDX: 0000000080001ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.763488][T30182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1276.763494][T30182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1276.763500][T30182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.763526][T30182] [ 1276.763531][T30182] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1277.542373][T30193] netlink: 'syz.1.6240': attribute type 1 has an invalid length. [ 1277.583284][T30193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1277.594748][T30193] bond5: (slave veth0_to_bond): making interface the new active one [ 1277.598992][T30193] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1277.675225][T30205] ERROR: Out of memory at tomoyo_memory_ok. [ 1277.715442][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.720629][T30209] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1277.730874][T30193] bond5: entered promiscuous mode [ 1277.732695][T30193] veth0_to_bond: entered promiscuous mode [ 1277.734788][T30193] bond5: entered allmulticast mode [ 1277.736614][T30193] veth0_to_bond: entered allmulticast mode [ 1278.294620][T30220] lo speed is unknown, defaulting to 1000 [ 1281.816792][T30253] netlink: 'syz.4.6254': attribute type 1 has an invalid length. [ 1281.854902][T30253] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1281.922124][T30253] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1281.973975][T30262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6257'. [ 1282.094790][T30253] bond16: entered promiscuous mode [ 1282.096872][T30253] bond16: entered allmulticast mode [ 1283.183050][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6265'. [ 1283.286996][T30302] netlink: 'syz.1.6267': attribute type 7 has an invalid length. [ 1283.362454][T30306] program syz.1.6269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1283.577175][T30306] netlink: 'syz.1.6269': attribute type 39 has an invalid length. [ 1283.739138][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 1283.741326][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 1283.818861][T30321] ceph: No mds server is up or the cluster is laggy [ 1284.068189][T20802] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1284.090263][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.093217][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.098282][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.098569][T30333] xt_l2tp: unknown flags: 51 [ 1284.100919][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.105487][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.110389][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.112592][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.114709][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.115279][T30333] xt_l2tp: unknown flags: 51 [ 1284.116798][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.120850][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.123027][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.123125][T30333] xt_l2tp: unknown flags: 51 [ 1284.125051][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.128863][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.131047][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.131121][T30333] xt_l2tp: unknown flags: 51 [ 1284.133172][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.136976][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.139429][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.139563][T30333] xt_l2tp: unknown flags: 51 [ 1284.141500][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.145294][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.147422][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.147515][T30333] xt_l2tp: unknown flags: 51 [ 1284.149802][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.154941][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.157217][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.159601][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.159708][T30333] xt_l2tp: unknown flags: 51 [ 1284.161757][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.165674][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.167907][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.168003][T30333] xt_l2tp: unknown flags: 51 [ 1284.170181][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.174057][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.176262][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.176366][T30333] xt_l2tp: unknown flags: 51 [ 1284.178657][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.182412][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.184655][ T5948] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1284.184760][T30333] xt_l2tp: unknown flags: 51 [ 1284.229167][T20802] usb 6-1: Using ep0 maxpacket: 16 [ 1284.232262][T20802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.235776][T20802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.239130][T20802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1284.243564][T20802] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1284.246638][T20802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.250710][T20802] usb 6-1: config 0 descriptor?? [ 1284.480945][ T40] audit: type=1326 audit(1764860286.781:30720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.490836][ T40] audit: type=1326 audit(1764860286.781:30721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.501839][ T40] audit: type=1326 audit(1764860286.791:30722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.516062][ T40] audit: type=1326 audit(1764860286.791:30723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.523337][ T40] audit: type=1326 audit(1764860286.791:30724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.532184][ T40] audit: type=1326 audit(1764860286.801:30725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.542460][ T40] audit: type=1326 audit(1764860286.801:30726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.550802][ T40] audit: type=1326 audit(1764860286.801:30727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.559785][ T40] audit: type=1326 audit(1764860286.801:30728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.569632][ T40] audit: type=1326 audit(1764860286.801:30729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30344 comm="syz.8.6280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 1284.661443][T30321] random: crng reseeded on system resumption [ 1284.674442][T20802] input: HID 0955:7214 Haptics as /devices/virtual/input/input179 [ 1284.695064][T20802] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 1284.707991][T20802] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1284.873728][ T8026] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1284.880443][T21484] usb 6-1: USB disconnect, device number 29 [ 1284.883952][ T8026] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1284.894472][ T8026] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1284.902103][ T8026] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1286.186973][T30379] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1286.257402][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6290'. [ 1286.949773][T30373] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1287.699097][ T6005] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1287.702270][ T6005] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1287.705753][ T6005] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1288.031478][T30404] Invalid logical block size (16128) [ 1288.408385][ T6005] rtc_cmos 00:05: Alarms can be up to one day in the future [ 1288.468253][ T6005] rtc rtc0: __rtc_set_alarm: err=-22 [ 1288.680366][T30412] program syz.4.6298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.856321][T30412] netlink: 'syz.4.6298': attribute type 39 has an invalid length. [ 1289.193046][T30425] input: syz1 as /devices/virtual/input/input180 [ 1289.201635][T30425] FAULT_INJECTION: forcing a failure. [ 1289.201635][T30425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.207111][T30425] CPU: 0 UID: 0 PID: 30425 Comm: syz.7.6301 Not tainted syzkaller #0 PREEMPT(full) [ 1289.207137][T30425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1289.207149][T30425] Call Trace: [ 1289.207156][T30425] [ 1289.207163][T30425] dump_stack_lvl+0x16c/0x1f0 [ 1289.207213][T30425] should_fail_ex+0x512/0x640 [ 1289.207247][T30425] __fpu_restore_sig+0xfb/0x13c0 [ 1289.207272][T30425] ? __pfx_try_to_wake_up+0x10/0x10 [ 1289.207301][T30425] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1289.207339][T30425] ? __might_fault+0xe3/0x190 [ 1289.207360][T30425] ? __might_fault+0x13b/0x190 [ 1289.207387][T30425] fpu__restore_sig+0x11e/0x150 [ 1289.207414][T30425] ia32_restore_sigcontext+0x44a/0x630 [ 1289.207443][T30425] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1289.207476][T30425] ? rcu_is_watching+0x12/0xc0 [ 1289.207501][T30425] ? _raw_spin_unlock_irq+0x23/0x50 [ 1289.207524][T30425] ? lockdep_hardirqs_on+0x7c/0x110 [ 1289.207555][T30425] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 1289.207598][T30425] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 