last executing test programs: 4m22.925600338s ago: executing program 32 (id=883): r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) file_getattr(r1, 0x0, &(0x7f0000000100), 0x18, 0x1000) 4m21.535011927s ago: executing program 33 (id=911): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xe000600) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) file_getattr(r1, 0x0, &(0x7f0000000100), 0x18, 0x1000) 4m21.258517843s ago: executing program 34 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 4m19.999600497s ago: executing program 35 (id=921): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) 4m18.050929878s ago: executing program 36 (id=928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4m15.821272205s ago: executing program 37 (id=938): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 4m13.860122647s ago: executing program 38 (id=957): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r6, 0x7, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x800) 4m13.334700839s ago: executing program 39 (id=961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4m1.366462178s ago: executing program 40 (id=1102): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x37}, 0xfffffffffffffdf0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e24000000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m0.280196446s ago: executing program 41 (id=1115): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b54de130", 0x4}, {&(0x7f0000000200)="c9c98a5e1b", 0x5}, {&(0x7f0000000340)="01304d", 0x3}, {&(0x7f0000000400)="515fa9", 0x3}, {&(0x7f0000000500)="d764", 0x2}, {&(0x7f0000000600)="4adfddf65064a2ddc0d53ec4fff15218fe2cd9b58f34f9e82a74e64442705ec7ead1", 0x22}, {&(0x7f0000000700)="29859f3f", 0x4}, {&(0x7f0000000180)="3c1561", 0x3}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3cba786", 0x4}, {&(0x7f0000000680)="a754", 0x2}, {&(0x7f0000002a40)="7353c3a746", 0x5}, {&(0x7f0000002bc0)="3e8a", 0x2}, {&(0x7f0000002cc0)="7686", 0x2}], 0x7}}], 0x2, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 3m57.248645166s ago: executing program 42 (id=1145): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x100}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040088) 3m55.960990388s ago: executing program 43 (id=1154): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000001a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1000) 3m50.545076644s ago: executing program 44 (id=1185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x7, 0x4, [0x2, 0x0, 0x0, 0x8]}, 0x10) 3m44.496646224s ago: executing program 4 (id=1214): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpid() r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4c, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 3m44.441960834s ago: executing program 45 (id=1214): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpid() r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4c, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 3m44.131571918s ago: executing program 46 (id=1219): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 3m38.000966789s ago: executing program 47 (id=1263): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0), 0x0, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x7, 0x4, [0x2, 0x0, 0x0, 0x8]}, 0x10) 45.382144687s ago: executing program 48 (id=2716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) (fail_nth: 1) 36.975208117s ago: executing program 9 (id=2756): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 36.899320728s ago: executing program 9 (id=2758): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00742599e90576fec1080000000007000000000000000000bfa200000000000007020000f8ffffffb70300001f000400b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:'], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x51, '\x00', r4, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x83, 0x7fffffff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f00000003c0)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0x7, 0xfffffffb, 0x1, 0xffffff89, 0x6, 0x6, 0xffff8000}, {0x6, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0xa, 0x4, 0x3ff, 0x7ffffdfb, 0x8003, 0xffff}, {0x0, 0x2, 0x0, 0x5, 0xfffffffe, 0x20000, 0x4}]}) 36.664330641s ago: executing program 9 (id=2764): unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x101, @remote, 0x7}]}, &(0x7f0000000280)=0x10) (fail_nth: 1) 36.580733736s ago: executing program 2 (id=2765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x26}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000380)=0x4a3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000300)={0x54a4441d52979855, 0x0, {0x8, 0x40, 0x3009, 0x4, 0x1, 0x8, 0x0, 0x7}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x5, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000180)={0x2, r6, 0x2c7a, 0x1ff, 0x100, 0xfb6, 0x9}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) 36.175643124s ago: executing program 9 (id=2766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r5, 0x0) accept4(r0, 0x0, 0x0, 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) connect(r6, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x59) sendmsg$tipc(r7, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x4586ed4b7ff431f9, {0x40, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 35.925567855s ago: executing program 9 (id=2767): unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x101, @remote, 0x7}]}, &(0x7f0000000280)=0x10) 35.536393053s ago: executing program 2 (id=2770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 35.475342933s ago: executing program 2 (id=2772): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) (fail_nth: 1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 35.473698183s ago: executing program 9 (id=2773): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00742599e90576fec1080000000007000000000000000000bfa200000000000007020000f8ffffffb70300001f000400b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:'], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x51, '\x00', r4, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x83, 0x7fffffff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f00000003c0)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0x7, 0xfffffffb, 0x1, 0xffffff89, 0x6, 0x6, 0xffff8000}, {0x6, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0xa, 0x4, 0x3ff, 0x7ffffdfb, 0x8003, 0xffff}, {0x0, 0x2, 0x0, 0x5, 0xfffffffe, 0x20000, 0x4}]}) 35.354328395s ago: executing program 49 (id=2773): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x2}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00742599e90576fec1080000000007000000000000000000bfa200000000000007020000f8ffffffb70300001f000400b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:'], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x51, '\x00', r4, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x83, 0x7fffffff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f00000003c0)=[r6, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0x7, 0xfffffffb, 0x1, 0xffffff89, 0x6, 0x6, 0xffff8000}, {0x6, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0xa, 0x4, 0x3ff, 0x7ffffdfb, 0x8003, 0xffff}, {0x0, 0x2, 0x0, 0x5, 0xfffffffe, 0x20000, 0x4}]}) 35.295528332s ago: executing program 2 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r5, 0x0) accept4(r0, 0x0, 0x0, 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) connect(r6, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x59) sendmsg$tipc(r7, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x4586ed4b7ff431f9, {0x40, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x0) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 35.294783578s ago: executing program 0 (id=2776): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x204c01) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x12, 0xa01, 0x70bd26, 0x0, {0x7}, [@typed={0x9, 0xf6, 0x0, 0x0, @binary="43eb285c03"}]}, 0x20}}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 35.055594219s ago: executing program 2 (id=2777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto(r0, &(0x7f0000000300)='H', 0x1, 0x4000000, 0x0, 0x0) 34.405475061s ago: executing program 2 (id=2779): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) (async) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) (async) write$fb(r2, &(0x7f0000000100)="485a38e63bbbd0fb48957dc57de91e50fe184d520008cca00d88a163123d72006359ec8a9d6da42ca87979bceef800e8d04afeb4bf56c66ebaeec86d0c9ad9cf0b7f89886e0492b6a8dd92c0b1100d83bf4ca40858364a9b36463a6b0a93e3971457392f6830a8e1f65755b967e9929012507ca42177d38dff020275463f5cf00db8b21cc46a2391fef064852e5ff51bde4ff92529ab8be206c11e5be324150d151fbf1c978bf8690be2272bee3e985c3ad6b3c58e2fbaf8e78f7338b1cc8f443ea39b94b8927a5445725f105ff5accc5135a0c8b6967466698160dd86e32a06deee88fb58655cdc39e50a049a6aab", 0xef) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x4}, 0x50) r4 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/18, 0x12) 34.30457892s ago: executing program 50 (id=2779): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) (async) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) (async) write$fb(r2, &(0x7f0000000100)="485a38e63bbbd0fb48957dc57de91e50fe184d520008cca00d88a163123d72006359ec8a9d6da42ca87979bceef800e8d04afeb4bf56c66ebaeec86d0c9ad9cf0b7f89886e0492b6a8dd92c0b1100d83bf4ca40858364a9b36463a6b0a93e3971457392f6830a8e1f65755b967e9929012507ca42177d38dff020275463f5cf00db8b21cc46a2391fef064852e5ff51bde4ff92529ab8be206c11e5be324150d151fbf1c978bf8690be2272bee3e985c3ad6b3c58e2fbaf8e78f7338b1cc8f443ea39b94b8927a5445725f105ff5accc5135a0c8b6967466698160dd86e32a06deee88fb58655cdc39e50a049a6aab", 0xef) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x4}, 0x50) r4 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/18, 0x12) 34.294603868s ago: executing program 0 (id=2781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x160003, 0x0, {[0x7f, 0xf971, 0x0, 0x80000000, 0x17c1, 0xefc, 0x80000000]}}) (fail_nth: 1) 34.005459754s ago: executing program 0 (id=2782): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x321201, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r1}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000180)) ioctl$TIOCSIG(r0, 0x40045436, 0x18) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000200)={r2, 0x2}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000240)=""/44) r3 = openat$panthor(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000002c0)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000300), &(0x7f0000000340)={'U-', 0x100000000}, 0x16, 0x1) r4 = openat$uhid(0xffffff9c, &(0x7f0000000380), 0x800, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000003c0)={0xa, {0x6, 0x4, 0x38}}, 0xa) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ppoll(&(0x7f0000000440)=[{r3, 0x200}, {r5, 0x208}, {r0, 0x1}, {r4, 0x88}, {r4, 0x8400}, {r3, 0x208a}, {r4, 0x8000}], 0x7, &(0x7f0000000480), &(0x7f00000004c0)={[0x0, 0x4]}, 0x8) openat$drirender128(0xffffff9c, &(0x7f0000000500), 0x20080, 0x0) pselect6(0x40, &(0x7f0000000540)={0x2, 0x3, 0x3, 0x7, 0xe6, 0x6bba, 0xffffffffffffffff, 0x2}, &(0x7f0000000580)={0x101, 0x2, 0x7fff, 0xe10, 0x6, 0x8, 0x4, 0x8}, &(0x7f00000005c0)={0x3, 0x2, 0x0, 0x8, 0x7, 0x5, 0x6, 0x6}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0x101]}, 0x8}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000006c0)={0x0, 0x3}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000740)={r6, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000800)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0xc800) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f00000009c0), 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x100, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40246608, &(0x7f0000000a40)={0x101, 0x83, 0x94a8, 0x1341, 0xf, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000a80)={'netdevsim0\x00'}) r10 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r10, 0x4b34, 0x4) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000ac0)={0x4, 0x0, [{0x21b, 0x0, 0x3bfe}, {0x8b5, 0x0, 0x3}, {0xbf0, 0x0, 0x6}, {0x903, 0x0, 0x2}]}) 33.864851217s ago: executing program 0 (id=2784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r5, 0x0) accept4(r0, 0x0, 0x0, 0x800) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) connect(r6, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x59) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 33.665519142s ago: executing program 0 (id=2785): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x2a00) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 33.314924914s ago: executing program 0 (id=2786): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="030e82634f3ddfa1ccc857216e95f8dcf83108a5960c7af7810f1cde995f1e4579eb58d8b482ff80fa2e5cb9ec9ba222f0ac6a0710813ef910aa97cba9e2cd065c47c1920e8eda63856c716fe228e033f726bd7360608c7d13ae43880e04f604780dce6dee36069e3c07e0be1b24dc8ecf8c5cd2ec2a64090fd050d00dd1b4c75ef4383a7527872432addfd29031831f2f3e7cd20e093f5c370e37f3834c82f98342622e2ef2d34507b69a", 0xab}, {&(0x7f0000000700)="c4755e9db224dd81d433d0470bf81e3a599c41cb6d819e0db36bb46e33c9c34052", 0x21}], 0x2}, 0x8041) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x42adaf4aff0ed5ec) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) listen(r2, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2020480) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 33.130023289s ago: executing program 51 (id=2786): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="030e82634f3ddfa1ccc857216e95f8dcf83108a5960c7af7810f1cde995f1e4579eb58d8b482ff80fa2e5cb9ec9ba222f0ac6a0710813ef910aa97cba9e2cd065c47c1920e8eda63856c716fe228e033f726bd7360608c7d13ae43880e04f604780dce6dee36069e3c07e0be1b24dc8ecf8c5cd2ec2a64090fd050d00dd1b4c75ef4383a7527872432addfd29031831f2f3e7cd20e093f5c370e37f3834c82f98342622e2ef2d34507b69a", 0xab}, {&(0x7f0000000700)="c4755e9db224dd81d433d0470bf81e3a599c41cb6d819e0db36bb46e33c9c34052", 0x21}], 0x2}, 0x8041) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x42adaf4aff0ed5ec) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) listen(r2, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2020480) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 28.421664865s ago: executing program 4 (id=2787): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (fail_nth: 1) 28.085594001s ago: executing program 4 (id=2800): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x2a00) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfb) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 27.15265594s ago: executing program 4 (id=2805): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r5, 0x0) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 26.855485165s ago: executing program 4 (id=2808): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400004) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={0x0, 0x0}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0xf322, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x7f, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c00020000000002"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pstore\x00', 0x4082, 0x0) shmget$private(0x0, 0x3000, 0x4, &(0x7f00007b5000/0x3000)=nil) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) 25.804620533s ago: executing program 4 (id=2814): io_uring_setup(0x29a2, &(0x7f0000000140)={0x0, 0xc795, 0xc000, 0x4, 0xc5}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x5c, r4, 0x917, 0xaa, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = gettid() setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000380)="5e3daa698cad94adcd6f34420c12188264f3df9ff0f8d680065d5ac44972ab5f5735e1ae9a0b92caa4f01809ce7a4eee60bd3d0104000047635c552d025e04e57766bddd82166abd893a5a313bc48834e302ce9659", 0x55}], 0x1) memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 25.74879893s ago: executing program 52 (id=2814): io_uring_setup(0x29a2, &(0x7f0000000140)={0x0, 0xc795, 0xc000, 0x4, 0xc5}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x5c, r4, 0x917, 0xaa, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = gettid() setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000380)="5e3daa698cad94adcd6f34420c12188264f3df9ff0f8d680065d5ac44972ab5f5735e1ae9a0b92caa4f01809ce7a4eee60bd3d0104000047635c552d025e04e57766bddd82166abd893a5a313bc48834e302ce9659", 0x55}], 0x1) memfd_create(&(0x7f0000000180)='[\v\xdb\xd1md\xc8\x13\x8aH\\;T\x01R\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x00%||\xa0\x8ez\xadT\xc8\xdc\xd7\xca\xb59RAD\f\t\x00\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01J;\xd5\x97\x9ffb\x06L\xae\xb2\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbb\xfc\xc9\x95\xde\xad\x8f\x0e=\xd7r\xf1v\x8bz\x83h\xeeY\xba\xa1Z\x9dW\xec\"\xd7t^H~\x9b\xc7\x1a\x8e\x93P\x0e\x92\x02\x13\a\xd4\x10\xdb\xcf\x83*\xaf\x95\x8f\xb8\x92v\xf0KMt\xb1\xaa\n\x14F\xbfyA*\xcdRh5eZ\xce\x1f\x9e\xccG\x1b\t\xb2\xa3\x96\xe5tU2E.s_\xf2\xd1j\'\xff\x01\xd1\xb4\x85eg\xf3`\xf08\x9f\xc2\xc9\xd8\xf6\x15\xf12\xeal+-\xd74]\x15\x92B\x14 \x81\xb4+\xcf\xae_\x89\x1f\xe2lc\x7f,\x0fa\x0e\xf6\x1fC[\x9c\x17\xa3\xd6\xa7\xcd\x15\xcb\xf7\x16R\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 23.532005542s ago: executing program 3 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) (fail_nth: 1) 23.275449189s ago: executing program 3 (id=2823): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 23.275036158s ago: executing program 3 (id=2824): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x2a00) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 22.285148193s ago: executing program 3 (id=2829): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 22.058495146s ago: executing program 3 (id=2831): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be176d378767821df88e0ab00d48f37bc7974", 0x26}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) (fail_nth: 1) 21.606173468s ago: executing program 3 (id=2836): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x2a00) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 21.417390083s ago: executing program 53 (id=2836): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffff, 0x2a00) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 11.733411085s ago: executing program 1 (id=2875): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e5000200461f8e210079797fdf92ed1731877e00000000c500fcff000000008500feffd1000000b38d084a18d45150acc26bd6421aa3b5b9b06e35c2dbbb672fce2d3fc118cfc20667609685bead7cfffc03ba4530c3430a46e9df961f729ad6981041b60e08f68a19d3aa69a2b13bf789"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xe010100, @remote}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x54, 0x2, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0xe63, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usbip_server_init(0x6) sendfile(r5, r0, &(0x7f00000001c0)=0x8000, 0x200) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 10.164273762s ago: executing program 1 (id=2878): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x7fc4, 0x6) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) write$P9_RVERSION(r2, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x733c, 0x8, '9P2000.u'}, 0x15) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x2000}) fcntl$setpipe(r6, 0x407, 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89100) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2000}, 0x4) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) (async, rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18068648954c6305c6ec6b3d00000000000000000000000000d8b216df600095000000f7ff00003d252759ccbf8fcdeb66f7d3771fc728048000e1a46e095216b80ba493161abacd1f8bf0b3ea414487737593952ceefe2e99bc6c1c3d1045e620f2cf23a3fc1ceef1ec986694987983ad25678aba7acc93867543f932fa45254c84fb651f9dc5da58ed1d6b4fde8e3bbef608e8ddd3fad6e2f47bd01e835015f0b8226d2e4da9a012cb048034282ecf0588ce2e8b9106de8c536c41fedf77c6c23053a08636bd7f232452e017bdcea4ca386a9d"], &(0x7f0000000040)='GPL\x00'}, 0x80) (rerun: 32) r11 = epoll_create1(0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x17, &(0x7f0000000000)=ANY=[@ANYRESHEX=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r12, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r13 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r13, r10, 0x11, 0x0, r13}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r9, r10, 0x11, 0x8, r9}, 0x20) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 10.065276405s ago: executing program 1 (id=2879): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x105000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x8040) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x40, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) 9.144284026s ago: executing program 1 (id=2885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, 0xffffffffffffffff, 0x0) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 8.867105863s ago: executing program 1 (id=2886): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@setlink={0x90, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16122}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0x58}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x0, 0x14, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000) io_setup(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r5}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 8.283966539s ago: executing program 1 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000840)={0x2d, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x56f6, {"b2c40f03a5fd88f643fd134c488c0798"}, 0x5, 0x6, 0xfffffffffffffffc}}}, 0xa0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newchain={0x26d8, 0x64, 0x10, 0x70bd28, 0x25dbdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xd, 0xa}, {0xfff1, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x2674, 0x2, [@TCA_U32_ACT={0x2648, 0x7, [@m_csum={0x104c, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2d, 0x7, 0x24ceeac39ca237e, 0xc, 0x3}, 0x4d}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1d8a98e0efb8df11, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x84, 0x13, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x51, 0x6, "3849c70588e46321f869064bb1b71eab2351aeb50706eb5dbf7234ff9c56a1914cdaa404c051ef02c68527afa4df68eeaaff06e0c8869d575f507ec1700fc5a327916dfc0e0ac216a7983b6ba4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1574, 0x1, 0x0, 0x0, {{0xb}, {0x14bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x717, 0x4, 0xc44f, 0x40, 0x482f, 0x46, 0x9, 0x1, 0x7, 0x0, 