last executing test programs:

1m19.954866191s ago: executing program 0 (id=3720):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7e599ada862a2ce97c1419e8610000000040000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9f, r2, 0x4}, 0x38)
dup(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (fail_nth: 16)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000})
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00170000ff000000fe645ea200"})
r6 = syz_open_pts(r3, 0x8182)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
lseek(0xffffffffffffffff, 0x249f0, 0x0)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup3(r6, r3, 0x0)
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x1, 0x42}, 0x0, &(0x7f0000011000), &(0x7f0000000000))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3)

1m18.847238193s ago: executing program 0 (id=3729):
mkdir(0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7})
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050)

1m17.141465434s ago: executing program 0 (id=3736):
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584024000000705020240"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) (fail_nth: 1)

1m16.545870356s ago: executing program 0 (id=3737):
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584024000000705020240"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mprotect(&(0x7f0000895000/0x3000)=nil, 0x3000, 0x3000005)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x4e21, @broadcast}})
move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x45)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0)
acct(&(0x7f0000000040)='./dev\x00')

1m14.199421427s ago: executing program 0 (id=3746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x20008088)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x6, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902"], 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
init_module(&(0x7f0000000c40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x89, 0x8, 0x9, 0x9, 0x3, 0x3e, 0xf3a, 0x3b6, 0x40, 0xef, 0xe8b, 0x3, 0x38, 0x2, 0x400e, 0x5, 0x6}, [{0x1, 0x7, 0x1, 0x80000001, 0x0, 0xd9d0, 0x8, 0x9}, {0x70000000, 0xed0, 0x8000000000000000, 0xfffffffffffffff9, 0x0, 0x6, 0x5, 0x9}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x14b0, &(0x7f0000002100)='],^}%#*-\x00')
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000200025a726bd7000bbdbdf250a001404ff000001020001e3130002"], 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10)
close(r4)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000)
socket$alg(0x26, 0x5, 0x0)
syz_usb_disconnect(r1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, <r5=>0xffffffffffffffff})
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0xe4, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6cd116b3c55f3f6b2e65d626d2050e529a7f7f57797051257d62ea0d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x38b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000}]}]}, 0xe4}}, 0x24008894)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x40, 0xff, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

1m13.927536281s ago: executing program 0 (id=3747):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x4000001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, r3)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x110, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5)
ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3})
lseek(0xffffffffffffffff, 0x0, 0x3)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8)
shutdown(r7, 0x1)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
close(r6)
r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

1m13.873682048s ago: executing program 32 (id=3747):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x4000001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, r3)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x110, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5)
ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3})
lseek(0xffffffffffffffff, 0x0, 0x3)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8)
shutdown(r7, 0x1)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
close(r6)
r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

10.130410007s ago: executing program 3 (id=4037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

9.239984734s ago: executing program 3 (id=4040):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) (fail_nth: 1)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r4}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})

8.326973401s ago: executing program 3 (id=4042):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x3, 0x3, 0x3, 0x54, @remote, @loopback, 0x8, 0x8000, 0x400, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53f}]}, 0x80}}, 0x4000001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000e14b44d413cad75e2e63f528a216701c5fe5202623962e89eacbd81590e7159535ff9339f7904965e51f70125d473c7bd3406348398c407c887f673121f87338a0fbff66485a94ef6500831565b7d483b0c969ced75f1182a497b207497682c7471958b12dcedbfbc14cf64afb4e4156399b13cb258fe03a1d062bfeb249f14b2ecc7d69ca92ccc6ec9b0cf0172fc9f4b28d730e3e77d5c6f9ff48595b31055ef278b5dcd82a8e7ffe58559850295dfc2997bd1426d6dc", @ANYRES16=r6, @ANYBLOB="010000000000feffffff03000000200001800c00028008000200060000000f00010069623a627269646765300000"], 0x34}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3})
r8 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0)
lseek(r8, 0x0, 0x3)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8)
shutdown(r10, 0x1)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
close(r9)
r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

6.627399475s ago: executing program 4 (id=4049):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}], 0x1, 0x40000041, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r1], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="000000000000414b0000000000ff07000000118fa30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
r4 = gettid()
setns(0xc9, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x5, [<r6=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)={r6, 0x3, 0x8}, 0x8)
r7 = syz_open_procfs(r4, &(0x7f0000000000)='net/tcp\x00')
pread64(r7, &(0x7f0000001340)=""/102390, 0x18ff6, 0x96)
syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x9}}}}}}}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x64e041, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$alg(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x2400e801}, 0x4044014)
sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0)
write$tun(r8, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x5865}}}}}}}, 0x3e)

5.727263552s ago: executing program 4 (id=4051):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x80f, 0x0, 0x1}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r5, &(0x7f0000000040)=""/236, 0xec)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r6}, &(0x7f0000000780)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, 0x0}, 0xe0)

5.413459763s ago: executing program 2 (id=4052):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0x0, 0xee01}}, './file0\x00'})
socket(0x10, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x840000000002, 0x3, 0x100)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmmsg$inet(r3, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x18}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7ff}}], 0x10}}], 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40000017, r5, 0x0)
read(r6, &(0x7f0000000580)=""/190, 0x38)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r7=>0x0}, &(0x7f0000000040)=0xc)
setuid(r7)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, 0xffffffffffffffff, 0x2000000}, 0xc)
setreuid(r0, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x15)

4.928957528s ago: executing program 3 (id=4053):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x4, 0x5}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000140)={r1, &(0x7f0000000980)=')\x00\x12F\xdfR\xc4\xdb\x81\xe3\xc9\xc4\x1a\x7f9a2 \xfe\x9e\xc1W\x02\xce+\xa6\xdf\x91\xe0\x9d\x9dDE23-/\xbd}#\xbeRYE\x87\xbeM\x9b\xa1\xa5\xcf\xa6~\xeb\x13\xdcm\x81\xe7o\x93\xf6\xf8\x86\xcb\xc8N\xa5\xe4\xaba\x00\xe6g\x8er{\b\x8d\a\xfd\x15s\xef\r\x95\x1f\xfe\xf3\xad2\x91\x86\xb2g\xc1uh\x0f\xd8/\aQ\xb9\xdd\xe8\'|\xc4\xfa^\xe9\xf2^(\x92\x14~\x1e\x84\x817\xa2\xae&W\x19v\xeffR\xbe\xfdf\x99\xeeHS|H4N\xb4\x7f\b(\x1c\xee\x17P\x93\xb7\x02\xd5\xba\x8f\x9c\xfaJS\xcd\x02\x1a/\x1a|6\xa9\xc80\x1c\r\x88\x17V\x80\xe3x\xdb\xd4E\xd5\x96\x04_\xfc^\x80\x87J\x1a\x91\x0eZ', 0x402, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x161a, 0x200, 0xe9f, 0x9}}, 0x5d7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r5, &(0x7f0000000a80)=""/188, 0xba)
write$tun(r5, 0x0, 0x0)
syz_usb_disconnect(r4)