1289.207620][T30425] ? rcu_is_watching+0x12/0xc0 [ 1289.207654][T30425] do_int80_emulation+0x104/0x480 [ 1289.207674][T30425] asm_int80_emulation+0x1a/0x20 [ 1289.207691][T30425] RIP: 0023:0xf70ed577 [ 1289.207705][T30425] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 1289.207721][T30425] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 [ 1289.207735][T30425] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000080001900 [ 1289.207747][T30425] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1289.207756][T30425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1289.207767][T30425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.207777][T30425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1289.207801][T30425] [ 1289.626172][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6304'. [ 1289.847355][T30440] netlink: 'syz.1.6305': attribute type 1 has an invalid length. [ 1289.893643][T30440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1290.077112][T30447] bond6: entered promiscuous mode [ 1290.078911][T30447] bond6: entered allmulticast mode [ 1291.482307][T30457] ubi: mtd0 is already attached to ubi31 [ 1291.629152][T30469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1292.414216][T30481] netlink: 'syz.1.6314': attribute type 1 has an invalid length. [ 1292.436729][T30481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1292.688888][T30481] bond7: entered promiscuous mode [ 1292.691189][T30481] bond7: entered allmulticast mode [ 1293.523661][T30495] program syz.4.6316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1293.749537][T30495] netlink: 'syz.4.6316': attribute type 39 has an invalid length. [ 1294.553033][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 1294.567172][ T40] audit: type=1326 audit(1764860296.851:30815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.586122][ T40] audit: type=1326 audit(1764860296.861:30816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.595602][ T40] audit: type=1326 audit(1764860296.861:30817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.768279][ T40] audit: type=1326 audit(1764860296.881:30818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.777557][ T40] audit: type=1326 audit(1764860296.881:30819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30508 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.828945][ T40] audit: type=1326 audit(1764860296.891:30820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.847692][ T40] audit: type=1326 audit(1764860296.911:30821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.860074][ T40] audit: type=1326 audit(1764860297.031:30822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30508 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1294.878110][ T40] audit: type=1326 audit(1764860297.041:30823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1294.898176][ T40] audit: type=1326 audit(1764860297.041:30824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.7.6319" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1295.171126][T30520] netlink: 'syz.1.6323': attribute type 1 has an invalid length. [ 1295.221548][T30518] input: syz1 as /devices/virtual/input/input181 [ 1295.224431][T30520] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1295.240178][T30518] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1295.243607][T30518] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6321'. [ 1295.247778][T30518] netlink: 'syz.7.6321': attribute type 1 has an invalid length. [ 1295.357811][T30527] bond8: entered promiscuous mode [ 1295.360401][T30527] bond8: entered allmulticast mode [ 1295.604284][T30535] netlink: 'syz.1.6326': attribute type 1 has an invalid length. [ 1295.606920][T30535] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.6326'. [ 1295.612795][T30535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6326'. [ 1296.028091][ T6224] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1296.219279][ T6224] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.223178][ T6224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1296.227010][ T6224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1296.232762][ T6224] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1296.242484][ T6224] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1296.248204][ T6224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.252394][ T6224] usb 6-1: config 0 descriptor?? [ 1296.395698][T30552] netlink: 'syz.8.6333': attribute type 1 has an invalid length. [ 1296.411567][T30552] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1296.507313][T30552] bond13: entered promiscuous mode [ 1296.509181][T30552] bond13: entered allmulticast mode [ 1296.909950][T30565] overlay: Unknown parameter '/' [ 1297.281740][T30568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.294361][T30572] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.6338'. [ 1298.299671][T30572] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6338'. [ 1298.816393][ T6224] usbhid 6-1:0.0: can't add hid device: -71 [ 1298.824184][ T6224] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1298.828343][ T6224] usb 6-1: USB disconnect, device number 30 [ 1299.086780][T30584] ceph: No mds server is up or the cluster is laggy [ 1299.328147][T30066] usb 13-1: new high-speed USB device number 48 using dummy_hcd [ 1299.978775][T30596] netlink: 'syz.4.6344': attribute type 1 has an invalid length. [ 1299.981359][T30596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6344'. [ 1300.078134][T30066] usb 13-1: Using ep0 maxpacket: 16 [ 1300.082191][T30066] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.086928][T30066] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.091815][T30066] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1300.097362][T30066] usb 13-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1300.118134][T30066] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.125734][T30066] usb 13-1: config 0 descriptor?? [ 1300.152643][T30603] FAULT_INJECTION: forcing a failure. [ 1300.152643][T30603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.175145][T30603] CPU: 2 UID: 0 PID: 30603 Comm: syz.7.6345 Not tainted syzkaller #0 PREEMPT(full) [ 1300.175164][T30603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1300.175171][T30603] Call Trace: [ 1300.175175][T30603] [ 1300.175180][T30603] dump_stack_lvl+0x16c/0x1f0 [ 1300.175202][T30603] should_fail_ex+0x512/0x640 [ 1300.175222][T30603] _copy_from_user+0x2e/0xd0 [ 1300.175242][T30603] get_compat_msghdr+0xa7/0x170 [ 1300.175256][T30603] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1300.175275][T30603] ___sys_sendmsg+0x1ae/0x1d0 [ 1300.175290][T30603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.175309][T30603] ? find_held_lock+0x2b/0x80 [ 1300.175335][T30603] __sys_sendmsg+0x16d/0x220 [ 1300.175348][T30603] ? __pfx___sys_sendmsg+0x10/0x10 [ 1300.175370][T30603] __do_fast_syscall_32+0xe8/0x680 [ 1300.175383][T30603] do_fast_syscall_32+0x32/0x80 [ 1300.175394][T30603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1300.175409][T30603] RIP: 0023:0xf70ed579 [ 1300.175417][T30603] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1300.175428][T30603] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1300.175439][T30603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1300.175447][T30603] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.175453][T30603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.175460][T30603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1300.175516][T30603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.175531][T30603] [ 1300.298468][T30606] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1300.389340][T30610] netlink: 360 bytes leftover after parsing attributes in process `syz.1.6348'. [ 1300.392233][T30612] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.6349'. [ 1300.399000][T30612] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6349'. [ 1300.570014][T30584] random: crng reseeded on system resumption [ 1300.605405][T30066] usbhid 13-1:0.0: can't add hid device: -71 [ 1300.608484][T30066] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 1300.624536][T30066] usb 13-1: USB disconnect, device number 48 [ 1301.986585][T28487] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1302.016973][T30634] batman_adv: batadv0: Adding interface: vlan3 [ 1302.022595][T30634] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.033665][T30634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.038477][T30634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.042705][T30634] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1302.114473][T30066] hid (null): unknown global tag 0xd [ 1302.118697][T30066] hid-generic FF8B:0006:0008.0013: unknown global tag 0xd [ 1302.121174][T30066] hid-generic FF8B:0006:0008.0013: item 0 2 1 13 parsing failed [ 1302.124072][T30066] hid-generic FF8B:0006:0008.0013: probe with driver hid-generic failed with error -22 [ 