0xe32, 0x3, 0x9, 0x10001, 0x800, 0x0, 0x3ff, 0x1, 0xe837, 0x0, 0x3ff, 0x5, 0x5, 0x7fffffff, 0xe406, 0x3, 0x0, 0xfffffffd, 0x5, 0x401, 0x40, 0x7ff, 0xe, 0xf, 0x2, 0x7feb25e6, 0x400, 0x6, 0x4, 0xd, 0x3, 0x16, 0x2, 0xffff8001, 0x8001, 0x9, 0x1, 0x4, 0xdb18, 0x4, 0x90, 0xca1, 0xbbf8, 0xad, 0x9, 0x2, 0x6, 0x0, 0x15, 0x6, 0x100, 0x81, 0xa5, 0x80, 0xfffffffa, 0x6, 0x8, 0x8f, 0xfffffff7, 0x8, 0x21, 0x3, 0x200000, 0x5, 0x59e, 0x7, 0x62c, 0x5, 0x4, 0xd, 0x7, 0x7e7, 0x6, 0xad70, 0x4704, 0x4, 0xc3c4, 0x1, 0x3, 0x4af, 0x9, 0x779, 0x0, 0x6, 0x0, 0x8001, 0x54c, 0x80000001, 0x5, 0x2, 0x9, 0x10, 0x1, 0xa, 0x6, 0x9, 0x5, 0x81, 0xab, 0xfffffffb, 0x1, 0x7fffffff, 0xfffffff8, 0x2, 0x5f, 0x6, 0x93, 0x8, 0x9, 0x4, 0x1ff, 0x0, 0x1ff, 0x6, 0x7, 0x0, 0x8, 0x463, 0x1, 0x5, 0x1f, 0x8, 0xd, 0x3, 0x1, 0x17b, 0x9, 0x8444, 0x80, 0x7fffffff, 0x9, 0x8, 0x38dc, 0x10, 0x5, 0x5, 0x4, 0x5, 0x1, 0x2, 0x1, 0x200, 0x4, 0x3, 0x2, 0x1, 0x2, 0xfffffffd, 0x800, 0xf, 0x0, 0x28000000, 0x9, 0x3, 0x4, 0x0, 0x7, 0x9, 0xf8d, 0x0, 0x5, 0x2c6, 0xfffff105, 0x1, 0x5, 0x5, 0xa4, 0x6, 0x6443, 0x6, 0x2, 0x0, 0x1, 0x4, 0x10, 0x72, 0xcb0, 0x3, 0x0, 0x7129, 0x5, 0x6, 0x7fffffff, 0x3, 0x8, 0x2, 0x8ac, 0x5e2b, 0x3, 0x6, 0xb2, 0xd, 0x800, 0x4, 0x7f, 0x6, 0x5, 0x1, 0x2, 0x800, 0x0, 0x8001, 0x5, 0xffffffff, 0x10000, 0x6, 0x0, 0x688c, 0x8, 0x8, 0xffff, 0x1, 0x8, 0xffffffff, 0xfffffff1, 0x5, 0x2, 0x10000, 0xe37, 0x6, 0x0, 0x40000, 0xb, 0x1, 0x9, 0x0, 0x3fe2, 0xb2d, 0x64a5, 0x7, 0x5, 0xffff, 0x8, 0x2, 0x0, 0x3fffc00, 0x9, 0xf, 0x0, 0xffffff7f, 0x5, 0xf, 0x7, 0x1, 0xe3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0xc8, 0x7, 0x8, 0x10, 0x3, 0xfc, 0x40, 0x10, 0xffffffff, 0x800, 0x9, 0x41, 0x1252, 0x8, 0x8, 0x2, 0x0, 0x2, 0x3, 0x3, 0x1, 0xd, 0x1, 0x4, 0xf4cf, 0x7, 0xc, 0x4, 0x8, 0x2, 0x2, 0x4, 0xb, 0x5, 0x9, 0x856a258, 0x8ba, 0x9, 0x1, 0x5, 0x0, 0xd, 0x4, 0xc1a, 0x4350, 0x7, 0xfffffc01, 0x3, 0x144, 0x8, 0x5, 0x7, 0x4, 0x4, 0x7, 0x2, 0x5, 0x6, 0x6, 0xa, 0xce0d, 0x9105, 0x4, 0x5, 0x97, 0x3, 0xfffffffa, 0x2, 0x3, 0x7, 0xbb3c, 0xfb44, 0x1, 0x2, 0xffff, 0xfffffffa, 0x4, 0xfffffff9, 0x5b, 0x9, 0x7, 0xfff, 0xdc8, 0x200, 0x9, 0x80000001, 0x5, 0xfc1, 0x7fff, 0x10, 0x8, 0x1, 0x4, 0x0, 0x3000000, 0x3, 0x80000001, 0x2b2, 0x7fff, 0xfcb, 0x6, 0x8, 0x6, 0x1, 0x7fff, 0x9, 0xf, 0xa, 0x2, 0x1, 0xfffffffa, 0x7, 0x9, 0x6, 0xab04, 0x2, 0xfbde, 0x7, 0x1c400000, 0x0, 0x1, 0xe16, 0xb9de, 0xffffffff, 0x9f8b, 0x80, 0x3, 0x384, 0xb, 0x0, 0x2, 0xb, 0x4, 0x4, 0xb8, 0x0, 0x4, 0x80, 0x7, 0x2, 0x5a9d, 0x5, 0x401, 0x6, 0x9, 0x40, 0x1, 0x9c6, 0xffff, 0xfff, 0xb4, 0x9, 0x8, 0xffff, 0x1, 0xa, 0x2, 0x1, 0xe, 0x3, 0x20da, 0x960, 0x200000, 0x800, 0x1, 0x7, 0xb3, 0x1000, 0x2, 0x3, 0x4, 0x9, 0x3, 0xa6, 0x1, 0x2, 0x5, 0x535f, 0x3, 0x0, 0x2, 0x4, 0x6, 0x1, 0x7, 0x5, 0x0, 0x7ff, 0x1, 0x9, 0x7fff, 0x4, 0x1, 0x81, 0x6, 0x7fff, 0x1000, 0x7, 0x8, 0x4, 0x5, 0x1, 0x4, 0x0, 0xe, 0x0, 0x8, 0xc7, 0x2, 0x1, 0xffffffdf, 0xffff, 0x10, 0x6, 0x7, 0x5, 0xb, 0xfe0, 0x1, 0xc, 0x6, 0x4, 0x5, 0x0, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x9, 0x7fff, 0x4, 0x4, 0x0, 0x3, 0x7, 0x0, 0x3, 0x5, 0x7, 0x9, 0xffffff0a, 0x8, 0xa6d1, 0x8, 0xc, 0x4, 0x11c40, 0x7f, 0x2, 0x10001, 0x4d35390e, 0xfffffffd, 0x8, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7ff, 0x846, 0x8cde, 0x8, 0xa, 0x9, 0xf1c, 0x9, 0x7f, 0x8, 0x2, 0x1, 0xdb3, 0x1, 0x9, 0x7ff, 0x85e, 0x1, 0x362a, 0x80, 0x7, 0xe6, 0x0, 0xdb1, 0x4, 0x5, 0x1, 0xa4, 0x7fffffff, 0x10001, 0x35, 0x4, 0x31, 0x2, 0x7ff, 0x0, 0x4, 0x4bc00000, 0x4, 0x7, 0x8, 0x5, 0x400, 0x466, 0x9, 0x2, 0x101, 0x80000001, 0x7, 0x1, 0x10001, 0x4, 0x0, 0x6, 0xffffdfd5, 0xe4, 0x7fff, 0x8, 0x4, 0x5, 0x400, 0x8, 0x8, 0x4, 0x1, 0x8, 0x10000, 0x5, 0x10001, 0x8, 0x10001, 0x7, 0xa22, 0x1ff, 0xca50, 0x4, 0x6, 0x6, 0xd7, 0x6, 0x1, 0x4, 0x6, 0x8, 0x5, 0xfffffff9, 0x70, 0x9, 0x6, 0x5, 0x2, 0x8, 0x8, 0x40, 0x1, 0x5, 0x9, 0x3, 0x140, 0xa6, 0x1, 0x4, 0x7, 0x7, 0x8, 0x3, 0x8, 0xed72, 0x9, 0x7cb, 0xa, 0x2, 0x8, 0x1, 0x10001, 0xf6f0, 0x9a0, 0xe, 0x10, 0x822, 0xfff, 0xff, 0x886, 0x9, 0x3, 0x2, 0xbe89bce5, 0x6, 0x7a, 0x7f, 0x526, 0x400, 0xa, 0xff, 0x0, 0x3, 0xe00, 0xa0, 0x4, 0xfffffffe, 0x3ff, 0x7, 0x3ff, 0x1e2, 0x2, 0x2, 0x401, 0x0, 0x6, 0xc00, 0xe, 0x9, 0x6, 0x4, 0x5, 0x3, 0x8, 0x1, 0x0, 0x3, 0x100, 0x6, 0xc9b, 0x6, 0x2, 0x9, 0x2, 0x4c, 0x4, 0x9, 0x0, 0x40000000, 0xffff, 0x3, 0x1, 0x7ff, 0x462, 0x9, 0x101, 0x1000, 0x800, 0x40, 0x3, 0x7ff, 0xb94b, 0x6ab8, 0x5, 0x4, 0x2, 0x5, 0x40, 0x5, 0x6, 0x8, 0xf2d, 0x2, 0xc, 0x7ff, 0x0, 0x1000, 0xc9, 0x4, 0x272c, 0x10000, 0x7, 0x2, 0xaa, 0x6, 0xf, 0x7b, 0xabdd, 0x101, 0x63c, 0x2, 0xfb5b, 0x5, 0x2, 0x5, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x9, 0xb0, 0x6, 0x3, 0x8, 0x2, 0x3, 0x3ff, 0xe1, 0x90000000, 0x1, 0x9, 0x9, 0xb4, 0x0, 0x1f, 0x6, 0x0, 0xc87, 0xffffffff, 0x2, 0x45b, 0x3, 0x0, 0x400, 0x6, 0x3ff, 0x5, 0x3, 0x1, 0xe, 0xd044]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc0}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x0, 0x6, 0x0, 0x8, 0x200, 0x80, 0x9, 0x3, 0x3, 0x10000, 0x7da3e799, 0x6c, 0x1, 0x5, 0xea4, 0x0, 0x2b42, 0x3, 0x7, 0x7, 0xd4, 0x0, 0x9, 0x9, 0x6a31, 0x1, 0x4, 0x1, 0x1, 0x5, 0x3, 0xf8f, 0x6, 0x800, 0x7ff, 0x8539, 0x5, 0x87, 0xf7, 0x8, 0x101, 0x4, 0xb, 0x9f, 0x5, 0x200, 0x9, 0x9, 0x3, 0x3, 0x1ff, 0x3, 0xe96, 0x10, 0x1, 0x0, 0x2, 0x7fffffff, 0x0, 0x8, 0x5, 0x5, 0x7fff, 0x2, 0x8, 0x4, 0xc72c, 0xd91, 0x0, 0x8, 0x8, 0x9, 0x9, 0x9, 0x8001, 0x1, 0x8, 0x8, 0xffff, 0xff, 0x7, 0x2, 0x7, 0x8, 0x0, 0x6, 0x95, 0x401, 0x2, 0xf, 0x0, 0xa31be4d3, 0x1, 0xdc, 0x100, 0x10000, 0x4, 0xffff, 0x24, 0x5, 0x6, 0x6, 0x3, 0x3, 0x4, 0x8, 0xd23, 0x2, 0x6, 0x7fffffff, 0x0, 0x3ff, 0x6, 0x9, 0xb, 0x0, 0x7, 0x9, 0xa, 0x0, 0x1, 0x5, 0x7929, 0x1, 0x5, 0x7e5, 0x8, 0x5, 0xffff, 0x5, 0x10000, 0x4, 0x7, 0x0, 0x0, 0xf7, 0x9, 0x3, 0x2, 0x4, 0x3, 0x4, 0x1, 0x6, 0x5, 0x0, 0x1ff, 0x6, 0x3ff, 0x29, 0x7, 0x9, 0x5, 0x9c80, 0x2c0, 0x8, 0x6, 0x2, 0x7, 0x0, 0xffffffd0, 0x3, 0x1, 0xffff, 0x40, 0x40, 0x7fff, 0x3, 0x4, 0xfffffe00, 0x1ff, 0x0, 0x1, 0x6bff, 0x9, 0x8, 0x6, 0x9, 0x5, 0x9, 0xffffff01, 0x3b4, 0x10001, 0x88dc, 0xffffff55, 0x1, 0x4, 0x3, 0x8001, 0xffff, 0x100, 0x5, 0x9, 0xfffffffa, 0x7, 0x76, 0xf, 0x400, 0x45a00000, 0x6, 0x9, 0x5, 0x5, 0x0, 0xba9, 0x10001, 0x1ff, 0x9, 0x7, 0x7ff, 0x5, 0x7ff, 0x9, 0x101, 0x4, 0x5, 0x101, 0x965, 0x200, 0xffffff79, 0x80000001, 0x4, 0x81, 0x5, 0x2e, 0x4, 0x9, 0x5, 0x2, 0x6bc, 0xca, 0x4, 0x0, 0x10000, 0x92f8, 0x8, 0x4, 0x7f, 0xd, 0x8, 0x1a, 0x2, 0x3af, 0x6, 0x200, 0xf22c, 0x0, 0x2, 0x0, 0x9, 0x100, 0xc, 0x1, 0x7, 0xa171]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0xfffffffb, 0x8, 0x8, {0x5, 0x2, 0x4, 0x7f, 0x0, 0x348}, {0xa, 0x0, 0xa475, 0x0, 0x101, 0x7}, 0x6, 0x3ff}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xff, 0x9, 0x0, 0xfffffffd, 0x2, 0x3d74, 0x8, 0x3, 0x2, 0x8000, 0x3, 0x1, 0x525, 0x1, 0x3, 0xd0, 0x400000, 0x2, 0x9, 0x2, 0x8c82, 0x2, 0x8, 0x1, 0x5, 0x1000, 0x3, 0x0, 0x5, 0x0, 0x2, 0x8, 0x10001, 0x9, 0x1, 0xc91a, 0xb, 0x44ad464f, 0x6, 0x2, 0x2, 0x7f3, 0x3, 0x7f, 0xbdf, 0x6cac, 0x7f7b, 0x1, 0x8, 0x6, 0x9, 0x984, 0xd, 0x80000000, 0x0, 0x0, 0x3, 0xc, 0x2, 0x3bb5ba1f, 0x9, 0xffffe0e6, 0xc, 0x0, 0x80000001, 0x6, 0x200, 0xa652, 0x1000, 0x1c00, 0x0, 0x9, 0xfff, 0xfffffff3, 0x80000000, 0x7, 0x9d6e, 0x6, 0x7ff, 0x47bf, 0xf, 0x9c57, 0x4, 0x3, 0x1800000, 0x4, 0x3, 0x2, 0x0, 0x0, 0xc, 0x691, 0xfffffffe, 0x2, 0x0, 0x3, 0x1ff, 0x4, 0x8, 0x7, 0xf, 0x10001, 0x5, 0x1, 0x81, 0x1, 0x6, 0x7, 0x3, 0x101, 0x1, 0x1ff, 0x9, 0x6, 0x9, 0xcefd, 0x1, 0xffffffff, 0x6, 0x4, 0x101, 0x8, 0x4, 0x40, 0x4826, 0xfffffffe, 0xef, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x800, 0x7fff, 0x2, 0x4, 0x299e, 0x8, 0x2, 0x800, 0x8, 0x1, 0x6, 0xc, 0x7, 0x4b8ff443, 0x4, 0x1, 0x18, 0x8, 0xd652c64, 0x4, 0x0, 0x6, 0x3, 0x80000001, 0x40d, 0xbc, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0x27df, 0x0, 0x2, 0x5, 0xffffffff, 0xca5, 0x10000, 0xe, 0x5, 0xc1f, 0x6, 0xfffffc01, 0xbd6, 0xc, 0x8, 0x4, 0xfffff000, 0x8, 0x5, 0x6, 0x7, 0x7, 0x6, 0xb, 0x9, 0xa, 0x0, 0x38, 0x8, 0x3, 0xbb35, 0xff, 0x0, 0x1000, 0x9, 0x6, 0x1, 0x2, 0xfff, 0xe3f, 0x1, 0x3, 0x2f65d9ce, 0x4, 0xabb, 0x10001, 0x7, 0x5, 0x1ff, 0x1, 0x2, 0x7, 0xb89, 0x1, 0x2, 0x5, 0xddd, 0x200, 0x3, 0x2, 0x0, 0x4, 0x7, 0x7, 0xfffffff9, 0x6, 0x0, 0x96220, 0x9, 0x0, 0x2, 0x8, 0x5, 0x5, 0x2, 0xd019, 0x5, 0x401, 0x3, 0x200000, 0x480, 0x10d, 0x2, 0x1, 0x2, 0x6, 0x0, 0x8, 0x24, 0x7]}]]}, {0x90, 0x6, "8f95fd044331f5a52fd775a6ea262c1e6cff9c22708abc270672e50cdb66e7763bd20f4de7746db79c85341b66f2f17860f10e193924d0aa15e2dd35f7dc9d219d8dba53e709dc6654a8ee7c5b83e10d4f876dd636bf509efac4a2626aa1eb7683c3e9ab010108806947b4a2182274687b0c5781e4b74fa6d02d9a3cbc15fdfb8102c177db0fbf9d90dd364d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'ipvlan0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb}]}}]}, 0x26d8}, 0x1, 0x0, 0x0, 0x804}, 0x4000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000902000/0x4000)=nil, 0x4000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4789c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x6) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES8=r5, @ANYRES8=r1, @ANYRESDEC=r3], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2ca2}, 0x4c) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r6, &(0x7f0000000300)=""/212, 0xd4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="20080100140003006d6163766c616e300000000000000000e57cd399dd9f325d6404951ad9b1b6ba0a9d46d1c28bea6afa9157c8287a3e7e701b49d59d7d7a5d401a29e5b74aa9e58a04a4f6c941863084afd5c87e8ceeb9046bd6fdc915ef0c0599e672c435512f89dd98a41d2d51b2"], 0x34}}, 0x4084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000000000a00000a08000600"/36], 0x24}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) 8.245268004s ago: executing program 54 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000840)={0x2d, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x56f6, {"b2c40f03a5fd88f643fd134c488c0798"}, 0x5, 0x6, 0xfffffffffffffffc}}}, 0xa0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newchain={0x26d8, 0x64, 0x10, 0x70bd28, 0x25dbdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xd, 0xa}, {0xfff1, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x2674, 0x2, [@TCA_U32_ACT={0x2648, 0x7, [@m_csum={0x104c, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2d, 0x7, 0x24ceeac39ca237e, 0xc, 0x3}, 0x4d}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1d8a98e0efb8df11, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x84, 0x13, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x51, 0x6, "3849c70588e46321f869064bb1b71eab2351aeb50706eb5dbf7234ff9c56a1914cdaa404c051ef02c68527afa4df68eeaaff06e0c8869d575f507ec1700fc5a327916dfc0e0ac216a7983b6ba4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1574, 0x1, 0x0, 0x0, {{0xb}, {0x14bc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x717, 0x4, 0xc44f, 0x40, 0x482f, 0x46, 0x9, 0x1, 0x7, 0x0, 0xe32, 0x3, 0x9, 0x10001, 0x800, 0x0, 0x3ff, 0x1, 0xe837, 0x0, 0x3ff, 0x5, 0x5, 0x7fffffff, 0xe406, 0x3, 0x0, 0xfffffffd, 0x5, 0x401, 0x40, 0x7ff, 0xe, 0xf, 0x2, 0x7feb25e6, 0x400, 0x6, 0x4, 0xd, 0x3, 0x16, 0x2, 0xffff8001, 0x8001, 0x9, 0x1, 0x4, 0xdb18, 0x4, 0x90, 0xca1, 0xbbf8, 0xad, 0x9, 0x2, 0x6, 0x0, 0x15, 0x6, 0x100, 0x81, 0xa5, 0x80, 0xfffffffa, 0x6, 0x8, 0x8f, 0xfffffff7, 0x8, 0x21, 0x3, 0x200000, 0x5, 0x59e, 0x7, 0x62c, 0x5, 0x4, 0xd, 0x7, 0x7e7, 0x6, 0xad70, 0x4704, 0x4, 0xc3c4, 0x1, 0x3, 0x4af, 0x9, 0x779, 0x0, 0x6, 0x0, 0x8001, 0x54c, 0x80000001, 0x5, 0x2, 0x9, 0x10, 0x1, 0xa, 0x6, 0x9, 0x5, 0x81, 0xab, 0xfffffffb, 0x1, 0x7fffffff, 0xfffffff8, 0x2, 0x5f, 0x6, 0x93, 0x8, 0x9, 0x4, 0x1ff, 0x0, 0x1ff, 0x6, 0x7, 0x0, 0x8, 0x463, 0x1, 0x5, 0x1f, 0x8, 0xd, 0x3, 0x1, 0x17b, 0x9, 0x8444, 0x80, 0x7fffffff, 0x9, 0x8, 0x38dc, 0x10, 0x5, 0x5, 0x4, 0x5, 0x1, 0x2, 0x1, 0x200, 0x4, 0x3, 0x2, 0x1, 0x2, 0xfffffffd, 0x800, 0xf, 0x0, 0x28000000, 0x9, 0x3, 0x4, 0x0, 0x7, 0x9, 0xf8d, 0x0, 0x5, 0x2c6, 0xfffff105, 0x1, 0x5, 0x5, 0xa4, 0x6, 0x6443, 0x6, 0x2, 0x0, 0x1, 0x4, 0x10, 0x72, 0xcb0, 0x3, 0x0, 0x7129, 0x5, 0x6, 0x7fffffff, 0x3, 0x8, 0x2, 0x8ac, 0x5e2b, 0x3, 0x6, 0xb2, 0xd, 0x800, 0x4, 0x7f, 0x6, 0x5, 0x1, 0x2, 0x800, 0x0, 0x8001, 0x5, 0xffffffff, 0x10000, 0x6, 0x0, 0x688c, 0x8, 0x8, 0xffff, 0x1, 0x8, 0xffffffff, 0xfffffff1, 0x5, 0x2, 0x10000, 0xe37, 0x6, 0x0, 0x40000, 0xb, 0x1, 0x9, 0x0, 0x3fe2, 0xb2d, 0x64a5, 0x7, 0x5, 0xffff, 0x8, 0x2, 0x0, 0x3fffc00, 0x9, 0xf, 0x0, 0xffffff7f, 0x5, 0xf, 0x7, 0x1, 0xe3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE={0x404, 0x2, [0xc8, 0x7, 0x8, 0x10, 0x3, 0xfc, 0x40, 0x10, 0xffffffff, 0x800, 0x9, 0x41, 0x1252, 0x8, 0x8, 0x2, 0x0, 0x2, 0x3, 0x3, 0x1, 0xd, 0x1, 0x4, 0xf4cf, 0x7, 0xc, 0x4, 0x8, 0x2, 0x2, 0x4, 0xb, 0x5, 0x9, 0x856a258, 0x8ba, 0x9, 0x1, 0x5, 0x0, 0xd, 0x4, 0xc1a, 0x4350, 0x7, 0xfffffc01, 0x3, 0x144, 0x8, 0x5, 0x7, 0x4, 0x4, 0x7, 0x2, 0x5, 0x6, 0x6, 0xa, 0xce0d, 0x9105, 0x4, 0x5, 0x97, 0x3, 0xfffffffa, 0x2, 0x3, 0x7, 0xbb3c, 0xfb44, 0x1, 0x2, 0xffff, 0xfffffffa, 0x4, 0xfffffff9, 0x5b, 0x9, 0x7, 0xfff, 0xdc8, 0x200, 0x9, 0x80000001, 0x5, 0xfc1, 0x7fff, 0x10, 0x8, 0x1, 0x4, 0x0, 0x3000000, 0x3, 0x80000001, 0x2b2, 0x7fff, 0xfcb, 0x6, 0x8, 0x6, 0x1, 0x7fff, 0x9, 0xf, 0xa, 0x2, 0x1, 0xfffffffa, 0x7, 0x9, 0x6, 0xab04, 0x2, 0xfbde, 0x7, 0x1c400000, 0x0, 0x1, 0xe16, 0xb9de, 0xffffffff, 0x9f8b, 0x80, 0x3, 0x384, 0xb, 0x0, 0x2, 0xb, 0x4, 0x4, 0xb8, 0x0, 0x4, 0x80, 0x7, 0x2, 0x5a9d, 0x5, 0x401, 0x6, 0x9, 0x40, 0x1, 0x9c6, 0xffff, 0xfff, 0xb4, 0x9, 0x8, 0xffff, 0x1, 0xa, 0x2, 0x1, 0xe, 0x3, 0x20da, 0x960, 0x200000, 0x800, 0x1, 0x7, 0xb3, 0x1000, 0x2, 0x3, 0x4, 0x9, 0x3, 0xa6, 0x1, 0x2, 0x5, 0x535f, 0x3, 0x0, 0x2, 0x4, 0x6, 0x1, 0x7, 0x5, 0x0, 0x7ff, 0x1, 0x9, 0x7fff, 0x4, 0x1, 0x81, 0x6, 0x7fff, 0x1000, 0x7, 0x8, 0x4, 0x5, 0x1, 0x4, 0x0, 0xe, 0x0, 0x8, 0xc7, 0x2, 0x1, 0xffffffdf, 0xffff, 0x10, 0x6, 0x7, 0x5, 0xb, 0xfe0, 0x1, 0xc, 0x6, 0x4, 0x5, 0x0, 0x0, 0x9, 0x9, 0x0, 0x6, 0x2, 0x9, 0x7fff, 0x4, 0x4, 0x0, 0x3, 0x7, 0x0, 0x3, 0x5, 0x7, 0x9, 0xffffff0a, 0x8, 0xa6d1, 0x8, 0xc, 0x4, 0x11c40, 0x7f, 0x2, 0x10001, 0x4d35390e, 0xfffffffd, 0x8, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7ff, 0x846, 0x8cde, 0x8, 0xa, 0x9, 0xf1c, 0x9, 0x7f, 0x8, 0x2, 0x1, 0xdb3, 0x1, 0x9, 0x7ff, 0x85e, 0x1, 0x362a, 0x80, 0x7, 0xe6, 0x0, 0xdb1, 0x4, 0x5, 0x1, 0xa4, 0x7fffffff, 0x10001, 0x35, 0x4, 0x31, 0x2, 0x7ff, 0x0, 0x4, 0x4bc00000, 0x4, 0x7, 0x8, 0x5, 0x400, 0x466, 0x9, 0x2, 0x101, 0x80000001, 0x7, 0x1, 0x10001, 0x4, 0x0, 0x6, 0xffffdfd5, 0xe4, 0x7fff, 0x8, 0x4, 0x5, 0x400, 0x8, 0x8, 0x4, 0x1, 0x8, 0x10000, 0x5, 0x10001, 0x8, 0x10001, 0x7, 0xa22, 0x1ff, 0xca50, 0x4, 0x6, 0x6, 0xd7, 0x6, 0x1, 0x4, 0x6, 0x8, 0x5, 0xfffffff9, 0x70, 0x9, 0x6, 0x5, 0x2, 0x8, 0x8, 0x40, 0x1, 0x5, 0x9, 0x3, 0x140, 0xa6, 0x1, 0x4, 0x7, 0x7, 0x8, 0x3, 0x8, 0xed72, 0x9, 0x7cb, 0xa, 0x2, 0x8, 0x1, 0x10001, 0xf6f0, 0x9a0, 0xe, 0x10, 0x822, 0xfff, 0xff, 0x886, 0x9, 0x3, 0x2, 0xbe89bce5, 0x6, 0x7a, 0x7f, 0x526, 0x400, 0xa, 0xff, 0x0, 0x3, 0xe00, 0xa0, 0x4, 0xfffffffe, 0x3ff, 0x7, 0x3ff, 0x1e2, 0x2, 0x2, 0x401, 0x0, 0x6, 0xc00, 0xe, 0x9, 0x6, 0x4, 0x5, 0x3, 0x8, 0x1, 0x0, 0x3, 0x100, 0x6, 0xc9b, 0x6, 0x2, 0x9, 0x2, 0x4c, 0x4, 0x9, 0x0, 0x40000000, 0xffff, 0x3, 0x1, 0x7ff, 0x462, 0x9, 0x101, 0x1000, 0x800, 0x40, 0x3, 0x7ff, 0xb94b, 0x6ab8, 0x5, 0x4, 0x2, 0x5, 0x40, 0x5, 0x6, 0x8, 0xf2d, 0x2, 0xc, 0x7ff, 0x0, 0x1000, 0xc9, 0x4, 0x272c, 0x10000, 0x7, 0x2, 0xaa, 0x6, 0xf, 0x7b, 0xabdd, 0x101, 0x63c, 0x2, 0xfb5b, 0x5, 0x2, 0x5, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x9, 0xb0, 0x6, 0x3, 0x8, 0x2, 0x3, 0x3ff, 0xe1, 0x90000000, 0x1, 0x9, 0x9, 0xb4, 0x0, 0x1f, 0x6, 0x0, 0xc87, 0xffffffff, 0x2, 0x45b, 0x3, 0x0, 0x400, 0x6, 0x3ff, 0x5, 0x3, 0x1, 0xe, 0xd044]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc0}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x0, 0x6, 0x0, 0x8, 0x200, 0x80, 0x9, 0x3, 0x3, 0x10000, 0x7da3e799, 0x6c, 0x1, 0x5, 0xea4, 0x0, 0x2b42, 0x3, 0x7, 0x7, 0xd4, 0x0, 0x9, 0x9, 0x6a31, 0x1, 0x4, 0x1, 0x1, 0x5, 0x3, 0xf8f, 0x6, 0x800, 0x7ff, 0x8539, 0x5, 0x87, 0xf7, 0x8, 0x101, 0x4, 0xb, 0x9f, 0x5, 0x200, 0x9, 0x9, 0x3, 0x3, 0x1ff, 0x3, 0xe96, 0x10, 0x1, 0x0, 0x2, 0x7fffffff, 0x0, 0x8, 0x5, 0x5, 0x7fff, 0x2, 0x8, 0x4, 0xc72c, 0xd91, 0x0, 0x8, 0x8, 0x9, 0x9, 0x9, 0x8001, 0x1, 0x8, 0x8, 0xffff, 0xff, 0x7, 0x2, 0x7, 0x8, 0x0, 0x6, 0x95, 0x401, 0x2, 0xf, 0x0, 0xa31be4d3, 0x1, 0xdc, 0x100, 0x10000, 0x4, 0xffff, 0x24, 0x5, 0x6, 0x6, 0x3, 0x3, 0x4, 0x8, 0xd23, 0x2, 0x6, 0x7fffffff, 0x0, 0x3ff, 0x6, 0x9, 0xb, 0x0, 0x7, 0x9, 0xa, 0x0, 0x1, 0x5, 0x7929, 0x1, 0x5, 0x7e5, 0x8, 0x5, 0xffff, 0x5, 0x10000, 0x4, 0x7, 0x0, 0x0, 0xf7, 0x9, 0x3, 0x2, 0x4, 0x3, 0x4, 0x1, 0x6, 0x5, 0x0, 0x1ff, 0x6, 0x3ff, 0x29, 0x7, 0x9, 0x5, 0x9c80, 0x2c0, 0x8, 0x6, 0x2, 0x7, 0x0, 0xffffffd0, 0x3, 0x1, 0xffff, 0x40, 0x40, 0x7fff, 0x3, 0x4, 0xfffffe00, 0x1ff, 0x0, 0x1, 0x6bff, 0x9, 0x8, 0x6, 0x9, 0x5, 0x9, 0xffffff01, 0x3b4, 0x10001, 0x88dc, 0xffffff55, 0x1, 0x4, 0x3, 0x8001, 0xffff, 0x100, 0x5, 0x9, 0xfffffffa, 0x7, 0x76, 0xf, 0x400, 0x45a00000, 0x6, 0x9, 0x5, 0x5, 0x0, 0xba9, 0x10001, 0x1ff, 0x9, 0x7, 0x7ff, 0x5, 0x7ff, 0x9, 0x101, 0x4, 0x5, 0x101, 0x965, 0x200, 0xffffff79, 0x80000001, 0x4, 0x81, 0x5, 0x2e, 0x4, 0x9, 0x5, 0x2, 0x6bc, 0xca, 0x4, 0x0, 0x10000, 0x92f8, 0x8, 0x4, 0x7f, 0xd, 0x8, 0x1a, 0x2, 0x3af, 0x6, 0x200, 0xf22c, 0x0, 0x2, 0x0, 0x9, 0x100, 0xc, 0x1, 0x7, 0xa171]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0xfffffffb, 0x8, 0x8, {0x5, 0x2, 0x4, 0x7f, 0x0, 0x348}, {0xa, 0x0, 0xa475, 0x0, 0x101, 0x7}, 0x6, 0x3ff}}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xff, 0x9, 0x0, 0xfffffffd, 0x2, 0x3d74, 0x8, 0x3, 0x2, 0x8000, 0x3, 0x1, 0x525, 0x1, 0x3, 0xd0, 0x400000, 0x2, 0x9, 0x2, 0x8c82, 0x2, 0x8, 0x1, 0x5, 0x1000, 0x3, 0x0, 0x5, 0x0, 0x2, 0x8, 0x10001, 0x9, 0x1, 0xc91a, 0xb, 0x44ad464f, 0x6, 0x2, 0x2, 0x7f3, 0x3, 0x7f, 0xbdf, 0x6cac, 0x7f7b, 0x1, 0x8, 0x6, 0x9, 0x984, 0xd, 0x80000000, 0x0, 0x0, 0x3, 0xc, 0x2, 0x3bb5ba1f, 0x9, 0xffffe0e6, 0xc, 0x0, 0x80000001, 0x6, 0x200, 0xa652, 0x1000, 0x1c00, 0x0, 0x9, 0xfff, 0xfffffff3, 0x80000000, 0x7, 0x9d6e, 0x6, 0x7ff, 0x47bf, 0xf, 0x9c57, 0x4, 0x3, 0x1800000, 0x4, 0x3, 0x2, 0x0, 0x0, 0xc, 0x691, 0xfffffffe, 0x2, 0x0, 0x3, 0x1ff, 0x4, 0x8, 0x7, 0xf, 0x10001, 0x5, 0x1, 0x81, 0x1, 0x6, 0x7, 0x3, 0x101, 0x1, 0x1ff, 0x9, 0x6, 0x9, 0xcefd, 0x1, 0xffffffff, 0x6, 0x4, 0x101, 0x8, 0x4, 0x40, 0x4826, 0xfffffffe, 0xef, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x800, 0x7fff, 0x2, 0x4, 0x299e, 0x8, 0x2, 0x800, 0x8, 0x1, 0x6, 0xc, 0x7, 0x4b8ff443, 0x4, 0x1, 0x18, 0x8, 0xd652c64, 0x4, 0x0, 0x6, 0x3, 0x80000001, 0x40d, 0xbc, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0x27df, 0x0, 0x2, 0x5, 0xffffffff, 0xca5, 0x10000, 0xe, 0x5, 0xc1f, 0x6, 0xfffffc01, 0xbd6, 0xc, 0x8, 0x4, 0xfffff000, 0x8, 0x5, 0x6, 0x7, 0x7, 0x6, 0xb, 0x9, 0xa, 0x0, 0x38, 0x8, 0x3, 0xbb35, 0xff, 0x0, 0x1000, 0x9, 0x6, 0x1, 0x2, 0xfff, 0xe3f, 0x1, 0x3, 0x2f65d9ce, 0x4, 0xabb, 0x10001, 0x7, 0x5, 0x1ff, 0x1, 0x2, 0x7, 0xb89, 0x1, 0x2, 0x5, 0xddd, 0x200, 0x3, 0x2, 0x0, 0x4, 0x7, 0x7, 0xfffffff9, 0x6, 0x0, 0x96220, 0x9, 0x0, 0x2, 0x8, 0x5, 0x5, 0x2, 0xd019, 0x5, 0x401, 0x3, 0x200000, 0x480, 0x10d, 0x2, 0x1, 0x2, 0x6, 0x0, 0x8, 0x24, 0x7]}]]}, {0x90, 0x6, "8f95fd044331f5a52fd775a6ea262c1e6cff9c22708abc270672e50cdb66e7763bd20f4de7746db79c85341b66f2f17860f10e193924d0aa15e2dd35f7dc9d219d8dba53e709dc6654a8ee7c5b83e10d4f876dd636bf509efac4a2626aa1eb7683c3e9ab010108806947b4a2182274687b0c5781e4b74fa6d02d9a3cbc15fdfb8102c177db0fbf9d90dd364d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'ipvlan0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb}]}}]}, 0x26d8}, 0x1, 0x0, 0x0, 0x804}, 0x4000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000902000/0x4000)=nil, 0x4000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4789c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x6) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES8=r5, @ANYRES8=r1, @ANYRESDEC=r3], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2ca2}, 0x4c) recvmmsg(r6, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) read(r6, &(0x7f0000000300)=""/212, 0xd4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="20080100140003006d6163766c616e300000000000000000e57cd399dd9f325d6404951ad9b1b6ba0a9d46d1c28bea6afa9157c8287a3e7e701b49d59d7d7a5d401a29e5b74aa9e58a04a4f6c941863084afd5c87e8ceeb9046bd6fdc915ef0c0599e672c435512f89dd98a41d2d51b2"], 0x34}}, 0x4084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000000000a00000a08000600"/36], 0x24}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) 4.47037267s ago: executing program 8 (id=2914): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 4.20048747s ago: executing program 6 (id=2920): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x1, 0x3, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 4.029908539s ago: executing program 6 (id=2924): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000180)={r3}) 3.993976378s ago: executing program 6 (id=2925): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000180)={r3}) (fail_nth: 1) 3.811529682s ago: executing program 6 (id=2928): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x105000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x8040) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x40, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) 3.604162711s ago: executing program 8 (id=2931): syz_open_dev$video4linux(&(0x7f00000009c0), 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x8040, 0x0, 0x5, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x67, 0x0, 0xc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@noop, @cipso={0x86, 0x55, 0x2, [{0x6, 0x11, "8953c00085e09c2bade44b3731d5a5"}, {0x2, 0x9, "31bdb5c4dafff3"}, {0x6, 0xa, "9e168a4bd9cacfa7"}, {0x0, 0x6, "ef44eb05"}, {0x6, 0x12, "b5e8ef737aede346786546926ae00c87"}, {0x7, 0x5, "a64d39"}, {0x1, 0xe, "15377be93305abb2ca041f4f"}]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@gettfilter={0x3c, 0x2e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0x1}, {0xc, 0xffe0}, {0x0, 0xffff}}, [{0x8}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000094}, 0x80) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000003c0)="96ff55629d76d818fc2eb13b4eca6e98a72a45190a3bb44201f731bb77df9623f2ca1ab381ce4da98ebdee73ba4ef53eac2244c07333e6a254d3eedb2a71820d2d532eacde8b99f909fa4befd2ce802d3c5ea7fabdc58baf67240357d94ef09d78242eedb77f02e5ff167d5b55b3034b01475176d1d8cec9a801f88deeda12431fbf8c69273f5df78db7e12ecc84154026399b8eddbaed8a99cced793665491dd5362d2118d663", 0xa7}, {&(0x7f0000000300)="b26e8d3af9044a670779a37b9b5f0daa0ebb17a828e830310ebc1888b78026c54bda4b2bd9e9528163521a19fd598a23aee235192594b44ae89ab9175d6069b34e5ad9ffe9e96188dadc44c881045a86fb301273f05074a4", 0x58}, {&(0x7f0000001a00)="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", 