4.624466781s ago: executing program 2 (id=4055):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, 0x0, 0x0, 0x80000)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x3, 0x953, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x51}, 0x94)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, 0x0}], 0x1, 0x2a, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x7, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r8=>0x0, 0x40, 0x40, 0x40, 0x2, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x94, 0x4, "c3b8"}, @end]}}}}})
sendmsg$nl_route_sched(r7, &(0x7f0000003680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000001080)=@newchain={0x25ac, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {0xd, 0x8}, {0xe, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x32d, 0x81}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xbc7}, @filter_kind_options=@f_basic={{0xa}, {0x2530, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_BASIC_POLICE={0x4c0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0xfff, 0x9, 0x2, 0x4, 0x7fffffff, 0x7, 0x5, 0xa118, 0x800, 0x800, 0x6, 0x5, 0xc, 0x6, 0xb3, 0x4, 0x7fff, 0x9, 0x43, 0xd42b, 0x4, 0xc, 0x8, 0x80, 0x4, 0x9, 0x1, 0x5f79, 0x1, 0x1, 0x2, 0xd, 0xc74, 0x3, 0x7, 0x1000, 0x4, 0xb, 0xb8d, 0x5, 0x9, 0x7, 0x3, 0x5f28, 0x2, 0xc2, 0x3d, 0x708, 0x4, 0x1, 0x8, 0x4, 0x7, 0xdc9, 0x2, 0x2, 0x8, 0x9, 0xe8f47542, 0x0, 0x6, 0x2, 0xa07, 0x4b70, 0x81, 0x9, 0x7f86, 0x0, 0x8, 0x9, 0x4, 0x18000, 0x4, 0x40, 0x8, 0x6, 0x8001, 0x7fffffff, 0x3, 0x649, 0x7f, 0x47601d03, 0x7f, 0x0, 0xfffff9c0, 0xffffff01, 0x4, 0xfffffffc, 0xb, 0x4885, 0x7, 0x8000, 0x6, 0x5, 0x2, 0x4, 0x401, 0x0, 0x8000, 0x0, 0xfffffffd, 0x3, 0x1, 0x9, 0x9, 0x3, 0x10001, 0x2, 0x9, 0xffff55b3, 0xb9, 0x8000, 0x9, 0x6, 0x2, 0x3, 0xb, 0x8, 0x3, 0x5, 0x5, 0x7, 0x8, 0x9, 0xfffffffc, 0x4, 0x80000001, 0x2, 0x10, 0xb7b0, 0x4, 0xfffffffc, 0x2, 0x6, 0x9, 0x2, 0x91, 0x6, 0x5, 0x3ff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x736e, 0x100, 0x56000000, 0x0, 0x8, 0x1, 0x7ff, 0x3, 0xc0c6, 0x1, 0xf, 0x4, 0x1, 0x7, 0x0, 0xff, 0x80, 0x3, 0x1, 0x0, 0x64, 0x3, 0x8, 0x2, 0x5, 0x5, 0x6, 0xfffffc00, 0x4, 0xd, 0x514e, 0x1, 0x8, 0x40, 0x800, 0x7f, 0x6, 0xb, 0x4, 0x9, 0x5, 0x3, 0x8, 0x101, 0x7, 0x1, 0x8001, 0x100, 0x4b, 0xe, 0x2, 0x7, 0x10000, 0x80000001, 0xffff7fff, 0x9185, 0x9, 0x3, 0x9, 0x3, 0x14f12c8e, 0x546, 0x9, 0x1e97, 0x101, 0x7, 0xc, 0x1, 0xd7ec, 0x0, 0x2, 0x3, 0x0, 0xe2, 0x4a, 0xb, 0xb0, 0xa, 0x6, 0x200, 0x0, 0xc39, 0x4, 0x2, 0xfffffffe, 0x4, 0x27, 0x8, 0x3, 0x0, 0x81, 0x9984, 0xfffffff0, 0x10001, 0x0, 0x401, 0x9, 0x6, 0x9, 0xfff, 0x80000000, 0x7d0, 0x7fff, 0x3, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x17f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x10, 0x80000000, 0x4, {0x1, 0x2, 0xce0, 0x8, 0xe, 0xffff}, {0x1, 0x0, 0xfffd, 0x3ff, 0x6ca, 0xe}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x4, 0x5, 0xffffffff, {0x1, 0x0, 0x8, 0x8, 0x400, 0x10000}, {0xb, 0x2, 0x4, 0x1, 0x400}, 0x0, 0x6, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff6c01}]}, @TCA_BASIC_ACT={0x205c, 0x3, [@m_skbedit={0xc0, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}]}, {0x84, 0x6, "25beece4be56a7208bdc479dc9dec141a9e46125f6bb8a0f461e8ecc251e8ce36c4a33259ddab38dde0b317d2bd888a43f791ff0b781e7b72aaeea0cff0fd4f21ef7ea2b135ffb0d1dad776ffe6fce9f34cc554e05fd9f8412cab2e0859ce72577bdb770055477e8ab70a2f12cf4153d1b5182c54e106161e022ef7e0bfbfc67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1e60, 0x0, 0x0, 0x0, {{0xa}, {0x1de4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x46de8baf8429a20b}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7f, 0x400, 0x1, 0x8000, 0x380}, 0x7, 0x0, [{0xc, 0x9, 0x40, 0x7ff, 0x3, 0x2}, {0x0, 0x7, 0xdff, 0x6, 0x8001, 0xf9}]}, [{0x0, 0x2, 0xa13c, 0x81, 0x9, 0x9}, {0x5, 0xf80f, 0x6, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x7, 0x6, 0x7, 0x401}, {0x4, 0x9, 0xe, 0x1, 0xf, 0x6}, {0x81, 0x8, 0x7b, 0x8, 0x2, 0x2}, {0x0, 0x4, 0x400, 0x7fffffff, 0x1, 0x9988}, {0x2, 0x2, 0x5, 0x8, 0xb8, 0x2}, {0x2, 0x79, 0x3ff, 0xfffffffa, 0x2, 0x9}, {0x4, 0x96c, 0x3, 0x8, 0x9, 0x3}, {0x0, 0xfffffffd, 0xfffffff9, 0x10000, 0x7, 0x3}, {0x2, 0x4, 0x6, 0x80, 0x3ff, 0x400}, {0x0, 0x1ff, 0x5, 0x4, 0x4, 0x9}, {0x4, 0x46, 0x7, 0x200, 0x5, 0xe}, {0x1, 0x9, 0xe, 0x6, 0x6, 0x8}, {0xe23e, 0x4, 0x7, 0x0, 0x6, 0xa2}, {0x4, 0x3, 0xffff, 0x1, 0x7, 0xfff}, {0x3, 0xab3, 0x4, 0xfffffff9, 0x0, 0x4}, {0x2000000, 0xc, 0x800, 0x9, 0x6d6, 0x5}, {0x3, 0x2, 0x1, 0xf0, 0x2, 0x4}, {0xef1, 0xa5, 0x1ff, 0x4, 0x8, 0x5}, {0x6, 0x20000000, 0x6, 0x67, 0x3, 0x9}, {0x4, 0x4, 0xd, 0x0, 0x4, 0xb1}, {0x7, 0x7, 0x2, 0x0, 0x5d55dccf, 0x5}, {0x8, 0x7ff, 0x9, 0x10000, 0xbe99, 0x7}, {0xffffffff, 0x0, 0x6, 0x6, 0x2, 0x2}, {0xa, 0x4, 0x7fff, 0x1649, 0x4, 0x2}, {0x200, 0x3ff, 0x40, 0x3, 0x34d7, 0x3}, {0x81, 0x1, 0xf, 0x3, 0x3}, {0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x5}, {0x296, 0xab2, 0x10, 0x7, 0x1, 0xe}, {0x3, 0x5, 0x80, 0x100, 0x8001, 0xfffffffb}, {0x6, 0x8, 0x2c8, 0x80000000, 0x3a5, 0x19c}, {0x7, 0x7fff, 0xc16, 0x10, 0x8, 0x800}, {0x8, 0x9, 0x8, 0x7, 0xffff78a0, 0x6}, {0xfa, 0x74a, 0x7, 0xfffffffd, 0x3, 0x2}, {0x2, 0xfffffa4b, 0x6, 0x10000, 0x10001, 0x5}, {0x29, 0x40, 0x9, 0x7, 0x7edc, 0x5}, {0x40, 0x81, 0x8001, 0x7, 0x8}, {0x6, 0x9, 0x8, 0x4, 0x1, 0x8001}, {0x2, 0x4, 0xc, 0x0, 0xffffffff, 0xa4}, {0xdf9, 0x0, 0x4, 0x9, 0xffffffff, 0x4894}, {0x1d9, 0xb, 0x0, 0x9, 0xb, 0x1000}, {0x8, 0x4, 0x5, 0x0, 0x1, 0x6}, {0x465, 0x5, 0x6, 0xc6d, 0xffff8000, 0x3ff}, {0x3, 0x9, 0x80000001, 0x73, 0xe5, 0x3}, {0x5, 0xe, 0x9, 0x7, 0xf, 0x101}, {0x5a21, 0x80000000, 0x8, 0x1000, 0xee5, 0xc7}, {0x4, 0x5, 0xe0, 0x4, 0x2, 0x3}, {0x381a, 0x4, 0x3, 0x9, 0x2, 0x2}, {0x9, 0x6, 0x1, 0x8, 0x5, 0x8001}, {0xffffffed, 0x100, 0x7fffffff, 0xd8, 0xa41, 0x8}, {0x10, 0x14ff, 0x3, 0xfffffffa, 0xfffffffb, 0x101}, {0x5, 0x6, 0x200, 0x8, 0x4, 0x5}, {0xfffffff7, 0x932, 0x0, 0x200, 0x80, 0x4}, {0x10001, 0x2, 0x8, 0x9, 0x9, 0x99e1}, {0x6, 0x5, 0x6, 0x5, 0x40000000, 0x81}, {0x5, 0xb, 0x3, 0x4e5dc3e2, 0xb01f, 0x9}, {0x5, 0x1, 0x3, 0xfffffff4, 0x7e}, {0x6, 0x7, 0x9, 0x6, 0xfff}, {0x5, 0x80000000, 0x6, 0x80000001, 0x8000, 0x280000}, {0x8, 0x0, 0x7, 0xfffffffb, 0x6, 0x3ec3}, {0x0, 0xc, 0x9, 0x0, 0x21, 0xa8}, {0x8, 0x2, 0x200, 0x4, 0x7fff, 0x2}, {0x4, 0x8, 0x10000, 0xfffffffd, 0xcb11, 0xfa3}, {0xffffffff, 0x4, 0x3, 0xffffffff, 0x81, 0x5}, {0x0, 0xd, 0x1000, 0x7fff, 0x5, 0x8}, {0x3, 0x3, 0x7, 0x4, 0x8c, 0x3}, {0x2, 0x0, 0xffff, 0x40, 0x7, 0x40}, {0x1000, 0x1000, 0x4, 0x80, 0x5, 0x9}, {0x9, 0x3, 0x9, 0x4, 0x400, 0x1}, {0x0, 0xc1, 0x80, 0xfffffffd, 0x400, 0x2}, {0x5, 0x1, 0x7, 0x0, 0x8, 0x2}, {0x1, 0xae6, 0x6, 0x5, 0x1, 0x8}, {0xffffffff, 0x5, 0x1, 0x7f, 0x7, 0x4}, {0x6, 0x7, 0xa, 0x1c, 0x10001, 0xd8a}, {0x0, 0x2, 0x5, 0x1, 0x0, 0x8}, {0x4, 0x8, 0x1, 0xfffffff4, 0x0, 0x80000001}, {0x0, 0x4, 0x10, 0x0, 0x1, 0xffff}, {0xfff, 0x2, 0x3ff, 0x10001, 0x2, 0x1}, {0x2, 0x0, 0x3, 0x7fff, 0xf85, 0x3}, {0x40, 0x0, 0xff, 0x4, 0x8d6, 0x29471e55}, {0x33, 0x40, 0x0, 0x4, 0x1, 0x4}, {0x2, 0x9, 0x9, 0x0, 0x80000000, 0x8}, {0x401, 0x81, 0x9647, 0x5b, 0x8}, {0xf, 0x8, 0x3, 0x4, 0xc, 0x8}, {0xa5, 0x80, 0x5, 0x1, 0x157, 0x3}, {0x6, 0x5, 0x10001, 0xffffffb8, 0x2, 0x7eb3}, {0x8000, 0x9, 0x5, 0x8001, 0x8, 0x1}, {0x3, 0x9, 0x953, 0x1, 0x8, 0x800}, {0x1, 0x2, 0xd0, 0x6, 0x3, 0x4}, {0x4, 0x101, 0x0, 0x8000, 0x3800, 0x1bee98ee}, {0x6, 0x7, 0x3b6e, 0x1621, 0x6, 0xbf2d}, {0x10, 0x2f7, 0x1000, 0xb4f, 0xc, 0x135c}, {0xf4, 0x4, 0x80000001, 0x45f, 0x7fff, 0x2}, {0x1, 0x9, 0x6, 0x2, 0x5, 0x9}, {0x4, 0x6, 0xffffffff, 0x835b, 0xff, 0x2}, {0x1ff, 0x9d9a, 0x10001, 0x8, 0x400, 0x1}, {0xd4a, 0x8, 0x4, 0x1796, 0x2b, 0x4f3}, {0x0, 0x5, 0x7, 0xfffffff9, 0x8, 0x10001}, {0x1ff, 0x8, 0x4, 0xffff, 0x401, 0x9}, {0x6, 0x9c, 0xfd, 0x1, 0x7, 0xf}, {0x6, 0x2, 0x8, 0x1, 0x4517}, {0xffffffff, 0x1, 0x100, 0x51afe2ba, 0x64a, 0x54}, {0xfffffffd, 0x2, 0x1, 0x10000, 0x718, 0x40}, {0x16, 0xf2cf, 0x9, 0x9, 0xce, 0x7f}, {0x4, 0x6d1, 0x2, 0xfffffeff, 0xc1, 0xfffffff7}, {0x0, 0x10, 0x7, 0x5, 0x34000000, 0x80000000}, {0xffff, 0xfd, 0x3, 0x9, 0x4}, {0x4, 0x6, 0x2, 0x7fff, 0x4, 0xfffffffa}, {0xfffffffb, 0x7, 0xb, 0x7fff, 0x5, 0x9}, {0x58e, 0x22b, 0x5, 0x9, 0xffffff46, 0x3c85}, {0x3ee, 0xb23, 0x5, 0x6, 0x400, 0x8}, {0x6, 0xb4c, 0x68d, 0x3, 0x0, 0xffffffff}, {0x4a11b57, 0x1, 0x6, 0x5, 0x9, 0x7}, {0x9, 0x7, 0x10000, 0x6, 0x40, 0x8}, {0x0, 0x5, 0xc, 0x1c, 0x7, 0xa9}, {0x7fffffff, 0x101, 0x5, 0x4, 0x80, 0x5}, {0xe264, 0x0, 0x7fff, 0xec0d, 0x3f, 0x2}, {0x7, 0x6, 0x7, 0x1000, 0x0, 0x9817}, {0x3ff, 0x0, 0xb3a6, 0x133, 0x1, 0x57}, {0xfffffff6, 0x46, 0xff, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xffff, 0x1, 0x5}, {0x9, 0x4, 0x3, 0x1, 0x2}, {0x1ff, 0x40, 0x8, 0x5, 0xd4, 0x1}, {0x5, 0x81, 0x2, 0x9, 0x351, 0x8}, {0x3, 0x6, 0x7ff, 0x3, 0x7, 0x1}, {0x8, 0x9, 0x2, 0x563, 0x1, 0x9}, {0x8000, 0x9, 0x7, 0x9, 0x7, 0x7c}], [{0x5}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0xad6c8fa8b31285ab}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x4}, {}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4e487bed4dd4f98b, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0xd8782ec0621a243a}, {0x5}, {0x83fa623c9e490298}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x4, 0x20000000, 0x800, 0xea8}, 0x2, 0x8, [{0x77d2, 0x6, 0x4f, 0x1, 0x8, 0xa}, {0xfffffff6, 0xd, 0x4, 0x0, 0xfffffffc, 0xc0}]}, [{0x0, 0x4, 0xb, 0x5, 0x5, 0x8d0}, {0x4, 0x1, 0x8, 0x9, 0x5, 0x7}, {0x4a, 0x5, 0x6, 0x5, 0x1, 0x7}, {0xa, 0x1, 0x3, 0x3, 0x2f64, 0x792ca715}, {0x4, 0x6, 0xbb3, 0x9, 0xe5, 0x9}, {0x1, 0xee, 0x428fab42, 0xe6c, 0x5, 0xfffffffa}, {0x6, 0x401, 0x5, 0xb, 0x0, 0x3ff}, {0x820, 0x1, 0x1, 0x3, 0x27, 0x5}, {0x399, 0x8, 0x7, 0xfffff3fa, 0xffff, 0x9}, {0x5, 0xc, 0x6, 0x6, 0x9, 0x7}, {0x0, 0x43b0, 0x8, 0x5, 0x2, 0x5}, {0x8, 0xd88d, 0x7, 0xaf, 0x7, 0x2}, {0x6, 0x7fff, 0xfffffffd, 0xfffffff9, 0x9, 0x7}, {0x5, 0x100, 0xb, 0x10001, 0xfffffffb, 0x3ff}, {0xfff, 0xfffffffc, 0x1ff, 0x1, 0x4, 0x1}, {0x0, 0x1, 0x8, 0xc5b, 0x8, 0x7}, {0x7f, 0x4, 0x7fff, 0xffffffff, 0x3, 0x3ff}, {0x76d75299, 0x7, 0x2, 0x98, 0x3, 0x7fffffff}, {0x9, 0x401, 0x2cc, 0xf, 0x0, 0xe}, {0x3ff, 0x54, 0x7, 0x4, 0x9, 0x3}, {0x9, 0x0, 0x5c, 0x5, 0x8, 0x6}, {0x1800, 0x6, 0x80000001, 0x8000, 0xfffffff8, 0xf}, {0x2, 0x2, 0x6, 0x101, 0x2f21ff94, 0x3}, {0x61f, 0x9, 0x9, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x2, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xfffffffe, 0x4, 0x7, 0x7}, {0xba8, 0x3, 0x7, 0x8, 0x0, 0x7ff}, {0x10000, 0x10001, 0x6, 0x5, 0x0, 0x81}, {0x10, 0xd, 0x700, 0x6, 0x4, 0x2}, {0xd, 0x8, 0x200, 0xd6e, 0x4, 0x7}, {0x8, 0x7, 0x3, 0x7fffffff, 0x8, 0xcb89}, {0x2, 0x5, 0x9, 0x9, 0x9c000000, 0x10001}, {0x9, 0x3, 0x7, 0x7fff, 0x800, 0x9a}, {0x5, 0x0, 0x7, 0x5, 0x5}, {0x81, 0x9aa, 0x5, 0x9, 0x2, 0x537}, {0x5, 0x4, 0x0, 0x6c, 0x8, 0x4}, {0x9, 0x9, 0x48000, 0x6, 0x800, 0x7}, {0x9, 0x800, 0x2, 0x9, 0x9, 0x9}, {0x200, 0xa83a, 0x5, 0x5, 0x3, 0x9a}, {0x1a, 0xfd, 0xffffffff, 0xbd, 0x3, 0x9}, {0x1000, 0x40, 0x4d3, 0x1ff, 0x2, 0xf4}, {0x2, 0x2, 0xa9, 0x61b707be, 0x6, 0xc}, {0x0, 0xc, 0xf80, 0x0, 0x0, 0x3ff}, {0x4, 0x4, 0x20, 0x4, 0x6, 0x7fffffff}, {0x9, 0x1, 0x9, 0x3, 0x7, 0x800}, {0x3, 0x2, 0xff, 0x1253acdb, 0x3, 0x800}, {0x7fff, 0x800, 0x1000, 0x5, 0x101, 0x10}, {0x4, 0x6, 0x8, 0x5, 0x4, 0x2}, {0x0, 0xb2, 0x8, 0x6, 0x9, 0xe}, {0x6, 0xa4, 0x8001, 0x8, 0x0, 0x3}, {0xfff, 0x4, 0x8000, 0x8, 0xfffffff9, 0x7}, {0x2, 0x6, 0x1ff, 0xfff, 0x6, 0x5}, {0x6, 0x0, 0x52d5, 0xffffff93, 0x2, 0x10}, {0x81, 0x1fc0000, 0xfffffffb, 0xfffffff8, 0x35f8fe5, 0xffff7fff}, {0x644f, 0x1, 0x0, 0x6, 0x0, 0x1c00}, {0xb, 0x2, 0x1000, 0xffffff81, 0x7a, 0x9}, {0x2, 0xce0, 0x8, 0x6, 0x3}, {0x5, 0x4dd, 0x4, 0x0, 0xffffffc0, 0x8}, {0x7, 0x8, 0x7, 0xfffff801, 0x7, 0x707}, {0x2, 0x1, 0x73, 0x80, 0xe0ff, 0x10000}, {0x7, 0xffff, 0x8, 0x5, 0x5, 0x3}, {0x1000000, 0x8, 0x4, 0x10001, 0x6, 0x5}, {0x136c0, 0xec4d, 0x58d, 0x0, 0x6, 0x7}, {0x3, 0x1, 0x4, 0x0, 0x4, 0xb6bf}, {0x4, 0x0, 0x1, 0x4, 0x9, 0x7}, {0x8, 0x80, 0x7, 0x0, 0x81, 0x6}, {0x3, 0x59, 0x2, 0x9, 0xdf, 0x14ad}, {0x4, 0x5, 0x4, 0xfffffffa, 0x5, 0xffff}, {0x7fffffff, 0x5bbb, 0x3, 0xfffff655, 0xfffffff8, 0xffffd7d8}, {0x10000, 0xd, 0x4, 0xae, 0x9, 0x9}, {0x9, 0x6, 0x40000000, 0x6, 0x1ff, 0x96}, {0x0, 0x1, 0x2cef, 0x6, 0x6, 0x1af}, {0xe8c00000, 0x7600, 0x1000, 0x98, 0x80000001, 0x401}, {0x43c4, 0x5a2a, 0x4f, 0xc7e6, 0x6, 0x6}, {0x400, 0x5, 0xcc, 0xfffffff9, 0x400}, {0x1, 0x4, 0x1, 0xb8c, 0x1cd777d9, 0x80}, {0x66, 0x52, 0x8, 0x4, 0x0, 0x7}, {0x7, 0x2, 0x8, 0xd, 0x3, 0x71d}, {0x5, 0xbd, 0x7, 0x4, 0x1, 0xe45}, {0x10000, 0x5, 0x4, 0x7, 0x8, 0x3}, {0xd51, 0xe1, 0x8, 0xd5b6, 0xc0, 0x3}, {0x3, 0x5, 0x3, 0x101, 0x18000, 0x3}, {0x3, 0xe, 0x0, 0x770, 0x7, 0x1}, {0x6, 0x2, 0x8, 0x6, 0x3, 0x35b1f5fa}, {0x8, 0x6a1e, 0x4, 0xa7, 0x86db, 0x8}, {0x5, 0xffffffff, 0x8000, 0x2, 0xe, 0x8}, {0xb72d, 0x9, 0x5, 0x9, 0x8001, 0xd}, {0x3, 0x401, 0x4, 0x5, 0x1e, 0x3}, {0x6, 0xa22, 0x1, 0x401, 0x3, 0x401}, {0x3, 0x5, 0x800, 0x770, 0x3, 0xf4f}, {0x5, 0x6, 0x2, 0xfffffbf0, 0x1, 0x4}, {0xd53, 0x0, 0xb5, 0x10001, 0x2, 0x40}, {0xa, 0xffff, 0xb, 0x7, 0x1, 0x6}, {0x1, 0x482, 0x5, 0x7, 0x3, 0x2}, {0x2, 0xfffffffc, 0x8, 0x1, 0xd, 0x393}, {0xfffffffb, 0x5, 0x800, 0x6, 0x8, 0x9}, {0xfffeffff, 0x0, 0x7ff, 0xfffff001, 0x4, 0x4}, {0x1, 0x7, 0x10000, 0x81, 0x1ff, 0x6}, {0x7b, 0xb33d, 0x4, 0x0, 0x9, 0x53c}, {0x3ff, 0xc, 0xffffffff, 0x80000000, 0x28, 0x1ff}, {0x3, 0x9, 0x6, 0x2, 0x9, 0x14}, {0x0, 0x80, 0x40, 0x3, 0x4, 0xa2}, {0x6c96442c, 0x8000, 0x0, 0x1cb7207f, 0x5, 0x8}, {0x7, 0x81, 0x2f06, 0x7fffffff, 0x8}, {0xfffffffc, 0x2, 0x8, 0xa3, 0x3, 0x80000000}, {0x7, 0x6, 0x2, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x3, 0x7, 0x6}, {0x1, 0xf5, 0xffffa275, 0x2, 0x2, 0x10000}, {0x7, 0x2, 0xed3, 0x7175}, {0x10000, 0x8, 0x5, 0x2, 0xb91, 0xffffffff}, {0xc, 0xfffffff2, 0x9, 0x6, 0x6, 0x4}, {0x441a, 0x9, 0x4, 0xae97}, {0x5, 0x6, 0x3, 0xffffffff, 0xf, 0x7c}, {0x8, 0x8, 0x9014, 0x9, 0x4, 0x6}, {0x6, 0x6, 0x81, 0x3, 0xfffffffc, 0x2}, {0xfffffffb, 0x81, 0x0, 0x7ff, 0x9, 0x2613}, {0x54a, 0xc93, 0x9, 0x5, 0x770, 0xfe4}, {0x101, 0x1000, 0xe5, 0x6, 0x8, 0x6}, {0x7, 0xcd, 0x8, 0x2, 0x1, 0x81}, {0x6, 0xc, 0xfff, 0x4, 0x200, 0x2}, {0x3, 0x8, 0x401, 0xffffffff, 0x2, 0x5}, {0xfffffb41, 0x4, 0x55a, 0xe, 0x3, 0x9}, {0xc0000000, 0x1, 0x7cd7, 0xe98, 0xd, 0xa4}, {0x0, 0x2, 0x0, 0x2, 0x8, 0x7}, {0xceb7, 0x2, 0x3, 0x5, 0x7ff, 0x3}, {0x8, 0x0, 0x2, 0x5, 0x52, 0xfffffffa}, {0x6, 0x9, 0x7, 0x6, 0x1, 0x4ed4}, {0x8, 0x4, 0x0, 0x40, 0x3ff, 0x101}], [{0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {}, {0x7070942386176f42}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x3}, {0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5}], 0x1}}]}, {0x53, 0x6, "208bc6d9d7fa2103234e5a711483d8431ae4ac1fed2c01087af56af1363d5e978c3c2b8244c342dc1c11a297344172296936861a1b86ffdd4d3549c0f94e456c39e6bf1dfcb99f641453c975aca965"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x138, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x2}}]}}]}, 0x25ac}}, 0x4000)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r9, 0xee01, 0x0)
keyctl$setperm(0x5, r9, 0x30925)

4.560941423s ago: executing program 1 (id=4056):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x64d0, &(0x7f0000000300)={0x0, 0x74e2, 0x8, 0x2, 0x1b, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x8000, 0x3, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x1}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e)
ioctl$TCFLSH(r7, 0x540b, 0x1)
write$cgroup_int(r6, &(0x7f0000000000), 0x12)

4.53206677s ago: executing program 4 (id=4057):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0)
ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000003c0))
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
close(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x13, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

4.438948874s ago: executing program 4 (id=4058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

3.587256568s ago: executing program 1 (id=4059):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) (fail_nth: 7)

3.526979948s ago: executing program 4 (id=4060):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
memfd_secret(0x80000)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private2, 0x29})
shmctl$IPC_RMID(r4, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x1, 0x5, 0x0)

3.490814668s ago: executing program 2 (id=4061):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x2, 0x1}}, 0x3c)
openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x5)
sendmsg$netlink(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0xd0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x40000000015, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000021000000000000549e290e6e208f1539a700"/37], 0x50)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
chdir(0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)

3.488881367s ago: executing program 1 (id=4062):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0x3, 0x3, 0x3, 0x54, @remote, @loopback, 0x8, 0x8000, 0x400, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53f}]}, 0x80}}, 0x4000001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000e14b44d413cad75e2e63f528a216701c5fe5202623962e89eacbd81590e7159535ff9339f7904965e51f70125d473c7bd3406348398c407c887f673121f87338a0fbff66485a94ef6500831565b7d483b0c969ced75f1182a497b207497682c7471958b12dcedbfbc14cf64afb4e4156399b13cb258fe03a1d062bfeb249f14b2ecc7d69ca92ccc6ec9b0cf0172fc9f4b28d730e3e77d5c6f9ff48595b31055ef278b5dcd82a8e7ffe58559850295dfc2997bd1426d6dc", @ANYRES16=r6, @ANYBLOB="010000000000feffffff03000000200001800c00028008000200060000000f00010069623a627269646765300000"], 0x34}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r7 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5)
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3})
r8 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0)
lseek(r8, 0x0, 0x3)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8)
shutdown(r10, 0x1)
mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00')
close(r9)
r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

2.389967431s ago: executing program 4 (id=4063):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1810d1, 0x0)
mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/63]}, 0x8f)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="b035ec55de693f39f5023292c7031b70f99925399583ce2019091a8567f4c2f54c4377f59f919fa57ba29a64ccdb512f9829ccd120f15d1f19994ca4af4f9ccfa4e8b1e44b3a75802eb6670e0f0bbbf66e605498f9dd20923fd9bd1fdb290178814df57b93a9a2b299f180d7c4b799b35bd56d5d5abe39c819a19d732ec6a08ca542afd1ba6918fdc081699d098b5b1805e756712f2996a7ecc2733f2a837b10f0a649aa1f6796b80597545153ca91c3e83621d8ed87d954f2db53252d5470f2b6fd8aaebec5e3a3", @ANYRES32, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1a000})
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x200000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