1302.456110][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1302.461551][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1302.465279][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1302.468545][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1302.477297][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1302.724033][T28452] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.860734][T30650] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.934953][T28452] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.956804][T30651] lo speed is unknown, defaulting to 1000 [ 1303.012194][T30650] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.060637][T28452] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.115294][T30650] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.180662][T28452] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.245026][T30667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6365'. [ 1303.329206][T30650] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.357373][T30651] chnl_net:caif_netlink_parms(): no params data found [ 1303.557989][T30651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.561459][T30651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.564721][T30651] bridge_slave_0: entered allmulticast mode [ 1303.572460][T30651] bridge_slave_0: entered promiscuous mode [ 1303.608967][T30651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.612996][T30651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.616521][T30651] bridge_slave_1: entered allmulticast mode [ 1303.622063][T30651] bridge_slave_1: entered promiscuous mode [ 1303.625530][T28446] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.632999][T28452] tipc: Resetting bearer [ 1303.807319][T28452] erspan0 (unregistering): left promiscuous mode [ 1303.826201][T28452] gretap0 (unregistering): left promiscuous mode [ 1303.853048][T28452] tipc: Disabling bearer [ 1304.057034][T28452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.066525][T28452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.070775][T28452] bond0 (unregistering): Released all slaves [ 1304.220567][T28452] bond1 (unregistering): Released all slaves [ 1304.329435][T28452] bond2 (unregistering): Released all slaves [ 1304.431669][T28452] bond3 (unregistering): Released all slaves [ 1304.498219][ T5948] Bluetooth: hci0: command tx timeout [ 1304.551750][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'. [ 1304.554799][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'. [ 1304.577699][T28452] bond4 (unregistering): Released all slaves [ 1304.679393][T28452] bond5 (unregistering): Released all slaves [ 1304.785059][T28452] bond6 (unregistering): Released all slaves [ 1304.887028][T28452] bond7 (unregistering): Released all slaves [ 1304.983569][T28452] bond8 (unregistering): Released all slaves [ 1305.100958][T28452] bond9 (unregistering): Released all slaves [ 1305.199936][T28452] bond10 (unregistering): Released all slaves [ 1305.309014][T28452] bond11 (unregistering): Released all slaves [ 1305.395302][T30687] slcan: can't register candev [ 1305.402785][T30687] Falling back ldisc for ttyS3. [ 1305.439622][T28452] bond12 (unregistering): Released all slaves [ 1305.542692][T28452] bond13 (unregistering): Released all slaves [ 1305.642817][T28465] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.672650][T28452] tipc: Left network mode [ 1305.680211][T28442] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.693236][T30651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.708574][T30651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.736526][T28442] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.767771][T30651] team0: Port device team_slave_0 added [ 1305.799300][T30651] team0: Port device team_slave_1 added [ 1305.907357][T30651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.911204][T30699] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1305.914510][T30651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.923596][T30651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.928085][T30651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.930310][T30651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.938901][T30651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.960510][T30651] hsr_slave_0: entered promiscuous mode [ 1305.962818][T30651] hsr_slave_1: entered promiscuous mode [ 1305.965591][T30651] debugfs: 'hsr0' already exists in 'hsr' [ 1305.967465][T30651] Cannot create hsr debugfs directory [ 1306.265913][T28452] hsr_slave_0: left promiscuous mode [ 1306.270275][T28452] hsr_slave_1: left promiscuous mode [ 1306.273073][T28452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.275719][T28452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.279863][T28452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.282496][T28452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.286018][T28452] batman_adv: batadv0: Removing interface: vlan3 [ 1306.316879][T28452] veth1_vlan: left promiscuous mode [ 1306.319144][T28452] veth0_vlan: left promiscuous mode [ 1306.384258][T28452] pim6reg (unregistering): left allmulticast mode [ 1306.540439][T28452] hsr0 (unregistering): left allmulticast mode [ 1306.568115][ T5948] Bluetooth: hci0: command tx timeout [ 1306.682861][T28452] team0 (unregistering): Port device team_slave_1 removed [ 1306.715921][T28452] team0 (unregistering): Port device team_slave_0 removed [ 1307.244627][T30714] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1307.246789][T30714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1307.268988][T30714] vhci_hcd vhci_hcd.0: Device attached [ 1307.488268][T30651] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1307.493281][T30651] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1307.506745][T30651] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1307.514363][T30651] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1307.528542][ T6011] usb 52-1: SetAddress Request (14) to port 0 [ 1307.530886][ T6011] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1307.597819][T30651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.607626][T30651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.613229][T28465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.615505][T28465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1307.622154][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.624614][T11103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1307.657766][T28452] IPVS: stop unused estimator thread 0... [ 1307.735930][T30651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.927583][T30651] veth0_vlan: entered promiscuous mode [ 1307.932827][T30651] veth1_vlan: entered promiscuous mode [ 1307.946407][T30651] veth0_macvtap: entered promiscuous mode [ 1307.950682][T30651] veth1_macvtap: entered promiscuous mode [ 1307.961230][T30651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.968948][T30651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.977312][T28488] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.981472][T28488] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.985129][T28488] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.989861][T28488] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.025090][T30715] vhci_hcd: connection reset by peer [ 1308.027856][T28452] vhci_hcd: stop threads [ 1308.030026][T28452] vhci_hcd: release socket [ 1308.031573][ T5948] Bluetooth: hci3: Unknown advertising packet type: 0x78 [ 1308.032048][ T5948] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1308.032074][T28452] vhci_hcd: disconnect device [ 1308.061710][T28474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.066879][T28474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.079967][T28474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.082658][T28474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.180502][T30740] tipc: Started in network mode [ 1308.182255][T30740] tipc: Node identity 4, cluster identity 4711 [ 1308.184528][T30740] tipc: Node number set to 4 [ 1308.458169][ T6224] usb 13-1: new high-speed USB device number 49 using dummy_hcd [ 1308.608752][ T6224] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 1308.612851][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.616743][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.621276][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.624965][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.646355][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.648125][ T5948] Bluetooth: hci0: command tx timeout [ 1308.652660][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.656345][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.659879][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.664265][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.667811][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.672223][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.676659][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.680870][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.684652][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.689606][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.693254][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.696967][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.702225][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.705875][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.710138][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.714784][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.718767][ T6224] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.722516][ T6224] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.727262][ T6224] usb 13-1: config 0 interface 0 has no altsetting 0 [ 1308.733437][ T6224] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1308.737241][ T6224] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1308.741162][ T6224] usb 13-1: Product: syz [ 1308.743003][ T6224] usb 13-1: Manufacturer: syz [ 1308.744994][ T6224] usb 13-1: SerialNumber: syz [ 1308.748515][ T6224] usb 13-1: config 0 descriptor?? [ 1308.755415][ T6224] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 1308.898282][ T6535] usb 12-1: new high-speed USB device number 48 using dummy_hcd [ 1308.957959][ T6224] usb 13-1: USB disconnect, device number 49 [ 1308.961339][ T6224] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 1309.058298][ T6535] usb 12-1: Using ep0 maxpacket: 16 [ 1309.064660][ T6535] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1309.070853][ T6535] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1309.074669][ T6535] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.088106][ T6535] usb 12-1: Product: syz [ 1309.089811][ T6535] usb 12-1: Manufacturer: syz [ 1309.091504][ T6535] usb 12-1: SerialNumber: syz [ 1309.094347][ T6535] usb 12-1: config 0 descriptor?? [ 1309.099324][ T6535] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1309.102431][ T6535] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 1309.701247][ T6535] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 1310.085801][T30761] netlink: 'syz.4.6381': attribute type 1 has an invalid length. [ 1310.103060][T30761] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1310.109032][ T6535] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1310.112820][ T6535] em28xx 12-1:0.0: board has no eeprom [ 1310.115706][T30761] bond16: (slave veth0_to_bond): Releasing active interface [ 1310.209591][T30761] bond17: entered promiscuous mode [ 1310.211469][T30761] bond17: entered allmulticast mode [ 1310.488482][ T6535] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1310.491664][ T6535] em28xx 12-1:0.0: dvb set to bulk mode. [ 1310.548170][T21303] em28xx 12-1:0.0: Binding DVB extension [ 1310.728276][ T5948] Bluetooth: hci0: command tx timeout [ 1311.297968][T30778] program syz.1.6385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1311.452719][T30747] em28xx 12-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1311.462871][ T6535] usb 12-1: USB disconnect, device number 48 [ 1311.466032][ T6535] em28xx 12-1:0.0: Disconnecting em28xx [ 1311.474835][T21303] em28xx 12-1:0.0: Registering input extension [ 1311.477042][ T6535] em28xx 12-1:0.0: Closing input extension [ 1311.482044][ T6535] em28xx 12-1:0.0: Freeing device [ 1311.611158][T30784] program syz.4.6387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1311.785980][T30787] netlink: 'syz.4.6387': attribute type 39 has an invalid length. [ 1312.070845][T30795] netlink: 'syz.7.6390': attribute type 1 has an invalid length. [ 1312.112322][T30795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.203629][T30801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.271618][T30801] bond1: entered promiscuous mode [ 1312.273337][T30801] bond1: entered allmulticast mode [ 1312.359550][T30806] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.6392'. [ 1312.364589][T30806] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6392'. [ 1312.497982][T30778] netlink: 'syz.1.6385': attribute type 39 has an invalid length. [ 1312.694659][ T6011] usb 52-1: device descriptor read/8, error -110 [ 1313.162018][ T6011] usb usb52-port1: attempt power cycle [ 1313.474184][T30828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1313.476379][T30828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1313.496446][T30828] vhci_hcd vhci_hcd.0: Device attached [ 1313.508442][T30828] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6397'. [ 1313.728221][ T5836] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1313.749220][ T6011] usb usb52-port1: unable to enumerate USB device [ 1313.899306][T30842] program syz.8.6401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1314.037166][T30845] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1314.068529][T30845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1314.086165][T30842] netlink: 'syz.8.6401': attribute type 39 has an invalid length. [ 1314.250615][T30829] vhci_hcd: connection reset by peer [ 1314.259970][T28468] vhci_hcd: stop threads [ 1314.261514][T28468] vhci_hcd: release socket [ 1314.263166][T28468] vhci_hcd: disconnect device [ 1314.387990][T30855] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6404'. [ 1314.409645][T30857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6406'. [ 1316.697945][T30874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1316.700151][T30874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1316.703511][T30874] vhci_hcd vhci_hcd.0: Device attached [ 1316.969077][ T6224] usb 40-1: SetAddress Request (46) to port 0 [ 1317.115813][ T6224] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1317.508180][T30875] vhci_hcd: connection reset by peer [ 1317.511001][T28468] vhci_hcd: stop threads [ 1317.513027][T28468] vhci_hcd: release socket [ 1317.515152][T28468] vhci_hcd: disconnect device [ 1318.098221][T21694] usb 12-1: new high-speed USB device number 49 using dummy_hcd [ 1318.241016][T21694] usb 12-1: device descriptor read/64, error -71 [ 1318.508133][T21694] usb 12-1: new high-speed USB device number 50 using dummy_hcd [ 1318.517650][T30910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1318.522540][T30910] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6418'. [ 1318.643185][T30913] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6418'. [ 1318.646430][T30913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6418'. [ 1318.698490][T21694] usb 12-1: device descriptor read/64, error -71 [ 1318.808313][T21694] usb usb12-port1: attempt power cycle [ 1318.878228][ T5836] vhci_hcd: vhci_device speed not set [ 1319.178223][T21694] usb 12-1: new high-speed USB device number 51 using dummy_hcd [ 1319.198774][T21694] usb 12-1: device descriptor read/8, error -71 [ 1319.208155][ T5948] Bluetooth: hci3: command 0x0406 tx timeout [ 1319.438169][T21694] usb 12-1: new high-speed USB device number 52 using dummy_hcd [ 1319.459731][T21694] usb 12-1: device descriptor read/8, error -71 [ 1319.568592][T21694] usb usb12-port1: unable to enumerate USB device [ 1321.583885][T30943] md: md2 stopped. [ 1322.159122][T30964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1322.168149][ T6224] usb 40-1: device descriptor read/8, error -110 [ 1322.281812][T30968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6434'. [ 1322.559892][ T6224] usb usb40-port1: attempt power cycle [ 1322.570803][T30956] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1323.008238][T30987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1323.118649][ T6224] usb usb40-port1: unable to enumerate USB device [ 1323.408128][ T6224] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1323.568200][ T6224] usb 6-1: device descriptor read/64, error -71 [ 1323.849133][ T6224] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1323.988144][ T6224] usb 6-1: device descriptor read/64, error -71 [ 1324.108306][ T6224] usb usb6-port1: attempt power cycle [ 1324.193086][T31004] vlan0: entered promiscuous mode [ 1324.201326][T31004] team0: Port device vlan0 added [ 1324.257375][T31008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6446'. [ 1324.371792][T31014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6449'. [ 1324.462633][ T6224] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1324.489174][ T6224] usb 6-1: device descriptor read/8, error -71 [ 1324.588151][T31021] fuse: Unknown parameter 'gzoupOæÀƃšid0000000000000000000000000000000000000000003' [ 1324.728506][ T6224] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1324.748591][ T6224] usb 6-1: device descriptor read/8, error -71 [ 1324.858365][ T6224] usb usb6-port1: unable to enumerate USB device [ 1325.446182][T31030] netlink: 'syz.4.6454': attribute type 1 has an invalid length. [ 1325.468848][T31030] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1325.573054][T31030] bond18: (slave veth3): Enslaving as an active interface with a down link [ 1325.702983][T31030] batman_adv: batadv0: Interface deactivated: dummy0 [ 1325.706380][T31030] batman_adv: batadv0: Removing interface: dummy0 [ 1325.717532][T31030] bond18: (slave dummy0): making interface the new active one [ 1325.718193][T31030] dummy0: entered promiscuous mode [ 1325.718354][T31030] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 1325.947884][T31044] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.6459'. [ 1325.967117][T31030] bond18 (unregistering): (slave veth3): Releasing active interface [ 1325.972612][T31030] bond18 (unregistering): (slave