0x1b5}, {&(0x7f0000000480)="c828c6f59c977758733d81a1793a9622cabec9ca4170bafcbe290d3f2fe10231c71ef8bb83038a4029a30e66f79ae631f4b39a2a4ea26b5fc903d1af4041393baa98fa85120106f70ecf3e71a9813be111e663782759992f8e2d93cb1ff5ad2c3b845fda63a6a515b6f250a7afc4b05485a67446318f0d49d08288150505a239", 0x80}, {&(0x7f0000000680)="13a115949446d9f7a911fed3eddfc9c63c1b3ede222c89302efb883b53c936ca22a73fb931ec1ccd5926f5e9ddfba8bae0329f13e90f7cd06840d41fdd0a74a29014d0ddd1cee4ed05babd200419d5ab421d18df78a7018566ca0ec9ac16b8f64cc2fc1f4e3759ef50db171a3f407729fce6b304678c24d955ee53d36d7dfac2d4d497565af12bd26aeaeccd3e96094e00902a753245fed64d8ff371fb6ce793fff86289915f6ff565f29d6e3d2acc685fc2fca605db88b0b975b2b18e5adce4cc380abaf3174a2a96fb1a8c651594ea7ce9641c1ff4675902208bb75407a69aad61c113b18def", 0xe7}, {&(0x7f0000000180)="79cead1524e5e7b43feb6e97bb4dd7a3dfd62445d61a19f897", 0x19}, {&(0x7f0000000780)="e4f4e2ae1189ff946af408658ef47eaf9b63bec18c690db117e0ba00fbf509045a63f212f1f08c2e69f8dcefe3e7649a2f0b4b1c89c3248a9252d3d9e06e1ec46e1e2c35fae0ab2d1ebf5587333e9fcc4944b08adc2e50232babd116049026a7dfca522b3f40dc846d458384259b928dd391717f6a1d844dfe65099c9bdddde32176d24a59db3ae3b9e1e6d31acb413efc99a1b8208576ad7a7e6c234447c75087c58d3ded198d79937ba367c797fd819accb12a7eda9a64df61a59251ba01362f7f769e081d68326e2312fb539eee38c953e898b59b558ddc8a861460bc8f5d7609d39db6ad8113d070db1e1bbdd1", 0xef}], 0x8}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f00000001c0)={r4, 0x2}, 0xc) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d706f6c3d640240656661756c743a39333539352c0096df9d1398e4ddf47935cf47ecf27ac97dd6bf8be9fa9a423233ad3ac9c7d3d93cdd59038063e6f56d2c78b5a2b9c3c9fed0a04ad359fef614f90f40296924ce50f3528838fd8b5cdf9e3b93c7fe0fb9188d070bc482fa27fb697acf031be71ab878e45c061f0fe29b8e21ec"]) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x6, 0x11, 0x7ff, 0x4, 0xffff, 0x3}) 3.604027202s ago: executing program 8 (id=2932): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x912, 0xf6) sendmmsg(r0, &(0x7f0000002080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) (fail_nth: 1) 3.425311944s ago: executing program 8 (id=2934): syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff0005"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="ac141411e0000001"], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x62, @mcast1, 0x9}}, 0x1, 0x1}, &(0x7f0000000240)=0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={r2, 0xac, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e24, 0x6, @local, 0xa}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfffffff7}]}, &(0x7f00000003c0)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x800400, &(0x7f0000000280)=ANY=[@ANYBLOB='usrqu']) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.28512809s ago: executing program 7 (id=2936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x3, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xa, 0x5c, 0x8, 0x4, 0x4, 0x7, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) 3.2001679s ago: executing program 7 (id=2937): fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, r1, 0xf0396000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r5, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r5}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1d790000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000003a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x400, 0x80000005, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r6, 0x0}) io_uring_enter(r7, 0x3516, 0x3e44, 0x8, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.61429242s ago: executing program 6 (id=2940): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000002180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x31, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = openat$nmem0(0xffffff9c, &(0x7f0000000240), 0x301000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7f}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}}, 0x8001, 0x7fff, 0xc8a, 0x7, 0x80, 0x2}, 0x9c) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) shutdown(r10, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x3, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xa, 0x5c, 0x8, 0x4, 0x4, 0x7, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) 1.784897402s ago: executing program 7 (id=2941): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4c, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 1.78360175s ago: executing program 5 (id=2942): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000cc0)={0x14}, 0x14) 1.703086256s ago: executing program 5 (id=2943): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@setlink={0x90, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16122}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ipip6={{0x58}, {0x58, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x0, 0x14, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x10}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000) io_setup(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25c}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r5}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.224131377s ago: executing program 7 (id=2944): r0 = syz_open_dev$loop(&(0x7f0000000180), 0xc00, 0x800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000004140)) (async) getpgid(0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0xdc, 0x30, 0x200, 0x0, 0x0, {}, [{0xc8, 0x1, [@m_ct={0x88, 0x7, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "d5ca3758c73ba7e1cb097f3c4dfa5314"}]}, {0x4b, 0x6, "cfb313451783aa5be140bc1858b68ad9fc5948412390ac96cae2b2291a80c2abb3b2e1c1b94788b908ddfb75e7abd1e7f51915f9431b087971647cb3a0bb906ed88d2ea1a6cbe7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="005b065c327398a0ac8781c4a9e01570f30fac43ad6cdb473259468f1c146c611ed72972dac8f04d80663a830b1f", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250c0000000c009900000000007000000005000800020000000800090001ac0f00080009000400000014000a00fc185aca7dc6337670c4f0efd032b7f9"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x200440d0) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000440)={0x3, 0x0, [{0x4, 0x1, 0x1, 0x0, @msi={0x9, 0x4, 0x8, 0x2}}, {0x0, 0x4, 0x0, 0x0, @msi={0x4, 0x7, 0x9, 0xc}}, {0x3ff, 0x7, 0x0, 0x0, @irqchip={0x81, 0xa58}}]}) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4000000002) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000006c0)=""/122, 0x7a}], 0x2, &(0x7f0000000780)=""/159, 0x9f}, 0x6}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)=""/221, 0xdd}, {&(0x7f0000000a00)=""/74, 0x4a}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3, &(0x7f0000000bc0)=""/103, 0x67}, 0x101}, {{&(0x7f0000000c40)=@caif=@dbg, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000cc0)=""/240, 0xf0}, {&(0x7f0000000dc0)=""/5, 0x5}, {&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f0000000ec0)=""/171, 0xab}, {&(0x7f0000000f80)=""/47, 0x2f}, {&(0x7f0000000fc0)=""/183, 0xb7}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/113, 0x71}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0xa, &(0x7f0000003240)=""/50, 0x32}, 0x57}, {{&(0x7f0000003280)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003300)=""/69, 0x45}, {&(0x7f0000003380)=""/23, 0x17}], 0x2, &(0x7f0000003400)=""/251, 0xfb}, 0x6}, {{&(0x7f0000003500)=@in6, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003580)=""/202, 0xca}, {&(0x7f0000003680)=""/11, 0xb}, {&(0x7f00000036c0)=""/137, 0x89}, {&(0x7f0000003780)=""/204, 0xcc}, {&(0x7f0000003880)=""/250, 0xfa}, {&(0x7f0000003980)=""/106, 0x6a}], 0x6}, 0x4}, {{&(0x7f0000003a40)=@xdp, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003ac0)=""/207, 0xcf}, {&(0x7f0000003bc0)=""/1, 0x1}, {&(0x7f0000003c00)=""/112, 0x70}, {&(0x7f0000003c80)=""/54, 0x36}, {&(0x7f0000003cc0)=""/5, 0x5}, {&(0x7f0000003d00)=""/7, 0x7}], 0x6, &(0x7f0000003d80)=""/119, 0x77}, 0x4}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e00)=""/148, 0x94}, {&(0x7f0000003ec0)=""/212, 0xd4}], 0x2, &(0x7f0000004000)=""/59, 0x3b}, 0x2}], 0x7, 0x40002021, 0x0) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000400)=0xfffffffffffffe9b) 1.075252194s ago: executing program 8 (id=2945): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4c, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 940.495272ms ago: executing program 6 (id=2946): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xb, &(0x7f0000000040)=0x1) (async) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x11803f}) 890.709492ms ago: executing program 5 (id=2947): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x20001, 0x0, 0x0, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) (fail_nth: 1) 692.610424ms ago: executing program 5 (id=2948): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x40000000, 0xb, 0x7, 0x200, 0x0}) 684.349029ms ago: executing program 8 (id=2949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x6, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x2000, 0x0, 0x0, 0xfffffdcf) 642.437586ms ago: executing program 5 (id=2950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 504.983723ms ago: executing program 7 (id=2951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) shmget(0x1, 0x3000, 0x100, &(0x7f00003bf000/0x3000)=nil) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000005c0), &(0x7f0000000680)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r5, 0x0) syz_clone(0x1000, &(0x7f0000000380)="60db1154a647d884802fdedfcc32bee91c40f1e633b1e98631045f239dd80fa53d1de778627292af116bb30b060d8d8b04da6265e86dbbf9b0567fd08c23fcc96824373f851ac14e38cc03bf15a00845ea7f4dffcfaf2b803b4b2e1a5008aca65477b84dcd9a36ce2ba01bb3f7690cf1ac447eb3b152ef1710a10e31d4efdf7feda7fac6279352ab227e160b904babfec0f71d4e3fd037c23501cfd5ddb9db59013c2687982278abdfb827e8a4f6f85cb1a90ab7725b345a67514a16c36c7f32064ae7c4a00aa1bcee327721b4d218efe9b127018036efcb81af334195", 0xdd, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000480)="ebe01f64e87b3f4a430ccead88800f10db237dd0bde0b3dfa4d8b21b572bfa86636d8cd86cd947e21c6457d8721f1022e219b7b6961bbd1582b0a17d9f2f12a12f635380afd27958b3ea8028015229f148ca06fae88c7e663fd2f4802fb2f413ac6b4e85f736ba538029feeae1fa5ea2ad5cc358434916c0c29fc228ca134f9a50b82728f00ad5287c601e214462af7a9e5ea4149d803c5abcf41ef46c70c4fe5c1022f573772b81f787f51d341dbc91cae5c379d1e4a196192e913abc352355d09981850a2dd83fb130dc42430f9656db0149eb986344d2c34ecfac4c4d8b2cf511d8") 244.653659ms ago: executing program 5 (id=2952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x3fc}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffffffff, 0x2000, &(0x7f00003db000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) r10 = socket(0x9, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x74, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x40}}, @NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x62, 0x1, 0x3a}}]}, @NFCTH_QUEUE_NUM={0x0, 0x3, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x4044) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, 0x0) 0s ago: executing program 7 (id=2953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x103) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0xdddd2000, 0xdddd1000, 0xd, 0xf7, 0x6, 0x4, 0x1, 0xb, 0x0, 0xff, 0xb, 0x29}, {0xffff1000, 0x1000, 0xe, 0x0, 0x3, 0x3, 0x3, 0x1, 0xa, 0x6e, 0xb, 0x1}, {0xeeee8000, 0xa002, 0xd, 0x8, 0x29, 0x6, 0xf2, 0x7, 0x8, 0x7f, 0x4, 0xc8}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xc000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xf, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x0, 0xb, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x100000, 0x8080000, 0xd, 0x5, 0x8, 0xfd, 0x6, 0xf1, 0x9, 0xa, 0x80, 0x3}, {0x10000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0xc, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x1, 0x5f, 0x3c1]}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {}, {r4}, 0xfffffffc, 0x80000001}) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000680)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f00000001c0)=""/15, 0xf}], 0x4, &(0x7f0000000600)=""/121, 0x79}, 0xc}], 0x1, 0x2, 0x0) shutdown(r3, 0x1) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r9, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) kernel console output (not intermixed with test programs): (bridge_slave_0) entered disabled state [ 370.153941][T16647] bridge_slave_0: entered allmulticast mode [ 370.156560][T16647] bridge_slave_0: entered promiscuous mode [ 370.161357][T16647] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.170569][T16647] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.173210][T16647] bridge_slave_1: entered allmulticast mode [ 370.176576][T16647] bridge_slave_1: entered promiscuous mode [ 370.203548][T16647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.211857][T16647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.237702][T16647] team0: Port device team_slave_0 added [ 370.243686][T16647] team0: Port device team_slave_1 added [ 370.269106][T16647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.271504][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.280867][T16647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.287964][T16647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.291680][T16647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.300819][T16647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.357704][T16647] hsr_slave_0: entered promiscuous mode [ 370.361147][T16647] hsr_slave_1: entered promiscuous mode [ 370.364198][T16647] debugfs: 'hsr0' already exists in 'hsr' [ 370.366464][T16647] Cannot create hsr debugfs directory [ 370.586567][T16669] FAULT_INJECTION: forcing a failure. [ 370.586567][T16669] name failslab, interval 1, probability 0, space 0, times 0 [ 370.592007][T16669] CPU: 1 UID: 0 PID: 16669 Comm: syz.0.2781 Not tainted syzkaller #0 PREEMPT(full) [ 370.592022][T16669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 370.592029][T16669] Call Trace: [ 370.592034][T16669] [ 370.592039][T16669] dump_stack_lvl+0x100/0x190 [ 370.592057][T16669] should_fail_ex.cold+0x5/0xa [ 370.592076][T16669] should_failslab+0xc2/0x120 [ 370.592093][T16669] ? tomoyo_realpath_from_path+0xb6/0x690 [ 370.592105][T16669] __kmalloc_noprof+0xf6/0x9c0 [ 370.592120][T16669] ? tomoyo_realpath_from_path+0xb6/0x690 [ 370.592131][T16669] tomoyo_realpath_from_path+0xb6/0x690 [ 370.592145][T16669] tomoyo_path_number_perm+0x23c/0x580 [ 370.592162][T16669] ? tomoyo_path_number_perm+0x22e/0x580 [ 370.592183][T16669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 370.592213][T16669] ? find_held_lock+0x2b/0x80 [ 370.592224][T16669] ? hook_file_ioctl_common+0x146/0x410 [ 370.592241][T16669] ? __fget_files+0x215/0x3d0 [ 370.592256][T16669] ? __fget_files+0x21f/0x3d0 [ 370.592270][T16669] security_file_ioctl_compat+0xd3/0x230 [ 370.592288][T16669] __ia32_compat_sys_ioctl+0xc2/0x360 [ 370.592308][T16669] __do_fast_syscall_32+0xde/0x660 [ 370.592325][T16669] do_fast_syscall_32+0x32/0x70 [ 370.592351][T16669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.592366][T16669] RIP: 0023:0xf748d579 [ 370.592376][T16669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 370.592387][T16669] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 370.592398][T16669] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048ae9b [ 370.592405][T16669] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.592412][T16669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.592418][T16669] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 370.592425][T16669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.592439][T16669] [ 370.592473][T16669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.676424][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.681656][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.686276][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.689604][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.692760][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.994585][T16672] chnl_net:caif_netlink_parms(): no params data found [ 371.238409][T16647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.243804][T16647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.247667][T16672] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.259478][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.263679][T16672] bridge_slave_0: entered allmulticast mode [ 371.266452][T16672] bridge_slave_0: entered promiscuous mode [ 371.269524][T16647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.295209][T16672] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.297712][T16672] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.300088][T16672] bridge_slave_1: entered allmulticast mode [ 371.304109][T16672] bridge_slave_1: entered promiscuous mode [ 371.314046][T16647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.328165][T16672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.333165][T16672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.355270][T16672] team0: Port device team_slave_0 added [ 371.362929][T16672] team0: Port device team_slave_1 added [ 371.391541][T16672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.394392][T16672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.406180][T16672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.423158][T16672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.425533][T16672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.435303][T16672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.450963][T16647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.528902][T16647] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.543600][T16672] hsr_slave_0: entered promiscuous mode [ 371.545877][T16672] hsr_slave_1: entered promiscuous mode [ 371.547985][T16672] debugfs: 'hsr0' already exists in 'hsr' [ 371.549793][T16672] Cannot create hsr debugfs directory [ 371.612650][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.615402][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.699278][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.734138][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.737124][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.771748][ T5941] Bluetooth: hci2: command tx timeout [ 371.812956][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.880254][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.884744][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.887687][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.890747][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.894137][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.966596][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2789'. [ 371.971178][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2789'. [ 371.974222][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2789'. [ 371.981945][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.078487][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.192360][T16729] chnl_net:caif_netlink_parms(): no params data found [ 372.208176][T16647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.336903][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.341134][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.343858][T16729] bridge_slave_0: entered allmulticast mode [ 372.346587][T16729] bridge_slave_0: entered promiscuous mode [ 372.363501][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.366520][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.369502][T16729] bridge_slave_1: entered allmulticast mode [ 372.372990][T16729] bridge_slave_1: entered promiscuous mode [ 372.381075][ T46] dummy0: left allmulticast mode [ 372.383450][ T46] bridge0: port 3(dummy0) entered disabled state [ 372.400099][ T46] bridge_slave_1: left allmulticast mode [ 372.400596][ T8934] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 372.402136][ T46] bridge_slave_1: left promiscuous mode [ 372.406607][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.412000][ T46] bridge_slave_0: left allmulticast mode [ 372.414253][ T46] bridge_slave_0: left promiscuous mode [ 372.416670][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.671815][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.676974][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.680860][ T46] bond0 (unregistering): Released all slaves [ 372.688694][T16647] veth0_vlan: entered promiscuous mode [ 372.708509][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.718010][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.730617][ T5947] Bluetooth: hci1: command tx timeout [ 372.745088][T16647] veth1_vlan: entered promiscuous mode [ 372.750181][T16729] team0: Port device team_slave_0 added [ 372.755310][T16729] team0: Port device team_slave_1 added [ 372.791723][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.794441][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.830707][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.836280][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.838719][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.849042][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.897771][T16647] veth0_macvtap: entered promiscuous mode [ 372.902769][T16647] veth1_macvtap: entered promiscuous mode [ 372.924335][T16729] hsr_slave_0: entered promiscuous mode [ 372.927162][T16729] hsr_slave_1: entered promiscuous mode [ 372.929329][T16729] debugfs: 'hsr0' already exists in 'hsr' [ 372.932071][T16729] Cannot create hsr debugfs directory [ 372.937745][T16647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.954271][T16647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.053775][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.088968][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.111720][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.115350][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.123367][ T46] hsr_slave_0: left promiscuous mode [ 373.125473][ T46] hsr_slave_1: left promiscuous mode [ 373.127550][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.129886][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.132919][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.135584][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.144939][ T46] veth1_macvtap: left promiscuous mode [ 373.146717][ T46] veth0_macvtap: left promiscuous mode [ 373.148551][ T46] veth1_vlan: left promiscuous mode [ 373.150240][ T46] veth0_vlan: left promiscuous mode [ 