2.195662206s ago: executing program 2 (id=4064):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r1, 0x0, 0x0, 0x80000)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x3, 0x953, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x51}, 0x94)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x6, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600})
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, 0x0}], 0x1, 0x2a, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x7, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r8=>0x0, 0x40, 0x40, 0x40, 0x2, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x94, 0x4, "c3b8"}, @end]}}}}})
sendmsg$nl_route_sched(r7, &(0x7f0000003680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000001080)=@newchain={0x25ac, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {0xd, 0x8}, {0xe, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x32d, 0x81}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xbc7}, @filter_kind_options=@f_basic={{0xa}, {0x2530, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_BASIC_POLICE={0x4c0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0xfff, 0x9, 0x2, 0x4, 0x7fffffff, 0x7, 0x5, 0xa118, 0x800, 0x800, 0x6, 0x5, 0xc, 0x6, 0xb3, 0x4, 0x7fff, 0x9, 0x43, 0xd42b, 0x4, 0xc, 0x8, 0x80, 0x4, 0x9, 0x1, 0x5f79, 0x1, 0x1, 0x2, 0xd, 0xc74, 0x3, 0x7, 0x1000, 0x4, 0xb, 0xb8d, 0x5, 0x9, 0x7, 0x3, 0x5f28, 0x2, 0xc2, 0x3d, 0x708, 0x4, 0x1, 0x8, 0x4, 0x7, 0xdc9, 0x2, 0x2, 0x8, 0x9, 0xe8f47542, 0x0, 0x6, 0x2, 0xa07, 0x4b70, 0x81, 0x9, 0x7f86, 0x0, 0x8, 0x9, 0x4, 0x18000, 0x4, 0x40, 0x8, 0x6, 0x8001, 0x7fffffff, 0x3, 0x649, 0x7f, 0x47601d03, 0x7f, 0x0, 0xfffff9c0, 0xffffff01, 0x4, 0xfffffffc, 0xb, 0x4885, 0x7, 0x8000, 0x6, 0x5, 0x2, 0x4, 0x401, 0x0, 0x8000, 0x0, 0xfffffffd, 0x3, 0x1, 0x9, 0x9, 0x3, 0x10001, 0x2, 0x9, 0xffff55b3, 0xb9, 0x8000, 0x9, 0x6, 0x2, 0x3, 0xb, 0x8, 0x3, 0x5, 0x5, 0x7, 0x8, 0x9, 0xfffffffc, 0x4, 0x80000001, 0x2, 0x10, 0xb7b0, 0x4, 0xfffffffc, 0x2, 0x6, 0x9, 0x2, 0x91, 0x6, 0x5, 0x3ff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x736e, 0x100, 0x56000000, 0x0, 0x8, 0x1, 0x7ff, 0x3, 0xc0c6, 0x1, 0xf, 0x4, 0x1, 0x7, 0x0, 0xff, 0x80, 0x3, 0x1, 0x0, 0x64, 0x3, 0x8, 0x2, 0x5, 0x5, 0x6, 0xfffffc00, 0x4, 0xd, 0x514e, 0x1, 0x8, 0x40, 0x800, 0x7f, 0x6, 0xb, 0x4, 0x9, 0x5, 0x3, 0x8, 0x101, 0x7, 0x1, 0x8001, 0x100, 0x4b, 0xe, 0x2, 0x7, 0x10000, 0x80000001, 0xffff7fff, 0x9185, 0x9, 0x3, 0x9, 0x3, 0x14f12c8e, 0x546, 0x9, 0x1e97, 0x101, 0x7, 0xc, 0x1, 0xd7ec, 0x0, 0x2, 0x3, 0x0, 0xe2, 0x4a, 0xb, 0xb0, 0xa, 0x6, 0x200, 0x0, 0xc39, 0x4, 0x2, 0xfffffffe, 0x4, 0x27, 0x8, 0x3, 0x0, 0x81, 0x9984, 0xfffffff0, 0x10001, 0x0, 0x401, 0x9, 0x6, 0x9, 0xfff, 0x80000000, 0x7d0, 0x7fff, 0x3, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x17f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x10, 0x80000000, 0x4, {0x1, 0x2, 0xce0, 0x8, 0xe, 0xffff}, {0x1, 0x0, 0xfffd, 0x3ff, 0x6ca, 0xe}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x4, 0x5, 0xffffffff, {0x1, 0x0, 0x8, 0x8, 0x400, 0x10000}, {0xb, 0x2, 0x4, 0x1, 0x400}, 0x0, 0x6, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff6c01}]}, @TCA_BASIC_ACT={0x205c, 0x3, [@m_skbedit={0xc0, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}]}, {0x84, 0x6, "25beece4be56a7208bdc479dc9dec141a9e46125f6bb8a0f461e8ecc251e8ce36c4a33259ddab38dde0b317d2bd888a43f791ff0b781e7b72aaeea0cff0fd4f21ef7ea2b135ffb0d1dad776ffe6fce9f34cc554e05fd9f8412cab2e0859ce72577bdb770055477e8ab70a2f12cf4153d1b5182c54e106161e022ef7e0bfbfc67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1e60, 0x0, 0x0, 0x0, {{0xa}, {0x1de4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x46de8baf8429a20b}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7f, 0x400, 0x1, 0x8000, 0x380}, 0x7, 0x0, [{0xc, 0x9, 0x40, 0x7ff, 0x3, 0x2}, {0x0, 0x7, 0xdff, 0x6, 0x8001, 0xf9}]}, [{0x0, 0x2, 0xa13c, 0x81, 0x9, 0x9}, {0x5, 0xf80f, 0x6, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x7, 0x6, 0x7, 0x401}, {0x4, 0x9, 0xe, 0x1, 0xf, 0x6}, {0x81, 0x8, 0x7b, 0x8, 0x2, 0x2}, {0x0, 0x4, 0x400, 0x7fffffff, 0x1, 0x9988}, {0x2, 0x2, 0x5, 0x8, 0xb8, 0x2}, {0x2, 0x79, 0x3ff, 0xfffffffa, 0x2, 0x9}, {0x4, 0x96c, 0x3, 0x8, 0x9, 0x3}, {0x0, 0xfffffffd, 0xfffffff9, 0x10000, 0x7, 0x3}, {0x2, 0x4, 0x6, 0x80, 0x3ff, 0x400}, {0x0, 0x1ff, 0x5, 0x4, 0x4, 0x9}, {0x4, 0x46, 0x7, 0x200, 0x5, 0xe}, {0x1, 0x9, 0xe, 0x6, 0x6, 0x8}, {0xe23e, 0x4, 0x7, 0x0, 0x6, 0xa2}, {0x4, 0x3, 0xffff, 0x1, 0x7, 0xfff}, {0x3, 0xab3, 0x4, 0xfffffff9, 0x0, 0x4}, {0x2000000, 0xc, 0x800, 0x9, 0x6d6, 0x5}, {0x3, 0x2, 0x1, 0xf0, 0x2, 0x4}, {0xef1, 0xa5, 0x1ff, 0x4, 0x8, 0x5}, {0x6, 0x20000000, 0x6, 0x67, 0x3, 0x9}, {0x4, 0x4, 0xd, 0x0, 0x4, 0xb1}, {0x7, 0x7, 0x2, 0x0, 0x5d55dccf, 0x5}, {0x8, 0x7ff, 0x9, 0x10000, 0xbe99, 0x7}, {0xffffffff, 0x0, 0x6, 0x6, 0x2, 0x2}, {0xa, 0x4, 0x7fff, 0x1649, 0x4, 0x2}, {0x200, 0x3ff, 0x40, 0x3, 0x34d7, 0x3}, {0x81, 0x1, 0xf, 0x3, 0x3}, {0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x5}, {0x296, 0xab2, 0x10, 0x7, 0x1, 0xe}, {0x3, 0x5, 0x80, 0x100, 0x8001, 0xfffffffb}, {0x6, 0x8, 0x2c8, 0x80000000, 0x3a5, 0x19c}, {0x7, 0x7fff, 0xc16, 0x10, 0x8, 0x800}, {0x8, 0x9, 0x8, 0x7, 0xffff78a0, 0x6}, {0xfa, 0x74a, 0x7, 0xfffffffd, 0x3, 0x2}, {0x2, 0xfffffa4b, 0x6, 0x10000, 0x10001, 0x5}, {0x29, 0x40, 0x9, 0x7, 0x7edc, 0x5}, {0x40, 0x81, 0x8001, 0x7, 0x8}, {0x6, 0x9, 0x8, 0x4, 0x1, 0x8001}, {0x2, 0x4, 0xc, 0x0, 0xffffffff, 0xa4}, {0xdf9, 0x0, 0x4, 0x9, 0xffffffff, 0x4894}, {0x1d9, 0xb, 0x0, 0x9, 0xb, 0x1000}, {0x8, 0x4, 0x5, 0x0, 0x1, 0x6}, {0x465, 0x5, 0x6, 0xc6d, 0xffff8000, 0x3ff}, {0x3, 0x9, 0x80000001, 0x73, 0xe5, 0x3}, {0x5, 0xe, 0x9, 0x7, 0xf, 0x101}, {0x5a21, 0x80000000, 0x8, 0x1000, 0xee5, 0xc7}, {0x4, 0x5, 0xe0, 0x4, 0x2, 0x3}, {0x381a, 0x4, 0x3, 0x9, 0x2, 0x2}, {0x9, 0x6, 0x1, 0x8, 0x5, 0x8001}, {0xffffffed, 0x100, 0x7fffffff, 0xd8, 0xa41, 0x8}, {0x10, 0x14ff, 0x3, 0xfffffffa, 0xfffffffb, 0x101}, {0x5, 0x6, 0x200, 0x8, 0x4, 0x5}, {0xfffffff7, 0x932, 0x0, 0x200, 0x80, 0x4}, {0x10001, 0x2, 0x8, 0x9, 0x9, 0x99e1}, {0x6, 0x5, 0x6, 0x5, 0x40000000, 0x81}, {0x5, 0xb, 0x3, 0x4e5dc3e2, 0xb01f, 0x9}, {0x5, 0x1, 0x3, 0xfffffff4, 0x7e}, {0x6, 0x7, 0x9, 0x6, 0xfff}, {0x5, 0x80000000, 0x6, 0x80000001, 0x8000, 0x280000}, {0x8, 0x0, 0x7, 0xfffffffb, 0x6, 0x3ec3}, {0x0, 0xc, 0x9, 0x0, 0x21, 0xa8}, {0x8, 0x2, 0x200, 0x4, 0x7fff, 0x2}, {0x4, 0x8, 0x10000, 0xfffffffd, 0xcb11, 0xfa3}, {0xffffffff, 0x4, 0x3, 0xffffffff, 0x81, 0x5}, {0x0, 0xd, 0x1000, 0x7fff, 0x5, 0x8}, {0x3, 0x3, 0x7, 0x4, 0x8c, 0x3}, {0x2, 0x0, 0xffff, 0x40, 0x7, 0x40}, {0x1000, 0x1000, 0x4, 0x80, 0x5, 0x9}, {0x9, 0x3, 0x9, 0x4, 0x400, 0x1}, {0x0, 0xc1, 0x80, 0xfffffffd, 0x400, 0x2}, {0x5, 0x1, 0x7, 0x0, 0x8, 0x2}, {0x1, 0xae6, 0x6, 0x5, 0x1, 0x8}, {0xffffffff, 0x5, 0x1, 0x7f, 0x7, 0x4}, {0x6, 0x7, 0xa, 0x1c, 0x10001, 0xd8a}, {0x0, 0x2, 0x5, 0x1, 0x0, 0x8}, {0x4, 0x8, 0x1, 0xfffffff4, 0x0, 0x80000001}, {0x0, 0x4, 0x10, 0x0, 0x1, 0xffff}, {0xfff, 0x2, 0x3ff, 0x10001, 0x2, 0x1}, {0x2, 0x0, 0x3, 0x7fff, 0xf85, 0x3}, {0x40, 0x0, 0xff, 0x4, 0x8d6, 0x29471e55}, {0x33, 0x40, 0x0, 0x4, 0x1, 0x4}, {0x2, 0x9, 0x9, 0x0, 0x80000000, 0x8}, {0x401, 0x81, 0x9647, 0x5b, 0x8}, {0xf, 0x8, 0x3, 0x4, 0xc, 0x8}, {0xa5, 0x80, 0x5, 0x1, 0x157, 0x3}, {0x6, 0x5, 0x10001, 0xffffffb8, 0x2, 0x7eb3}, {0x8000, 0x9, 0x5, 0x8001, 0x8, 0x1}, {0x3, 0x9, 0x953, 0x1, 0x8, 0x800}, {0x1, 0x2, 0xd0, 0x6, 0x3, 0x4}, {0x4, 0x101, 0x0, 0x8000, 0x3800, 0x1bee98ee}, {0x6, 0x7, 0x3b6e, 0x1621, 0x6, 0xbf2d}, {0x10, 0x2f7, 0x1000, 0xb4f, 0xc, 0x135c}, {0xf4, 0x4, 0x80000001, 0x45f, 0x7fff, 0x2}, {0x1, 0x9, 0x6, 0x2, 0x5, 0x9}, {0x4, 0x6, 0xffffffff, 0x835b, 0xff, 0x2}, {0x1ff, 0x9d9a, 0x10001, 0x8, 0x400, 0x1}, {0xd4a, 0x8, 0x4, 0x1796, 0x2b, 0x4f3}, {0x0, 0x5, 0x7, 0xfffffff9, 0x8, 0x10001}, {0x1ff, 0x8, 0x4, 0xffff, 0x401, 0x9}, {0x6, 0x9c, 0xfd, 0x1, 0x7, 0xf}, {0x6, 0x2, 0x8, 0x1, 0x4517}, {0xffffffff, 0x1, 0x100, 0x51afe2ba, 0x64a, 0x54}, {0xfffffffd, 0x2, 0x1, 0x10000, 0x718, 0x40}, {0x16, 0xf2cf, 0x9, 0x9, 0xce, 0x7f}, {0x4, 0x6d1, 0x2, 0xfffffeff, 0xc1, 0xfffffff7}, {0x0, 0x10, 0x7, 0x5, 0x34000000, 0x80000000}, {0xffff, 0xfd, 0x3, 0x9, 0x4}, {0x4, 0x6, 0x2, 0x7fff, 0x4, 0xfffffffa}, {0xfffffffb, 0x7, 0xb, 0x7fff, 0x5, 0x9}, {0x58e, 0x22b, 0x5, 0x9, 0xffffff46, 0x3c85}, {0x3ee, 0xb23, 0x5, 0x6, 0x400, 0x8}, {0x6, 0xb4c, 0x68d, 0x3, 0x0, 0xffffffff}, {0x4a11b57, 0x1, 0x6, 0x5, 0x9, 0x7}, {0x9, 0x7, 0x10000, 0x6, 0x40, 0x8}, {0x0, 0x5, 0xc, 0x1c, 0x7, 0xa9}, {0x7fffffff, 0x101, 0x5, 0x4, 0x80, 0x5}, {0xe264, 0x0, 0x7fff, 0xec0d, 0x3f, 0x2}, {0x7, 0x6, 0x7, 0x1000, 0x0, 0x9817}, {0x3ff, 0x0, 0xb3a6, 0x133, 0x1, 0x57}, {0xfffffff6, 0x46, 0xff, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xffff, 0x1, 0x5}, {0x9, 0x4, 0x3, 0x1, 0x2}, {0x1ff, 0x40, 0x8, 0x5, 0xd4, 0x1}, {0x5, 0x81, 0x2, 0x9, 0x351, 0x8}, {0x3, 0x6, 0x7ff, 0x3, 0x7, 0x1}, {0x8, 0x9, 0x2, 0x563, 0x1, 0x9}, {0x8000, 0x9, 0x7, 0x9, 0x7, 0x7c}], [{0x5}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0xad6c8fa8b31285ab}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x4}, {}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4e487bed4dd4f98b, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0xd8782ec0621a243a}, {0x5}, {0x83fa623c9e490298}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x4, 0x20000000, 0x800, 0xea8}, 0x2, 0x8, [{0x77d2, 0x6, 0x4f, 0x1, 0x8, 0xa}, {0xfffffff6, 0xd, 0x4, 0x0, 0xfffffffc, 0xc0}]}, [{0x0, 0x4, 0xb, 0x5, 0x5, 0x8d0}, {0x4, 0x1, 0x8, 0x9, 0x5, 0x7}, {0x4a, 0x5, 0x6, 0x5, 0x1, 0x7}, {0xa, 0x1, 0x3, 0x3, 0x2f64, 0x792ca715}, {0x4, 0x6, 0xbb3, 0x9, 0xe5, 0x9}, {0x1, 0xee, 0x428fab42, 0xe6c, 0x5, 0xfffffffa}, {0x6, 0x401, 0x5, 0xb, 0x0, 0x3ff}, {0x820, 0x1, 0x1, 0x3, 0x27, 0x5}, {0x399, 0x8, 0x7, 0xfffff3fa, 0xffff, 0x9}, {0x5, 0xc, 0x6, 0x6, 0x9, 0x7}, {0x0, 0x43b0, 0x8, 0x5, 0x2, 0x5}, {0x8, 0xd88d, 0x7, 0xaf, 0x7, 0x2}, {0x6, 0x7fff, 0xfffffffd, 0xfffffff9, 0x9, 0x7}, {0x5, 0x100, 0xb, 0x10001, 0xfffffffb, 0x3ff}, {0xfff, 0xfffffffc, 0x1ff, 0x1, 0x4, 0x1}, {0x0, 0x1, 0x8, 0xc5b, 0x8, 0x7}, {0x7f, 0x4, 0x7fff, 0xffffffff, 0x3, 0x3ff}, {0x76d75299, 0x7, 0x2, 0x98, 0x3, 0x7fffffff}, {0x9, 0x401, 0x2cc, 0xf, 0x0, 0xe}, {0x3ff, 0x54, 0x7, 0x4, 0x9, 0x3}, {0x9, 0x0, 0x5c, 0x5, 0x8, 0x6}, {0x1800, 0x6, 0x80000001, 0x8000, 0xfffffff8, 0xf}, {0x2, 0x2, 0x6, 0x101, 0x2f21ff94, 0x3}, {0x61f, 0x9, 0x9, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x2, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xfffffffe, 0x4, 0x7, 0x7}, {0xba8, 0x3, 0x7, 0x8, 0x0, 0x7ff}, {0x10000, 0x10001, 0x6, 0x5, 0x0, 0x81}, {0x10, 0xd, 0x700, 0x6, 0x4, 0x2}, {0xd, 0x8, 0x200, 0xd6e, 0x4, 0x7}, {0x8, 0x7, 0x3, 0x7fffffff, 0x8, 0xcb89}, {0x2, 0x5, 0x9, 0x9, 0x9c000000, 0x10001}, {0x9, 0x3, 0x7, 0x7fff, 0x800, 0x9a}, {0x5, 0x0, 0x7, 0x5, 0x5}, {0x81, 0x9aa, 0x5, 0x9, 0x2, 0x537}, {0x5, 0x4, 0x0, 0x6c, 0x8, 0x4}, {0x9, 0x9, 0x48000, 0x6, 0x800, 0x7}, {0x9, 0x800, 0x2, 0x9, 0x9, 0x9}, {0x200, 0xa83a, 0x5, 0x5, 0x3, 0x9a}, {0x1a, 0xfd, 0xffffffff, 0xbd, 0x3, 0x9}, {0x1000, 0x40, 0x4d3, 0x1ff, 0x2, 0xf4}, {0x2, 0x2, 0xa9, 0x61b707be, 0x6, 0xc}, {0x0, 0xc, 0xf80, 0x0, 0x0, 0x3ff}, {0x4, 0x4, 0x20, 0x4, 0x6, 0x7fffffff}, {0x9, 0x1, 0x9, 0x3, 0x7, 0x800}, {0x3, 0x2, 0xff, 0x1253acdb, 0x3, 0x800}, {0x7fff, 0x800, 0x1000, 0x5, 0x101, 0x10}, {0x4, 0x6, 0x8, 0x5, 0x4, 0x2}, {0x0, 0xb2, 0x8, 0x6, 0x9, 0xe}, {0x6, 0xa4, 0x8001, 0x8, 0x0, 0x3}, {0xfff, 0x4, 0x8000, 0x8, 0xfffffff9, 0x7}, {0x2, 0x6, 0x1ff, 0xfff, 0x6, 0x5}, {0x6, 0x0, 0x52d5, 0xffffff93, 0x2, 0x10}, {0x81, 0x1fc0000, 0xfffffffb, 0xfffffff8, 0x35f8fe5, 0xffff7fff}, {0x644f, 0x1, 0x0, 0x6, 0x0, 0x1c00}, {0xb, 0x2, 0x1000, 0xffffff81, 0x7a, 0x9}, {0x2, 0xce0, 0x8, 0x6, 0x3}, {0x5, 0x4dd, 0x4, 0x0, 0xffffffc0, 0x8}, {0x7, 0x8, 0x7, 0xfffff801, 0x7, 0x707}, {0x2, 0x1, 0x73, 0x80, 0xe0ff, 0x10000}, {0x7, 0xffff, 0x8, 0x5, 0x5, 0x3}, {0x1000000, 0x8, 0x4, 0x10001, 0x6, 0x5}, {0x136c0, 0xec4d, 0x58d, 0x0, 0x6, 0x7}, {0x3, 0x1, 0x4, 0x0, 0x4, 0xb6bf}, {0x4, 0x0, 0x1, 0x4, 0x9, 0x7}, {0x8, 0x80, 0x7, 0x0, 0x81, 0x6}, {0x3, 0x59, 0x2, 0x9, 0xdf, 0x14ad}, {0x4, 0x5, 0x4, 0xfffffffa, 0x5, 0xffff}, {0x7fffffff, 0x5bbb, 0x3, 0xfffff655, 0xfffffff8, 0xffffd7d8}, {0x10000, 0xd, 0x4, 0xae, 0x9, 0x9}, {0x9, 0x6, 0x40000000, 0x6, 0x1ff, 0x96}, {0x0, 0x1, 0x2cef, 0x6, 0x6, 0x1af}, {0xe8c00000, 0x7600, 0x1000, 0x98, 0x80000001, 0x401}, {0x43c4, 0x5a2a, 0x4f, 0xc7e6, 0x6, 0x6}, {0x400, 0x5, 0xcc, 0xfffffff9, 0x400}, {0x1, 0x4, 0x1, 0xb8c, 0x1cd777d9, 0x80}, {0x66, 0x52, 0x8, 0x4, 0x0, 0x7}, {0x7, 0x2, 0x8, 0xd, 0x3, 0x71d}, {0x5, 0xbd, 0x7, 0x4, 0x1, 0xe45}, {0x10000, 0x5, 0x4, 0x7, 0x8, 0x3}, {0xd51, 0xe1, 0x8, 0xd5b6, 0xc0, 0x3}, {0x3, 0x5, 0x3, 0x101, 0x18000, 0x3}, {0x3, 0xe, 0x0, 0x770, 0x7, 0x1}, {0x6, 0x2, 0x8, 0x6, 0x3, 0x35b1f5fa}, {0x8, 0x6a1e, 0x4, 0xa7, 0x86db, 0x8}, {0x5, 0xffffffff, 0x8000, 0x2, 0xe, 0x8}, {0xb72d, 0x9, 0x5, 0x9, 0x8001, 0xd}, {0x3, 0x401, 0x4, 0x5, 0x1e, 0x3}, {0x6, 0xa22, 0x1, 0x401, 0x3, 0x401}, {0x3, 0x5, 0x800, 0x770, 0x3, 0xf4f}, {0x5, 0x6, 0x2, 0xfffffbf0, 0x1, 0x4}, {0xd53, 0x0, 0xb5, 0x10001, 0x2, 0x40}, {0xa, 0xffff, 0xb, 0x7, 0x1, 0x6}, {0x1, 0x482, 0x5, 0x7, 0x3, 0x2}, {0x2, 0xfffffffc, 0x8, 0x1, 0xd, 0x393}, {0xfffffffb, 0x5, 0x800, 0x6, 0x8, 0x9}, {0xfffeffff, 0x0, 0x7ff, 0xfffff001, 0x4, 0x4}, {0x1, 0x7, 0x10000, 0x81, 0x1ff, 0x6}, {0x7b, 0xb33d, 0x4, 0x0, 0x9, 0x53c}, {0x3ff, 0xc, 0xffffffff, 0x80000000, 0x28, 0x1ff}, {0x3, 0x9, 0x6, 0x2, 0x9, 0x14}, {0x0, 0x80, 0x40, 0x3, 0x4, 0xa2}, {0x6c96442c, 0x8000, 0x0, 0x1cb7207f, 0x5, 0x8}, {0x7, 0x81, 0x2f06, 0x7fffffff, 0x8}, {0xfffffffc, 0x2, 0x8, 0xa3, 0x3, 0x80000000}, {0x7, 0x6, 0x2, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x3, 0x7, 0x6}, {0x1, 0xf5, 0xffffa275, 0x2, 0x2, 0x10000}, {0x7, 0x2, 0xed3, 0x7175}, {0x10000, 0x8, 0x5, 0x2, 0xb91, 0xffffffff}, {0xc, 0xfffffff2, 0x9, 0x6, 0x6, 0x4}, {0x441a, 0x9, 0x4, 0xae97}, {0x5, 0x6, 0x3, 0xffffffff, 0xf, 0x7c}, {0x8, 0x8, 0x9014, 0x9, 0x4, 0x6}, {0x6, 0x6, 0x81, 0x3, 0xfffffffc, 0x2}, {0xfffffffb, 0x81, 0x0, 0x7ff, 0x9, 0x2613}, {0x54a, 0xc93, 0x9, 0x5, 0x770, 0xfe4}, {0x101, 0x1000, 0xe5, 0x6, 0x8, 0x6}, {0x7, 0xcd, 0x8, 0x2, 0x1, 0x81}, {0x6, 0xc, 0xfff, 0x4, 0x200, 0x2}, {0x3, 0x8, 0x401, 0xffffffff, 0x2, 0x5}, {0xfffffb41, 0x4, 0x55a, 0xe, 0x3, 0x9}, {0xc0000000, 0x1, 0x7cd7, 0xe98, 0xd, 0xa4}, {0x0, 0x2, 0x0, 0x2, 0x8, 0x7}, {0xceb7, 0x2, 0x3, 0x5, 0x7ff, 0x3}, {0x8, 0x0, 0x2, 0x5, 0x52, 0xfffffffa}, {0x6, 0x9, 0x7, 0x6, 0x1, 0x4ed4}, {0x8, 0x4, 0x0, 0x40, 0x3ff, 0x101}], [{0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {}, {0x7070942386176f42}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x3}, {0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5}], 0x1}}]}, {0x53, 0x6, "208bc6d9d7fa2103234e5a711483d8431ae4ac1fed2c01087af56af1363d5e978c3c2b8244c342dc1c11a297344172296936861a1b86ffdd4d3549c0f94e456c39e6bf1dfcb99f641453c975aca965"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x138, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x2}}]}}]}, 0x25ac}}, 0x4000)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r9, 0xee01, 0x0)
keyctl$setperm(0x5, r9, 0x30925)