dummy0): Releasing active interface [ 1325.978964][T31030] bond18 (unregistering): Released all slaves [ 1325.987771][T31044] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6459'. [ 1326.473455][T31050] netlink: 'syz.1.6461': attribute type 39 has an invalid length. [ 1326.647605][T31060] random: crng reseeded on system resumption [ 1326.792266][T31067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6466'. [ 1327.058316][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 1327.061027][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 1327.338510][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 1327.341246][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 1327.638660][ T5836] usb 12-1: new high-speed USB device number 53 using dummy_hcd [ 1327.788175][ T5836] usb 12-1: Using ep0 maxpacket: 16 [ 1327.791945][ T5836] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.796943][ T5836] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.801414][ T5836] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1327.809252][ T5836] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1327.813186][ T5836] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.831347][ T5836] usb 12-1: config 0 descriptor?? [ 1327.861510][ T6224] libceph: connect (1)[c::]:6789 error -101 [ 1327.864369][ T6224] libceph: mon0 (1)[c::]:6789 connect error [ 1328.007194][ T53] IPVS: starting estimator thread 0... [ 1328.041107][ T5836] usbhid 12-1:0.0: can't add hid device: -71 [ 1328.048688][ T5836] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1328.056069][ T5836] usb 12-1: USB disconnect, device number 53 [ 1328.279780][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1328.279792][ T40] audit: type=1800 audit(1764860330.581:30826): pid=31113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6480" name="bus" dev="overlay" ino=1999 res=0 errno=0 [ 1328.798135][T31099] IPVS: using max 45 ests per chain, 108000 per kthread [ 1328.898274][T31122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1329.288554][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 1329.290693][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 1329.746585][T31127] binder: 31126:31127 ioctl c0306201 0 returned -14 [ 1329.848861][T31130] bridge_slave_0: left promiscuous mode [ 1329.850877][T31130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.873168][T31130] bridge_slave_1: left allmulticast mode [ 1329.875373][T31130] bridge_slave_1: left promiscuous mode [ 1329.877733][T31130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.909600][T31130] team0: Port device team_slave_0 removed [ 1329.934290][T31130] team0: Port device team_slave_1 removed [ 1329.939853][T31130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1329.942383][T31130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.947917][T31130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1329.950979][T31130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.961349][T31130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1329.972845][T31071] ceph: No mds server is up or the cluster is laggy [ 1329.988195][T31135] vlan0: entered promiscuous mode [ 1329.996350][T31135] team0: Port device vlan0 added [ 1330.492900][T31147] ubi: mtd0 is already attached to ubi31 [ 1330.516569][T31153] siw: device registration error -23 [ 1330.560580][T31156] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.6492'. [ 1330.567327][T31156] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6492'. [ 1330.721193][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6490'. [ 1330.984517][T31163] 9pnet_fd: Insufficient options for proto=fd [ 1332.205426][T31170] netlink: 'syz.7.6497': attribute type 39 has an invalid length. [ 1333.447729][T31219] netlink: 'syz.8.6511': attribute type 1 has an invalid length. [ 1333.474363][T31219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.511360][T31219] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6511'. [ 1333.544370][T31223] netfs: Couldn't get user pages (rc=-14) [ 1333.633104][T31226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.635997][T31226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.699846][T31219] bond1: entered promiscuous mode [ 1333.708149][T31219] bond1: entered allmulticast mode [ 1333.793649][T31233] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1333.798761][T31233] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6514'. [ 1334.104301][T31239] FAULT_INJECTION: forcing a failure. [ 1334.104301][T31239] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.109357][T31239] CPU: 2 UID: 0 PID: 31239 Comm: syz.1.6513 Not tainted syzkaller #0 PREEMPT(full) [ 1334.109373][T31239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1334.109380][T31239] Call Trace: [ 1334.109384][T31239] [ 1334.109388][T31239] dump_stack_lvl+0x16c/0x1f0 [ 1334.109409][T31239] should_fail_ex+0x512/0x640 [ 1334.109426][T31239] ? __kvmalloc_node_noprof+0x129/0xa50 [ 1334.109444][T31239] should_failslab+0xc2/0x120 [ 1334.109455][T31239] __kvmalloc_node_noprof+0x13c/0xa50 [ 1334.109471][T31239] ? __pfx___debug_object_init+0x10/0x10 [ 1334.109485][T31239] ? bucket_table_alloc.isra.0+0x88/0x460 [ 1334.109503][T31239] ? bucket_table_alloc.isra.0+0x88/0x460 [ 1334.109517][T31239] bucket_table_alloc.isra.0+0x88/0x460 [ 1334.109534][T31239] rhashtable_init_noprof+0x41a/0x7e0 [ 1334.109547][T31239] ? __init_waitqueue_head+0xca/0x150 [ 1334.109564][T31239] rhltable_init_noprof+0x20/0x60 [ 1334.109579][T31239] sta_info_init+0x27/0x160 [ 1334.109594][T31239] ieee80211_alloc_hw_nm+0x87b/0x22b0 [ 1334.109611][T31239] ? __local_bh_enable_ip+0xa4/0x120 [ 1334.109629][T31239] mac80211_hwsim_new_radio+0x1d3/0x50c0 [ 1334.109648][T31239] ? parse_pmsr_capa+0x12c/0x6f0 [ 1334.109663][T31239] ? parse_pmsr_capa+0x379/0x6f0 [ 1334.109679][T31239] ? __pfx_parse_pmsr_capa+0x10/0x10 [ 1334.109698][T31239] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1334.109715][T31239] hwsim_new_radio_nl+0xba2/0x1330 [ 1334.109730][T31239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1334.109747][T31239] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1334.109765][T31239] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1334.109786][T31239] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1334.109803][T31239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1334.109820][T31239] ? genl_get_cmd+0x194/0x580 [ 1334.109838][T31239] ? bpf_lsm_capable+0x9/0x10 [ 1334.109853][T31239] ? security_capable+0x7e/0x260 [ 1334.109868][T31239] ? ns_capable+0xd7/0x110 [ 1334.109884][T31239] genl_rcv_msg+0x55c/0x800 [ 1334.109901][T31239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1334.109918][T31239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1334.109936][T31239] netlink_rcv_skb+0x158/0x420 [ 1334.109950][T31239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1334.109967][T31239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1334.109987][T31239] ? netlink_deliver_tap+0x1ae/0xd30 [ 1334.110003][T31239] genl_rcv+0x28/0x40 [ 1334.110021][T31239] netlink_unicast+0x5aa/0x870 [ 1334.110043][T31239] ? __pfx_netlink_unicast+0x10/0x10 [ 1334.110072][T31239] netlink_sendmsg+0x8c8/0xdd0 [ 1334.110100][T31239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.110123][T31239] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1334.110151][T31239] ____sys_sendmsg+0xa5d/0xc30 [ 1334.110170][T31239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1334.110184][T31239] ? get_compat_msghdr+0x11a/0x170 [ 1334.110209][T31239] ___sys_sendmsg+0x134/0x1d0 [ 1334.110222][T31239] ? __pfx____sys_sendmsg+0x10/0x10 [ 1334.110241][T31239] ? find_held_lock+0x2b/0x80 [ 1334.110265][T31239] __sys_sendmsg+0x16d/0x220 [ 1334.110277][T31239] ? __pfx___sys_sendmsg+0x10/0x10 [ 1334.110298][T31239] __do_fast_syscall_32+0xe8/0x680 [ 1334.110310][T31239] do_fast_syscall_32+0x32/0x80 [ 1334.110320][T31239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1334.110333][T31239] RIP: 0023:0xf70ed579 [ 1334.110342][T31239] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1334.110352][T31239] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1334.110366][T31239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1334.110376][T31239] RDX: 0000000020000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1334.110386][T31239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1334.110396][T31239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1334.110405][T31239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1334.110429][T31239] [ 1334.363362][T31243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1334.503500][T31253] overlayfs: failed to resolve 'euid>00000000000000000000': -2 [ 1335.706364][T31272] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6524'. [ 1335.713006][T31272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6524'. [ 1337.728144][T21303] usb 12-1: new high-speed USB device number 54 using dummy_hcd [ 1337.858230][T27707] usb 13-1: new high-speed USB device number 50 using dummy_hcd [ 1337.878192][T21303] usb 12-1: Using ep0 maxpacket: 16 [ 