373.294366][T16796] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 373.296627][T16796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 373.299460][T16796] vhci_hcd vhci_hcd.0: Device attached [ 373.304190][T16796] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.422222][ T46] team0 (unregistering): Port device team_slave_1 removed [ 373.444518][ T46] team0 (unregistering): Port device team_slave_0 removed [ 373.580554][ T5976] usb 48-1: SetAddress Request (11) to port 0 [ 373.582668][ T5976] usb 48-1: new SuperSpeed USB device number 11 using vhci_hcd [ 373.698690][T12577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.703301][T12577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.714890][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.718971][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.832951][T16797] vhci_hcd: connection reset by peer [ 373.840787][T12577] vhci_hcd vhci_hcd.5: stop threads [ 373.843130][T12577] vhci_hcd vhci_hcd.5: release socket [ 373.847829][T12577] vhci_hcd vhci_hcd.5: disconnect device [ 373.851472][ T5947] Bluetooth: hci2: command tx timeout [ 373.930613][ T5947] Bluetooth: hci0: command tx timeout [ 374.581144][T16672] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.632184][T16672] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.638112][T16672] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.643637][T16672] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.697702][T16729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.715451][T16729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.719894][T16729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.732950][T16729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.797484][T16672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.810793][ T5947] Bluetooth: hci1: command tx timeout [ 374.838210][T16672] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.844817][T16869] FAULT_INJECTION: forcing a failure. [ 374.844817][T16869] name failslab, interval 1, probability 0, space 0, times 0 [ 374.848980][T16869] CPU: 0 UID: 0 PID: 16869 Comm: syz.5.2795 Not tainted syzkaller #0 PREEMPT(full) [ 374.848999][T16869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.849009][T16869] Call Trace: [ 374.849015][T16869] [ 374.849022][T16869] dump_stack_lvl+0x100/0x190 [ 374.849043][T16869] should_fail_ex.cold+0x5/0xa [ 374.849062][T16869] should_failslab+0xc2/0x120 [ 374.849078][T16869] kmem_cache_alloc_noprof+0x83/0x780 [ 374.849094][T16869] ? getname_flags.part.0+0x4c/0x540 [ 374.849115][T16869] ? getname_flags.part.0+0x4c/0x540 [ 374.849131][T16869] getname_flags.part.0+0x4c/0x540 [ 374.849149][T16869] __ia32_sys_rmdir+0xaf/0x110 [ 374.849164][T16869] __do_fast_syscall_32+0xde/0x660 [ 374.849180][T16869] do_fast_syscall_32+0x32/0x70 [ 374.849195][T16869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.849210][T16869] RIP: 0023:0xf73cd579 [ 374.849219][T16869] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 374.849230][T16869] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 374.849241][T16869] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000000 [ 374.849248][T16869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.849254][T16869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.849261][T16869] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.849267][T16869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.849281][T16869] [ 374.853687][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.883108][T16873] fuse: Unknown parameter 'use00000000000000000000' [ 374.884367][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.937446][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.941013][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.944022][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.974595][T16672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.993888][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.999313][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.001649][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.008375][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.010727][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.169150][T16672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.220314][T16672] veth0_vlan: entered promiscuous mode [ 375.227597][T16672] veth1_vlan: entered promiscuous mode [ 375.255192][T16672] veth0_macvtap: entered promiscuous mode [ 375.265650][T16672] veth1_macvtap: entered promiscuous mode [ 375.279635][T16672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.290855][T16672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.321192][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.331649][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.344459][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.347295][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.375810][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.470914][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.473431][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.505820][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.508327][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.632047][T16729] veth0_vlan: entered promiscuous mode [ 375.724706][T16729] veth1_vlan: entered promiscuous mode [ 375.940696][ T5947] Bluetooth: hci2: command tx timeout [ 375.991781][T16729] veth0_macvtap: entered promiscuous mode [ 376.004715][T16729] veth1_macvtap: entered promiscuous mode [ 376.021548][ T5947] Bluetooth: hci0: command tx timeout [ 376.084816][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.120094][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.150468][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.153217][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.166561][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.171176][T12577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.315315][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.328890][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.379000][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.385326][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.560848][T16938] FAULT_INJECTION: forcing a failure. [ 376.560848][T16938] name failslab, interval 1, probability 0, space 0, times 0 [ 376.565024][T16938] CPU: 2 UID: 0 PID: 16938 Comm: syz.4.2787 Not tainted syzkaller #0 PREEMPT(full) [ 376.565042][T16938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 376.565049][T16938] Call Trace: [ 376.565053][T16938] [ 376.565059][T16938] dump_stack_lvl+0x100/0x190 [ 376.565081][T16938] should_fail_ex.cold+0x5/0xa [ 376.565100][T16938] should_failslab+0xc2/0x120 [ 376.565116][T16938] __kvmalloc_node_noprof+0x101/0xac0 [ 376.565131][T16938] ? seq_read_iter+0x819/0x1270 [ 376.565146][T16938] ? seq_read_iter+0x819/0x1270 [ 376.565156][T16938] seq_read_iter+0x819/0x1270 [ 376.565173][T16938] seq_read+0x33b/0x4c0 [ 376.565183][T16938] ? __pfx_seq_read+0x10/0x10 [ 376.565197][T16938] ? common_file_perm+0x1ab/0x4f0 [ 376.565218][T16938] ? rw_verify_area+0xce/0x6d0 [ 376.565229][T16938] ? __pfx_seq_read+0x10/0x10 [ 376.565240][T16938] vfs_read+0x1e4/0xb30 [ 376.565254][T16938] ? __pfx_vfs_read+0x10/0x10 [ 376.565266][T16938] ? __fget_files+0x215/0x3d0 [ 376.565281][T16938] ? __fget_files+0x21f/0x3d0 [ 376.565297][T16938] ksys_read+0x12a/0x250 [ 376.565309][T16938] ? __pfx_ksys_read+0x10/0x10 [ 376.565321][T16938] ? __pfx_ksys_write+0x10/0x10 [ 376.565336][T16938] __do_fast_syscall_32+0xde/0x660 [ 376.565353][T16938] do_fast_syscall_32+0x32/0x70 [ 376.565367][T16938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.565382][T16938] RIP: 0023:0xf7f92579 [ 376.565391][T16938] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 376.565401][T16938] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 376.565413][T16938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800020c0 [ 376.565420][T16938] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.565426][T16938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.565433][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.565439][T16938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.565453][T16938] [ 376.971657][T16930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 376.973691][T16930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 376.980115][T16930] vhci_hcd vhci_hcd.0: Device attached [ 377.001867][ T5947] Bluetooth: hci1: command tx timeout [ 377.377579][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 377.380165][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 377.390014][T16930] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.535135][T16946] vhci_hcd: connection reset by peer [ 377.538905][ T46] vhci_hcd vhci_hcd.1: stop threads [ 377.550700][ T46] vhci_hcd vhci_hcd.1: release socket [ 377.553840][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 377.896086][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 377.898938][T16962] openvswitch: netlink: Flow actions attr not present in new flow. [ 378.022672][ T5947] Bluetooth: hci2: command tx timeout [ 378.088914][ T46] bridge_slave_1: left allmulticast mode [ 378.093412][ T46] bridge_slave_1: left promiscuous mode [ 378.095525][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.098922][ T46] bridge_slave_0: left allmulticast mode [ 378.100412][ T46] bridge_slave_0: left promiscuous mode [ 378.102468][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.229506][ T46] gretap0 (unregistering): left promiscuous mode [ 378.289508][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 378.292830][ T46] bridge0 (unregistering): left promiscuous mode [ 378.370184][ T46] bond0 (unregistering): left promiscuous mode [ 378.372699][ T46] bond_slave_0: left promiscuous mode [ 378.374610][ T46] bond_slave_1: left promiscuous mode [ 378.380087][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.386400][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.390164][ T46] bond0 (unregistering): Released all slaves [ 378.650522][ T5976] usb 48-1: device descriptor read/8, error -110 [ 378.953614][T17017] syzkaller0: create flow: hash 930221627 index 1 [ 378.971438][ T8899] syzkaller0: tun_net_xmit 76 [ 378.985491][T17016] syzkaller0: delete flow: hash 930221627 index 1 [ 379.050988][ T5947] Bluetooth: hci1: command tx timeout [ 379.052355][ T5976] usb usb48-port1: attempt power cycle [ 379.196600][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.200248][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.203820][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.206626][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.209184][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.621553][ T5976] usb usb48-port1: unable to enumerate USB device [ 380.482659][ T46] hsr_slave_0: left promiscuous mode [ 380.484768][ T46] hsr_slave_1: left promiscuous mode [ 380.486811][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.489654][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.493618][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.496026][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.518574][ T46] veth1_macvtap: left promiscuous mode [ 380.520746][ T46] veth0_macvtap: left promiscuous mode [ 380.522705][ T46] veth1_vlan: left promiscuous mode [ 380.524448][ T46] veth0_vlan: left promiscuous mode [ 380.758444][T17069] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2821'. [ 380.868797][ T46] team0 (unregistering): Port device team_slave_1 removed [ 380.901265][ T46] team0 (unregistering): Port device team_slave_0 removed [ 381.004133][T17088] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 381.006329][T17088] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 381.008943][T17088] vhci_hcd vhci_hcd.0: Device attached [ 381.013535][T17088] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.154256][T17063] syzkaller0: entered promiscuous mode [ 381.157459][T17063] syzkaller0: entered allmulticast mode [ 381.164779][T17080] syzkaller0: entered promiscuous mode [ 381.166717][T17080] syzkaller0: entered allmulticast mode [ 381.174083][T17039] chnl_net:caif_netlink_parms(): no params data found [ 381.238347][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.244831][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.247291][T17039] bridge_slave_0: entered allmulticast mode [ 381.249993][T17039] bridge_slave_0: entered promiscuous mode [ 381.253342][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.255702][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.258016][T17039] bridge_slave_1: entered allmulticast mode [ 381.261308][T17039] bridge_slave_1: entered promiscuous mode [ 381.277036][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.281640][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.297036][T17039] team0: Port device team_slave_0 added [ 381.301058][T17039] team0: Port device team_slave_1 added [ 381.301705][ T5941] Bluetooth: hci0: command tx timeout [ 381.320655][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.323250][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.331618][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.340327][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.342647][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.350839][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.360286][T17104] syzkaller0: entered promiscuous mode [ 381.362443][T17104] syzkaller0: entered allmulticast mode [ 381.376770][T17104] FAULT_INJECTION: forcing a failure. [ 381.376770][T17104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.383651][T17039] hsr_slave_0: entered promiscuous mode [ 381.385916][T17039] hsr_slave_1: entered promiscuous mode [ 381.389124][T17104] CPU: 1 UID: 0 PID: 17104 Comm: syz.3.2822 Not tainted syzkaller #0 PREEMPT(full) [ 381.389139][T17104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.389146][T17104] Call Trace: [ 381.389149][T17104] [ 381.389154][T17104] dump_stack_lvl+0x100/0x190 [ 381.389170][T17104] should_fail_ex.cold+0x5/0xa [ 381.389189][T17104] _copy_from_user+0x2e/0xd0 [ 381.389207][T17104] get_compat_msghdr+0xb3/0x4b0 [ 381.389223][T17104] ? __pfx_get_compat_msghdr+0x10/0x10 [ 381.389249][T17104] ___sys_sendmsg+0x1b6/0x1e0 [ 381.389263][T17104] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.389291][T17104] __sys_sendmsg+0x170/0x220 [ 381.389308][T17104] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.389329][T17104] ? __pfx_ksys_write+0x10/0x10 [ 381.389345][T17104] __do_fast_syscall_32+0xde/0x660 [ 381.389361][T17104] do_fast_syscall_32+0x32/0x70 [ 381.389375][T17104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.389389][T17104] RIP: 0023:0xf7f84579 [ 381.389398][T17104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 381.389409][T17104] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 381.389420][T17104] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000280 [ 381.389427][T17104] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.389433][T17104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.389440][T17104] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.389446][T17104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.389460][T17104] [ 381.560209][T17109] binder: 17108:17109 unknown command 0 [ 381.562102][T17109] binder: 17108:17109 ioctl c0306201 80000080 returned -22 [ 381.584420][T17089] vhci_hcd: connection closed [ 381.585856][T12577] vhci_hcd vhci_hcd.1: stop threads [ 381.589075][T12577] vhci_hcd vhci_hcd.1: release socket [ 381.592623][T12577] vhci_hcd vhci_hcd.1: disconnect device [ 381.773739][T17118] netlink: 'syz.3.2824': attribute type 12 has an invalid length. [ 381.931196][T17127] FAULT_INJECTION: forcing a failure. [ 381.931196][T17127] name failslab, interval 1, probability 0, space 0, times 0 [ 381.935853][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.5.2825 Not tainted syzkaller #0 PREEMPT(full) [ 381.935874][T17127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.935882][T17127] Call Trace: [ 381.935886][T17127] [ 381.935891][T17127] dump_stack_lvl+0x100/0x190 [ 381.935909][T17127] should_fail_ex.cold+0x5/0xa [ 381.935929][T17127] should_failslab+0xc2/0x120 [ 381.935945][T17127] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.935957][T17127] __kmalloc_noprof+0xf6/0x9c0 [ 381.935972][T17127] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.935983][T17127] tomoyo_realpath_from_path+0xb6/0x690 [ 381.936003][T17127] tomoyo_path_number_perm+0x23c/0x580 [ 381.936019][T17127] ? tomoyo_path_number_perm+0x22e/0x580 [ 381.936036][T17127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.936066][T17127] ? find_held_lock+0x2b/0x80 [ 381.936077][T17127] ? hook_file_ioctl_common+0x146/0x410 [ 381.936093][T17127] ? __fget_files+0x215/0x3d0 [ 381.936108][T17127] ? __fget_files+0x21f/0x3d0 [ 381.936122][T17127] security_file_ioctl_compat+0xd3/0x230 [ 381.936141][T17127] __ia32_compat_sys_ioctl+0xc2/0x360 [ 381.936162][T17127] __do_fast_syscall_32+0xde/0x660 [ 381.936178][T17127] do_fast_syscall_32+0x32/0x70 [ 381.936192][T17127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.936207][T17127] RIP: 0023:0xf73cd579 [ 381.936216][T17127] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 381.936227][T17127] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 381.936238][T17127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 381.936245][T17127] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.936253][T17127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.936260][T17127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.936266][T17127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.936281][T17127] [ 381.936285][T17127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.009387][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.111762][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.233823][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.262374][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 382.262386][ T40] audit: type=1326 audit(1769914288.979:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.274172][ T40] audit: type=1326 audit(1769914288.979:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.285028][T17039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.290507][ T40] audit: type=1326 audit(1769914288.989:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290532][ T40] audit: type=1326 audit(1769914288.989:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290553][ T40] audit: type=1326 audit(1769914288.989:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290573][ T40] audit: type=1326 audit(1769914288.989:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290593][ T40] audit: type=1326 audit(1769914288.989:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290614][ T40] audit: type=1326 audit(1769914288.989:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf716572b code=0x7ffc0000 [ 382.290634][ T40] audit: type=1326 audit(1769914288.989:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.290655][ T40] audit: type=1326 audit(1769914288.989:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17138 comm="syz.1.2827" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.325522][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.396255][T17039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.409211][T17039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.427225][T17039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.434426][T17151] netlink: 'syz.1.2828': attribute type 5 has an invalid length. [ 382.438409][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 382.500609][ T24] usb 40-1: device descriptor read/8, error -110 [ 382.548232][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.560081][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.569993][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.572712][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.586859][ T46] bridge_slave_1: left allmulticast mode [ 382.589333][ T46] bridge_slave_1: left promiscuous mode [ 382.600888][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.621105][ T46] bridge_slave_0: left allmulticast mode [ 382.623131][ T46] bridge_slave_0: left promiscuous mode [ 382.625009][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.665406][T17165] SQUASHFS error: Failed to read block 0x0: -5 [ 382.668639][T17165] unable to read squashfs_super_block [ 382.891440][ T24] usb usb40-port1: attempt power cycle [ 383.022363][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.026442][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.029909][ T46] bond0 (unregistering): Released all slaves [ 383.035198][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.037887][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.038801][T17179] binder: 17178:17179 unknown command 0 [ 383.043400][T17179] binder: 17178:17179 ioctl c0306201 80000080 returned -22 [ 383.051117][T17179] binder: BINDER_SET_CONTEXT_MGR already set [ 383.053363][T17179] binder: 17178:17179 ioctl 4018620d 80000040 returned -16 [ 383.139215][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.141480][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.231542][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.380519][ T5941] Bluetooth: hci0: command tx timeout [ 383.473497][ T24] usb usb40-port1: unable to enumerate USB device [ 383.486545][ T46] hsr_slave_0: left promiscuous mode [ 383.488765][ T46] hsr_slave_1: left promiscuous mode [ 383.491155][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.500621][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.504280][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.506530][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.533063][T17212] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 383.535262][T17212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.539497][T17212] vhci_hcd vhci_hcd.0: Device attached [ 383.543146][ T46] veth1_macvtap: left promiscuous mode [ 383.544933][ T46] veth0_macvtap: left promiscuous mode [ 383.546662][ T46] veth1_vlan: left promiscuous mode [ 383.551995][ T46] veth0_vlan: left promiscuous mode [ 383.553877][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.557301][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.560123][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.562846][T17212] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.563719][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.568069][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.900724][ T6076] usb 48-1: SetAddress Request (15) to port 0 [ 383.902619][ T6076] usb 48-1: new SuperSpeed USB device number 15 using vhci_hcd [ 384.337248][ T46] team0 (unregistering): Port device team_slave_1 removed [ 384.360033][T17213] vhci_hcd: connection reset by peer [ 384.363909][T12577] vhci_hcd vhci_hcd.5: stop threads [ 384.365584][T12577] vhci_hcd vhci_hcd.5: release socket [ 384.368028][T12577] vhci_hcd vhci_hcd.5: disconnect device [ 384.375447][ T46] team0 (unregistering): Port device team_slave_0 removed [ 384.943949][T17039] veth0_vlan: entered promiscuous mode [ 385.000063][T17039] veth1_vlan: entered promiscuous mode [ 385.076725][T17039] veth0_macvtap: entered promiscuous mode [ 385.088440][T17039] veth1_macvtap: entered promiscuous mode [ 385.098763][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.113534][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.123693][T17215] chnl_net:caif_netlink_parms(): no params data found [ 385.141014][ T1166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.144483][ T1166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.158239][ T1166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.177607][ T1166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.286516][T17215] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.300551][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.302798][T17215] bridge_slave_0: entered allmulticast mode [ 385.305431][T17215] bridge_slave_0: entered promiscuous mode [ 385.308356][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.309303][T17215] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.309659][T17252] FAULT_INJECTION: forcing a failure. [ 385.309659][T17252] name failslab, interval 1, probability 0, space 0, times 0 [ 385.309678][T17252] CPU: 3 UID: 0 PID: 17252 Comm: syz.5.2841 Not tainted syzkaller #0 PREEMPT(full) [ 385.309691][T17252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.309698][T17252] Call Trace: [ 385.309701][T17252] [ 385.309706][T17252] dump_stack_lvl+0x100/0x190 [ 385.309724][T17252] should_fail_ex.cold+0x5/0xa [ 385.309749][T17252] should_failslab+0xc2/0x120 [ 385.309772][T17252] ? tomoyo_realpath_from_path+0xb6/0x690 [ 385.309791][T17252] __kmalloc_noprof+0xf6/0x9c0 [ 385.309816][T17252] ? tomoyo_realpath_from_path+0xb6/0x690 [ 385.309835][T17252] tomoyo_realpath_from_path+0xb6/0x690 [ 385.309855][T17252] tomoyo_path_number_perm+0x23c/0x580 [ 385.309871][T17252] ? tomoyo_path_number_perm+0x22e/0x580 [ 385.309888][T17252] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.309918][T17252] ? find_held_lock+0x2b/0x80 [ 385.309929][T17252] ? hook_file_ioctl_common+0x146/0x410 [ 385.309946][T17252] ? __fget_files+0x215/0x3d0 [ 385.309961][T17252] ? __fget_files+0x21f/0x3d0 [ 385.309975][T17252] security_file_ioctl_compat+0xd3/0x230 [ 385.309994][T17252] __ia32_compat_sys_ioctl+0xc2/0x360 [ 385.310019][T17252] __do_fast_syscall_32+0xde/0x660 [ 385.310036][T17252] do_fast_syscall_32+0x32/0x70 [ 385.310050][T17252] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.310064][T17252] RIP: 0023:0xf73cd579 [ 385.310074][T17252] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 385.310084][T17252] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 385.310095][T17252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005418 [ 385.310102][T17252] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.310109][T17252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.310115][T17252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.310121][T17252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.310136][T17252] [ 385.310140][T17252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.390559][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.393418][T17215] bridge_slave_1: entered allmulticast mode [ 385.396084][T17215] bridge_slave_1: entered promiscuous mode [ 385.401103][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.403787][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.450630][ T5941] Bluetooth: hci0: command tx timeout [ 385.493740][T17215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.496986][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.498473][T17215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.499784][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.535416][T17215] team0: Port device team_slave_0 added [ 385.538503][T17215] team0: Port device team_slave_1 added [ 385.551551][T17215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.553799][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.562686][T17215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.571572][T17215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.574176][T17215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.582732][T17215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.609940][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.620529][ T5941] Bluetooth: hci2: command tx timeout [ 385.666569][T17267] fuse: Unknown parameter 'user_i00000000000000000000' [ 385.682074][T17215] hsr_slave_0: entered promiscuous mode [ 385.684669][T17215] hsr_slave_1: entered promiscuous mode [ 385.687151][T17268] SQUASHFS error: Failed to read block 0x0: -5 [ 385.689754][T17268] unable to read squashfs_super_block [ 385.700052][T17215] debugfs: 'hsr0' already exists in 'hsr' [ 385.704852][T17215] Cannot create hsr debugfs directory [ 385.753314][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.861605][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.981782][T17283] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 386.133258][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.302573][T17291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 387.304635][T17291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.319811][T17291] vhci_hcd vhci_hcd.0: Device attached [ 387.365463][ T46] bridge_slave_1: left allmulticast mode [ 387.367870][ T46] bridge_slave_1: left promiscuous mode [ 387.370477][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.385109][ T46] bridge_slave_0: left allmulticast mode [ 387.387506][ T46] bridge_slave_0: left promiscuous mode [ 387.390042][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.542401][ T5941] Bluetooth: hci0: command tx timeout [ 387.611985][T10051] usb 40-1: SetAddress Request (6) to port 0 [ 387.613977][T10051] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 387.722405][ T5941] Bluetooth: hci2: command tx timeout [ 388.345891][T17299] vhci_hcd: connection reset by peer [ 388.348413][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 388.351871][ T1143] vhci_hcd vhci_hcd.1: release socket [ 388.356439][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 388.360034][T17312] capability: warning: `syz.6.2851' uses deprecated v2 capabilities in a way that may be insecure [ 388.477096][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.481830][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.485443][ T46] bond0 (unregistering): Released all slaves [ 388.619598][T17322] binder: BINDER_SET_CONTEXT_MGR already set [ 388.621862][T17322] binder: 17321:17322 ioctl 4018620d 800000c0 returned -16 [ 388.625769][T17322] binder: BINDER_SET_CONTEXT_MGR already set [ 388.627929][T17322] binder: 17321:17322 ioctl 4018620d 80000040 returned -16 [ 388.630833][T17322] FAULT_INJECTION: forcing a failure. [ 388.630833][T17322] name failslab, interval 1, probability 0, space 0, times 0 [ 388.634920][T17322] CPU: 3 UID: 0 PID: 17322 Comm: syz.5.2852 Not tainted syzkaller #0 PREEMPT(full) [ 388.634951][T17322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.634958][T17322] Call Trace: [ 388.634963][T17322] [ 388.634968][T17322] dump_stack_lvl+0x100/0x190 [ 388.634985][T17322] should_fail_ex.cold+0x5/0xa [ 388.635004][T17322] should_failslab+0xc2/0x120 [ 388.635032][T17322] ? tomoyo_realpath_from_path+0xb6/0x690 [ 388.635044][T17322] __kmalloc_noprof+0xf6/0x9c0 [ 388.635060][T17322] ? tomoyo_realpath_from_path+0xb6/0x690 [ 388.635070][T17322] tomoyo_realpath_from_path+0xb6/0x690 [ 388.635085][T17322] tomoyo_path_number_perm+0x23c/0x580 [ 388.635101][T17322] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.635123][T17322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.635157][T17322] ? find_held_lock+0x2b/0x80 [ 388.635168][T17322] ? hook_file_ioctl_common+0x146/0x410 [ 388.635185][T17322] ? __fget_files+0x215/0x3d0 [ 388.635200][T17322] ? __fget_files+0x21f/0x3d0 [ 388.635214][T17322] security_file_ioctl_compat+0xd3/0x230 [ 388.635232][T17322] __ia32_compat_sys_ioctl+0xc2/0x360 [ 388.635253][T17322] __do_fast_syscall_32+0xde/0x660 [ 388.635270][T17322] do_fast_syscall_32+0x32/0x70 [ 388.635284][T17322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.635299][T17322] RIP: 0023:0xf73cd579 [ 388.635308][T17322] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 388.635319][T17322] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 388.635330][T17322] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0306201 [ 388.635337][T17322] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.635355][T17322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.635363][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.635369][T17322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.635384][T17322] [ 388.635438][T17322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.742972][T17330] binder: BINDER_SET_CONTEXT_MGR already set [ 388.745298][T17330] binder: 17329:17330 ioctl 4018620d 800000c0 returned -16 [ 388.752871][T17330] binder: BINDER_SET_CONTEXT_MGR already set [ 388.755299][T17330] binder: 17329:17330 ioctl 4018620d 80000040 returned -16 [ 388.865570][T17215] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.875040][T17215] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.907619][ T46] hsr_slave_0: left promiscuous mode [ 388.909946][ T46] hsr_slave_1: left promiscuous mode [ 388.914046][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.916704][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.919556][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.922379][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.933277][ T46] veth1_macvtap: left promiscuous mode [ 388.935219][ T46] veth0_macvtap: left promiscuous mode [ 388.938163][ T46] veth1_vlan: left promiscuous mode [ 388.939917][ T46] veth0_vlan: left promiscuous mode [ 388.980671][ T6076] usb 48-1: device descriptor read/8, error -110 [ 389.235256][ T46] team0 (unregistering): Port device team_slave_1 removed [ 389.259222][ T46] team0 (unregistering): Port device team_slave_0 removed [ 389.391102][ T6076] usb usb48-port1: attempt power cycle [ 389.476037][T17215] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 389.480132][T17215] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 389.527375][T17215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.536996][T17215] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.543121][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.545305][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.550663][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.552918][T12577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.714966][T17215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.770968][ T5941] Bluetooth: hci2: command tx timeout [ 389.898310][T17215] veth0_vlan: entered promiscuous mode [ 389.909900][T17215] veth1_vlan: entered promiscuous mode [ 389.927492][T17215] veth0_macvtap: entered promiscuous mode [ 389.934327][T17215] veth1_macvtap: entered promiscuous mode [ 389.951605][T17215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.958823][T17215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.963168][ T6076] usb usb48-port1: unable to enumerate USB device [ 389.968505][ T95] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.971947][ T46] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.978607][ T46] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.982254][ T46] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.014034][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.016589][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.030124][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.033309][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.110595][ T8934] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 390.280698][ T8934] usb 10-1: Using ep0 maxpacket: 8 [ 390.285520][ T8934] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.289639][ T8934] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 390.294801][ T8934] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 390.299111][ T8934] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 390.303970][ T8934] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 390.307083][ T8934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.377231][ T8934] hub 10-1:1.0: bad descriptor, ignoring hub [ 390.379643][ T8934] hub 10-1:1.0: probe with driver hub failed with error -5 [ 390.390767][ T8934] cdc_wdm 10-1:1.0: skipping garbage [ 390.392776][ T8934] cdc_wdm 10-1:1.0: skipping garbage [ 390.411748][ T8934] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 390.414247][ T8934] cdc_wdm 10-1:1.0: Unknown control protocol [ 390.880709][ T8934] usb 10-1: USB disconnect, device number 3 [ 390.973450][T17421] binder: 17419:17421 unknown command 0 [ 390.975264][T17421] binder: 17419:17421 ioctl c0306201 80000080 returned -22 [ 391.270784][ T8934] usb 13-1: new low-speed USB device number 3 using dummy_hcd [ 391.422123][ T8934] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.425334][ T8934] usb 13-1: config 0 has no interface number 0 [ 391.427816][ T8934] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 391.431609][ T8934] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 391.435718][ T8934] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 391.438637][ T8934] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.443240][ T8934] usb 13-1: config 0 descriptor?? [ 391.446396][T17428] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 391.453179][ T8934] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 391.508804][T17459] capability: warning: `syz.5.2867' uses 32-bit capabilities (legacy support in use) [ 391.602207][T17461] random: crng reseeded on system resumption [ 391.656525][ T8712] usb 13-1: USB disconnect, device number 3 [ 391.658510][ C1] iowarrior 13-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 391.851875][ T5941] Bluetooth: hci2: command tx timeout [ 392.422175][ T8899] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 392.602680][ T8899] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 392.605694][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 392.615205][ T8899] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.660552][T10051] usb 40-1: device descriptor read/8, error -110 [ 392.935770][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 392.950247][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.004772][ T8899] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 393.007196][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 393.010633][ T8899] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.014262][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.017767][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.024115][ T8899] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 393.026512][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 393.029947][ T8899] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 393.040505][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 393.044038][ T8899] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 393.061029][T10051] usb usb40-port1: attempt power cycle [ 393.061099][ T8899] usb 11-1: string descriptor 0 read error: -22 [ 393.064767][ T8899] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 393.067643][ T8899] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.074151][ T8899] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 393.424019][T17556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 393.426073][T17556] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.432884][T17556] vhci_hcd vhci_hcd.0: Device attached [ 393.700557][T10051] usb 40-1: SetAddress Request (9) to port 0 [ 393.703157][T10051] usb 40-1: new SuperSpeed USB device number 9 using vhci_hcd [ 393.860087][T17572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 393.862189][T17572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 393.864931][T17572] vhci_hcd vhci_hcd.0: Device attached [ 393.935498][T17576] kvm: emulating exchange as write [ 394.105459][T17557] vhci_hcd: connection reset by peer [ 394.135548][ T13] vhci_hcd vhci_hcd.1: stop threads [ 394.137309][ T13] vhci_hcd vhci_hcd.1: release socket [ 394.139974][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 394.141979][ T831] usb 48-1: SetAddress Request (19) to port 0 [ 394.144525][ T831] usb 48-1: new SuperSpeed USB device number 19 using vhci_hcd [ 394.234406][T17573] vhci_hcd: connection reset by peer [ 394.236920][ T13] vhci_hcd vhci_hcd.5: stop threads [ 394.239115][ T13] vhci_hcd vhci_hcd.5: release socket [ 394.246954][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 394.763519][T17595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.765936][T17595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.768876][T17595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.771661][T17595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.196720][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2881'. [ 395.230950][ T5989] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 395.272008][T17606] FAULT_INJECTION: forcing a failure. [ 395.272008][T17606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.276112][T17606] CPU: 2 UID: 0 PID: 17606 Comm: syz.8.2883 Not tainted syzkaller #0 PREEMPT(full) [ 395.276127][T17606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.276134][T17606] Call Trace: [ 395.276139][T17606] [ 395.276144][T17606] dump_stack_lvl+0x100/0x190 [ 395.276161][T17606] should_fail_ex.cold+0x5/0xa [ 395.276180][T17606] _copy_from_user+0x2e/0xd0 [ 395.276202][T17606] get_compat_msghdr+0xb3/0x4b0 [ 395.276220][T17606] ? __pfx_get_compat_msghdr+0x10/0x10 [ 395.276241][T17606] ___sys_sendmsg+0x1b6/0x1e0 [ 395.276255][T17606] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.276285][T17606] __sys_sendmsg+0x170/0x220 [ 395.276302][T17606] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.276323][T17606] ? __pfx_ksys_write+0x10/0x10 [ 395.276339][T17606] __do_fast_syscall_32+0xde/0x660 [ 395.276357][T17606] do_fast_syscall_32+0x32/0x70 [ 395.276371][T17606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.276389][T17606] RIP: 0023:0xf73ed579 [ 395.276398][T17606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 395.276409][T17606] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 395.276420][T17606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 395.276427][T17606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.276433][T17606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.276440][T17606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.276446][T17606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.276460][T17606] [ 395.410670][ T5989] usb 10-1: Using ep0 maxpacket: 32 [ 395.415211][ T5989] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 395.418696][ T5989] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 395.422669][ T5989] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.426237][ T5989] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 395.433410][ T5989] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 395.438371][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.444002][ T5989] usb 10-1: Product: syz [ 395.446041][ T5989] usb 10-1: Manufacturer: syz [ 395.448308][ T5989] usb 10-1: SerialNumber: syz [ 395.459267][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 395.465300][ T5989] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input27 [ 395.680540][ T5989] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 395.683719][ T5989] (id 0x00) [ 395.730514][ T5989] rc_core: IR keymap rc-imon-pad not found [ 395.732872][ T5989] Registered IR keymap rc-empty [ 395.734678][ T5989] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 395.738352][ T5989] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 395.881476][ T5989] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 395.886360][ T5989] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input28 [ 395.895478][ T5989] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:4> initialized [ 396.115587][T17615] FAULT_INJECTION: forcing a failure. [ 396.115587][T17615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.120859][T17615] CPU: 1 UID: 0 PID: 17615 Comm: syz.5.2880 Not tainted syzkaller #0 PREEMPT(full) [ 396.120883][T17615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.120893][T17615] Call Trace: [ 396.120899][T17615] [ 396.120907][T17615] dump_stack_lvl+0x100/0x190 [ 396.120931][T17615] should_fail_ex.cold+0x5/0xa [ 396.120958][T17615] _copy_to_user+0x32/0xd0 [ 396.120984][T17615] simple_read_from_buffer+0xcb/0x170 [ 396.121003][T17615] proc_fail_nth_read+0x1af/0x230 [ 396.121024][T17615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.121045][T17615] ? rw_verify_area+0xce/0x6d0 [ 396.121061][T17615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.121080][T17615] vfs_read+0x1e4/0xb30 [ 396.121100][T17615] ? __pfx_vfs_read+0x10/0x10 [ 396.121116][T17615] ? find_held_lock+0x2b/0x80 [ 396.121133][T17615] ? __fget_files+0x215/0x3d0 [ 396.121155][T17615] ? __fget_files+0x21f/0x3d0 [ 396.121185][T17615] ksys_read+0x12a/0x250 [ 396.121203][T17615] ? __pfx_ksys_read+0x10/0x10 [ 396.121228][T17615] do_int80_emulation+0x101/0x470 [ 396.121252][T17615] asm_int80_emulation+0x1a/0x20 [ 396.121268][T17615] RIP: 0023:0xf713572b [ 396.121282][T17615] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 396.121298][T17615] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 396.121314][T17615] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d55d0 [ 396.121325][T17615] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 396.121334][T17615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.121343][T17615] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 