1.827350299s ago: executing program 3 (id=4065):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = eventfd(0x0)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6})
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0xffffffff, 0x1, r6})
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000210000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, r8}, 0xc)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000040)="00000000000000a0c8d492507b", 0xd}], 0x2}, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)

1.581971784s ago: executing program 1 (id=4066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000cee0000000000000000fdffffffffffffffffffffffffffffffffffff7f00000000000000000000000002000000000000ff00000000ffffffff000000000080400000000000000000080000000000000000010000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000900000700"/176], 0xf8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r2}, 0x38)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
writev(r0, &(0x7f0000000080), 0x0)

1.563640286s ago: executing program 2 (id=4067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x64d0, &(0x7f0000000300)={0x0, 0x74e2, 0x8, 0x2, 0x1b, 0x0, r1}, &(0x7f0000000200), &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x8000, 0x3, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x1}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x26020480)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e)
ioctl$TCFLSH(r7, 0x540b, 0x1)
write$cgroup_int(r6, &(0x7f0000000000), 0x12)

1.425381622s ago: executing program 3 (id=4068):
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2008792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r8, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40)
close(r9)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r10, &(0x7f0000008340)={0x2020, 0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0xfffffffffffffffe, 0xe4a, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x3, 0xae1, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x0, 0xffff, 0x1, 0x9, {0x804, 0x3}, {0x1001, 0x3}, {0x4, 0x20000d}, {0x1, 0xa00}, 0x2, 0x574, 0x1, 0xbb4}}}})
write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50)

1.264668555s ago: executing program 1 (id=4069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

554.430743ms ago: executing program 2 (id=4070):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x9, 0x6, 0x0, 0x4}, 0x14)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0x6, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
timer_create(0x6, &(0x7f0000001200)={0x0, 0x18, 0x2, @thr={&(0x7f0000000180)="dcc729a1d5c3ff346057e4b4830e29371326481b96397441dd6891b8e3a68b111612229a97b30f28049b88ada33ee331d32542fcfed2306b02cfab46d09c2dc4bd3bde5b1197363d3771daa827888a2add161101f0f981fd7d689d589cff310891164d9d454ad1bf7f84aaba303f19213168b14625858752306723a03d", &(0x7f0000000200)="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"}}, &(0x7f0000001240)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000001280)={{}, {0x77359400}}, &(0x7f00000012c0))
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000001300)={0x26, 0x0, 0x34})
syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000001380)={{0x12, 0x1, 0x140, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x6, 0x10, 0x81, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "40063d7a9c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x2, 0x2, 0x80}, {0x6, 0x24, 0x1a, 0x5, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1432, 0x5, 0xba7d}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5a, 0x4, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x29, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x6}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x250, 0x0, 0x8, 0x7, 0x10, 0x3}, 0x5, &(0x7f0000001440)={0x5, 0xf, 0x5}, 0x9, [{0xb5, &(0x7f0000001480)=@string={0xb5, 0x3, "22a3b101b9fafaa8b941863768552c871df007fd3f20b9774035753b6b6e271b8a31dba3d389d185e1620ad11e936e1d9f3aa8cf8fcfea5ce18df7296e54a585a5dec73c7675624544f6b96bc96f1198c7b68512f1745dc9c755e8755780fe59c78bdffced2b06ea7d19bb74963d121af4cc2e117dd252e02f236c607a58681758f10cd53217b77b5dba4397fa1e1199ad578d24884f6a96fecf30704f3c2ea362b674fdc9d0a0b922fdcf2f7a4fffb4078469"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x459}}, {0x1a, &(0x7f0000001580)=@string={0x1a, 0x3, "99f36b861e96332c9aa06f493bf8b7e1af9a6b64a2725644"}}, {0xd2, &(0x7f00000015c0)=@string={0xd2, 0x3, "8b3888af8cc9067996e800eb1875cf80f98db691aa78f79aa7a679c55bc8bfb216f972b4aed98c89bf6b12dbffb6b7974231f11017aba8304c8b8551382637d5262429e066d07ed2b5bfef0e4b4c701c057df0cbf893220a45280fce6607aa07d42db5ec5fb375d2e0390f68be026c027a6967e62fb37c7037a876cfe1f6debd701d0e5d48b1588e8163a4f09b08f7961347e107239ec61efd577966894fc9e80479696900b6c1cb79f3c4e2a76de65668ee5ae3bdc6b0cdb859da326597cf4a12450dc54600d489501c9a1fd5ff8126"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x448}}, {0x3c, &(0x7f0000001700)=@string={0x3c, 0x3, "9306e1dba8249feb99d12ef4c599f63b21dcc5a39012f0023e0bf31c8067798b0492a3c5517793334a0b4405aec41ce2ed5f6aba7bc6d84538b3"}}, {0xbe, &(0x7f0000001740)=@string={0xbe, 0x3, "3839a29c3a70f464d6247d6ccd0188c0801677efd17f65a9bfae3bbf920b1b924a29eb57a44beb84ec23d6ce0a3bcb61f6d4a77b7e6fa242ba077ca6fcd08f89dfa6cea841ac6391e7b272a8898448579c8f36ca79c49d37a9357b2f22da285109ae42ca95a527d62e1809d2647d2931a21e89227c1625c54a957a38b956cda11d1b31d07d3202826efd9155796af18729fe47ec5a9a0698e887083a5e905b48de21c4346510c5bc93e0889c8dec432dbc1f775b503b138156a58dfd"}}, {0x75, &(0x7f0000001800)=@string={0x75, 0x3, "64e62be8f77dd1ddca44bfc1d94007578b11209d503f61b2058d9d5d06436c481b510031040b6a581a97fcfff1b37e3006614ce65c4b95a5cdf862d12a37148679ec2e9b2aca0306e89a69fcae6589f5f25ca06b6aeb44648b2c01d52d282ba54482d2bd7a67e243b31ac2de283e472cea9834"}}, {0x82, &(0x7f0000001880)=@string={0x82, 0x3, "878e3a707d920f5ebea43c9309a72bf246d0821f92b98f75f81b9d293a391922922b6942312bc11df758f67c90bd0feb580f08b8e2463b2d0965f961d8d718e645c4b102b109ae83db44c0f7a33a4ea5b065f90b6f16bcb06868a1ec82b0f34e6790b45fbe9200558f05f2f32ec7bb85483b7e0c3fc96bb19c243036df792ca3"}}]})
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_tracing={0x1a, 0x10, &(0x7f00000019c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}], &(0x7f0000001a40)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0xc, 0xc5a6, 0xff}, 0x10, 0x16626, 0xffffffffffffffff, 0x3, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x4, 0x5, 0xd}, {0x85d, 0x1, 0x8, 0x1}, {0x2, 0x2, 0x9, 0xb}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001c40)=r5, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c80))
r6 = syz_open_dev$sndpcmp(&(0x7f0000001cc0), 0x88, 0x880)
ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80044121, &(0x7f0000001d00))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000001d40)={'gretap0\x00', {0x2, 0x0, @multicast1}})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000002e80)={{<r8=>r3, &(0x7f0000001d80)='\x00', 0x100, &(0x7f0000001dc0)={@align=0xffff, {0x7fff, 0x6, 0x8, 0x2}}, 0xffff, &(0x7f0000001e00)={@_ha_fsid}, &(0x7f0000001e40)=0x7}, {[0x3, 0xa690000, 0x0, 0x6]}, 0x4, 0x1000, &(0x7f0000001e80)=""/4096})
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000002ec0), 0x3)
r9 = open(&(0x7f0000002f00)='./file0\x00', 0x54000, 0x0)
openat$fb0(0xffffff9c, &(0x7f0000002f40), 0x1, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f0000002f80)={{@any, 0xff}, 0x2, 0x0, 0x48, 0x7ff, 0x1, 0x2, 0x4, 0xe0})
setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000002fc0), 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003000))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r9)
sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x68, r11, 0x48, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x65db, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x4000000)
getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f00000031c0), &(0x7f0000003200)=0x4)

0s ago: executing program 1 (id=4071):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0xffffffffffffff52, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0xfffffffffffffe24, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x50}}, 0x20000801)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
getpriority(0x0, r3)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0x1000)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000012c0)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x6, 0x4, 0xfffffffffffffffd, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0)
ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f00000001c0)={0x30a32c0, 0x1, @ofdm={0x6, 0x1b, 0x12, 0xa, 0x8, 0x8}})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f000081e000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
io_setup(0x2007, &(0x7f0000000980))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000340)=@multiplanar_fd={0x4, 0x3, 0x4, 0x4, 0x4, {0x0, 0xea60}, {0x4, 0x1, 0x25, 0x0, 0x4, 0x33, "1aecab28"}, 0x7, 0x4, {0x0}, 0x4})

kernel console output (not intermixed with test programs):