1337.882550][T21303] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1337.889366][T21303] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1337.893708][T21303] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.897388][T21303] usb 12-1: Product: syz [ 1337.899661][T21303] usb 12-1: Manufacturer: syz [ 1337.901693][T21303] usb 12-1: SerialNumber: syz [ 1337.906377][T21303] usb 12-1: config 0 descriptor?? [ 1337.912000][T21303] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1337.916253][T21303] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 1338.018171][T27707] usb 13-1: Using ep0 maxpacket: 16 [ 1338.022556][T27707] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1338.029199][T27707] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1338.033277][T27707] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.036916][T27707] usb 13-1: Product: syz [ 1338.039314][T27707] usb 13-1: Manufacturer: syz [ 1338.041387][T27707] usb 13-1: SerialNumber: syz [ 1338.046075][T27707] usb 13-1: config 0 descriptor?? [ 1338.051549][T27707] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1338.055535][T27707] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1338.476419][T31313] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1338.513639][T21303] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 1338.657086][T27707] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1339.082419][T21303] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1339.086238][T21303] em28xx 12-1:0.0: board has no eeprom [ 1339.090204][T27707] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1339.096102][T27707] em28xx 13-1:0.0: board has no eeprom [ 1339.281543][T31324] FAULT_INJECTION: forcing a failure. [ 1339.281543][T31324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1339.287210][T31324] CPU: 0 UID: 0 PID: 31324 Comm: syz.4.6546 Not tainted syzkaller #0 PREEMPT(full) [ 1339.287234][T31324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1339.287245][T31324] Call Trace: [ 1339.287252][T31324] [ 1339.287260][T31324] dump_stack_lvl+0x16c/0x1f0 [ 1339.287307][T31324] should_fail_ex+0x512/0x640 [ 1339.287339][T31324] should_fail_alloc_page+0xe7/0x130 [ 1339.287360][T31324] prepare_alloc_pages+0x3c2/0x610 [ 1339.287383][T31324] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1339.287415][T31324] ? css_rstat_updated+0x1c2/0x510 [ 1339.287448][T31324] ? mark_held_locks+0x49/0x80 [ 1339.287468][T31324] ? irqentry_exit+0x1dd/0x8c0 [ 1339.287493][T31324] ? lockdep_hardirqs_on+0x7c/0x110 [ 1339.287519][T31324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1339.287541][T31324] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1339.287575][T31324] ? __lock_acquire+0x433/0x22f0 [ 1339.287595][T31324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1339.287625][T31324] ? policy_nodemask+0xea/0x4e0 [ 1339.287646][T31324] alloc_pages_mpol+0x1fb/0x550 [ 1339.287665][T31324] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1339.287693][T31324] alloc_pages_noprof+0x12d/0x180 [ 1339.287712][T31324] pte_alloc_one+0x1e/0x350 [ 1339.287737][T31324] __pte_alloc+0x6d/0x380 [ 1339.287761][T31324] ? __pfx___pte_alloc+0x10/0x10 [ 1339.287782][T31324] ? __lock_acquire+0x433/0x22f0 [ 1339.287804][T31324] do_pte_missing+0x2964/0x4000 [ 1339.287824][T31324] ? mtree_range_walk+0x718/0xc00 [ 1339.287847][T31324] ? pgd_none+0x9f/0xe0 [ 1339.287867][T31324] ? __pfx_pgd_none+0x10/0x10 [ 1339.287885][T31324] ? find_held_lock+0x2b/0x80 [ 1339.287912][T31324] __handle_mm_fault+0x154b/0x2ad0 [ 1339.287938][T31324] ? __pfx___handle_mm_fault+0x10/0x10 [ 1339.287983][T31324] handle_mm_fault+0x3fe/0xad0 [ 1339.288008][T31324] __get_user_pages+0x605/0x33c0 [ 1339.288035][T31324] ? down_read_killable+0x313/0x4c0 [ 1339.288055][T31324] ? __pfx___get_user_pages+0x10/0x10 [ 1339.288071][T31324] ? __gup_longterm_locked+0x1171/0x17e0 [ 1339.288094][T31324] __gup_longterm_locked+0xa92/0x17e0 [ 1339.288110][T31324] ? __lock_acquire+0x351/0x22f0 [ 1339.288135][T31324] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1339.288155][T31324] ? pgd_none+0x9f/0xe0 [ 1339.288197][T31324] ? sanity_check_pinned_pages+0x23/0x11d0 [ 1339.288231][T31324] gup_fast_fallback+0xe91/0x2320 [ 1339.288270][T31324] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1339.288285][T31324] ? irqentry_exit+0x1dd/0x8c0 [ 1339.288311][T31324] ? lockdep_hardirqs_on+0x7c/0x110 [ 1339.288337][T31324] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1339.288366][T31324] pin_user_pages_fast+0xa7/0xf0 [ 1339.288382][T31324] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1339.288410][T31324] iov_iter_extract_pages+0x3a2/0x1ed0 [ 1339.288449][T31324] ? __pfx_nhpoly1305_units+0x10/0x10 [ 1339.288477][T31324] ? kernel_fpu_begin_mask+0xb0/0x2a0 [ 1339.288499][T31324] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1339.288534][T31324] ? __local_bh_enable_ip+0xa4/0x120 [ 1339.288559][T31324] ? lockdep_hardirqs_on+0x7c/0x110 [ 1339.288583][T31324] ? kernel_fpu_end+0x59/0x70 [ 1339.288600][T31324] ? __local_bh_enable_ip+0xa4/0x120 [ 1339.288624][T31324] ? kernel_fpu_end+0x5e/0x70 [ 1339.288642][T31324] ? nhpoly1305_avx2_update+0x8d/0xc0 [ 1339.288670][T31324] extract_iter_to_sg+0xf6e/0x20c0 [ 1339.288696][T31324] ? crypto_hash_walk_done+0x63/0x400 [ 1339.288733][T31324] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1339.288762][T31324] ? __pfx_unpin_user_page+0x10/0x10 [ 1339.288799][T31324] hash_sendmsg+0x435/0xfa0 [ 1339.288832][T31324] __sys_sendto+0x4a3/0x520 [ 1339.288851][T31324] ? __pfx___sys_sendto+0x10/0x10 [ 1339.288891][T31324] ? ksys_write+0x1ac/0x250 [ 1339.288907][T31324] ? __pfx_ksys_write+0x10/0x10 [ 1339.288927][T31324] __ia32_sys_sendto+0xdd/0x1b0 [ 1339.288943][T31324] ? __do_fast_syscall_32+0x9a/0x680 [ 1339.288959][T31324] ? lockdep_hardirqs_on+0x7c/0x110 [ 1339.288984][T31324] __do_fast_syscall_32+0xe8/0x680 [ 1339.289004][T31324] do_fast_syscall_32+0x32/0x80 [ 1339.289021][T31324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1339.289042][T31324] RIP: 0023:0xf705d579 [ 1339.289056][T31324] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1339.289072][T31324] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 1339.289089][T31324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1339.289101][T31324] RDX: 00000000ffffffe3 RSI: 0000000004004840 RDI: 0000000000000000 [ 1339.289111][T31324] RBP: 00000000fffffe1b R08: 0000000000000000 R09: 0000000000000000 [ 1339.289121][T31324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1339.289131][T31324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.289156][T31324] [ 1339.558272][T21303] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1339.560986][T21303] em28xx 12-1:0.0: dvb set to bulk mode. [ 1339.562851][ T6535] em28xx 12-1:0.0: Binding DVB extension [ 1339.674425][T27707] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1339.677064][T27707] em28xx 13-1:0.0: dvb set to bulk mode. [ 1340.488334][T31291] em28xx 12-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1340.491506][T31295] em28xx 12-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1340.494890][ T6051] usb 12-1: USB disconnect, device number 54 [ 1340.497418][ T6051] em28xx 12-1:0.0: Disconnecting em28xx [ 1340.515600][T21694] usb 13-1: USB disconnect, device number 50 [ 1340.518546][T21694] em28xx 13-1:0.0: Disconnecting em28xx [ 1340.594280][ T6535] em28xx 12-1:0.0: Registering input extension [ 1340.596858][ T6011] em28xx 13-1:0.0: Binding DVB extension [ 1340.615038][ T6011] em28xx 13-1:0.0: Registering input extension [ 1340.617486][T21694] em28xx 13-1:0.0: Closing input extension [ 1340.621317][ T6051] em28xx 12-1:0.0: Closing input extension [ 1340.633924][T21694] em28xx 13-1:0.0: Freeing device [ 1340.637473][ T6051] em28xx 12-1:0.0: Freeing device [ 1340.651979][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6551'. [ 1342.808215][ T6051] usb 13-1: new high-speed USB device number 51 using dummy_hcd [ 1342.945650][T31386] (syz.4.6567,31386,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1342.950437][T31386] (syz.4.6567,31386,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1342.978097][ T6051] usb 13-1: Using ep0 maxpacket: 16 [ 1342.983897][ T6051] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1342.989179][ T6051] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1342.991979][ T6051] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.004690][ T6051] usb 13-1: Product: syz [ 1343.006139][ T6051] usb 13-1: Manufacturer: syz [ 1343.007657][ T6051] usb 13-1: SerialNumber: syz [ 1343.011774][ T6051] usb 13-1: config 0 descriptor?? [ 1343.016042][ T6051] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1343.027704][ T6051] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1343.595250][T31392] ubi31: detaching mtd0 [ 1343.630377][T31392] ubi31: mtd0 is detached [ 1343.632338][ T6051] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 1344.039173][ T6051] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1344.041774][ T6051] em28xx 13-1:0.0: board has no eeprom [ 1344.388460][ T6051] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1344.392209][ T6051] em28xx 13-1:0.0: dvb set to bulk mode. [ 1344.410010][ T6051] em28xx 13-1:0.0: Binding DVB extension [ 