396.121353][T17615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.121376][T17615] [ 396.130805][ T6025] usb 10-1: USB disconnect, device number 4 [ 396.378554][ T95] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.489554][ T95] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.564985][ T95] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.708406][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.711436][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.713815][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.716526][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.720139][ T95] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.720311][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.850554][ T95] bridge_slave_1: left allmulticast mode [ 396.852338][ T95] bridge_slave_1: left promiscuous mode [ 396.854171][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.857539][ T95] bridge_slave_0: left allmulticast mode [ 396.859353][ T95] bridge_slave_0: left promiscuous mode [ 396.862329][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.093596][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.102505][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.108031][ T95] bond0 (unregistering): Released all slaves [ 397.142693][T17629] chnl_net:caif_netlink_parms(): no params data found [ 397.211205][ T5989] usb 11-1: USB disconnect, device number 2 [ 397.331659][T17629] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.333863][T17629] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.336150][T17629] bridge_slave_0: entered allmulticast mode [ 397.338661][T17629] bridge_slave_0: entered promiscuous mode [ 397.344128][T17629] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.346411][T17629] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.347357][ T60] failed while handling packet from 1:16385 [ 397.348624][ T60] failed while handling packet from 1:16385 [ 397.348720][T17629] bridge_slave_1: entered allmulticast mode [ 397.356597][T17629] bridge_slave_1: entered promiscuous mode [ 397.359672][ T60] failed while handling packet from 1:16385 [ 397.359711][ T60] failed while handling packet from 1:16385 [ 397.362532][ T60] failed while handling packet from 1:16385 [ 397.364937][ T60] failed while handling packet from 1:16385 [ 397.367346][ T60] failed while handling packet from 1:16385 [ 397.369922][ T60] failed while handling packet from 1:16385 [ 397.372893][ T60] failed while handling packet from 1:16385 [ 397.375376][ T60] failed while handling packet from 1:16385 [ 397.377785][ T60] failed while handling packet from 1:16385 [ 397.388608][T17629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.390920][ T60] failed while handling packet from 1:16385 [ 397.393711][ T60] failed while handling packet from 1:16385 [ 397.400750][ T60] failed while handling packet from 1:16385 [ 397.403213][ T60] failed while handling packet from 1:16385 [ 397.405624][ T60] failed while handling packet from 1:16385 [ 397.408025][ T60] failed while handling packet from 1:16385 [ 397.427843][T17629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.429440][ T60] failed while handling packet from 1:16385 [ 397.436205][ T60] failed while handling packet from 1:16385 [ 397.438647][ T60] failed while handling packet from 1:16385 [ 397.441153][ T60] failed while handling packet from 1:16385 [ 397.450515][ T60] failed while handling packet from 1:16385 [ 397.452955][ T60] failed while handling packet from 1:16385 [ 397.454818][ T60] failed while handling packet from 1:16385 [ 397.456694][ T60] failed while handling packet from 1:16385 [ 397.458562][ T60] failed while handling packet from 1:16385 [ 397.470499][ T60] failed while handling packet from 1:16385 [ 397.472393][ T60] failed while handling packet from 1:16385 [ 397.474234][ T60] failed while handling packet from 1:16385 [ 397.476121][ T60] failed while handling packet from 1:16385 [ 397.477948][ T60] failed while handling packet from 1:16385 [ 397.479978][ T60] failed while handling packet from 1:16385 [ 397.486939][ T60] failed while handling packet from 1:16385 [ 397.489849][ T60] failed while handling packet from 1:16385 [ 397.496053][ T60] failed while handling packet from 1:16385 [ 397.498536][ T60] failed while handling packet from 1:16385 [ 397.503574][ T60] failed while handling packet from 1:16385 [ 397.505521][ T60] failed while handling packet from 1:16385 [ 397.508023][ T60] failed while handling packet from 1:16385 [ 397.513202][ T60] failed while handling packet from 1:16385 [ 397.515781][ T60] failed while handling packet from 1:16385 [ 397.526503][T17629] team0: Port device team_slave_0 added [ 397.530830][ T60] failed while handling packet from 1:16385 [ 397.530876][ T60] failed while handling packet from 1:16385 [ 397.530901][ T60] failed while handling packet from 1:16385 [ 397.530940][ T60] failed while handling packet from 1:16385 [ 397.530959][ T60] failed while handling packet from 1:16385 [ 397.530999][ T60] failed while handling packet from 1:16385 [ 397.531017][ T60] failed while handling packet from 1:16385 [ 397.531045][ T60] failed while handling packet from 1:16385 [ 397.531065][ T60] failed while handling packet from 1:16385 [ 397.531081][ T60] failed while handling packet from 1:16385 [ 397.531124][ T60] failed while handling packet from 1:16385 [ 397.531142][ T60] failed while handling packet from 1:16385 [ 397.531181][ T60] failed while handling packet from 1:16385 [ 397.531199][ T60] failed while handling packet from 1:16385 [ 397.534893][T17629] team0: Port device team_slave_1 added [ 397.535802][ T60] failed while handling packet from 1:16385 [ 397.571873][ T60] failed while handling packet from 1:16385 [ 397.574649][ T60] failed while handling packet from 1:16385 [ 397.577511][ T60] failed while handling packet from 1:16385 [ 397.580095][ T60] failed while handling packet from 1:16385 [ 397.583216][ T60] failed while handling packet from 1:16385 [ 397.585809][ T60] failed while handling packet from 1:16385 [ 397.589480][ T60] failed while handling packet from 1:16385 [ 397.594009][ T60] failed while handling packet from 1:16385 [ 397.597986][ T60] failed while handling packet from 1:16385 [ 397.603479][T17654] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2897'. [ 397.603549][ T60] failed while handling packet from 1:16385 [ 397.606159][T17629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.609894][ T60] failed while handling packet from 1:16385 [ 397.612613][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.621904][ T60] failed while handling packet from 1:16385 [ 397.628763][T17629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.628831][ T60] failed while handling packet from 1:16385 [ 397.634931][ T60] failed while handling packet from 1:16385 [ 397.637501][ T60] failed while handling packet from 1:16385 [ 397.639958][ T60] failed while handling packet from 1:16385 [ 397.642211][ T60] failed while handling packet from 1:16385 [ 397.644150][ T60] failed while handling packet from 1:16385 [ 397.646142][ T60] failed while handling packet from 1:16385 [ 397.648106][ T60] failed while handling packet from 1:16385 [ 397.650046][ T60] failed while handling packet from 1:16385 [ 397.658467][ T60] failed while handling packet from 1:16385 [ 397.661347][ T60] failed while handling packet from 1:16385 [ 397.663658][ T60] failed while handling packet from 1:16385 [ 397.664836][T17629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.665609][ T60] failed while handling packet from 1:16385 [ 397.668018][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.668047][T17629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.671483][ T60] failed while handling packet from 1:16385 [ 397.687362][ T60] failed while handling packet from 1:16385 [ 397.689903][ T60] failed while handling packet from 1:16385 [ 397.693612][ T60] failed while handling packet from 1:16385 [ 397.696083][ T60] failed while handling packet from 1:16385 [ 397.723634][T17658] binder: BINDER_SET_CONTEXT_MGR already set [ 397.724949][ T60] failed while handling packet from 1:16385 [ 397.725646][T17658] binder: 17657:17658 ioctl 4018620d 800000c0 returned -16 [ 397.727511][ T60] failed while handling packet from 1:16385 [ 397.732600][T17658] binder: BINDER_SET_CONTEXT_MGR already set [ 397.732620][T17658] binder: 17657:17658 ioctl 4018620d 80000040 returned -16 [ 397.732799][T17658] binder: 17657:17658 ioctl c0306201 80000240 returned -11 [ 397.739648][ T60] failed while handling packet from 1:16385 [ 397.742671][T17658] FAULT_INJECTION: forcing a failure. [ 397.742671][T17658] name failslab, interval 1, probability 0, space 0, times 0 [ 397.746276][ T60] failed while handling packet from 1:16385 [ 397.748428][ T60] failed while handling packet from 1:16385 [ 397.749657][ T95] hsr_slave_0: left promiscuous mode [ 397.750395][ T60] failed while handling packet from 1:16385 [ 397.750474][T17658] CPU: 3 UID: 0 PID: 17658 Comm: syz.5.2899 Not tainted syzkaller #0 PREEMPT(full) [ 397.750490][T17658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.750498][T17658] Call Trace: [ 397.750502][T17658] [ 397.750507][T17658] dump_stack_lvl+0x100/0x190 [ 397.750525][T17658] should_fail_ex.cold+0x5/0xa [ 397.750546][T17658] should_failslab+0xc2/0x120 [ 397.750564][T17658] __kvmalloc_node_noprof+0x101/0xac0 [ 397.750580][T17658] ? seq_read_iter+0x819/0x1270 [ 397.750591][T17658] ? aa_file_perm+0x268/0x1540 [ 397.750606][T17658] ? seq_read_iter+0x819/0x1270 [ 397.750616][T17658] seq_read_iter+0x819/0x1270 [ 397.750627][T17658] ? aa_file_perm+0x277/0x1540 [ 397.750645][T17658] seq_read+0x33b/0x4c0 [ 397.750656][T17658] ? __pfx_seq_read+0x10/0x10 [ 397.750679][T17658] full_proxy_read+0x135/0x1a0 [ 397.750698][T17658] ? __pfx_full_proxy_read+0x10/0x10 [ 397.750717][T17658] vfs_read+0x1e4/0xb30 [ 397.750732][T17658] ? __pfx_vfs_read+0x10/0x10 [ 397.750744][T17658] ? __fget_files+0x215/0x3d0 [ 397.750761][T17658] ? __fget_files+0x21f/0x3d0 [ 397.750777][T17658] ksys_read+0x12a/0x250 [ 397.750790][T17658] ? __pfx_ksys_read+0x10/0x10 [ 397.750803][T17658] ? __pfx_ksys_write+0x10/0x10 [ 397.750819][T17658] __do_fast_syscall_32+0xde/0x660 [ 397.750837][T17658] do_fast_syscall_32+0x32/0x70 [ 397.750874][T17658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.750889][T17658] RIP: 0023:0xf73cd579 [ 397.750900][T17658] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 397.750911][T17658] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 397.750923][T17658] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006380 [ 397.750930][T17658] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.750937][T17658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.750944][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.750950][T17658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.750965][T17658] [ 397.822443][ T60] failed while handling packet from 1:16385 [ 397.822460][ T95] hsr_slave_1: left promiscuous mode [ 397.822466][ T60] failed while handling packet from 1:16385 [ 397.825883][ T60] failed while handling packet from 1:16385 [ 397.827709][ T60] failed while handling packet from 1:16385 [ 397.830108][ T60] failed while handling packet from 1:16385 [ 397.832032][ T60] failed while handling packet from 1:16385 [ 397.833591][T17665] FAULT_INJECTION: forcing a failure. [ 397.833591][T17665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.833826][ T60] failed while handling packet from 1:16385 [ 397.835668][T17665] CPU: 1 UID: 0 PID: 17665 Comm: syz.6.2901 Not tainted syzkaller #0 PREEMPT(full) [ 397.835683][T17665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.835689][T17665] Call Trace: [ 397.835694][T17665] [ 397.835698][T17665] dump_stack_lvl+0x100/0x190 [ 397.835715][T17665] should_fail_ex.cold+0x5/0xa [ 397.835733][T17665] _copy_from_user+0x2e/0xd0 [ 397.835752][T17665] move_addr_to_kernel+0x65/0x170 [ 397.835766][T17665] __sys_connect+0xb5/0x170 [ 397.835781][T17665] ? __pfx___sys_connect+0x10/0x10 [ 397.835800][T17665] ? ksys_write+0x1ac/0x250 [ 397.835813][T17665] ? __pfx_ksys_write+0x10/0x10 [ 397.835827][T17665] __ia32_sys_connect+0x71/0xb0 [ 397.835846][T17665] ? lockdep_hardirqs_on+0x78/0x100 [ 397.835860][T17665] __do_fast_syscall_32+0xde/0x660 [ 397.835876][T17665] do_fast_syscall_32+0x32/0x70 [ 397.835890][T17665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.835905][T17665] RIP: 0023:0xf7f75579 [ 397.835913][T17665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 397.835924][T17665] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 397.835935][T17665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080ccb000 [ 397.835943][T17665] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.835949][T17665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.835955][T17665] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 397.835962][T17665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.835976][T17665] [ 397.839194][ T95] veth1_macvtap: left promiscuous mode [ 397.839531][ T60] failed while handling packet from 1:16385 [ 397.845970][ T95] veth0_macvtap: left promiscuous mode [ 397.847992][ T60] failed while handling packet from 1:16385 [ 397.848010][ T60] failed while handling packet from 1:16385 [ 397.848027][ T60] failed while handling packet from 1:16385 [ 397.848043][ T60] failed while handling packet from 1:16385 [ 397.848060][ T60] failed while handling packet from 1:16385 [ 397.848076][ T60] failed while handling packet from 1:16385 [ 397.848092][ T60] failed while handling packet from 1:16385 [ 397.848108][ T60] failed while handling packet from 1:16385 [ 397.848129][ T60] failed while handling packet from 1:16385 [ 397.848145][ T60] failed while handling packet from 1:16385 [ 397.848161][ T60] failed while handling packet from 1:16385 [ 397.849770][ T95] veth1_vlan: left promiscuous mode [ 397.850679][ T60] failed while handling packet from 1:16385 [ 397.850697][ T60] failed while handling packet from 1:16385 [ 397.850713][ T60] failed while handling packet from 1:16385 [ 397.850729][ T60] failed while handling packet from 1:16385 [ 397.850745][ T60] failed while handling packet from 1:16385 [ 397.850761][ T60] failed while handling packet from 1:16385 [ 397.854256][ T95] veth0_vlan: left promiscuous mode [ 397.855641][ T60] failed while handling packet from 1:16385 [ 397.855659][ T60] failed while handling packet from 1:16385 [ 397.855675][ T60] failed while handling packet from 1:16385 [ 397.937519][ T60] failed while handling packet from 1:16385 [ 397.939999][ T60] failed while handling packet from 1:16385 [ 397.942962][ T60] failed while handling packet from 1:16385 [ 397.945446][ T60] failed while handling packet from 1:16385 [ 397.947780][ T60] failed while handling packet from 1:16385 [ 397.950108][ T60] failed while handling packet from 1:16385 [ 397.952531][ T60] failed while handling packet from 1:16385 [ 397.954890][ T60] failed while handling packet from 1:16385 [ 397.957350][ T60] failed while handling packet from 1:16385 [ 397.959826][ T60] failed while handling packet from 1:16385 [ 397.964213][ T60] failed while handling packet from 1:16385 [ 397.966575][ T60] failed while handling packet from 1:16385 [ 397.969110][ T60] failed while handling packet from 1:16385 [ 397.971600][ T60] failed while handling packet from 1:16385 [ 397.973913][ T60] failed while handling packet from 1:16385 [ 397.976289][ T60] failed while handling packet from 1:16385 [ 397.978674][ T60] failed while handling packet from 1:16385 [ 397.982188][ T60] failed while handling packet from 1:16385 [ 397.984526][ T60] failed while handling packet from 1:16385 [ 397.986872][ T60] failed while handling packet from 1:16385 [ 397.989245][ T60] failed while handling packet from 1:16385 [ 397.992314][ T60] failed while handling packet from 1:16385 [ 397.994667][ T60] failed while handling packet from 1:16385 [ 397.997026][ T60] failed while handling packet from 1:16385 [ 398.000010][ T60] failed while handling packet from 1:16385 [ 398.002198][ T60] failed while handling packet from 1:16385 [ 398.004585][ T60] failed while handling packet from 1:16385 [ 398.008067][ T60] failed while handling packet from 1:16385 [ 398.010014][ T60] failed while handling packet from 1:16385 [ 398.012831][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 398.012848][ T40] audit: type=1326 audit(1769914304.729:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.012879][ T60] failed while handling packet from 1:16385 [ 398.015904][ T40] audit: type=1326 audit(1769914304.729:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.017623][ T60] failed while handling packet from 1:16385 [ 398.026030][ T40] audit: type=1326 audit(1769914304.729:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.035919][ T60] failed while handling packet from 1:16385 [ 398.035939][ T60] failed while handling packet from 1:16385 [ 398.035957][ T60] failed while handling packet from 1:16385 [ 398.035973][ T60] failed while handling packet from 1:16385 [ 398.035989][ T60] failed while handling packet from 1:16385 [ 398.039188][ T40] audit: type=1326 audit(1769914304.729:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.046641][ T60] failed while handling packet from 1:16385 [ 398.047258][ T40] audit: type=1326 audit(1769914304.729:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.048964][ T60] failed while handling packet from 1:16385 [ 398.048983][ T60] failed while handling packet from 1:16385 [ 398.051630][ T40] audit: type=1326 audit(1769914304.739:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.053267][ T60] failed while handling packet from 1:16385 [ 398.060794][ T40] audit: type=1326 audit(1769914304.769:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.062202][ T60] failed while handling packet from 1:16385 [ 398.064866][ T40] audit: type=1326 audit(1769914304.769:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.072679][ T60] failed while handling packet from 1:16385 [ 398.100047][ T40] audit: type=1326 audit(1769914304.809:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf713572b code=0x7ffc0000 [ 398.100624][ T60] failed while handling packet from 1:16385 [ 398.109073][ T40] audit: type=1326 audit(1769914304.819:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17671 comm="syz.5.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 398.109139][ T60] failed while handling packet from 1:16385 [ 398.119919][ T60] failed while handling packet from 1:16385 [ 398.119942][ T60] failed while handling packet from 1:16385 [ 398.119958][ T60] failed while handling packet from 1:16385 [ 398.119975][ T60] failed while handling packet from 1:16385 [ 398.119991][ T60] failed while handling packet from 1:16385 [ 398.120007][ T60] failed while handling packet from 1:16385 [ 398.120024][ T60] failed while handling packet from 1:16385 [ 398.120039][ T60] failed while handling packet from 1:16385 [ 398.120055][ T60] failed while handling packet from 1:16385 [ 398.120071][ T60] failed while handling packet from 1:16385 [ 398.120087][ T60] failed while handling packet from 1:16385 [ 398.120103][ T60] failed while handling packet from 1:16385 [ 398.120119][ T60] failed while handling packet from 1:16385 [ 398.120135][ T60] failed while handling packet from 1:16385 [ 398.120151][ T60] failed while handling packet from 1:16385 [ 398.120174][ T60] failed while handling packet from 1:16385 [ 398.120191][ T60] failed while handling packet from 1:16385 [ 398.120207][ T60] failed while handling packet from 1:16385 [ 398.120223][ T60] failed while handling packet from 1:16385 [ 398.120239][ T60] failed while handling packet from 1:16385 [ 398.120255][ T60] failed while handling packet from 1:16385 [ 398.120271][ T60] failed while handling packet from 1:16385 [ 398.120287][ T60] failed while handling packet from 1:16385 [ 398.120302][ T60] failed while handling packet from 1:16385 [ 398.120318][ T60] failed while handling packet from 1:16385 [ 398.120334][ T60] failed while handling packet from 1:16385 [ 398.120351][ T60] failed while handling packet from 1:16385 [ 398.120367][ T60] failed while handling packet from 1:16385 [ 398.120383][ T60] failed while handling packet from 1:16385 [ 398.120399][ T60] failed while handling packet from 1:16385 [ 398.121388][ T60] failed while handling packet from 1:16385 [ 398.121625][ T60] failed while handling packet from 1:16385 [ 398.121643][ T60] failed while handling packet from 1:16385 [ 398.121659][ T60] failed while handling packet from 1:16385 [ 398.121675][ T60] failed while handling packet from 1:16385 [ 398.121691][ T60] failed while handling packet from 1:16385 [ 398.121707][ T60] failed while handling packet from 1:16385 [ 398.121723][ T60] failed while handling packet from 1:16385 [ 398.121739][ T60] failed while handling packet from 1:16385 [ 398.121755][ T60] failed while handling packet from 1:16385 [ 398.121771][ T60] failed while handling packet from 1:16385 [ 398.121787][ T60] failed while handling packet from 1:16385 [ 398.121803][ T60] failed while handling packet from 1:16385 [ 398.121819][ T60] failed while handling packet from 1:16385 [ 398.121835][ T60] failed while handling packet from 1:16385 [ 398.121851][ T60] failed while handling packet from 1:16385 [ 398.121867][ T60] failed while handling packet from 1:16385 [ 398.121891][ T60] failed while handling packet from 1:16385 [ 398.121917][ T60] failed while handling packet from 1:16385 [ 398.121943][ T60] failed while handling packet from 1:16385 [ 398.121970][ T60] failed while handling packet from 1:16385 [ 398.121995][ T60] failed while handling packet from 1:16385 [ 398.122012][ T60] failed while handling packet from 1:16385 [ 398.122028][ T60] failed while handling packet from 1:16385 [ 398.122044][ T60] failed while handling packet from 1:16385 [ 398.122060][ T60] failed while handling packet from 1:16385 [ 398.122076][ T60] failed while handling packet from 1:16385 [ 398.122092][ T60] failed while handling packet from 1:16385 [ 398.122107][ T60] failed while handling packet from 1:16385 [ 398.122123][ T60] failed while handling packet from 1:16385 [ 398.122139][ T60] failed while handling packet from 1:16385 [ 398.122154][ T60] failed while handling packet from 1:16385 [ 398.122175][ T60] failed while handling packet from 1:16385 [ 398.122191][ T60] failed while handling packet from 1:16385 [ 398.122206][ T60] failed while handling packet from 1:16385 [ 398.122222][ T60] failed while handling packet from 1:16385 [ 398.122238][ T60] failed while handling packet from 1:16385 [ 398.122255][ T60] failed while handling packet from 1:16385 [ 398.122271][ T60] failed while handling packet from 1:16385 [ 398.122288][ T60] failed while handling packet from 1:16385 [ 398.122304][ T60] failed while handling packet from 1:16385 [ 398.122321][ T60] failed while handling packet from 1:16385 [ 398.122337][ T60] failed while handling packet from 1:16385 [ 398.122353][ T60] failed while handling packet from 1:16385 [ 398.122370][ T60] failed while handling packet from 1:16385 [ 398.122386][ T60] failed while handling packet from 1:16385 [ 398.122402][ T60] failed while handling packet from 1:16385 [ 398.122419][ T60] failed while handling packet from 1:16385 [ 398.122435][ T60] failed while handling packet from 1:16385 [ 398.122452][ T60] failed while handling packet from 1:16385 [ 398.122468][ T60] failed while handling packet from 1:16385 [ 398.122485][ T60] failed while handling packet from 1:16385 [ 398.122516][ T60] failed while handling packet from 1:16384 [ 398.122532][ T60] failed while handling packet from 1:16384 [ 398.122549][ T60] failed while handling packet from 1:16384 [ 398.122565][ T60] failed while handling packet from 1:16384 [ 398.122580][ T60] failed while handling packet from 1:16384 [ 398.122597][ T60] failed while handling packet from 1:16384 [ 398.122613][ T60] failed while handling packet from 1:16384 [ 398.122629][ T60] failed while handling packet from 1:16384 [ 398.122645][ T60] failed while handling packet from 1:16384 [ 398.122661][ T60] failed while handling packet from 1:16384 [ 398.122677][ T60] failed while handling packet from 1:16384 [ 398.122693][ T60] failed while handling packet from 1:16384 [ 398.122709][ T60] failed while handling packet from 1:16384 [ 398.122725][ T60] failed while handling packet from 1:16384 [ 398.122742][ T60] failed while handling packet from 1:16384 [ 398.122758][ T60] failed while handling packet from 1:16384 [ 398.122773][ T60] failed while handling packet from 1:16384 [ 398.122790][ T60] failed while handling packet from 1:16384 [ 398.122805][ T60] failed while handling packet from 1:16384 [ 398.122822][ T60] failed while handling packet from 1:16384 [ 398.122856][ T60] failed while handling packet from 1:16384 [ 398.122875][ T60] failed while handling packet from 1:16384 [ 398.122892][ T60] failed while handling packet from 1:16384 [ 398.122908][ T60] failed while handling packet from 1:16384 [ 398.122924][ T60] failed while handling packet from 1:16384 [ 398.122940][ T60] failed while handling packet from 1:16384 [ 398.122956][ T60] failed while handling packet from 1:16384 [ 398.122973][ T60] failed while handling packet from 1:16384 [ 398.122989][ T60] failed while handling packet from 1:16384 [ 398.123004][ T60] failed while handling packet from 1:16384 [ 398.123020][ T60] failed while handling packet from 1:16384 [ 398.123037][ T60] failed while handling packet from 1:16384 [ 398.123053][ T60] failed while handling packet from 1:16384 [ 398.123069][ T60] failed while handling packet from 1:16384 [ 398.123085][ T60] failed while handling packet from 1:16384 [ 398.123102][ T60] failed while handling packet from 1:16384 [ 398.123119][ T60] failed while handling packet from 1:16384 [ 398.123135][ T60] failed while handling packet from 1:16384 [ 398.123151][ T60] failed while handling packet from 1:16384 [ 398.123172][ T60] failed while handling packet from 1:16384 [ 398.123189][ T60] failed while handling packet from 1:16384 [ 398.123205][ T60] failed while handling packet from 1:16384 [ 398.123221][ T60] failed while handling packet from 1:16384 [ 398.123238][ T60] failed while handling packet from 1:16384 [ 398.123255][ T60] failed while handling packet from 1:16384 [ 398.123280][ T60] failed while handling packet from 1:16384 [ 398.123307][ T60] failed while handling packet from 1:16384 [ 398.123333][ T60] failed while handling packet from 1:16384 [ 398.123360][ T60] failed while handling packet from 1:16384 [ 398.123379][ T60] failed while handling packet from 1:16384 [ 398.123395][ T60] failed while handling packet from 1:16384 [ 398.123411][ T60] failed while handling packet from 1:16384 [ 398.123428][ T60] failed while handling packet from 1:16384 [ 398.123444][ T60] failed while handling packet from 1:16384 [ 398.123460][ T60] failed while handling packet from 1:16384 [ 398.123476][ T60] failed while handling packet from 1:16384 [ 398.123492][ T60] failed while handling packet from 1:16384 [ 398.522953][ T95] team0 (unregistering): Port device team_slave_1 removed [ 398.568587][ T95] team0 (unregistering): Port device team_slave_0 removed [ 398.731846][T10051] usb 40-1: device descriptor read/8, error -110 [ 398.732667][ T5947] Bluetooth: hci1: command tx timeout [ 398.796386][T17680] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 398.798547][T17680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 398.801784][T17680] vhci_hcd vhci_hcd.0: Device attached [ 398.840653][T10051] usb usb40-port1: unable to enumerate USB device [ 398.896457][T17629] hsr_slave_0: entered promiscuous mode [ 398.896582][T17672] lo speed is unknown, defaulting to 1000 [ 398.901595][T17629] hsr_slave_1: entered promiscuous mode [ 398.903708][T17629] debugfs: 'hsr0' already exists in 'hsr' [ 398.905485][T17629] Cannot create hsr debugfs directory [ 398.915295][T17672] lo speed is unknown, defaulting to 1000 [ 398.920612][ T6025] usb 13-1: new low-speed USB device number 4 using dummy_hcd [ 398.981267][T17672] lo speed is unknown, defaulting to 1000 [ 399.032268][T17629] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.078079][ T6025] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.082876][ T6025] usb 13-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.087579][ T6025] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.096145][ T6025] usb 13-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.101163][ T6025] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.104439][ T6025] usb 13-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.114053][ T6025] usb 13-1: string descriptor 0 read error: -22 [ 399.116837][ T6025] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 399.120901][ T6025] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.133261][ T6025] adutux 13-1:168.0: interrupt endpoints not found [ 399.151073][T17629] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.235272][T17672] infiniband sz1: set active [ 399.236131][T17629] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.237228][T17672] infiniband sz1: added lo [ 399.243710][T10051] lo speed is unknown, defaulting to 1000 [ 399.251202][T17672] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 399.254318][T17672] infiniband sz1: Couldn't open port 1 [ 399.295607][T17672] RDS/IB: sz1: added [ 399.297758][T17672] smc: adding ib device sz1 with port count 1 [ 399.300315][T17672] smc: ib device sz1 port 1 has no pnetid [ 399.305192][T10051] lo speed is unknown, defaulting to 1000 [ 399.309297][T17672] lo speed is unknown, defaulting to 1000 [ 399.339691][T10051] usb 13-1: USB disconnect, device number 4 [ 399.352813][T17629] bond0: (slave netdevsim0): Releasing backup interface [ 399.356534][T17629] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 399.360827][T17629] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.427257][T17681] vhci_hcd: connection reset by peer [ 399.429841][ T95] vhci_hcd vhci_hcd.5: stop threads [ 399.434533][ T95] vhci_hcd vhci_hcd.5: release socket [ 399.439935][ T831] usb 48-1: device descriptor read/8, error -110 [ 399.443608][ T95] vhci_hcd vhci_hcd.5: disconnect device [ 399.483644][T17672] lo speed is unknown, defaulting to 1000 [ 399.510111][T17629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.517751][T17629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.526052][T17629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.532154][T17629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 399.580228][T17629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.589479][T17629] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.625803][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.628095][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.642571][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.645542][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.653523][T17672] lo speed is unknown, defaulting to 1000 [ 399.776764][T17672] lo speed is unknown, defaulting to 1000 [ 399.839149][ T831] usb usb48-port1: attempt power cycle [ 399.862362][T17629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.916237][T17672] lo speed is unknown, defaulting to 1000 [ 399.978913][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2915'. [ 399.981819][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2915'. [ 400.067948][T17744] vivid-002: disconnect [ 400.085047][T17629] veth0_vlan: entered promiscuous mode [ 400.094633][T17629] veth1_vlan: entered promiscuous mode [ 400.107014][T17629] veth0_macvtap: entered promiscuous mode [ 400.121794][T17629] veth1_macvtap: entered promiscuous mode [ 400.130364][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.135056][T17743] vivid-002: reconnect [ 400.135473][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.156056][ T88] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.159286][ T88] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.162390][ T88] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.165745][ T88] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.290207][T17672] lo speed is unknown, defaulting to 1000 [ 400.371057][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.373675][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.407636][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.412085][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.421117][ T831] usb usb48-port1: unable to enumerate USB device [ 400.477631][T17672] lo speed is unknown, defaulting to 1000 [ 400.490471][T17759] FAULT_INJECTION: forcing a failure. [ 400.490471][T17759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.494531][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.5.2917 Not tainted syzkaller #0 PREEMPT(full) [ 400.494546][T17759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.494553][T17759] Call Trace: [ 400.494557][T17759] [ 400.494562][T17759] dump_stack_lvl+0x100/0x190 [ 400.494579][T17759] should_fail_ex.cold+0x5/0xa [ 400.494597][T17759] _copy_from_user+0x2e/0xd0 [ 400.494615][T17759] move_addr_to_kernel+0x65/0x170 [ 400.494630][T17759] __sys_sendto+0x1c9/0x520 [ 400.494646][T17759] ? __pfx___sys_sendto+0x10/0x10 [ 400.494677][T17759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.494697][T17759] ? fput+0x79/0x100 [ 400.494712][T17759] ? ksys_write+0x1ac/0x250 [ 400.494726][T17759] __ia32_sys_sendto+0xdd/0x1b0 [ 400.494741][T17759] ? __do_fast_syscall_32+0x97/0x660 [ 400.494755][T17759] ? lockdep_hardirqs_on+0x78/0x100 [ 400.494768][T17759] __do_fast_syscall_32+0xde/0x660 [ 400.494783][T17759] do_fast_syscall_32+0x32/0x70 [ 400.494798][T17759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.494812][T17759] RIP: 0023:0xf73cd579 [ 400.494843][T17759] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 400.494857][T17759] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 400.494868][T17759] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 400.494875][T17759] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 400.494882][T17759] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 400.494888][T17759] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.494895][T17759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.494909][T17759] [ 400.715780][T17772] 0: reclassify loop, rule prio 0, protocol 700 [ 400.810845][ T5947] Bluetooth: hci1: command tx timeout [ 400.887566][T17783] FAULT_INJECTION: forcing a failure. [ 400.887566][T17783] name failslab, interval 1, probability 0, space 0, times 0 [ 400.891630][T17783] CPU: 0 UID: 0 PID: 17783 Comm: syz.6.2925 Not tainted syzkaller #0 PREEMPT(full) [ 400.891645][T17783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.891652][T17783] Call Trace: [ 400.891656][T17783] [ 400.891661][T17783] dump_stack_lvl+0x100/0x190 [ 400.891678][T17783] should_fail_ex.cold+0x5/0xa [ 400.891696][T17783] should_failslab+0xc2/0x120 [ 400.891712][T17783] ? tomoyo_realpath_from_path+0xb6/0x690 [ 400.891725][T17783] __kmalloc_noprof+0xf6/0x9c0 [ 400.891740][T17783] ? tomoyo_realpath_from_path+0xb6/0x690 [ 400.891751][T17783] tomoyo_realpath_from_path+0xb6/0x690 [ 400.891765][T17783] tomoyo_path_number_perm+0x23c/0x580 [ 400.891781][T17783] ? tomoyo_path_number_perm+0x22e/0x580 [ 400.891798][T17783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 400.891828][T17783] ? find_held_lock+0x2b/0x80 [ 400.891839][T17783] ? hook_file_ioctl_common+0x146/0x410 [ 400.891855][T17783] ? __fget_files+0x215/0x3d0 [ 400.891870][T17783] ? __fget_files+0x21f/0x3d0 [ 400.891884][T17783] security_file_ioctl_compat+0xd3/0x230 [ 400.891902][T17783] __ia32_compat_sys_ioctl+0xc2/0x360 [ 400.891923][T17783] __do_fast_syscall_32+0xde/0x660 [ 400.891939][T17783] do_fast_syscall_32+0x32/0x70 [ 400.891953][T17783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.891967][T17783] RIP: 0023:0xf7f75579 [ 400.891976][T17783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 400.891987][T17783] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 400.891998][T17783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01464a6 [ 400.892005][T17783] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.892011][T17783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.892018][T17783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 400.892024][T17783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.892038][T17783] [ 400.892043][T17783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.955392][T17786] Invalid source name [ 400.955959][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 400.994850][T17792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.999484][T17792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.005865][T17792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.007168][T17794] FAULT_INJECTION: forcing a failure. [ 401.007168][T17794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.008797][T17792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.014275][T17794] CPU: 3 UID: 0 PID: 17794 Comm: syz.7.2929 Not tainted syzkaller #0 PREEMPT(full) [ 401.014296][T17794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.014307][T17794] Call Trace: [ 401.014312][T17794] [ 401.014319][T17794] dump_stack_lvl+0x100/0x190 [ 401.014342][T17794] should_fail_ex.cold+0x5/0xa [ 401.014368][T17794] _copy_from_user+0x2e/0xd0 [ 401.014392][T17794] get_compat_msghdr+0xb3/0x4b0 [ 401.014416][T17794] ? __pfx_get_compat_msghdr+0x10/0x10 [ 401.014437][T17794] ? _kstrtoull+0x13c/0x1f0 [ 401.014456][T17794] ? __lock_acquire+0x4a5/0x2630 [ 401.014481][T17794] ___sys_recvmsg+0x193/0x1a0 [ 401.014500][T17794] ? __pfx____sys_recvmsg+0x10/0x10 [ 401.014521][T17794] ? find_held_lock+0x2b/0x80 [ 401.014552][T17794] do_recvmmsg+0x563/0x760 [ 401.014573][T17794] ? __pfx_do_recvmmsg+0x10/0x10 [ 401.014595][T17794] ? ksys_write+0x190/0x250 [ 401.014612][T17794] ? ksys_write+0x190/0x250 [ 401.014638][T17794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.014677][T17794] __sys_recvmmsg+0x21f/0x270 [ 401.014701][T17794] ? __pfx___sys_recvmmsg+0x10/0x10 [ 401.014726][T17794] ? ksys_write+0x1ac/0x250 [ 401.014748][T17794] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 401.014770][T17794] ? __do_fast_syscall_32+0x97/0x660 [ 401.014790][T17794] ? lockdep_hardirqs_on+0x78/0x100 [ 401.014808][T17794] __do_fast_syscall_32+0xde/0x660 [ 401.014850][T17794] do_fast_syscall_32+0x32/0x70 [ 401.014874][T17794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.014893][T17794] RIP: 0023:0xf7fa4579 [ 401.014902][T17794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 401.014913][T17794] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 401.014924][T17794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 401.014931][T17794] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.014938][T17794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.014944][T17794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.014950][T17794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.014964][T17794] [ 401.231168][T17800] tmpfs: Bad value for 'mpol' [ 401.292903][T17802] FAULT_INJECTION: forcing a failure. [ 401.292903][T17802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.299832][T17802] CPU: 3 UID: 0 PID: 17802 Comm: syz.8.2932 Not tainted syzkaller #0 PREEMPT(full) [ 401.299858][T17802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.299869][T17802] Call Trace: [ 401.299876][T17802] [ 401.299885][T17802] dump_stack_lvl+0x100/0x190 [ 401.299914][T17802] should_fail_ex.cold+0x5/0xa [ 401.299943][T17802] _copy_from_user+0x2e/0xd0 [ 401.299972][T17802] get_compat_msghdr+0xb3/0x4b0 [ 401.299999][T17802] ? __pfx_get_compat_msghdr+0x10/0x10 [ 401.300021][T17802] ? _kstrtoull+0x13c/0x1f0 [ 401.300041][T17802] ? __lock_acquire+0x4a5/0x2630 [ 401.300068][T17802] ___sys_recvmsg+0x193/0x1a0 [ 401.300089][T17802] ? __pfx____sys_recvmsg+0x10/0x10 [ 401.300111][T17802] ? find_held_lock+0x2b/0x80 [ 401.300142][T17802] do_recvmmsg+0x563/0x760 [ 401.300166][T17802] ? __pfx_do_recvmmsg+0x10/0x10 [ 401.300190][T17802] ? ksys_write+0x190/0x250 [ 401.300211][T17802] ? ksys_write+0x190/0x250 [ 401.300238][T17802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.300268][T17802] __sys_recvmmsg+0x21f/0x270 [ 401.300294][T17802] ? __pfx___sys_recvmmsg+0x10/0x10 [ 401.300321][T17802] ? ksys_write+0x1ac/0x250 [ 401.300343][T17802] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 401.300368][T17802] ? __do_fast_syscall_32+0x97/0x660 [ 401.300389][T17802] ? lockdep_hardirqs_on+0x78/0x100 [ 401.300408][T17802] __do_fast_syscall_32+0xde/0x660 [ 401.300451][T17802] do_fast_syscall_32+0x32/0x70 [ 401.300476][T17802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.300499][T17802] RIP: 0023:0xf73ed579 [ 401.300528][T17802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 401.300544][T17802] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 401.300562][T17802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ac0 [ 401.300573][T17802] RDX: 0000000000000001 RSI: 0000000000002002 RDI: 0000000000000000 [ 401.300584][T17802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.300594][T17802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.300608][T17802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.300631][T17802] [ 401.650526][ T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 401.757456][T17817] FAULT_INJECTION: forcing a failure. [ 401.757456][T17817] name failslab, interval 1, probability 0, space 0, times 0 [ 401.761596][T17817] CPU: 2 UID: 0 PID: 17817 Comm: syz.5.2938 Not tainted syzkaller #0 PREEMPT(full) [ 401.761620][T17817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 401.761630][T17817] Call Trace: [ 401.761635][T17817] [ 401.761642][T17817] dump_stack_lvl+0x100/0x190 [ 401.761666][T17817] should_fail_ex.cold+0x5/0xa [ 401.761695][T17817] should_failslab+0xc2/0x120 [ 401.761721][T17817] ? tomoyo_realpath_from_path+0xb6/0x690 [ 401.761740][T17817] __kmalloc_noprof+0xf6/0x9c0 [ 401.761764][T17817] ? tomoyo_realpath_from_path+0xb6/0x690 [ 401.761776][T17817] tomoyo_realpath_from_path+0xb6/0x690 [ 401.761790][T17817] tomoyo_path_number_perm+0x23c/0x580 [ 401.761806][T17817] ? tomoyo_path_number_perm+0x22e/0x580 [ 401.761823][T17817] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.761859][T17817] ? find_held_lock+0x2b/0x80 [ 401.761870][T17817] ? hook_file_ioctl_common+0x146/0x410 [ 401.761886][T17817] ? __fget_files+0x215/0x3d0 [ 401.761901][T17817] ? __fget_files+0x21f/0x3d0 [ 401.761915][T17817] security_file_ioctl_compat+0xd3/0x230 [ 401.761933][T17817] __ia32_compat_sys_ioctl+0xc2/0x360 [ 401.761953][T17817] __do_fast_syscall_32+0xde/0x660 [ 401.761970][T17817] do_fast_syscall_32+0x32/0x70 [ 401.761984][T17817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.761999][T17817] RIP: 0023:0xf73cd579 [ 401.762008][T17817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 401.762019][T17817] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 401.762031][T17817] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004070aea0 [ 401.762038][T17817] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.762044][T17817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.762051][T17817] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 401.762057][T17817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.762072][T17817] [ 401.762077][T17817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.801832][ T9] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.834360][ T9] usb 13-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 401.837543][ T9] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.031466][ T9] usb 13-1: config 0 descriptor?? [ 402.053286][ T9] rndis_host 13-1:0.0: skipping garbage [ 402.055683][ T9] usb 13-1: bad CDC descriptors [ 402.520587][ T9727] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 402.690504][ T9727] usb 11-1: Using ep0 maxpacket: 32 [ 402.694316][ T9727] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 402.697814][ T9727] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 402.701445][ T9727] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 402.705170][ T9727] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.709755][ T9727] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.715480][ T9727] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 402.720349][ T9727] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.724072][ T9727] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.728777][ T9727] usb 11-1: config 0 descriptor?? [ 402.890719][ T5947] Bluetooth: hci1: command tx timeout [ 402.940118][ T9727] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 403.147150][ T6076] usb 11-1: USB disconnect, device number 3 [ 403.154903][ T6076] usblp0: removed [ 403.202393][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2943'. [ 403.208088][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 403.210080][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.212756][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.215874][ T8871] usb 13-1: USB disconnect, device number 5 [ 403.216998][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 403.220415][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.223333][T17825] netlink: 'syz.6.2940': attribute type 10 has an invalid length. [ 403.229288][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.241117][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17) [ 403.243736][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 403.246813][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.251096][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 403.253717][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.256747][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.262534][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 403.264545][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.270535][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.274896][T17836] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(23) [ 403.276857][T17836] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 403.279291][T17836] vhci_hcd vhci_hcd.0: Device attached [ 403.284061][T17836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 403.284138][T17847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 403.287668][T17836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 403.302285][T17836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 403.367044][T17848] vhci_hcd: connection closed [ 403.368320][T17842] vhci_hcd: connection closed [ 403.369099][T17850] vhci_hcd: connection closed [ 403.370132][T17840] vhci_hcd: connection closed [ 403.370659][T17844] vhci_hcd: connection closed [ 403.371537][T17838] vhci_hcd: connection closed [ 403.377168][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.391874][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.394243][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.396788][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.398514][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.404333][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.406290][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.407960][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.409673][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.411857][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.413483][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.416185][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.419584][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.422996][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.425720][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.427667][ T13] vhci_hcd vhci_hcd.5: stop threads [ 403.429354][ T13] vhci_hcd vhci_hcd.5: release socket [ 403.431880][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 403.460604][ T9727] usb 47-1: new low-speed USB device number 14 using vhci_hcd [ 403.463866][ T9727] usb 47-1: enqueue for inactive port 0 [ 403.530865][ T9727] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 403.945298][T17876] FAULT_INJECTION: forcing a failure. [ 403.945298][T17876] name failslab, interval 1, probability 0, space 0, times 0 [ 403.950241][T17876] CPU: 3 UID: 0 PID: 17876 Comm: syz.5.2947 Not tainted syzkaller #0 PREEMPT(full) [ 403.950257][T17876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 403.950265][T17876] Call Trace: [ 403.950269][T17876] [ 403.950274][T17876] dump_stack_lvl+0x100/0x190 [ 403.950292][T17876] should_fail_ex.cold+0x5/0xa [ 403.950310][T17876] should_failslab+0xc2/0x120 [ 403.950327][T17876] ? tomoyo_realpath_from_path+0xb6/0x690 [ 403.950338][T17876] __kmalloc_noprof+0xf6/0x9c0 [ 403.950354][T17876] ? tomoyo_realpath_from_path+0xb6/0x690 [ 403.950364][T17876] tomoyo_realpath_from_path+0xb6/0x690 [ 403.950379][T17876] tomoyo_path_number_perm+0x23c/0x580 [ 403.950395][T17876] ? tomoyo_path_number_perm+0x22e/0x580 [ 403.950412][T17876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 403.950456][T17876] ? find_held_lock+0x2b/0x80 [ 403.950467][T17876] ? hook_file_ioctl_common+0x146/0x410 [ 403.950485][T17876] ? __fget_files+0x215/0x3d0 [ 403.950500][T17876] ? __fget_files+0x21f/0x3d0 [ 403.950514][T17876] security_file_ioctl_compat+0xd3/0x230 [ 403.950533][T17876] __ia32_compat_sys_ioctl+0xc2/0x360 [ 403.950553][T17876] __do_fast_syscall_32+0xde/0x660 [ 403.950569][T17876] do_fast_syscall_32+0x32/0x70 [ 403.950584][T17876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.950598][T17876] RIP: 0023:0xf73cd579 [ 403.950606][T17876] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 403.950618][T17876] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 403.950629][T17876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0386105 [ 403.950636][T17876] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.950643][T17876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.950649][T17876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 403.950655][T17876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.950670][T17876] [ 404.020833][T17876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.293230][T17886] FAULT_INJECTION: forcing a failure. [ 404.293230][T17886] name failslab, interval 1, probability 0, space 0, times 0 [ 404.304153][T17886] CPU: 0 UID: 0 PID: 17886 Comm: syz.5.2950 Not tainted syzkaller #0 PREEMPT(full) [ 404.304168][T17886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.304175][T17886] Call Trace: [ 404.304179][T17886] [ 404.304184][T17886] dump_stack_lvl+0x100/0x190 [ 404.304201][T17886] should_fail_ex.cold+0x5/0xa [ 404.304219][T17886] should_failslab+0xc2/0x120 [ 404.304235][T17886] ? tomoyo_realpath_from_path+0xb6/0x690 [ 404.304247][T17886] __kmalloc_noprof+0xf6/0x9c0 [ 404.304263][T17886] ? tomoyo_realpath_from_path+0xb6/0x690 [ 404.304274][T17886] tomoyo_realpath_from_path+0xb6/0x690 [ 404.304288][T17886] tomoyo_path_number_perm+0x23c/0x580 [ 404.304304][T17886] ? tomoyo_path_number_perm+0x22e/0x580 [ 404.304321][T17886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.304351][T17886] ? find_held_lock+0x2b/0x80 [ 404.304362][T17886] ? hook_file_ioctl_common+0x146/0x410 [ 404.304378][T17886] ? __fget_files+0x215/0x3d0 [ 404.304393][T17886] ? __fget_files+0x21f/0x3d0 [ 404.304407][T17886] security_file_ioctl_compat+0xd3/0x230 [ 404.304425][T17886] __ia32_compat_sys_ioctl+0xc2/0x360 [ 404.304445][T17886] __do_fast_syscall_32+0xde/0x660 [ 404.304462][T17886] do_fast_syscall_32+0x32/0x70 [ 404.304476][T17886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 404.304490][T17886] RIP: 0023:0xf73cd579 [ 404.304499][T17886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 404.304510][T17886] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 404.304521][T17886] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 404.304528][T17886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.304535][T17886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.304541][T17886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.304547][T17886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 404.304562][T17886] [ 404.304566][T17886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.614187][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2952'. [ 404.757669][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2952'. [ 404.811683][T17906] netlink: 'syz.5.2952': attribute type 1 has an invalid length. [ 404.814146][T17906] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2952'. [ 404.816876][T17906] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2952'. [ 404.819627][T17906] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2952'. [ 404.850997][ T8871] usb usb48-port1: attempt power cycle [ 405.043076][ T5947] Bluetooth: hci1: command tx timeout [ 405.056058][T17855] ================================================================== [ 405.058665][T17855] BUG: KASAN: use-after-free in __mutex_lock+0x1861/0x1b90 [ 405.060929][T17855] Read of size 8 at addr ffff8880627280a8 by task khidpd_15c25886/17855 [ 405.064546][T17855] [ 405.065932][T17855] CPU: 1 UID: 0 PID: 17855 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 405.065947][T17855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.065954][T17855] Call Trace: [ 405.065958][T17855] [ 405.065963][T17855] dump_stack_lvl+0x100/0x190 [ 405.065980][T17855] print_report+0x156/0x4c9 [ 405.065995][T17855] ? __virt_addr_valid+0x81/0x620 [ 405.066015][T17855] ? __phys_addr+0xe8/0x180 [ 405.066031][T17855] ? __mutex_lock+0x1861/0x1b90 [ 405.066046][T17855] kasan_report+0xdf/0x1a0 [ 405.066062][T17855] ? __mutex_lock+0x1861/0x1b90 [ 405.066077][T17855] __mutex_lock+0x1861/0x1b90 [ 405.066090][T17855] ? __pfx_debug_object_deactivate+0x10/0x10 [ 405.066104][T17855] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.066121][T17855] ? l2cap_unregister_user+0x71/0x240 [ 405.066140][T17855] ? __pfx___mutex_lock+0x10/0x10 [ 405.066154][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.066167][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.066180][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.066191][T17855] ? lockdep_hardirqs_on+0x78/0x100 [ 405.066204][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.066217][T17855] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 405.066230][T17855] ? __timer_delete_sync+0x151/0x1c0 [ 405.066244][T17855] ? l2cap_unregister_user+0x71/0x240 [ 405.066260][T17855] l2cap_unregister_user+0x71/0x240 [ 405.066278][T17855] hidp_session_thread+0x459/0x680 [ 405.066293][T17855] ? __pfx_hidp_session_thread+0x10/0x10 [ 405.066307][T17855] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 405.066319][T17855] ? __kthread_parkme+0xbb/0x230 [ 405.066332][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.066343][T17855] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 405.066356][T17855] ? __kthread_parkme+0x18c/0x230 [ 405.066370][T17855] ? __pfx_hidp_session_thread+0x10/0x10 [ 405.066383][T17855] kthread+0x3b3/0x730 [ 405.066398][T17855] ? __pfx_kthread+0x10/0x10 [ 405.066413][T17855] ? ret_from_fork+0x79/0xaf0 [ 405.066423][T17855] ? ret_from_fork+0x79/0xaf0 [ 405.066433][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.066443][T17855] ? __pfx_kthread+0x10/0x10 [ 405.066459][T17855] ret_from_fork+0x754/0xaf0 [ 405.066469][T17855] ? __pfx_ret_from_fork+0x10/0x10 [ 405.066480][T17855] ? __switch_to+0x7b9/0x10c0 [ 405.066494][T17855] ? __pfx_kthread+0x10/0x10 [ 405.066509][T17855] ret_from_fork_asm+0x1a/0x30 [ 405.066529][T17855] [ 405.066533][T17855] [ 405.141597][T17855] The buggy address belongs to the physical page: [ 405.143548][T17855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806272ba80 pfn:0x62728 [ 405.146528][T17855] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 405.148726][T17855] page_type: f0(buddy) [ 405.149982][T17855] raw: 04fff00000000000 ffffea00013d4b08 ffffea0001828008 0000000000000000 [ 405.152602][T17855] raw: ffff88806272ba80 0000000000000002 00000000f0000000 0000000000000000 [ 405.155186][T17855] page dumped because: kasan: bad access detected [ 405.157078][T17855] page_owner tracks the page as freed [ 405.158767][T17855] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 17629, tgid 17629 (syz-executor), ts 396701252705, free_ts 405055913599 [ 405.164156][T17855] post_alloc_hook+0x1e1/0x250 [ 405.165598][T17855] get_page_from_freelist+0xe3d/0x2e10 [ 405.167405][T17855] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 405.169386][T17855] alloc_pages_mpol+0x1fb/0x550 [ 405.171049][T17855] ___kmalloc_large_node+0x104/0x150 [ 405.172896][T17855] __kmalloc_large_node_noprof+0x1c/0x70 [ 405.174767][T17855] __kmalloc_noprof+0x6b1/0x9c0 [ 405.176483][T17855] hci_alloc_dev_priv+0x1d/0x28a0 [ 405.178274][T17855] __vhci_create_device+0xf0/0x880 [ 405.179857][T17855] vhci_write+0x2c4/0x490 [ 405.181497][T17855] vfs_write+0x6ac/0x1070 [ 405.182928][T17855] ksys_write+0x12a/0x250 [ 405.184435][T17855] __do_fast_syscall_32+0xde/0x660 [ 405.186078][T17855] do_fast_syscall_32+0x32/0x70 [ 405.187670][T17855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.189717][T17855] page last free pid 17907 tgid 17907 stack trace: [ 405.191841][T17855] __free_frozen_pages+0x822/0x1130 [ 405.193496][T17855] hci_release_dev+0x4ef/0x630 [ 405.195094][T17855] bt_host_release+0x6a/0xb0 [ 405.196643][T17855] device_release+0xa4/0x240 [ 405.198067][T17855] kobject_put+0x1f7/0x640 [ 405.199584][T17855] put_device+0x1f/0x30 [ 405.200989][T17855] vhci_release+0x185/0x230 [ 405.202634][T17855] __fput+0x3ff/0xb40 [ 405.203991][T17855] task_work_run+0x150/0x240 [ 405.205556][T17855] do_exit+0x829/0x2a30 [ 405.207015][T17855] do_group_exit+0xd5/0x2a0 [ 405.208756][T17855] get_signal+0x1ec7/0x21e0 [ 405.210278][T17855] arch_do_signal_or_restart+0x91/0x770 [ 405.212203][T17855] irqentry_exit+0x1f8/0x670 [ 405.213818][T17855] asm_exc_page_fault+0x26/0x30 [ 405.215505][T17855] [ 405.216304][T17855] Memory state around the buggy address: [ 405.218245][T17855] ffff888062727f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 405.220965][T17855] ffff888062728000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.223627][T17855] >ffff888062728080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.226244][T17855] ^ [ 405.228090][T17855] ffff888062728100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.230803][T17855] ffff888062728180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.233963][T17855] ================================================================== [ 405.236904][T17855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.239533][T17855] CPU: 1 UID: 0 PID: 17855 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) [ 405.242572][T17855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.245926][T17855] Call Trace: [ 405.247288][T17855] [ 405.248399][T17855] dump_stack_lvl+0x100/0x190 [ 405.250123][T17855] vpanic+0x20d/0x630 [ 405.251625][T17855] panic+0xd1/0xd1 [ 405.253102][T17855] ? __pfx_panic+0x10/0x10 [ 405.254805][T17855] ? check_panic_on_warn+0x1f/0x90 [ 405.256712][T17855] check_panic_on_warn.cold+0x19/0x34 [ 405.258844][T17855] end_report.part.0+0x3a/0x90 [ 405.260662][T17855] kasan_report.cold+0xe/0x18 [ 405.262421][T17855] ? __mutex_lock+0x1861/0x1b90 [ 405.264202][T17855] __mutex_lock+0x1861/0x1b90 [ 405.265881][T17855] ? __pfx_debug_object_deactivate+0x10/0x10 [ 405.268147][T17855] ? __pfx_do_raw_spin_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 405.270088][T17855] ? l2cap_unregister_user+0x71/0x240 [ 405.272460][T17855] ? __pfx___mutex_lock+0x10/0x10 [ 405.274333][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.276322][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.278316][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.280137][T17855] ? lockdep_hardirqs_on+0x78/0x100 [ 405.282080][T17855] ? __try_to_del_timer_sync+0x107/0x160 [ 405.284101][T17855] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 405.286357][T17855] ? __timer_delete_sync+0x151/0x1c0 [ 405.288250][T17855] ? l2cap_unregister_user+0x71/0x240 [ 405.289866][T17855] l2cap_unregister_user+0x71/0x240 [ 405.291793][T17855] hidp_session_thread+0x459/0x680 [ 405.293907][T17855] ? __pfx_hidp_session_thread+0x10/0x10 [ 405.296216][T17855] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 405.298071][T17855] ? __kthread_parkme+0xbb/0x230 [ 405.299577][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.301036][T17855] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 405.302961][T17855] ? __kthread_parkme+0x18c/0x230 [ 405.304505][T17855] ? __pfx_hidp_session_thread+0x10/0x10 [ 405.306130][T17855] kthread+0x3b3/0x730 [ 405.307363][T17855] ? __pfx_kthread+0x10/0x10 [ 405.308763][T17855] ? ret_from_fork+0x79/0xaf0 [ 405.310179][T17855] ? ret_from_fork+0x79/0xaf0 [ 405.311637][T17855] ? rcu_is_watching+0x12/0xc0 [ 405.313169][T17855] ? __pfx_kthread+0x10/0x10 [ 405.314575][T17855] ret_from_fork+0x754/0xaf0 [ 405.315994][T17855] ? __pfx_ret_from_fork+0x10/0x10 [ 405.317543][T17855] ? __switch_to+0x7b9/0x10c0 [ 405.319013][T17855] ? __pfx_kthread+0x10/0x10 [ 405.320424][T17855] ret_from_fork_asm+0x1a/0x30 [ 405.321872][T17855] [ 405.323486][T17855] Kernel Offset: disabled [ 405.324786][T17855] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:51:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000003 RBX=ffff88802b2339e8 RCX=0000000000000007 RDX=0000000000000000 RSI=ffffffff8bfa32a0 RDI=ffffffff8dee8f20 RBP=0000000000000000 RSP=ffffc900000075b0 R8 =00000000db147cf1 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000000 R12=ffffffff81f10c60 R13=ffffc90000007638 R14=0000000000000000 R15=ffff888027a14980 RIP=ffffffff81eb0c4d RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555a5710c2b2 CR3=000000000e392000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000000 Opmask01=0000000000000000 Opmask02=000000007fffffff Opmask03=0000000000400004 Opmask04=00000000fffffbff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a2b2a661f0 000055a28e0a1040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a2b2a661f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a2b29369e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a2b29368e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f503f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8f50352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00316963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00316963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46392c45392c3839 2c36392c45382c43 382c41382c39382c 38382c37382c3638 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007766732c342c33 2c322c312c306c6d 61722c32432c3143 2c30432c46422c45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c44422c43422c 42422c41422c3942 2c38422c37422c32 422c31422c30422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44412c36412c3541 2c34412c33412c31 412c46392c45392c 38392c36392c4538 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c41382c39 382c38382c37382c 36382c35382c3438 2c33382c32382c31 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673a35 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc90006747518 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000038 R14=0000000000000010 R15=ffffffff856739d0 RIP=ffffffff85673a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f41fc194 CR3=000000005e413000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffea0001dee140 RCX=ffffffff826cab82 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffea0001dee174 RBP=1ffffd40003bdc2e RSP=ffffc90003dc7808 R8 =0000000000000001 R9 =1ffffd40003bdc2e R10=ffffea0001dee177 R11=0000000000000000 R12=ffffea0001dee148 R13=0000000000000000 R14=0000000000000000 R15=ffff888050b3be78 RIP=ffffffff826f9cd1 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb59ec6d300 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055bff825ff40 CR3=000000004dfd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7b6d352600dcbac3 c5b9667b6324f054 7b6d352600dcbac3 c5b9667b6324f054 7b6d352600dcbac3 c5b9667b6324f054 7b6d352600dcbac3 c5b9667b6324f054 ZMM18=3027aa7a4b9c6b6b 224d433cbb528192 3027aa7a4b9c6b6b 224d433cbb528192 3027aa7a4b9c6b6b 224d433cbb528192 3027aa7a4b9c6b6b 224d433cbb528192 ZMM19=9012000000000000 0000000000000004 9012000000000000 0000000000000003 9012000000000000 0000000000000002 9012000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000006d7361 2d61696c6c656d61 632d62636501ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffeff08 3003000800280300 0800200300000000 0000726568706963 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b7301ffffffffff ffffffe30804034c 040000030008000a 08004c0800060070 ZMM24=bb528192bb528192 bb528192bb528192 bb528192bb528192 bb528192bb528192 bb528192bb528192 bb528192bb528192 bb528192bb528192 bb528192bb528192 ZMM25=224d433c224d433c 224d433c224d433c 224d433c224d433c 224d433c224d433c 224d433c224d433c 224d433c224d433c 224d433c224d433c 224d433c224d433c ZMM26=4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b 4b9c6b6b4b9c6b6b ZMM27=3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a 3027aa7a3027aa7a ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8f1200008f120000 8f1200008f120000 8f1200008f120000 8f1200008f120000 8f1200008f120000 8f1200008f120000 8f1200008f120000 8f1200008f120000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffc900005e8f30 RCX=ffffc900005e8a54 RDX=0000000000000000 RSI=ffffffff8dc1b5c7 RDI=ffff88801dab4e04 RBP=0000000000000001 RSP=ffffc900005e8a90 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000ec4f R12=ffffc900005e8b50 R13=ffffc900005e8b00 R14=ffffc900005e8f30 R15=ffffc900005e8b34 RIP=ffffffff81b64398 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080159018 CR3=000000005cb64000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=00000000ffffc0c0 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e09c6f45b5f5652 2736d0acc422ceb5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 13830558254e79b4 77b6e1c51af54060 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0276875204434faa b27055401ac630a9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9f3ad43e51852a5 c25b8f3f8a908782 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000034c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c146940004103c00 000000000000f652 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a8759fc229dc4600 8001000071423a00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 96c0406b0000f650 db4d9a0d992782a7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000f65d 1495c90080010000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a84b6c79dde3617 6924650ff6b5341c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cc72ffc12379ac8 6cedbbc5e0f0fac6 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616b3a3a39327475 706e692f39327475 706e692f3030323a 316963682f316963 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e616b3a3a3932 7475706e692f3932 7475706e692f3030 323a316963682f31 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963682f68746f6f 7465756c622f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c372c2c322c2c 312c2c302c2c422c 2c362c2c352c2c34 2c2c332c2c312c2c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 5f393030322c3948 43492b3533515f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00002c342c331532 00002c30503f1f40 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a32 2d332e36312e312d 6e61696265642d33 2e36312e31727662 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000709 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000