14.041263][T19912]  dump_stack_lvl+0x100/0x190
[ 1014.041288][T19912]  should_fail_ex.cold+0x5/0xa
[ 1014.041309][T19912]  _copy_from_user+0x2e/0xd0
[ 1014.041334][T19912]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 1014.041362][T19912]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1014.041388][T19912]  ? __local_bh_enable_ip+0x9e/0x120
[ 1014.041408][T19912]  ? lockdep_hardirqs_on+0x78/0x100
[ 1014.041434][T19912]  do_ipv6_setsockopt+0x2aa5/0x43a0
[ 1014.041461][T19912]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1014.041493][T19912]  ? find_held_lock+0x2b/0x80
[ 1014.041523][T19912]  ? __pfx___might_resched+0x10/0x10
[ 1014.041554][T19912]  ? aa_sk_perm+0x309/0xaa0
[ 1014.041579][T19912]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1014.041602][T19912]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1014.041627][T19912]  ? ipv6_setsockopt+0xcb/0x170
[ 1014.041647][T19912]  ipv6_setsockopt+0xcb/0x170
[ 1014.041671][T19912]  udpv6_setsockopt+0x64/0xb0
[ 1014.041697][T19912]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1014.041719][T19912]  do_sock_setsockopt+0xf3/0x1d0
[ 1014.041739][T19912]  __sys_setsockopt+0x119/0x190
[ 1014.041764][T19912]  __ia32_sys_setsockopt+0xbc/0x160
[ 1014.041786][T19912]  ? __do_fast_syscall_32+0x98/0x970
[ 1014.041810][T19912]  ? lockdep_hardirqs_on+0x78/0x100
[ 1014.041830][T19912]  __do_fast_syscall_32+0xe7/0x970
[ 1014.041854][T19912]  ? lockdep_hardirqs_on+0x78/0x100
[ 1014.041878][T19912]  do_fast_syscall_32+0x32/0x70
[ 1014.041902][T19912]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1014.041925][T19912] RIP: 0023:0xf709efec
[ 1014.041946][T19912] Code: Unable to access opcode bytes at 0xf709efc2.
[ 1014.041954][T19912] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[ 1014.041973][T19912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[ 1014.041985][T19912] RDX: 000000000000001b RSI: 0000000080000100 RDI: 0000000000000014
[ 1014.041996][T19912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1014.042007][T19912] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1014.042016][T19912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1014.042038][T19912]  </TASK>
[ 1014.821580][T19922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1014.822422][T19926] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1014.880841][T19930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3716'.
[ 1015.036921][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'.
[ 1015.067885][ T5827] Process accounting resumed
[ 1015.462280][T19940] CIFS: Attempting to mount //127.0.0.1/share
[ 1015.475253][T19940] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1015.478675][T19940] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1016.009936][T19943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.015192][T19943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.286096][T19950] bridge0: port 3(ipvlan2) entered blocking state
[ 1016.288583][T19950] bridge0: port 3(ipvlan2) entered disabled state
[ 1016.293013][T19950] ipvlan2: entered allmulticast mode
[ 1016.294704][T19950] bridge0: entered allmulticast mode
[ 1016.298850][T19950] ipvlan2: left allmulticast mode
[ 1016.300477][T19950] bridge0: left allmulticast mode
[ 1016.321973][T19953] siw: device registration error -23
[ 1016.334956][T19953] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1016.653924][T19960] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1016.706525][   T29] usb 42-1: device descriptor read/8, error -110
[ 1016.744662][T19963] ALSA: mixer_oss: invalid OSS volume 'LIN'
[ 1017.113579][   T29] usb usb42-port1: attempt power cycle
[ 1017.201923][T19976] FAULT_INJECTION: forcing a failure.
[ 1017.201923][T19976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1017.208060][T19976] CPU: 0 UID: 0 PID: 19976 Comm: syz.1.3730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1017.208088][T19976] Tainted: [L]=SOFTLOCKUP
[ 1017.208094][T19976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1017.208105][T19976] Call Trace:
[ 1017.208112][T19976]  <TASK>
[ 1017.208120][T19976]  dump_stack_lvl+0x100/0x190
[ 1017.208146][T19976]  should_fail_ex.cold+0x5/0xa
[ 1017.208168][T19976]  _copy_from_user+0x2e/0xd0
[ 1017.208197][T19976]  __sys_bpf+0x2f5/0x4e80
[ 1017.208215][T19976]  ? __schedule+0x126e/0x6730
[ 1017.208245][T19976]  ? __pfx___sys_bpf+0x10/0x10
[ 1017.208270][T19976]  ? __pfx___schedule+0x10/0x10
[ 1017.208299][T19976]  ? preempt_schedule_common+0x42/0xc0
[ 1017.208326][T19976]  ? vfs_write+0x464/0x1050
[ 1017.208344][T19976]  ? vfs_write+0x471/0x1050
[ 1017.208360][T19976]  ? find_held_lock+0x2b/0x80
[ 1017.208383][T19976]  ? ksys_write+0x190/0x250
[ 1017.208399][T19976]  ? ksys_write+0x190/0x250
[ 1017.208434][T19976]  ? fput+0x79/0x100
[ 1017.208458][T19976]  ? __ia32_sys_bpf+0xcc/0x170
[ 1017.208477][T19976]  __ia32_sys_bpf+0xcc/0x170
[ 1017.208503][T19976]  ? __do_fast_syscall_32+0x98/0x970
[ 1017.208531][T19976]  __do_fast_syscall_32+0xe7/0x970
[ 1017.208556][T19976]  ? lockdep_hardirqs_on+0x78/0x100
[ 1017.208581][T19976]  do_fast_syscall_32+0x32/0x70
[ 1017.208607][T19976]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.208630][T19976] RIP: 0023:0xf706efec
[ 1017.208651][T19976] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1017.208660][T19976] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1017.208679][T19976] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880
[ 1017.208690][T19976] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[ 1017.208701][T19976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1017.208711][T19976] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1017.208721][T19976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1017.208745][T19976]  </TASK>
[ 1017.291461][T19979] CIFS: Attempting to mount //127.0.0.1/share
[ 1017.294628][T19979] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1017.297385][T19979] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1017.738375][   T29] usb usb42-port1: unable to enumerate USB device
[ 1018.586532][T19998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.589939][T19998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1018.593909][T19998] FAULT_INJECTION: forcing a failure.
[ 1018.593909][T19998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1018.599440][T19998] CPU: 3 UID: 0 PID: 19998 Comm: syz.0.3736 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1018.599466][T19998] Tainted: [L]=SOFTLOCKUP
[ 1018.599473][T19998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1018.599484][T19998] Call Trace:
[ 1018.599492][T19998]  <TASK>
[ 1018.599499][T19998]  dump_stack_lvl+0x100/0x190
[ 1018.599525][T19998]  should_fail_ex.cold+0x5/0xa
[ 1018.599546][T19998]  strncpy_from_user+0x3b/0x2d0
[ 1018.599577][T19998]  do_getname+0x78/0x390
[ 1018.599602][T19998]  do_sys_openat2+0xc7/0x1e0
[ 1018.599626][T19998]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1018.599652][T19998]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1018.599683][T19998]  __ia32_compat_sys_openat+0x12d/0x210
[ 1018.599725][T19998]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1018.599749][T19998]  ? fput+0x79/0x100
[ 1018.599769][T19998]  ? ksys_write+0x1ac/0x250
[ 1018.599809][T19998]  ? __pfx_ksys_write+0x10/0x10
[ 1018.599832][T19998]  __do_fast_syscall_32+0xe7/0x970
[ 1018.599855][T19998]  ? lockdep_hardirqs_on+0x78/0x100
[ 1018.599881][T19998]  do_fast_syscall_32+0x32/0x70
[ 1018.599907][T19998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1018.599930][T19998] RIP: 0023:0xf6ffefec
[ 1018.599953][T19998] Code: Unable to access opcode bytes at 0xf6ffefc2.
[ 1018.599961][T19998] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[ 1018.599984][T19998] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600
[ 1018.599996][T19998] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 1018.600007][T19998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1018.600018][T19998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1018.600031][T19998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1018.600056][T19998]  </TASK>
[ 1018.736689][T17292] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[ 1018.905408][T17292] usb 7-1: config 0 has an invalid interface number: 143 but max is 0
[ 1018.908113][T17292] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[ 1018.911219][T17292] usb 7-1: config 0 has no interface number 0
[ 1018.913295][T17292] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30
[ 1018.917242][T17292] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[ 1018.921321][T17292] usb 7-1: config 0 interface 143 has no altsetting 0
[ 1018.924880][T17292] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1018.927905][T17292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.930427][T17292] usb 7-1: Product: syz
[ 1018.931732][T17292] usb 7-1: Manufacturer: syz
[ 1018.933202][T17292] usb 7-1: SerialNumber: syz
[ 1018.936114][T17292] usb 7-1: config 0 descriptor??
[ 1019.145783][T20002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.149765][T17292] usb 7-1: USB disconnect, device number 82
[ 1019.156951][T20002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1019.499432][T20011] CIFS: Attempting to mount //127.0.0.1/share
[ 1019.510148][T20011] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1019.512593][T20011] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1019.596433][T17292] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1019.736474][T14855] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1019.756437][T17292] usb 7-1: Using ep0 maxpacket: 16
[ 1019.760583][T17292] usb 7-1: config 0 has an invalid interface number: 143 but max is 0
[ 1019.763973][T17292] usb 7-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[ 1019.769340][T17292] usb 7-1: config 0 has no interface number 0
[ 1019.771954][T17292] usb 7-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30
[ 1019.776845][T17292] usb 7-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[ 1019.782332][T17292] usb 7-1: config 0 interface 143 has no altsetting 0
[ 1019.789430][T17292] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1019.793167][T17292] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.796605][T17292] usb 7-1: Product: syz
[ 1019.798376][T17292] usb 7-1: Manufacturer: syz
[ 1019.800475][T17292] usb 7-1: SerialNumber: syz
[ 1019.804289][T17292] usb 7-1: config 0 descriptor??
[ 1019.897998][T14855] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1019.901057][T14855] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1019.905040][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1019.909799][T14855] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1019.914745][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1019.919410][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1019.924167][T14855] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1019.929771][T14855] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1019.933731][T14855] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1019.937270][T14855] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1019.941985][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1019.946458][T14855] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1019.951352][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1019.956102][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1019.961179][T14855] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1019.966829][T14855] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1019.970812][T14855] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1019.974185][T14855] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1019.978940][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1019.983423][T14855] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1019.989102][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1019.993722][T14855] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1019.998460][T14855] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1020.003960][T14855] usb 6-1: config 168 interface 0 has no altsetting 0
[ 1020.009878][T14855] usb 6-1: string descriptor 0 read error: -22
[ 1020.013063][T14855] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1020.016939][T14855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.034962][ T1043] IPVS: starting estimator thread 0...
[ 1020.035204][T14855] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1020.048285][T19994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.052448][T19994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.067200][T17292] usb 7-1: USB disconnect, device number 83
[ 1020.136420][T20012] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1020.325132][T20014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3741'.
[ 1020.335380][ T5827] usb 6-1: USB disconnect, device number 67
[ 1020.408691][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'.
[ 1021.176596][   T29] usb 7-1: new full-speed USB device number 84 using dummy_hcd
[ 1021.327680][   T29] usb 7-1: not running at top speed; connect to a high speed hub
[ 1021.332292][   T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.337999][   T29] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1021.341933][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.346856][ T5862] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[ 1021.356169][   T29] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[ 1021.360040][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[ 1021.363078][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[ 1021.367611][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[ 1021.370298][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[ 1021.379660][   T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1021.384161][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[ 1021.387414][   T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[ 1021.391086][   T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1021.517970][ T5862] usb 6-1: not running at top speed; connect to a high speed hub
[ 1021.522081][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.527686][ T5862] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1021.531380][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.542177][ T5862] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[ 1021.548633][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81
[ 1021.551175][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1
[ 1021.555616][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[ 1021.563928][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[ 1021.565387][T20023] FAULT_INJECTION: forcing a failure.
[ 1021.565387][T20023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1021.571030][T20027] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1021.571872][T20023] CPU: 1 UID: 0 PID: 20023 Comm: syz.2.3743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1021.571898][T20023] Tainted: [L]=SOFTLOCKUP
[ 1021.571904][T20023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1021.571916][T20023] Call Trace:
[ 1021.571922][T20023]  <TASK>
[ 1021.571929][T20023]  dump_stack_lvl+0x100/0x190
[ 1021.571955][T20023]  should_fail_ex.cold+0x5/0xa
[ 1021.571975][T20023]  strncpy_from_user+0x3b/0x2d0
[ 1021.572006][T20023]  do_getname+0x78/0x390
[ 1021.572029][T20023]  do_sys_openat2+0xc7/0x1e0
[ 1021.572052][T20023]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1021.572075][T20023]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1021.572106][T20023]  __ia32_compat_sys_openat+0x12d/0x210
[ 1021.572131][T20023]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1021.572173][T20023]  ? fput+0x79/0x100
[ 1021.572193][T20023]  ? ksys_write+0x1ac/0x250
[ 1021.572210][T20023]  ? __pfx_ksys_write+0x10/0x10
[ 1021.572230][T20023]  __do_fast_syscall_32+0xe7/0x970
[ 1021.572255][T20023]  ? lockdep_hardirqs_on+0x78/0x100
[ 1021.572279][T20023]  do_fast_syscall_32+0x32/0x70
[ 1021.572301][T20023]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1021.572325][T20023] RIP: 0023:0xf709efec
[ 1021.572346][T20023] Code: Unable to access opcode bytes at 0xf709efc2.
[ 1021.572353][T20023] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[ 1021.572371][T20023] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600
[ 1021.572382][T20023] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 1021.572391][T20023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1021.572401][T20023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1021.572410][T20023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1021.572426][T20023]  </TASK>
[ 1021.573241][ T5827] usb 7-1: USB disconnect, device number 84
[ 1021.583250][ T5862] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2
[ 1021.592737][ T5827] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1021.601666][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[ 1021.604833][ T5827] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1021.605122][ T5827] keyspan 7-1:1.0: device disconnected
[ 1021.607563][ T5862] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[ 1021.658374][ T5862] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB3
[ 1021.747441][   T50] usb 6-1: USB disconnect, device number 68
[ 1021.754452][   T50] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2
[ 1021.758875][   T50] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3
[ 1021.761805][   T50] keyspan 6-1:1.0: device disconnected
[ 1021.975392][T14772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1021.982619][T14772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1021.986395][T14772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1021.990301][T14772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1021.993050][T14772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1022.106031][T20039] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[ 1022.108835][T20039] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1022.114400][T20039] vhci_hcd vhci_hcd.0: Device attached
[ 1022.223102][T20039] FAULT_INJECTION: forcing a failure.
[ 1022.223102][T20039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1022.257292][T20039] CPU: 1 UID: 0 PID: 20039 Comm: syz.3.3749 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1022.257322][T20039] Tainted: [L]=SOFTLOCKUP
[ 1022.257328][T20039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1022.257337][T20039] Call Trace:
[ 1022.257343][T20039]  <TASK>
[ 1022.257350][T20039]  dump_stack_lvl+0x100/0x190
[ 1022.257377][T20039]  should_fail_ex.cold+0x5/0xa
[ 1022.257395][T20039]  _copy_from_user+0x2e/0xd0
[ 1022.257420][T20039]  __sys_bpf+0x2f5/0x4e80
[ 1022.257438][T20039]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1022.257461][T20039]  ? __pfx___sys_bpf+0x10/0x10
[ 1022.257475][T20039]  ? trace_hrtimer_start+0x77/0x220
[ 1022.257494][T20039]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[ 1022.257519][T20039]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[ 1022.257538][T20039]  ? rcu_is_watching+0x12/0xc0
[ 1022.257559][T20039]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[ 1022.257577][T20039]  ? rcu_is_watching+0x12/0xc0
[ 1022.257594][T20039]  ? trace_sched_exit_tp+0x120/0x160
[ 1022.257613][T20039]  ? __schedule+0x126e/0x6730
[ 1022.257651][T20039]  ? __pfx___schedule+0x10/0x10
[ 1022.257670][T20039]  ? fput+0x79/0x100
[ 1022.257689][T20039]  ? __ia32_sys_bpf+0xcc/0x170
[ 1022.257705][T20039]  __ia32_sys_bpf+0xcc/0x170
[ 1022.257722][T20039]  ? __do_fast_syscall_32+0x98/0x970
[ 1022.257745][T20039]  __do_fast_syscall_32+0xe7/0x970
[ 1022.257767][T20039]  ? lockdep_hardirqs_on+0x78/0x100
[ 1022.257789][T20039]  do_fast_syscall_32+0x32/0x70
[ 1022.257810][T20039]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1022.257830][T20039] RIP: 0023:0xf70aefec
[ 1022.257850][T20039] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1022.257857][T20039] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1022.257875][T20039] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0
[ 1022.257885][T20039] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000
[ 1022.257895][T20039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1022.257904][T20039] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1022.257913][T20039] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1022.257934][T20039]  </TASK>
[ 1022.267272][T20046] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1022.381396][T20046] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1022.560216][ T5827] usb 44-1: SetAddress Request (122) to port 0
[ 1022.564141][ T5827] usb 44-1: new SuperSpeed USB device number 122 using vhci_hcd
[ 1022.708924][T20053] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1022.711614][T20053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1022.751186][T20053] vhci_hcd vhci_hcd.0: Device attached
[ 1023.016413][   T29] usb 40-1: SetAddress Request (60) to port 0
[ 1023.024424][   T29] usb 40-1: new SuperSpeed USB device number 60 using vhci_hcd
[ 1023.025120][T20059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3752'.
[ 1023.120421][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3752'.
[ 1023.356144][T20032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.359484][T20032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.364825][T20032] bridge_slave_0: entered allmulticast mode
[ 1023.369417][T20032] bridge_slave_0: entered promiscuous mode
[ 1023.374635][T20032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.377621][T20032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.380830][T20032] bridge_slave_1: entered allmulticast mode
[ 1023.384769][T20032] bridge_slave_1: entered promiscuous mode
[ 1023.414707][T20032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.419608][T20032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.439211][T20032] team0: Port device team_slave_0 added
[ 1023.442649][T20032] team0: Port device team_slave_1 added
[ 1023.458038][T20032] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1023.460376][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.468487][T20032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1023.473069][T20032] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1023.475315][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1023.483449][T20032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1023.513981][T20032] hsr_slave_0: entered promiscuous mode
[ 1023.518693][T20032] hsr_slave_1: entered promiscuous mode
[ 1023.521108][T20032] debugfs: 'hsr0' already exists in 'hsr'
[ 1023.522980][T20032] Cannot create hsr debugfs directory
[ 1023.595137][T20054] vhci_hcd: connection reset by peer
[ 1023.598313][T19428] vhci_hcd vhci_hcd.1: stop threads
[ 1023.600585][T19428] vhci_hcd vhci_hcd.1: release socket
[ 1023.602304][T19428] vhci_hcd vhci_hcd.1: disconnect device
[ 1023.701990][T20032] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1023.710100][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1023.712822][T20032] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1023.717324][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1023.720203][T20032] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1023.733530][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1023.736575][T20032] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1023.747855][T20032] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1023.767404][T20071] FAULT_INJECTION: forcing a failure.
[ 1023.767404][T20071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1023.772282][T20032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.778270][T20032] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1023.780655][T20032] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.781732][T20071] CPU: 0 UID: 0 PID: 20071 Comm: syz.3.3754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1023.781759][T20071] Tainted: [L]=SOFTLOCKUP
[ 1023.781765][T20071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1023.781775][T20071] Call Trace:
[ 1023.781782][T20071]  <TASK>
[ 1023.781788][T20071]  dump_stack_lvl+0x100/0x190
[ 1023.781810][T20071]  should_fail_ex.cold+0x5/0xa
[ 1023.781829][T20071]  _copy_from_user+0x2e/0xd0
[ 1023.781854][T20071]  get_compat_msghdr+0xb3/0x480
[ 1023.781872][T20071]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1023.781891][T20071]  ? __lock_acquire+0x49f/0x1a40
[ 1023.781920][T20071]  ___sys_recvmsg+0x193/0x1a0
[ 1023.781940][T20071]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1023.781976][T20071]  do_recvmmsg+0x54d/0x740
[ 1023.781997][T20071]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1023.782017][T20071]  ? find_held_lock+0x2b/0x80
[ 1023.782036][T20071]  ? ksys_write+0x190/0x250
[ 1023.782052][T20071]  ? ksys_write+0x190/0x250
[ 1023.782073][T20071]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1023.782100][T20071]  __sys_recvmmsg+0x21f/0x270
[ 1023.782125][T20071]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 1023.782149][T20071]  ? ksys_write+0x1ac/0x250