1344.512857][T31404] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1344.518911][T31404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1345.368954][T31378] em28xx 13-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1345.375782][T21303] usb 13-1: USB disconnect, device number 51 [ 1345.378616][T21303] em28xx 13-1:0.0: Disconnecting em28xx [ 1345.456182][ T6051] em28xx 13-1:0.0: Registering input extension [ 1345.460793][T21303] em28xx 13-1:0.0: Closing input extension [ 1345.466126][T21303] em28xx 13-1:0.0: Freeing device [ 1345.699253][T31419] syzkaller0: entered promiscuous mode [ 1345.701168][T31419] syzkaller0: entered allmulticast mode [ 1345.725993][T31419] tipc: Started in network mode [ 1345.727680][T31419] tipc: Node identity a620754e32f7, cluster identity 4711 [ 1345.732679][T31419] tipc: Enabled bearer , priority 0 [ 1345.752365][T31422] tipc: Resetting bearer [ 1345.764664][T31422] tipc: Disabling bearer [ 1346.218989][T31434] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1346.221215][T31434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1346.238964][T31434] vhci_hcd vhci_hcd.0: Device attached [ 1346.309282][ T40] audit: type=1326 audit(1764860348.611:30827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31430 comm="syz.4.6581" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 1346.518523][ T6011] usb 46-1: SetAddress Request (31) to port 0 [ 1346.521562][ T6011] usb 46-1: new SuperSpeed USB device number 31 using vhci_hcd [ 1346.543284][T31439] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1346.545459][T31439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1346.548138][T31439] vhci_hcd vhci_hcd.0: Device attached [ 1346.552297][T31438] nbd1: detected capacity change from 0 to 127 [ 1346.798858][ T53] usb 51-1: new low-speed USB device number 23 using vhci_hcd [ 1346.889255][ T5940] block nbd1: Receive control failed (result -32) [ 1346.894653][T31440] vhci_hcd: connection reset by peer [ 1346.902347][T28488] vhci_hcd: stop threads [ 1346.902354][T31435] vhci_hcd: connection reset by peer [ 1346.905414][T28488] vhci_hcd: release socket [ 1346.906965][T28488] vhci_hcd: disconnect device [ 1346.910319][T28488] vhci_hcd: stop threads [ 1346.911839][T28488] vhci_hcd: release socket [ 1346.913371][T28488] vhci_hcd: disconnect device [ 1347.662525][T31449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6583'. [ 1347.746158][T31451] FAULT_INJECTION: forcing a failure. [ 1347.746158][T31451] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.764952][T31451] CPU: 0 UID: 0 PID: 31451 Comm: syz.7.6585 Not tainted syzkaller #0 PREEMPT(full) [ 1347.764969][T31451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1347.764976][T31451] Call Trace: [ 1347.764980][T31451] [ 1347.764985][T31451] dump_stack_lvl+0x16c/0x1f0 [ 1347.765005][T31451] should_fail_ex+0x512/0x640 [ 1347.765022][T31451] ? __kmalloc_noprof+0xca/0x8f0 [ 1347.765037][T31451] should_failslab+0xc2/0x120 [ 1347.765048][T31451] __kmalloc_noprof+0xdd/0x8f0 [ 1347.765072][T31451] ? trace_kmalloc+0x2b/0xb0 [ 1347.765081][T31451] ? bio_kmalloc+0x41/0x70 [ 1347.765094][T31451] ? bio_kmalloc+0x41/0x70 [ 1347.765104][T31451] bio_kmalloc+0x41/0x70 [ 1347.765114][T31451] blk_rq_map_user_iov+0x43c/0x13c0 [ 1347.765135][T31451] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1347.765154][T31451] ? mark_held_locks+0x49/0x80 [ 1347.765166][T31451] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1347.765182][T31451] ? lockdep_hardirqs_on+0x7c/0x110 [ 1347.765198][T31451] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1347.765214][T31451] ? __debug_object_init+0x2de/0x3d0 [ 1347.765227][T31451] ? import_ubuf+0x1b6/0x220 [ 1347.765244][T31451] blk_rq_map_user+0x11d/0x180 [ 1347.765260][T31451] ? __pfx_blk_rq_map_user+0x10/0x10 [ 1347.765283][T31451] sr_read_cdda_bpc+0x12f/0x670 [ 1347.765300][T31451] ? __pfx_sr_read_cdda_bpc+0x10/0x10 [ 1347.765319][T31451] mmc_ioctl_cdrom_read_audio+0x46e/0x7a0 [ 1347.765335][T31451] ? __pfx_mmc_ioctl_cdrom_read_audio+0x10/0x10 [ 1347.765352][T31451] cdrom_ioctl+0x28be/0x3190 [ 1347.765362][T31451] ? __pfx___might_resched+0x10/0x10 [ 1347.765379][T31451] ? __pfx_cdrom_ioctl+0x10/0x10 [ 1347.765389][T31451] ? rpm_resume+0x7f7/0x12f0 [ 1347.765402][T31451] ? rcu_is_watching+0x12/0xc0 [ 1347.765419][T31451] ? rpm_resume+0x7f7/0x12f0 [ 1347.765431][T31451] ? trace_rpm_return_int+0x196/0x1f0 [ 1347.765444][T31451] ? rpm_resume+0x7fc/0x12f0 [ 1347.765457][T31451] ? sr_block_ioctl+0x118/0x250 [ 1347.765475][T31451] ? __pfx_rpm_resume+0x10/0x10 [ 1347.765488][T31451] ? do_raw_spin_lock+0x12c/0x2b0 [ 1347.765502][T31451] ? find_held_lock+0x2b/0x80 [ 1347.765520][T31451] ? lockdep_hardirqs_on+0x7c/0x110 [ 1347.765536][T31451] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1347.765552][T31451] ? __pm_runtime_resume+0xc3/0x170 [ 1347.765568][T31451] sr_block_ioctl+0x1b0/0x250 [ 1347.765584][T31451] ? __pfx_sr_block_ioctl+0x10/0x10 [ 1347.765599][T31451] blkdev_compat_ptr_ioctl+0x9f/0xe0 [ 1347.765610][T31451] ? __pfx_blkdev_compat_ptr_ioctl+0x10/0x10 [ 1347.765620][T31451] compat_blkdev_ioctl+0x2ee/0x7a0 [ 1347.765632][T31451] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1347.765642][T31451] ? fput+0x30/0xf0 [ 1347.765656][T31451] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1347.765667][T31451] __ia32_compat_sys_ioctl+0x242/0x370 [ 1347.765684][T31451] __do_fast_syscall_32+0xe8/0x680 [ 1347.765696][T31451] do_fast_syscall_32+0x32/0x80 [ 1347.765706][T31451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1347.765719][T31451] RIP: 0023:0xf70ed579 [ 1347.765728][T31451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1347.765738][T31451] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1347.765749][T31451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000530e [ 1347.765755][T31451] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.765761][T31451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1347.765767][T31451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1347.765773][T31451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1347.765787][T31451] [ 1347.889846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.277337][T31472] FAULT_INJECTION: forcing a failure. [ 1349.277337][T31472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.283503][T31472] CPU: 2 UID: 0 PID: 31472 Comm: syz.7.6591 Not tainted syzkaller #0 PREEMPT(full) [ 1349.283518][T31472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1349.283525][T31472] Call Trace: [ 1349.283529][T31472] [ 1349.283534][T31472] dump_stack_lvl+0x16c/0x1f0 [ 1349.283555][T31472] should_fail_ex+0x512/0x640 [ 1349.283574][T31472] _copy_from_user+0x2e/0xd0 [ 1349.283591][T31472] kstrtouint_from_user+0xd6/0x1d0 [ 1349.283604][T31472] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1349.283624][T31472] proc_fail_nth_write+0x83/0x220 [ 1349.283637][T31472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1349.283653][T31472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1349.283665][T31472] vfs_write+0x2a0/0x11d0 [ 1349.283676][T31472] ? __pfx___mutex_lock+0x10/0x10 [ 1349.283688][T31472] ? __pfx_vfs_write+0x10/0x10 [ 1349.283697][T31472] ? find_held_lock+0x2b/0x80 [ 1349.283716][T31472] ? __fget_files+0x20e/0x3c0 [ 1349.283730][T31472] ksys_write+0x12a/0x250 [ 1349.283740][T31472] ? __pfx_ksys_write+0x10/0x10 [ 1349.283759][T31472] __do_fast_syscall_32+0xe8/0x680 [ 1349.283776][T31472] do_fast_syscall_32+0x32/0x80 [ 1349.283792][T31472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1349.283814][T31472] RIP: 0023:0xf70ed579 [ 1349.283828][T31472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1349.283845][T31472] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1349.283861][T31472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54dd620 [ 1349.283868][T31472] RDX: 0000000000000001 RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 1349.283874][T31472] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1349.283880][T31472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1349.283887][T31472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.283905][T31472] [ 1349.668136][ T6051] usb 12-1: new high-speed USB device number 55 using dummy_hcd [ 1349.818258][ T6051] usb 12-1: Using ep0 maxpacket: 8 [ 1349.831742][ T6051] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1349.838144][ T6051] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1349.841423][ T6051] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.845213][ T6051] usb 12-1: config 0 descriptor?? [ 1350.266456][ T6051] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1350.797122][T31487] i2c i2c-2: unsupported multi-msg i2c transaction [ 1350.810931][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6596'. [ 1351.651434][ T6011] usb 46-1: device descriptor read/8, error -110 [ 1351.928299][ T53] vhci_hcd: vhci_device speed not set [ 1352.039924][ T6011] usb usb46-port1: attempt power cycle [ 1352.344746][T31508] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6600'. [ 1352.348384][T31508] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6600'. [ 1352.384968][T31508] ip6gretap0: entered promiscuous mode [ 1352.394885][T31508] ip6gretap0: left promiscuous mode [ 1352.936029][ T6535] usb 12-1: USB disconnect, device number 55 [ 1353.077333][ T6011] usb usb46-port1: unable to enumerate USB device [ 1353.385232][T31524] comedi comedi3: c6xdigio: I/O port conflict (0x8001,3) [ 1353.387784][T31524] ------------[ cut here ]------------ [ 1353.390777][T31524] Unexpected driver unregister! [ 1353.392516][T31524] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.8.6606/31524 [ 1353.395137][T31524] Modules linked in: [ 1353.397193][T31524] CPU: 0 UID: 0 PID: 31524 Comm: syz.8.6606 Not tainted syzkaller #0 PREEMPT(full) [ 1353.401370][T31524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1353.405090][T31524] RIP: 0010:driver_unregister+0x89/0xb0 [ 1353.407266][T31524] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 c2 82 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 c3 c1 e1 fb e8 be c1 e1 fb 48 8d 3d c7 44 b5 0a <67> 48 0f b9 3a 5b 5d e9 ab c1 e1 fb e8 c6 d4 49 fc eb 9a e8 bf d4 [ 1353.414180][T31524] RSP: 0018:ffffc900077e7760 EFLAGS: 00010283 [ 1353.416201][T31524] RAX: 0000000000001291 RBX: ffffffff8ff42fa0 RCX: ffffc9000d041000 [ 1353.419020][T31524] RDX: 0000000000080000 RSI: ffffffff85dbb512 RDI: ffffffff9090f9e0 [ 1353.421536][T31524] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1353.424215][T31524] R10: 0000000000000000 R11: 00000000a413dbd3 R12: ffffffff8ff42ee0 [ 1353.426716][T31524] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804a142000 [ 1353.429407][T31524] FS: 0000000000000000(0000) GS:ffff88809778a000(0063) knlGS:00000000f544db40 [ 1353.432344][T31524] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1353.434801][T31524] CR2: 0000000030003ff8 CR3: 0000000049ad9000 CR4: 0000000000352ef0 [ 1353.438301][T31524] Call Trace: [ 1353.439723][T31524] [ 1353.440811][T31524] comedi_device_detach_locked+0x12f/0xa50 [ 1353.442754][T31524] comedi_device_detach+0x67/0xb0 [ 1353.444424][T31524] comedi_device_attach+0x43d/0x900 [ 1353.446101][T31524] do_devconfig_ioctl+0x1b1/0x710 [ 1353.447771][T31524] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 1353.450603][T31524] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1353.452678][T31524] ? kasan_save_track+0x14/0x30 [ 1353.454338][T31524] ? __kasan_save_free_info+0x3b/0x60 [ 1353.456138][T31524] ? __kasan_slab_free+0x5f/0x80 [ 1353.457775][T31524] ? kfree+0x2f8/0x6e0 [ 1353.459332][T31524] ? tomoyo_path_number_perm+0x470/0x580 [ 1353.461164][T31524] ? security_file_ioctl_compat+0x9b/0x240 [ 1353.463187][T31524] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 1353.464985][T31524] ? __do_fast_syscall_32+0xe8/0x680 [ 1353.466865][T31524] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 1353.468890][T31524] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1353.471431][T31524] ? kasan_quarantine_put+0x10a/0x240 [ 1353.473368][T31524] ? lockdep_hardirqs_on+0x7c/0x110 [ 1353.475108][T31524] ? find_held_lock+0x2b/0x80 [ 1353.476714][T31524] ? tomoyo_path_number_perm+0x295/0x580 [ 1353.478783][T31524] ? tomoyo_path_number_perm+0x18d/0x580 [ 1353.481003][T31524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1353.483186][T31524] comedi_compat_ioctl+0x1d0/0x960 [ 1353.485198][T31524] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1353.487094][T31524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1353.489339][T31524] ? do_vfs_ioctl+0x128/0x14f0 [ 1353.491579][T31524] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1353.493702][T31524] ? find_held_lock+0x2b/0x80 [ 1353.495823][T31524] ? hook_file_ioctl_common+0x144/0x410 [ 1353.497771][T31524] ? __fget_files+0x20e/0x3c0 [ 1353.499482][T31524] ? __ia32_compat_sys_openat+0xe0/0x210 [ 1353.503604][T31524] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1353.503698][T31524] __ia32_compat_sys_ioctl+0x242/0x370 [ 1353.503721][T31524] __do_fast_syscall_32+0xe8/0x680 [ 1353.503759][T31524] do_fast_syscall_32+0x32/0x80 [ 1353.503775][T31524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1353.503813][T31524] RIP: 0023:0xf705d579 [ 1353.503825][T31524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1353.503837][T31524] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1353.503873][T31524] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 1353.503881][T31524] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.503888][T31524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.503895][T31524] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1353.503902][T31524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.503917][T31524] [ 1353.503924][T31524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1353.503933][T31524] CPU: 0 UID: 0 PID: 31524 Comm: syz.8.6606 Not tainted syzkaller #0 PREEMPT(full) [ 1353.503946][T31524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1353.503953][T31524] Call Trace: [ 1353.503957][T31524] [ 1353.503961][T31524] dump_stack_lvl+0x3d/0x1f0 [ 1353.503979][T31524] vpanic+0x640/0x6f0 [ 1353.503992][T31524] panic+0xca/0xd0 [ 1353.504004][T31524] ? __pfx_panic+0x10/0x10 [ 1353.504020][T31524] check_panic_on_warn+0xab/0xb0 [ 1353.504033][T31524] __warn+0x108/0x3c0 [ 1353.504045][T31524] __report_bug+0x2a0/0x520 [ 1353.504061][T31524] ? __pfx___report_bug+0x10/0x10 [ 1353.504075][T31524] ? driver_unregister+0x82/0xb0 [ 1353.504098][T31524] report_bug_entry+0xb2/0x220 [ 1353.504112][T31524] ? driver_unregister+0x89/0xb0 [ 1353.504128][T31524] handle_bug+0x18a/0x260 [ 1353.504140][T31524] exc_invalid_op+0x17/0x50 [ 1353.504151][T31524] asm_exc_invalid_op+0x1a/0x20 [ 1353.504161][T31524] RIP: 0010:driver_unregister+0x89/0xb0 [ 1353.504176][T31524] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 c2 82 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 c3 c1 e1 fb e8 be c1 e1 fb 48 8d 3d c7 44 b5 0a <67> 48 0f b9 3a 5b 5d e9 ab c1 e1 fb e8 c6 d4 49 fc eb 9a e8 bf d4 [ 1353.504186][T31524] RSP: 0018:ffffc900077e7760 EFLAGS: 00010283 [ 1353.504195][T31524] RAX: 0000000000001291 RBX: ffffffff8ff42fa0 RCX: ffffc9000d041000 [ 1353.504202][T31524] RDX: 0000000000080000 RSI: ffffffff85dbb512 RDI: ffffffff9090f9e0 [ 1353.504209][T31524] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1353.504215][T31524] R10: 0000000000000000 R11: 00000000a413dbd3 R12: ffffffff8ff42ee0 [ 1353.504222][T31524] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804a142000 [ 1353.504233][T31524] ? driver_unregister+0x82/0xb0 [ 1353.504250][T31524] comedi_device_detach_locked+0x12f/0xa50 [ 1353.504265][T31524] comedi_device_detach+0x67/0xb0 [ 1353.504277][T31524] comedi_device_attach+0x43d/0x900 [ 1353.504297][T31524] do_devconfig_ioctl+0x1b1/0x710 [ 1353.504311][T31524] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 1353.504329][T31524] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1353.504350][T31524] ? kasan_save_track+0x14/0x30 [ 1353.504367][T31524] ? __kasan_save_free_info+0x3b/0x60 [ 1353.504383][T31524] ? __kasan_slab_free+0x5f/0x80 [ 1353.504393][T31524] ? kfree+0x2f8/0x6e0 [ 1353.504405][T31524] ? tomoyo_path_number_perm+0x470/0x580 [ 1353.504422][T31524] ? security_file_ioctl_compat+0x9b/0x240 [ 1353.504432][T31524] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 1353.504446][T31524] ? __do_fast_syscall_32+0xe8/0x680 [ 1353.504459][T31524] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 1353.504479][T31524] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1353.504503][T31524] ? kasan_quarantine_put+0x10a/0x240 [ 1353.504519][T31524] ? lockdep_hardirqs_on+0x7c/0x110 [ 1353.504537][T31524] ? find_held_lock+0x2b/0x80 [ 1353.504553][T31524] ? tomoyo_path_number_perm+0x295/0x580 [ 1353.504572][T31524] ? tomoyo_path_number_perm+0x18d/0x580 [ 1353.504590][T31524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1353.504608][T31524] comedi_compat_ioctl+0x1d0/0x960 [ 1353.504625][T31524] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1353.504641][T31524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1353.504659][T31524] ? do_vfs_ioctl+0x128/0x14f0 [ 1353.504674][T31524] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1353.504692][T31524] ? find_held_lock+0x2b/0x80 [ 1353.504706][T31524] ? hook_file_ioctl_common+0x144/0x410 [ 1353.504726][T31524] ? __fget_files+0x20e/0x3c0 [ 1353.504736][T31524] ? __ia32_compat_sys_openat+0xe0/0x210 [ 1353.504753][T31524] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1353.504769][T31524] __ia32_compat_sys_ioctl+0x242/0x370 [ 1353.504786][T31524] __do_fast_syscall_32+0xe8/0x680 [ 1353.504798][T31524] do_fast_syscall_32+0x32/0x80 [ 1353.504809][T31524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1353.504822][T31524] RIP: 0023:0xf705d579 [ 1353.504830][T31524] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1353.504840][T31524] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1353.504850][T31524] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000040946400 [ 1353.504857][T31524] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.504863][T31524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1353.504869][T31524] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1353.504876][T31524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1353.504889][T31524] [ 1353.505621][T31524] Kernel Offset: disabled