[ 1023.782166][T20071]  __ia32_compat_sys_recvmmsg_time32+0xc4/0x160
[ 1023.782184][T20071]  ? __do_fast_syscall_32+0x98/0x970
[ 1023.782206][T20071]  ? lockdep_hardirqs_on+0x78/0x100
[ 1023.782226][T20071]  __do_fast_syscall_32+0xe7/0x970
[ 1023.782248][T20071]  ? lockdep_hardirqs_on+0x78/0x100
[ 1023.782270][T20071]  do_fast_syscall_32+0x32/0x70
[ 1023.782292][T20071]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1023.782312][T20071] RIP: 0023:0xf70aefec
[ 1023.782331][T20071] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1023.782339][T20071] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151
[ 1023.782375][T20071] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800047c0
[ 1023.782385][T20071] RDX: 0000000000000001 RSI: 0000000060002000 RDI: 0000000000000000
[ 1023.782395][T20071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1023.782404][T20071] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1023.782414][T20071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1023.782435][T20071]  </TASK>
[ 1023.851717][T20032] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1023.905644][T20032] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1023.925639][T15763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.938995][T15763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.989447][T20032] 8021q: adding VLAN 0 to HW filter on device team0
[ 1023.999589][T15763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1024.002589][T15763] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1024.036734][T15763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1024.039664][T15763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1024.066665][T14772] Bluetooth: hci1: command tx timeout
[ 1024.210454][T20041] vhci_hcd: connection reset by peer
[ 1024.212682][ T8096] vhci_hcd vhci_hcd.3: stop threads
[ 1024.213032][T20082] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1024.219003][ T8096] vhci_hcd vhci_hcd.3: release socket
[ 1024.225538][ T8096] vhci_hcd vhci_hcd.3: disconnect device
[ 1024.240906][T20082] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1024.250222][T20082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3756'.
[ 1024.427252][T20086] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1024.734851][T20091] bridge0: port 3(ipvlan1) entered blocking state
[ 1024.737776][T20091] bridge0: port 3(ipvlan1) entered disabled state
[ 1024.740144][T20091] ipvlan1: entered allmulticast mode
[ 1024.742022][T20091] bridge0: entered allmulticast mode
[ 1024.744830][T20091] ipvlan1: left allmulticast mode
[ 1024.748058][T20091] bridge0: left allmulticast mode
[ 1024.853145][T20091] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1025.025583][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1025.145056][T20111] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1025.211268][T20117] FAULT_INJECTION: forcing a failure.
[ 1025.211268][T20117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1025.217701][T20117] CPU: 1 UID: 0 PID: 20117 Comm: syz.1.3762 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1025.217728][T20117] Tainted: [L]=SOFTLOCKUP
[ 1025.217735][T20117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1025.217745][T20117] Call Trace:
[ 1025.217752][T20117]  <TASK>
[ 1025.217759][T20117]  dump_stack_lvl+0x100/0x190
[ 1025.217785][T20117]  should_fail_ex.cold+0x5/0xa
[ 1025.217804][T20117]  _copy_from_user+0x2e/0xd0
[ 1025.217831][T20117]  snd_info_text_entry_write+0x20e/0x4f0
[ 1025.217855][T20117]  ? __pfx_snd_info_text_entry_write+0x10/0x10
[ 1025.217874][T20117]  proc_reg_write+0x240/0x330
[ 1025.217894][T20117]  vfs_write+0x2aa/0x1050
[ 1025.217912][T20117]  ? __pfx_proc_reg_write+0x10/0x10
[ 1025.217935][T20117]  ? __pfx_vfs_write+0x10/0x10
[ 1025.217950][T20117]  ? find_held_lock+0x2b/0x80
[ 1025.217970][T20117]  ? __fget_files+0x215/0x3d0
[ 1025.217990][T20117]  ? __fget_files+0x21f/0x3d0
[ 1025.218013][T20117]  ksys_write+0x12a/0x250
[ 1025.218028][T20117]  ? __pfx_ksys_write+0x10/0x10
[ 1025.218042][T20117]  ? ksys_write+0x1ac/0x250
[ 1025.218057][T20117]  ? __pfx_ksys_write+0x10/0x10
[ 1025.218078][T20117]  __do_fast_syscall_32+0xe7/0x970
[ 1025.218102][T20117]  ? lockdep_hardirqs_on+0x78/0x100
[ 1025.218126][T20117]  do_fast_syscall_32+0x32/0x70
[ 1025.218149][T20117]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1025.218170][T20117] RIP: 0023:0xf706efec
[ 1025.218189][T20117] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1025.218196][T20117] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[ 1025.218213][T20117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1025.218224][T20117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1025.218233][T20117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1025.218243][T20117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1025.218253][T20117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1025.218276][T20117]  </TASK>
[ 1025.228056][T20032] veth0_vlan: entered promiscuous mode
[ 1025.311049][T20032] veth1_vlan: entered promiscuous mode
[ 1025.334477][T20032] veth0_macvtap: entered promiscuous mode
[ 1025.341013][T20032] veth1_macvtap: entered promiscuous mode
[ 1025.358427][T20032] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1025.365251][T20032] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1025.436388][ T5947] usb 7-1: new full-speed USB device number 85 using dummy_hcd
[ 1025.487295][T19428] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.542569][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.543324][T20120] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1025.547623][T20120] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1025.551385][T11088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.552548][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.557602][T11088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.569939][T20120] vhci_hcd vhci_hcd.0: Device attached
[ 1025.585634][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.589318][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.597521][ T5947] usb 7-1: not running at top speed; connect to a high speed hub
[ 1025.604824][ T5947] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.610140][T11088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.611028][ T5947] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1025.619849][ T5947] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1025.629181][ T5947] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1025.635551][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.653477][ T5947] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[ 1025.662484][ T5947] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[ 1025.669859][ T5947] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[ 1025.689283][ T5947] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1025.715587][ T5947] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[ 1025.719085][ T5947] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[ 1025.725929][ T5947] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1025.850097][T20115] FAULT_INJECTION: forcing a failure.
[ 1025.850097][T20115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1025.854934][T20115] CPU: 2 UID: 0 PID: 20115 Comm: syz.2.3761 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1025.854960][T20115] Tainted: [L]=SOFTLOCKUP
[ 1025.854966][T20115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1025.854976][T20115] Call Trace:
[ 1025.854982][T20115]  <TASK>
[ 1025.854989][T20115]  dump_stack_lvl+0x100/0x190
[ 1025.855013][T20115]  should_fail_ex.cold+0x5/0xa
[ 1025.855033][T20115]  strncpy_from_user+0x3b/0x2d0
[ 1025.855060][T20115]  do_getname+0x78/0x390
[ 1025.855084][T20115]  do_sys_openat2+0xc7/0x1e0
[ 1025.855107][T20115]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1025.855131][T20115]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1025.855159][T20115]  __ia32_compat_sys_openat+0x12d/0x210
[ 1025.855184][T20115]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1025.855207][T20115]  ? fput+0x79/0x100
[ 1025.855225][T20115]  ? ksys_write+0x1ac/0x250
[ 1025.855237][T20115]  ? __pfx_ksys_write+0x10/0x10
[ 1025.855258][T20115]  __do_fast_syscall_32+0xe7/0x970
[ 1025.855281][T20115]  ? lockdep_hardirqs_on+0x78/0x100
[ 1025.855305][T20115]  do_fast_syscall_32+0x32/0x70
[ 1025.855325][T20115]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1025.855346][T20115] RIP: 0023:0xf709efec
[ 1025.855366][T20115] Code: Unable to access opcode bytes at 0xf709efc2.
[ 1025.855373][T20115] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[ 1025.855390][T20115] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600
[ 1025.855400][T20115] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[ 1025.855407][T20115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1025.855413][T20115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1025.855421][T20115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1025.855443][T20115]  </TASK>
[ 1025.856187][T17292] usb 7-1: USB disconnect, device number 85
[ 1025.930063][T17292] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1025.953282][T17292] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1025.958919][T17292] keyspan 7-1:1.0: device disconnected
[ 1026.156441][T14772] Bluetooth: hci1: command tx timeout
[ 1026.186390][ T5947] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[ 1026.204718][T20122] vhci_hcd: connection closed
[ 1026.204926][T19344] vhci_hcd vhci_hcd.1: stop threads
[ 1026.209722][T19344] vhci_hcd vhci_hcd.1: release socket
[ 1026.212186][T19344] vhci_hcd vhci_hcd.1: disconnect device
[ 1026.338107][ T5947] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1026.340805][ T5947] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1026.345284][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1026.350031][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1026.355101][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1026.360528][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1026.364961][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1026.370893][ T5947] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1026.374838][ T5947] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1026.378568][ T5947] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1026.383172][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1026.388039][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1026.397169][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1026.406217][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1026.411075][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1026.415424][ T5947] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1026.419118][ T5947] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1026.422236][ T5947] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1026.427129][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1026.431109][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1026.434814][T20131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3765'.
[ 1026.435336][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1026.443106][ T5947] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1026.447682][ T5947] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1026.452371][ T5947] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1026.457523][ T5947] usb 9-1: string descriptor 0 read error: -22
[ 1026.460386][ T5947] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1026.464584][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.478281][ T5947] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1026.499773][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'.
[ 1026.779237][ T5947] usb 9-1: USB disconnect, device number 2
[ 1027.211877][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'.
[ 1027.230334][T20137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.304415][T20137] bridge_slave_1 (unregistering): left allmulticast mode
[ 1027.308781][T20137] bridge_slave_1 (unregistering): left promiscuous mode
[ 1027.311887][T20137] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.337873][T20140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3767'.
[ 1027.662784][T20142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[ 1027.665446][T20142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1027.669740][ T5827] usb 44-1: device descriptor read/8, error -110
[ 1027.675215][T20142] vhci_hcd vhci_hcd.0: Device attached
[ 1027.715812][T17140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1027.719288][T17140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1027.771273][T20142] erofs (device sr0): cannot find valid erofs superblock
[ 1027.794114][T20147] bridge0: port 3(ipvlan1) entered blocking state
[ 1027.798486][T20147] bridge0: port 3(ipvlan1) entered disabled state
[ 1027.800979][T20147] ipvlan1: entered allmulticast mode
[ 1027.802897][T20147] bridge0: entered allmulticast mode
[ 1027.806543][T20147] ipvlan1: left allmulticast mode
[ 1027.808680][T20147] bridge0: left allmulticast mode
[ 1027.841839][T20149] siw: device registration error -23
[ 1027.898471][T20151] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1027.936517][ T8012] usb 42-1: SetAddress Request (28) to port 0
[ 1027.941511][ T8012] usb 42-1: new SuperSpeed USB device number 28 using vhci_hcd
[ 1028.031893][ T5862] libceph: connect (1)[c::]:6789 error -101
[ 1028.034287][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[ 1028.057053][ T5827] usb usb44-port1: attempt power cycle
[ 1028.066631][   T29] usb 40-1: device descriptor read/8, error -110
[ 1028.075422][T20156] ceph: No mds server is up or the cluster is laggy
[ 1028.097455][T20159] CIFS: Attempting to mount //127.0.0.1/share
[ 1028.111819][T20159] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1028.115045][T20159] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1028.233973][T20143] vhci_hcd: connection reset by peer
[ 1028.237834][T19344] vhci_hcd vhci_hcd.2: stop threads
[ 1028.241964][T19344] vhci_hcd vhci_hcd.2: release socket
[ 1028.244536][T14772] Bluetooth: hci1: command tx timeout
[ 1028.245272][T19344] vhci_hcd vhci_hcd.2: disconnect device
[ 1028.456907][   T29] usb usb40-port1: attempt power cycle
[ 1028.506358][ T5897] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1028.616891][ T5827] usb usb44-port1: unable to enumerate USB device
[ 1028.658179][ T5897] usb 6-1: config 0 has no interfaces?
[ 1028.663788][ T5897] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1028.667932][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1028.671677][ T5897] usb 6-1: Product: syz
[ 1028.673668][ T5897] usb 6-1: Manufacturer: syz
[ 1028.675662][ T5897] usb 6-1: SerialNumber: syz
[ 1028.683825][ T5897] usb 6-1: config 0 descriptor??
[ 1028.824755][T20166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3775'.
[ 1028.900985][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'.
[ 1028.993194][T20164] Invalid ELF header type: 3 != 1
[ 1029.041920][   T29] usb usb40-port1: unable to enumerate USB device
[ 1029.082014][T14855] usb 6-1: USB disconnect, device number 69
[ 1029.426749][ T1043] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[ 1029.578760][ T1043] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1029.582052][ T1043] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1029.586951][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1029.590648][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1029.594501][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1029.598887][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1029.602527][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1029.606980][ T1043] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1029.610626][ T1043] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1029.613018][ T1043] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1029.616414][T14855] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1029.616741][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1029.623329][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1029.627388][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1029.631021][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1029.634698][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1029.639941][ T1043] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1029.644443][ T1043] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1029.647192][ T1043] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1029.651680][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1029.655458][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1029.660352][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1029.664241][ T1043] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1029.669398][ T1043] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1029.674504][ T1043] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1029.681996][ T1043] usb 9-1: string descriptor 0 read error: -22
[ 1029.684378][ T1043] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1029.688096][ T1043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.704966][ T1043] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1029.788203][T14855] usb 6-1: config 0 has no interfaces?
[ 1029.793183][T14855] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1029.806350][T14855] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1029.810409][T14855] usb 6-1: Product: syz
[ 1029.812289][T14855] usb 6-1: Manufacturer: syz
[ 1029.814546][T14855] usb 6-1: SerialNumber: syz
[ 1029.828647][T14855] usb 6-1: config 0 descriptor??
[ 1030.007395][ T5897] usb 9-1: USB disconnect, device number 3
[ 1030.316481][T14772] Bluetooth: hci1: command tx timeout
[ 1030.523466][T20182] MTD: Couldn't look up './dev/mtdblock0': -2
[ 1032.033892][  T845] usb 6-1: USB disconnect, device number 70
[ 1032.166203][T20198] CIFS: Attempting to mount //127.0.0.1/share
[ 1032.177746][T20198] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1032.180280][T20198] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1032.430232][ T5947] libceph: connect (1)[c::]:6789 error -101
[ 1032.432218][ T5947] libceph: mon0 (1)[c::]:6789 connect error
[ 1032.435203][T20199] ceph: No mds server is up or the cluster is laggy
[ 1032.439064][ T5947] libceph: connect (1)[c::]:6789 error -101
[ 1032.441111][ T5947] libceph: mon0 (1)[c::]:6789 connect error
[ 1032.700335][ T5947] libceph: connect (1)[c::]:6789 error -101
[ 1032.707223][ T5947] libceph: mon0 (1)[c::]:6789 connect error
[ 1032.888507][T20204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3786'.
[ 1032.979228][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'.
[ 1033.027110][ T8012] usb 42-1: device descriptor read/8, error -110
[ 1033.377984][T20216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1033.520478][ T8012] usb usb42-port1: attempt power cycle
[ 1033.852226][ T5897] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[ 1033.905563][T20221] openvswitch: netlink: IP tunnel dst address not specified
[ 1033.908349][T20221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1034.406362][T14855] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[ 1034.558755][T14855] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 1034.562077][T14855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.568694][T14855] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1034.572371][T14855] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1034.575541][T14855] usb 7-1: Product: syz
[ 1034.577442][T14855] usb 7-1: Manufacturer: syz
[ 1034.579630][T14855] usb 7-1: SerialNumber: syz
[ 1034.587256][T14855] usb 7-1: config 0 descriptor??
[ 1034.592824][T14855] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1034.595732][T14855] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1034.628777][T14855] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1034.658837][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1034.674415][ T5897] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1034.712764][ T5897] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1034.725312][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1034.728818][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1034.732839][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1034.737575][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1034.740927][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1034.744769][ T5897] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1034.748740][ T5897] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1034.751007][ T5897] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1034.754267][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1034.758161][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1034.761682][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1034.764942][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1034.768400][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1034.772332][ T5897] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1034.775097][ T5897] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1034.778226][ T5897] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1034.783525][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1034.796800][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1034.800268][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1034.803676][ T5897] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1034.807947][ T5897] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1034.811839][ T5897] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1034.816382][ T5897] usb 9-1: string descriptor 0 read error: -22
[ 1034.818742][ T5897] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1034.821767][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.828460][T20223] Invalid ELF header type: 3 != 1
[ 1034.838072][ T5897] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1034.937317][ T8012] usb usb42-port1: unable to enumerate USB device
[ 1034.966591][ T5947] usb 7-1: USB disconnect, device number 86
[ 1035.146926][ T1043] usb 9-1: USB disconnect, device number 4
[ 1035.296096][T14855] libceph: connect (1)[c::]:6789 error -101
[ 1035.298253][ T5947] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[ 1035.300670][T14855] libceph: mon0 (1)[c::]:6789 connect error
[ 1035.342952][T20239] ceph: No mds server is up or the cluster is laggy
[ 1035.458040][ T5947] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 1035.461433][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1035.468486][ T5947] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1035.471816][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1035.475282][ T5947] usb 7-1: Product: syz
[ 1035.477230][ T5947] usb 7-1: Manufacturer: syz
[ 1035.479009][ T5947] usb 7-1: SerialNumber: syz
[ 1035.484743][ T5947] usb 7-1: config 0 descriptor??
[ 1035.491505][ T5947] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1035.495086][ T5947] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1035.536172][ T5947] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1035.557685][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1035.856915][ T5947] usb 7-1: USB disconnect, device number 87
[ 1035.980655][T20248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3799'.
[ 1036.018373][T20249] CIFS: Attempting to mount //127.0.0.1/share
[ 1036.023766][T20249] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1036.028497][T20249] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1036.042640][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'.
[ 1036.831887][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'.
[ 1036.976441][T20257] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1036.980871][T20257] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1036.985350][T20257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3801'.
[ 1037.676619][T20264] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1037.680695][T20264] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1037.686456][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3804'.
[ 1038.185476][T20273] CIFS: Attempting to mount //127.0.0.1/share
[ 1038.202893][T20268] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1038.203269][T20273] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1038.211370][T20273] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1039.002348][T20281] bridge0: port 3(ipvlan1) entered blocking state
[ 1039.005254][T20281] bridge0: port 3(ipvlan1) entered disabled state
[ 1039.008523][T20281] ipvlan1: entered allmulticast mode
[ 1039.010735][T20281] bridge0: entered allmulticast mode
[ 1039.023368][T20281] ipvlan1: left allmulticast mode
[ 1039.025782][T20281] bridge0: left allmulticast mode
[ 1039.047311][T20282] siw: device registration error -23
[ 1039.325515][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'.
[ 1039.664589][T20299] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1039.670398][T20299] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1039.673792][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3815'.
[ 1039.698947][T20298] nfs: Unknown parameter '})+%-)'
[ 1039.792086][T20301] CIFS: Attempting to mount //127.0.0.1/share
[ 1039.796455][T20301] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1039.799528][T20301] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1039.938165][T20307] bridge0: port 3(ipvlan2) entered blocking state
[ 1039.940302][T20307] bridge0: port 3(ipvlan2) entered disabled state
[ 1039.942395][T20307] ipvlan2: entered allmulticast mode
[ 1039.944065][T20307] bridge0: entered allmulticast mode
[ 1039.947334][T20307] ipvlan2: left allmulticast mode
[ 1039.949173][T20307] bridge0: left allmulticast mode
[ 1039.985274][T20309] siw: device registration error -23
[ 1040.274073][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3821'.
[ 1040.445464][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'.
[ 1040.518341][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'.
[ 1041.440898][T20329] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1041.445178][T20329] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1041.453346][T20329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'.
[ 1042.252438][T20344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1042.315672][T20349] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1042.559606][T20359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3831'.
[ 1042.575763][T20361] CIFS: Attempting to mount //127.0.0.1/share
[ 1042.583984][T20361] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1042.586453][T20361] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1043.314713][T20362] CIFS: Attempting to mount //127.0.0.1/share
[ 1043.318008][T20362] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1043.320367][T20362] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1043.756416][ T5947] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[ 1043.838017][T20377] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[ 1043.840278][T20377] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1043.846249][T20377] vhci_hcd vhci_hcd.0: Device attached
[ 1043.886849][T14855] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[ 1043.889471][T20377] FAULT_INJECTION: forcing a failure.
[ 1043.889471][T20377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1043.898508][T20377] CPU: 1 UID: 0 PID: 20377 Comm: syz.3.3837 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1043.898536][T20377] Tainted: [L]=SOFTLOCKUP
[ 1043.898542][T20377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1043.898553][T20377] Call Trace:
[ 1043.898560][T20377]  <TASK>
[ 1043.898567][T20377]  dump_stack_lvl+0x100/0x190
[ 1043.898592][T20377]  should_fail_ex.cold+0x5/0xa
[ 1043.898631][T20377]  _copy_from_user+0x2e/0xd0
[ 1043.898662][T20377]  kstrtouint_from_user+0xd6/0x1d0
[ 1043.898685][T20377]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1043.898707][T20377]  ? __lock_acquire+0x49f/0x1a40
[ 1043.898746][T20377]  proc_fail_nth_write+0x83/0x220
[ 1043.898772][T20377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1043.898804][T20377]  vfs_write+0x2aa/0x1050
[ 1043.898823][T20377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1043.898850][T20377]  ? __pfx_vfs_write+0x10/0x10
[ 1043.898865][T20377]  ? find_held_lock+0x2b/0x80
[ 1043.898886][T20377]  ? __fget_files+0x215/0x3d0
[ 1043.898910][T20377]  ? __fget_files+0x21f/0x3d0
[ 1043.898935][T20377]  ksys_write+0x12a/0x250
[ 1043.898952][T20377]  ? __pfx_ksys_write+0x10/0x10
[ 1043.898974][T20377]  do_int80_emulation+0x14b/0x720
[ 1043.899004][T20377]  asm_int80_emulation+0x1a/0x20
[ 1043.899022][T20377] RIP: 0023:0xf71e74eb
[ 1043.899037][T20377] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1043.899056][T20377] RSP: 002b:00000000f545b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1043.899074][T20377] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f545b5d0
[ 1043.899087][T20377] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1043.899096][T20377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1043.899107][T20377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1043.899118][T20377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1043.899142][T20377]  </TASK>
[ 1043.908647][ T5947] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.976146][ T5947] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1043.979222][ T5947] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1043.985075][ T5947] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1043.993754][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.997099][ T5947] usb 6-1: Product: syz
[ 1043.998445][ T5947] usb 6-1: Manufacturer: syz
[ 1043.999957][ T5947] usb 6-1: SerialNumber: syz
[ 1044.013381][ T5947] cdc_mbim 6-1:1.0: skipping garbage
[ 1044.015222][ T5947] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found
[ 1044.015313][T20383] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3839'.
[ 1044.017482][ T5947] cdc_mbim 6-1:1.0: bind() failure
[ 1044.058564][T14855] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 1044.061499][T14855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.067373][T14855] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1044.070271][T14855] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1044.072881][T14855] usb 7-1: Product: syz
[ 1044.074205][T14855] usb 7-1: Manufacturer: syz
[ 1044.076227][T14855] usb 7-1: SerialNumber: syz
[ 1044.080506][T14855] usb 7-1: config 0 descriptor??
[ 1044.083632][T14855] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1044.085625][T14855] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1044.108310][T14855] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1044.121167][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1044.130525][ T5897] usb 44-1: SetAddress Request (126) to port 0
[ 1044.135007][T20378] vhci_hcd: connection closed
[ 1044.135207][T11088] vhci_hcd vhci_hcd.3: stop threads
[ 1044.138820][T11088] vhci_hcd vhci_hcd.3: release socket
[ 1044.140733][T11088] vhci_hcd vhci_hcd.3: disconnect device
[ 1044.146514][ T5897] usb 44-1: new SuperSpeed USB device number 126 using vhci_hcd
[ 1044.176782][ T5897] usb 44-1: enqueue for inactive port 0
[ 1044.293176][T20371] Invalid ELF header type: 3 != 1
[ 1044.406640][ T1043] usb 7-1: USB disconnect, device number 88
[ 1044.431897][ T1043] usb 6-1: USB disconnect, device number 71
[ 1044.577025][ T5897] usb usb44-port1: attempt power cycle
[ 1044.590977][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3843'.
[ 1044.607949][T20394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.736506][T14855] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1044.812439][T20394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.898311][T20394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1044.907794][T14855] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 1044.912745][T14855] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.918867][T14855] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1044.921923][T14855] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1044.924512][T14855] usb 7-1: Product: syz
[ 1044.928143][T14855] usb 7-1: Manufacturer: syz
[ 1044.929684][T14855] usb 7-1: SerialNumber: syz
[ 1044.938603][T14855] usb 7-1: config 0 descriptor??
[ 1044.944059][T14855] hub 7-1:0.0: bad descriptor, ignoring hub
[ 1044.946394][T14855] hub 7-1:0.0: probe with driver hub failed with error -5
[ 1044.990075][T14855] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1045.004182][T20394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.025226][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1045.326970][T14855] usb 7-1: USB disconnect, device number 89
[ 1045.353537][T20400] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3844'.
[ 1045.386742][T19427] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.390993][T19427] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.496756][T19427] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.499906][T19427] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.863347][T20410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3848'.
[ 1045.939051][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'.
[ 1046.364262][ T5897] usb usb44-port1: unable to enumerate USB device
[ 1046.623481][T20415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.626559][T20415] bridge0: port 2(bridge_slave_1) entered listening state
[ 1046.629725][T20415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.632702][T20415] bridge0: port 1(bridge_slave_0) entered listening state
[ 1046.742271][T20415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.766185][T20415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.787541][T20420] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[ 1046.901013][T20415] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1046.916841][T20415] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1046.919449][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'.
[ 1046.941369][T20415] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1046.955824][T20415] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1046.974460][T20415] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1046.991419][T20415] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1047.019961][T20415] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1047.034047][T20415] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1047.059031][T20415] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1047.075111][T20415] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1047.317536][T14772] Bluetooth: hci4: unexpected event for opcode 0x2041
[ 1047.335779][T20426] UDC core: g1: couldn't find an available UDC or it's busy
[ 1047.896732][ T5862] libceph: connect (1)[c::]:6789 error -101
[ 1047.899743][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[ 1047.949645][T20438] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1047.951956][T20438] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[ 1047.954635][T20431] ceph: No mds server is up or the cluster is laggy
[ 1048.063972][T20440] md: loop0 has zero or unknown size, marking faulty!
[ 1048.069864][T20440] md: md_import_device returned -22
[ 1048.188416][T20441] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[ 1048.192988][T20441] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[ 1048.211270][T20441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3856'.
[ 1048.376014][T20446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1048.381922][T20446] block device autoloading is deprecated and will be removed.
[ 1048.440828][T20445] vicodec vicodec.0: Removing vicodec
[ 1048.859325][T20449] CIFS: Attempting to mount //127.0.0.1/share
[ 1048.874046][T20449] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1048.877272][T20449] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1049.172246][T20453] afs: Unknown parameter 'fowner>00000000000000000000'
[ 1049.175519][T20453] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind()
[ 1049.272607][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1049.290932][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1049.326680][T20454] ceph: No mds server is up or the cluster is laggy
[ 1049.848219][T20475] fuse: Bad value for 'user_id'
[ 1049.850959][T20475] fuse: Bad value for 'user_id'
[ 1049.857206][T20475] fuse: Unknown parameter 'root��X"7	jP���Wm
de'
[ 1049.861471][T20475] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1050.026228][T20484] loop5: detected capacity change from 0 to 4095
[ 1050.149947][T20491] CIFS: Attempting to mount //127.0.0.1/share
[ 1050.160732][T20491] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1050.162585][ T5947] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1050.163222][T20491] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1050.175586][ T5947] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1050.274072][T20484] buffer_io_error: 8 callbacks suppressed
[ 1050.274086][T20484] Buffer I/O error on dev loop5, logical block 511, async page read
[ 1050.287041][T11815] Buffer I/O error on dev loop5, logical block 511, async page read
[ 1050.308483][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1050.314571][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1050.319608][T20492] ceph: No mds server is up or the cluster is laggy
[ 1050.442828][ T5947] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1050.589250][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1050.592867][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1050.921870][T20488] ceph: No mds server is up or the cluster is laggy
[ 1050.971547][ T5947] libceph: mon0 (1)127.0.0.1:12345 socket error on write
[ 1051.091708][T20504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3876'.
[ 1051.152646][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'.
[ 1051.831817][T20524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1052.115485][ T1162] nvmet: connect request for invalid subsystem tes.nqn!
[ 1052.118500][T20527] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes.nqn"
[ 1052.396835][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'.
[ 1053.046933][T20564] CIFS: Attempting to mount //127.0.0.1/share
[ 1053.049788][T20564] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1053.052121][T20564] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1053.164894][T20571] CIFS: Attempting to mount //127.0.0.1/share
[ 1053.171422][T20571] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1053.174705][T20571] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1053.908124][ T1442] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.960785][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'.
[ 1054.289196][T20599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1054.660449][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1054.666217][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1054.716742][ T5862] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1054.869897][ T5862] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[ 1054.874713][ T5862] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1054.882793][ T5862] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1054.887813][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1054.891498][ T5862] usb 9-1: Product: syz
[ 1054.893354][ T5862] usb 9-1: Manufacturer: syz
[ 1054.895452][ T5862] usb 9-1: SerialNumber: syz
[ 1054.903415][ T5862] usb 9-1: config 0 descriptor??
[ 1054.919370][ T5862] usb 9-1: selecting invalid altsetting 0
[ 1054.929548][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1054.933322][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1055.079492][T20624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1055.305628][T14855] usb 9-1: USB disconnect, device number 5
[ 1055.342005][   T30] blk_print_req_error: 8 callbacks suppressed
[ 1055.342018][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.347251][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.350288][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.353330][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.356476][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.359817][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.359860][T20614] ceph: No mds server is up or the cluster is laggy
[ 1055.364800][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.368761][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.372459][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.375451][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.378414][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.381430][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.384023][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.387462][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.393049][   T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.396093][   T30] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.400956][T20637] ldm_validate_partition_table(): Disk read failed.
[ 1055.407847][ T5923] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.411097][ T5923] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.415127][ T5923] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1055.418495][ T5923] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1055.421222][T20637] Dev nbd2: unable to read RDB block 0
[ 1055.425175][T20637]  nbd2: unable to read partition table
[ 1055.447013][  T845] libceph: connect (1)[c::]:6789 error -101
[ 1055.452299][  T845] libceph: mon0 (1)[c::]:6789 connect error
[ 1055.561827][T20645] siw: device registration error -23
[ 1055.633705][T20647] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1055.846750][ T5862] usb 6-1: new low-speed USB device number 72 using dummy_hcd
[ 1055.939086][T20656] siw: device registration error -23
[ 1055.996422][ T5862] usb 6-1: device descriptor read/64, error -71
[ 1056.001537][T20658] siw: device registration error -23
[ 1056.011881][T20659] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1056.127726][T20663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1056.256618][ T5862] usb 6-1: new low-speed USB device number 73 using dummy_hcd
[ 1056.381505][ T5898] libceph: connect (1)[c::]:6789 error -101
[ 1056.385939][ T5898] libceph: mon0 (1)[c::]:6789 connect error
[ 1056.390569][ T5862] usb 6-1: device descriptor read/64, error -71
[ 1056.462701][T20672] netlink: 'syz.3.3919': attribute type 13 has an invalid length.
[ 1056.497414][ T5862] usb usb6-port1: attempt power cycle
[ 1056.584724][T20680] geneve2: entered promiscuous mode
[ 1056.587378][T20680] geneve2: entered allmulticast mode
[ 1056.646654][ T5898] libceph: connect (1)[c::]:6789 error -101
[ 1056.649839][ T5898] libceph: mon0 (1)[c::]:6789 connect error
[ 1056.896449][ T5862] usb 6-1: new low-speed USB device number 74 using dummy_hcd
[ 1057.123247][T20670] ceph: No mds server is up or the cluster is laggy
[ 1057.225815][T20695] overlayfs: failed to resolve './file1': -2
[ 1057.512778][T20705] FAULT_INJECTION: forcing a failure.
[ 1057.512778][T20705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.517446][ T5862] usb 6-1: device descriptor read/8, error -71
[ 1057.519997][T20705] CPU: 1 UID: 0 PID: 20705 Comm: syz.2.3926 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1057.520028][T20705] Tainted: [L]=SOFTLOCKUP
[ 1057.520032][T20705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1057.520039][T20705] Call Trace:
[ 1057.520044][T20705]  <TASK>
[ 1057.520049][T20705]  dump_stack_lvl+0x100/0x190
[ 1057.520066][T20705]  should_fail_ex.cold+0x5/0xa
[ 1057.520081][T20705]  _copy_from_user+0x2e/0xd0
[ 1057.520100][T20705]  copy_from_sockptr_offset.constprop.0+0x153/0x1a0
[ 1057.520118][T20705]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[ 1057.520136][T20705]  ? __local_bh_enable_ip+0x9e/0x120
[ 1057.520149][T20705]  ? lockdep_hardirqs_on+0x78/0x100
[ 1057.520168][T20705]  do_ipv6_setsockopt+0x2aa5/0x43a0
[ 1057.520187][T20705]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1057.520208][T20705]  ? find_held_lock+0x2b/0x80
[ 1057.520228][T20705]  ? __pfx___might_resched+0x10/0x10
[ 1057.520249][T20705]  ? aa_sk_perm+0x309/0xaa0
[ 1057.520265][T20705]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1057.520281][T20705]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1057.520298][T20705]  ? ipv6_setsockopt+0xcb/0x170
[ 1057.520312][T20705]  ipv6_setsockopt+0xcb/0x170
[ 1057.520329][T20705]  udpv6_setsockopt+0x64/0xb0
[ 1057.520347][T20705]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1057.520361][T20705]  do_sock_setsockopt+0xf3/0x1d0
[ 1057.520374][T20705]  __sys_setsockopt+0x119/0x190
[ 1057.520396][T20705]  __ia32_sys_setsockopt+0xbc/0x160
[ 1057.520411][T20705]  ? __do_fast_syscall_32+0x98/0x970
[ 1057.520427][T20705]  ? lockdep_hardirqs_on+0x78/0x100
[ 1057.520442][T20705]  __do_fast_syscall_32+0xe7/0x970
[ 1057.520457][T20705]  ? lockdep_hardirqs_on+0x78/0x100
[ 1057.520473][T20705]  do_fast_syscall_32+0x32/0x70
[ 1057.520490][T20705]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1057.520504][T20705] RIP: 0023:0xf709efec
[ 1057.520519][T20705] Code: Unable to access opcode bytes at 0xf709efc2.
[ 1057.520524][T20705] RSP: 002b:00000000f544b50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[ 1057.520536][T20705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[ 1057.520543][T20705] RDX: 000000000000001b RSI: 0000000080000100 RDI: 0000000000000014
[ 1057.520550][T20705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1057.520556][T20705] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1057.520563][T20705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1057.520577][T20705]  </TASK>
[ 1057.661701][   T42] audit: type=1800 audit(2000000817.760:602): pid=20707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3929" name="attr_allow_any_host" dev="configfs" ino=74323 res=0 errno=0
[ 1057.673820][T20707] nvmet: adding nsid 1 to subsystem testnqn
[ 1057.755708][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'.
[ 1057.990134][ T5862] usb 6-1: new low-speed USB device number 75 using dummy_hcd
[ 1058.452972][T20725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3933'.
[ 1058.486695][T20725] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1058.511399][T20725] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1058.516732][T20725] bond11: (slave ip_vti0): The slave device specified does not support setting the MAC address
[ 1058.521879][T20725] bond11: (slave ip_vti0): Error -95 calling set_mac_address
[ 1058.577838][T20725] bond11: (slave vlan2): Opening slave failed
[ 1058.614064][T20721] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[ 1058.616192][T20721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1058.619080][T20721] vhci_hcd vhci_hcd.0: Device attached
[ 1058.841614][T20732] CIFS: Attempting to mount //127.0.0.1/share
[ 1058.845353][T20732] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1058.848588][T20732] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1058.882440][T20727] vhci_hcd: connection closed
[ 1058.887396][T19155] vhci_hcd vhci_hcd.4: stop threads
[ 1058.898166][T19155] vhci_hcd vhci_hcd.4: release socket
[ 1058.903211][T19155] vhci_hcd vhci_hcd.4: disconnect device
[ 1058.906452][  T845] usb 46-1: SetAddress Request (2) to port 0
[ 1058.909165][  T845] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1058.926487][  T845] usb 46-1: enqueue for inactive port 0
[ 1058.971765][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3936'.
[ 1058.981456][T20736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1059.007956][ T5862] usb 6-1: device not accepting address 75, error -71
[ 1059.012543][ T5862] usb usb6-port1: unable to enumerate USB device
[ 1059.182505][T20752] loop6: detected capacity change from 0 to 2640
[ 1059.189319][T20752] ldm_validate_partition_table(): Disk read failed.
[ 1059.192396][T20752] Dev loop6: unable to read RDB block 0
[ 1059.194298][T20752]  loop6: unable to read partition table
[ 1059.202108][T20752] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1059.267383][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'.
[ 1059.301903][T20752] loop6: detected capacity change from 2640 to 524288000
[ 1059.317354][  T845] usb usb46-port1: attempt power cycle
[ 1059.486387][T14772] Bluetooth: hci4: unexpected event for opcode 0x201c
[ 1059.488239][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3941'.
[ 1059.570004][T20765] x_tables: duplicate underflow at hook 1
[ 1059.611770][T20759] hub 8-0:1.0: USB hub found
[ 1059.627716][T20759] hub 8-0:1.0: 1 port detected
[ 1059.877851][  T845] usb usb46-port1: unable to enumerate USB device
[ 1059.896397][ T5827] usb 6-1: new low-speed USB device number 76 using dummy_hcd
[ 1060.027765][ T5827] usb 6-1: device descriptor read/64, error -71
[ 1060.266901][ T5827] usb 6-1: new low-speed USB device number 77 using dummy_hcd
[ 1060.377348][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'.
[ 1060.396476][ T5827] usb 6-1: device descriptor read/64, error -71
[ 1060.454370][T20776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1060.506632][ T5827] usb usb6-port1: attempt power cycle
[ 1060.720056][T20784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3949'.
[ 1060.791427][T20788] Unsupported ieee802154 address type: 0
[ 1060.846386][ T5827] usb 6-1: new low-speed USB device number 78 using dummy_hcd
[ 1060.867181][ T5827] usb 6-1: device descriptor read/8, error -71
[ 1060.878410][ T5947] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1060.892877][T20795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3952'.
[ 1060.952979][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'.
[ 1061.106400][ T5827] usb 6-1: new low-speed USB device number 79 using dummy_hcd
[ 1061.127053][ T5827] usb 6-1: device descriptor read/8, error -71
[ 1061.236706][ T5827] usb usb6-port1: unable to enumerate USB device
[ 1061.357102][ T5947] usb 9-1: Using ep0 maxpacket: 32
[ 1061.732798][ T5947] usb 9-1: config 9 has an invalid interface number: 80 but max is 3
[ 1061.736444][ T5947] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[ 1061.740694][ T5947] usb 9-1: config 9 has an invalid interface number: 9 but max is 3
[ 1061.743253][ T5947] usb 9-1: config 9 has an invalid interface number: 206 but max is 3
[ 1061.746352][ T5947] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[ 1061.749169][ T5947] usb 9-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[ 1061.751941][ T5947] usb 9-1: config 9 has an invalid descriptor of length 181, skipping remainder of the config
[ 1061.755203][ T5947] usb 9-1: config 9 has 3 interfaces, different from the descriptor's value: 4
[ 1061.760157][ T5947] usb 9-1: config 9 has no interface number 0
[ 1061.762415][ T5947] usb 9-1: config 9 has no interface number 1
[ 1061.764401][ T5947] usb 9-1: config 9 has no interface number 2
[ 1061.766632][ T5947] usb 9-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1061.770121][ T5947] usb 9-1: config 9 interface 80 altsetting 251 endpoint 0xC has invalid maxpacket 512, setting to 64
[ 1061.773588][ T5947] usb 9-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1061.777095][ T5947] usb 9-1: config 9 interface 80 altsetting 251 has an invalid descriptor for endpoint zero, skipping
[ 1061.780563][ T5947] usb 9-1: config 9 interface 80 altsetting 251 endpoint 0xD has invalid maxpacket 1023, setting to 64
[ 1061.784027][ T5947] usb 9-1: config 9 interface 206 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[ 1061.787252][ T5947] usb 9-1: config 9 interface 206 altsetting 3 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1061.790684][ T5947] usb 9-1: config 9 interface 206 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[ 1061.794051][ T5947] usb 9-1: config 9 interface 206 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[ 1061.798172][ T5947] usb 9-1: config 9 interface 80 has no altsetting 0
[ 1061.800325][ T5947] usb 9-1: config 9 interface 9 has no altsetting 0
[ 1061.802447][ T5947] usb 9-1: config 9 interface 206 has no altsetting 0
[ 1061.806396][ T5947] usb 9-1: New USB device found, idVendor=0403, idProduct=daf9, bcdDevice= 7.0c
[ 1061.809432][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.811980][ T5947] usb 9-1: Product: ⍿䠱䨓尗낯窬ᑤ夆뷷䁎鲉씽ࠔ绝䑎䧪௛귰쏡ꁙ믈僈箶挳嗰狰麿岎ꦻ像띁怩ۜ豿圵
[ 1061.816220][ T5947] usb 9-1: Manufacturer: 꼟ꦿ獮銝┤ὅ␓쀴嶲䋸踏ᄥ㸨릆읆Ḥ瑗긜뛯᜙샅件츞現Ὁΰ귀畵㶪蘖㿨䤳婣ή㴦鄁碬ҩన薱鷚㾱낻璑ꂜゎ岪⬍༮受輤˓ϋ뎿쏴ફ⃠王鋾ࠓㄹ輵ᲈ㰶䜃Ꝿᶳ㺰ꃔᆠს얦溧舍蹗㴎 檑糩椉䑌㙁䌒ꪣ颖퐇䀨᷽ﷁ陗岠獥
[ 1061.825787][ T5947] usb 9-1: SerialNumber: 諘
[ 1062.147141][ T5947] ftdi_sio 9-1:9.80: FTDI USB Serial Device converter detected
[ 1062.160092][ T5947] ftdi_sio ttyUSB0: unknown device type: 0x70c
[ 1062.169120][ T5947] ftdi_sio 9-1:9.9: FTDI USB Serial Device converter detected
[ 1062.172993][ T5947] ftdi_sio ttyUSB1: unknown device type: 0x70c
[ 1062.183312][ T5947] ftdi_sio 9-1:9.206: FTDI USB Serial Device converter detected
[ 1062.192807][ T5947] ftdi_sio ttyUSB2: unknown device type: 0x70c
[ 1062.198414][ T5947] usb 9-1: USB disconnect, device number 6
[ 1062.213399][ T5947] ftdi_sio 9-1:9.80: device disconnected
[ 1062.218622][ T5947] ftdi_sio 9-1:9.9: device disconnected
[ 1062.224256][ T5947] ftdi_sio 9-1:9.206: device disconnected
[ 1062.400221][T14772] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1062.403995][ T5761] Bluetooth: hci3: command 0x1003 tx timeout
[ 1062.573124][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'.
[ 1063.544967][T20837] siw: device registration error -23
[ 1063.549798][T20835] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1063.689540][T20840] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1063.816463][T20848] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3960'.
[ 1063.820764][T20848] gretap0: entered promiscuous mode
[ 1063.844589][T20848] FAULT_INJECTION: forcing a failure.
[ 1063.844589][T20848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1063.850075][T20848] CPU: 3 UID: 0 PID: 20848 Comm: syz.4.3960 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.850102][T20848] Tainted: [L]=SOFTLOCKUP
[ 1063.850108][T20848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1063.850119][T20848] Call Trace:
[ 1063.850126][T20848]  <TASK>
[ 1063.850133][T20848]  dump_stack_lvl+0x100/0x190
[ 1063.850159][T20848]  should_fail_ex.cold+0x5/0xa
[ 1063.850180][T20848]  _copy_from_iter+0x1f4/0x1690
[ 1063.850210][T20848]  ? __asan_memset+0x23/0x50
[ 1063.850228][T20848]  ? __pfx__copy_from_iter+0x10/0x10
[ 1063.850254][T20848]  ? __pfx___alloc_skb+0x10/0x10
[ 1063.850288][T20848]  netlink_sendmsg+0x808/0xda0
[ 1063.850313][T20848]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.850336][T20848]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1063.850358][T20848]  ____sys_sendmsg+0xa4d/0xbe0
[ 1063.850376][T20848]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.850398][T20848]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1063.850428][T20848]  ___sys_sendmsg+0x190/0x1e0
[ 1063.850449][T20848]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1063.850477][T20848]  ? find_held_lock+0x2b/0x80
[ 1063.850514][T20848]  __sys_sendmsg+0x160/0x210
[ 1063.850539][T20848]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1063.850570][T20848]  ? __pfx_ksys_write+0x10/0x10
[ 1063.850590][T20848]  __do_fast_syscall_32+0xe7/0x970
[ 1063.850614][T20848]  ? lockdep_hardirqs_on+0x78/0x100
[ 1063.850638][T20848]  do_fast_syscall_32+0x32/0x70
[ 1063.850662][T20848]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1063.850683][T20848] RIP: 0023:0xf7fd7fec
[ 1063.850704][T20848] Code: Unable to access opcode bytes at 0xf7fd7fc2.
[ 1063.850710][T20848] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1063.850728][T20848] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000400
[ 1063.850740][T20848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1063.850750][T20848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1063.850761][T20848] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1063.850771][T20848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1063.850794][T20848]  </TASK>
[ 1064.236450][   T24] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1064.326748][T17292] usb 7-1: new low-speed USB device number 90 using dummy_hcd
[ 1064.417750][   T24] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[ 1064.420534][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1064.423848][   T24] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1064.428092][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1064.432258][   T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1064.435301][   T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1064.438079][   T24] usb 8-1: Product: syz
[ 1064.439707][   T24] usb 8-1: Manufacturer: syz
[ 1064.441261][   T24] usb 8-1: SerialNumber: syz
[ 1064.445024][   T24] usb 8-1: config 0 descriptor??
[ 1064.448485][   T24] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1064.450459][   T24] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1064.467463][T17292] usb 7-1: device descriptor read/64, error -71
[ 1064.474558][   T24] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1064.492192][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1064.665449][T20853] Invalid ELF header type: 3 != 1
[ 1064.706703][ T5761] Bluetooth: hci1: command 0x0405 tx timeout
[ 1064.727514][T17292] usb 7-1: new low-speed USB device number 91 using dummy_hcd
[ 1064.786823][T14915] usb 8-1: USB disconnect, device number 64
[ 1064.866412][T17292] usb 7-1: device descriptor read/64, error -71
[ 1064.896409][ T5947] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1064.940137][T20860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1064.977016][T17292] usb usb7-port1: attempt power cycle
[ 1065.078344][ T5947] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[ 1065.083271][ T5947] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1065.087938][ T5947] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1065.094051][ T5947] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1065.097182][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1065.100289][ T5947] usb 9-1: Product: syz
[ 1065.101617][ T5947] usb 9-1: Manufacturer: syz
[ 1065.103126][ T5947] usb 9-1: SerialNumber: syz
[ 1065.105944][ T5947] usb 9-1: config 0 descriptor??
[ 1065.111280][ T5947] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1065.113225][ T5947] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1065.131992][ T5947] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1065.136376][T14915] usb 8-1: new high-speed USB device number 65 using dummy_hcd
[ 1065.151470][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1065.314022][T14915] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[ 1065.318944][T20858] Invalid ELF header type: 3 != 1
[ 1065.319411][T14915] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.324206][T14915] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1065.328520][T14915] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1065.332132][T14915] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1065.335076][T14915] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1065.337863][T17292] usb 7-1: new low-speed USB device number 92 using dummy_hcd
[ 1065.340413][T14915] usb 8-1: Product: syz
[ 1065.341837][T14915] usb 8-1: Manufacturer: syz
[ 1065.343327][T14915] usb 8-1: SerialNumber: syz
[ 1065.346418][T14915] usb 8-1: config 0 descriptor??
[ 1065.349225][T14915] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1065.351135][T14915] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1065.356974][T17292] usb 7-1: device descriptor read/8, error -71
[ 1065.374897][T14915] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1065.396428][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1065.426623][ T5947] usb 9-1: USB disconnect, device number 7
[ 1065.600390][T17292] usb 7-1: new low-speed USB device number 93 using dummy_hcd
[ 1065.628244][T17292] usb 7-1: device descriptor read/8, error -71
[ 1065.716595][T14915] usb 8-1: USB disconnect, device number 65
[ 1065.736716][T17292] usb usb7-port1: unable to enumerate USB device
[ 1065.776384][ T5947] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1065.928315][ T5947] usb 9-1: config index 0 descriptor too short (expected 39, got 27)
[ 1065.932063][ T5947] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1065.937517][ T5947] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1065.942955][ T5947] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1065.947068][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1065.950543][ T5947] usb 9-1: Product: syz
[ 1065.952413][ T5947] usb 9-1: Manufacturer: syz
[ 1065.954578][ T5947] usb 9-1: SerialNumber: syz
[ 1065.959852][ T5947] usb 9-1: config 0 descriptor??
[ 1065.967468][ T5947] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1065.969903][ T5947] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1066.005802][ T5947] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1066.021524][T11815] udevd[11815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1066.312696][T20872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1066.346673][T17292] usb 9-1: USB disconnect, device number 8
[ 1066.562723][T20875] CIFS: Attempting to mount //127.0.0.1/share
[ 1066.566016][T20875] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1066.568994][T20875] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1067.447848][T14915] libceph: connect (1)[c::]:6789 error -101
[ 1067.452816][T14915] libceph: mon0 (1)[c::]:6789 connect error
[ 1067.596785][T17292] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[ 1067.726616][T14915] libceph: connect (1)[c::]:6789 error -101
[ 1067.728981][T14915] libceph: mon0 (1)[c::]:6789 connect error
[ 1067.746444][T17292] usb 7-1: device descriptor read/64, error -71
[ 1067.842491][T20902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1067.856945][ T5898] usb 8-1: new high-speed USB device number 66 using dummy_hcd
[ 1067.996525][T17292] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 1068.017874][ T5898] usb 8-1: config 128 has an invalid interface number: 148 but max is 0
[ 1068.020721][ T5898] usb 8-1: config 128 has no interface number 0
[ 1068.022738][ T5898] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1068.025921][ T5898] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1068.030068][ T5898] usb 8-1: config 128 interface 148 has no altsetting 0
[ 1068.033822][ T5898] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[ 1068.036930][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.039465][ T5898] usb 8-1: Product: syz
[ 1068.040791][ T5898] usb 8-1: Manufacturer: syz
[ 1068.042240][ T5898] usb 8-1: SerialNumber: syz
[ 1068.136654][T17292] usb 7-1: device descriptor read/64, error -71
[ 1068.178531][T20907] capability: warning: `syz.4.3979' uses 32-bit capabilities (legacy support in use)
[ 1068.213895][T20894] ceph: No mds server is up or the cluster is laggy
[ 1068.237843][T14915] libceph: connect (1)[c::]:6789 error -101
[ 1068.239746][T14915] libceph: mon0 (1)[c::]:6789 connect error
[ 1068.249280][T17292] usb usb7-port1: attempt power cycle
[ 1068.270143][ T5898] usb 8-1: USB disconnect, device number 66
[ 1068.596619][T17292] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 1068.617957][T17292] usb 7-1: device descriptor read/8, error -71
[ 1068.696377][   T29] usb 8-1: new high-speed USB device number 67 using dummy_hcd
[ 1068.846436][   T29] usb 8-1: Using ep0 maxpacket: 8
[ 1068.855100][   T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1068.864260][   T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1068.868788][   T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1068.876462][   T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16
[ 1068.876879][T17292] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 1068.880056][   T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1068.880107][   T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1068.898121][   T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.907851][T17292] usb 7-1: device descriptor read/8, error -71
[ 1069.016795][T17292] usb usb7-port1: unable to enumerate USB device
[ 1069.027760][ T8012] usb 6-1: new low-speed USB device number 80 using dummy_hcd
[ 1069.092928][T20922] CIFS: Attempting to mount //127.0.0.1/share
[ 1069.096232][T20922] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1069.098955][T20922] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1069.119000][   T29] usb 8-1: GET_CAPABILITIES returned 0
[ 1069.120834][   T29] usbtmc 8-1:16.0: can't read capabilities
[ 1069.156411][ T8012] usb 6-1: device descriptor read/64, error -71
[ 1069.405740][T20924] FAULT_INJECTION: forcing a failure.
[ 1069.405740][T20924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1069.406448][ T8012] usb 6-1: new low-speed USB device number 81 using dummy_hcd
[ 1069.409964][T20924] CPU: 2 UID: 0 PID: 20924 Comm: syz.4.3985 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1069.409983][T20924] Tainted: [L]=SOFTLOCKUP
[ 1069.409987][T20924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1069.409994][T20924] Call Trace:
[ 1069.409999][T20924]  <TASK>
[ 1069.410004][T20924]  dump_stack_lvl+0x100/0x190
[ 1069.410022][T20924]  should_fail_ex.cold+0x5/0xa
[ 1069.410035][T20924]  _copy_from_user+0x2e/0xd0
[ 1069.410054][T20924]  kstrtouint_from_user+0xd6/0x1d0
[ 1069.410068][T20924]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1069.410082][T20924]  ? __lock_acquire+0x49f/0x1a40
[ 1069.410106][T20924]  proc_fail_nth_write+0x83/0x220
[ 1069.410123][T20924]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1069.410142][T20924]  vfs_write+0x2aa/0x1050
[ 1069.410154][T20924]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1069.410171][T20924]  ? __pfx_vfs_write+0x10/0x10
[ 1069.410180][T20924]  ? find_held_lock+0x2b/0x80
[ 1069.410194][T20924]  ? __fget_files+0x215/0x3d0
[ 1069.410208][T20924]  ? __fget_files+0x21f/0x3d0
[ 1069.410222][T20924]  ksys_write+0x12a/0x250
[ 1069.410233][T20924]  ? __pfx_ksys_write+0x10/0x10
[ 1069.410247][T20924]  do_int80_emulation+0x14b/0x720
[ 1069.410267][T20924]  asm_int80_emulation+0x1a/0x20
[ 1069.410279][T20924] RIP: 0023:0xf71d74eb
[ 1069.410288][T20924] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1069.410300][T20924] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1069.410311][T20924] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0
[ 1069.410319][T20924] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1069.410325][T20924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1069.410332][T20924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1069.410339][T20924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1069.410353][T20924]  </TASK>
[ 1069.494471][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3986'.
[ 1069.606452][ T8012] usb 6-1: device descriptor read/64, error -71
[ 1069.716716][ T8012] usb usb6-port1: attempt power cycle
[ 1070.056524][ T8012] usb 6-1: new low-speed USB device number 82 using dummy_hcd
[ 1070.077373][ T8012] usb 6-1: device descriptor read/8, error -71
[ 1070.316587][ T8012] usb 6-1: new low-speed USB device number 83 using dummy_hcd
[ 1070.337211][ T8012] usb 6-1: device descriptor read/8, error -71
[ 1070.446657][ T8012] usb usb6-port1: unable to enumerate USB device
[ 1070.560357][   T24] usb 8-1: USB disconnect, device number 67
[ 1070.752819][T20936] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3989'.
[ 1070.756052][T20936] openvswitch: netlink: Message has 512 unknown bytes.
[ 1071.421783][T20952] CIFS: Attempting to mount //127.0.0.1/share
[ 1071.429659][T20952] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1071.432358][T20952] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1071.729597][T20959] FAULT_INJECTION: forcing a failure.
[ 1071.729597][T20959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1071.750390][T20959] CPU: 0 UID: 0 PID: 20959 Comm: syz.3.3997 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1071.750415][T20959] Tainted: [L]=SOFTLOCKUP
[ 1071.750420][T20959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1071.750427][T20959] Call Trace:
[ 1071.750432][T20959]  <TASK>
[ 1071.750437][T20959]  dump_stack_lvl+0x100/0x190
[ 1071.750455][T20959]  should_fail_ex.cold+0x5/0xa
[ 1071.750469][T20959]  _copy_from_user+0x2e/0xd0
[ 1071.750488][T20959]  kstrtouint_from_user+0xd6/0x1d0
[ 1071.750502][T20959]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1071.750517][T20959]  ? __lock_acquire+0x49f/0x1a40
[ 1071.750541][T20959]  proc_fail_nth_write+0x83/0x220
[ 1071.750557][T20959]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1071.750577][T20959]  vfs_write+0x2aa/0x1050
[ 1071.750589][T20959]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1071.750607][T20959]  ? __pfx_vfs_write+0x10/0x10
[ 1071.750616][T20959]  ? find_held_lock+0x2b/0x80
[ 1071.750631][T20959]  ? __fget_files+0x215/0x3d0
[ 1071.750644][T20959]  ? __fget_files+0x21f/0x3d0
[ 1071.750659][T20959]  ksys_write+0x12a/0x250
[ 1071.750670][T20959]  ? __pfx_ksys_write+0x10/0x10
[ 1071.750685][T20959]  do_int80_emulation+0x14b/0x720
[ 1071.750704][T20959]  asm_int80_emulation+0x1a/0x20
[ 1071.750716][T20959] RIP: 0023:0xf71e74eb
[ 1071.750726][T20959] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1071.750738][T20959] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1071.750749][T20959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549d5d0
[ 1071.750756][T20959] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1071.750763][T20959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1071.750770][T20959] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1071.750777][T20959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1071.750791][T20959]  </TASK>
[ 1071.871195][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'.
[ 1071.940414][T20964] overlayfs: missing 'lowerdir'
[ 1071.945126][T20964] netlink: 'syz.1.3998': attribute type 2 has an invalid length.
[ 1071.948299][T20964] netlink: 'syz.1.3998': attribute type 1 has an invalid length.
[ 1071.957853][T20964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'.
[ 1072.087304][T20956] netlink: 'syz.4.3996': attribute type 4 has an invalid length.
[ 1072.090612][T20956] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3996'.
[ 1072.312177][T20977] netlink: 'syz.3.4002': attribute type 1 has an invalid length.
[ 1072.314894][T20977] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4002'.
[ 1072.866705][   T29] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[ 1073.006581][   T29] usb 9-1: device descriptor read/64, error -71
[ 1073.171360][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'.
[ 1073.246987][   T29] usb 9-1: new low-speed USB device number 10 using dummy_hcd
[ 1073.386808][   T29] usb 9-1: device descriptor read/64, error -71
[ 1073.511164][   T29] usb usb9-port1: attempt power cycle
[ 1073.856482][   T29] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[ 1073.877130][   T29] usb 9-1: device descriptor read/8, error -71
[ 1073.927384][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4009'.
[ 1074.086485][T21003] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1074.117030][   T29] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[ 1074.139335][   T29] usb 9-1: device descriptor read/8, error -71
[ 1074.253415][   T29] usb usb9-port1: unable to enumerate USB device
[ 1075.032287][T21016] fuse: Unknown parameter 'group_'
[ 1075.158064][T14915] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[ 1075.338175][T21032] input: syz0 as /devices/virtual/input/input154
[ 1075.376927][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4018'.
[ 1075.413465][T21038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4017'.
[ 1075.434646][T21040] bridge2: entered promiscuous mode
[ 1075.438414][T21040] bridge2: entered allmulticast mode
[ 1075.484476][T21046] siw: device registration error -23
[ 1075.553062][T21048] scsi host6: ib_srp: Connection 0/4 to 0.0.0.0 failed
[ 1075.690988][T21053] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1075.704893][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4022'.
[ 1083.146771][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4024'.
[ 1083.192840][T21079] syzkaller0: entered promiscuous mode
[ 1083.194587][T21079] syzkaller0: entered allmulticast mode
[ 1083.285003][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4023'.
[ 1083.412646][ T5827] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[ 1083.472591][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'.
[ 1083.634326][ T5827] usb 7-1: Using ep0 maxpacket: 32
[ 1083.664705][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1083.669341][ T5827] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1083.724345][ T5827] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1083.727404][ T5827] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[ 1083.733418][ T5827] usb 7-1: Product: syz
[ 1083.740731][ T5827] usb 7-1: Manufacturer: syz
[ 1083.745736][ T5827] usb 7-1: SerialNumber: syz
[ 1083.884655][ T5827] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input156
[ 1083.899422][T21084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.376884][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'.
[ 1084.420214][T21084] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1084.442845][ T5827] usb 7-1: USB disconnect, device number 98
[ 1084.444922][    C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19
[ 1084.466210][ T5827] appletouch 7-1:1.0: input: appletouch disconnected
[ 1084.508112][T21100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4031'.
[ 1084.617586][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4031'.
[ 1085.360322][   T24] usb 7-1: new low-speed USB device number 99 using dummy_hcd
[ 1085.421338][T21119] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1085.611216][   T24] usb 7-1: device descriptor read/64, error -71
[ 1085.611601][T21128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4037'.
[ 1085.673970][T21129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'.
[ 1085.857223][   T24] usb 7-1: new low-speed USB device number 100 using dummy_hcd
[ 1086.058027][   T24] usb 7-1: device descriptor read/64, error -71
[ 1086.166852][   T24] usb usb7-port1: attempt power cycle
[ 1086.464961][T21134] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1086.567396][   T24] usb 7-1: new low-speed USB device number 101 using dummy_hcd
[ 1086.597670][T21154] FAULT_INJECTION: forcing a failure.
[ 1086.597670][T21154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1086.602743][T21154] CPU: 1 UID: 0 PID: 21154 Comm: syz.3.4040 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1086.602773][T21154] Tainted: [L]=SOFTLOCKUP
[ 1086.602780][T21154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1086.602792][T21154] Call Trace:
[ 1086.602798][T21154]  <TASK>
[ 1086.602806][T21154]  dump_stack_lvl+0x100/0x190
[ 1086.602831][T21154]  should_fail_ex.cold+0x5/0xa
[ 1086.602853][T21154]  strncpy_from_user+0x3b/0x2d0
[ 1086.602882][T21154]  __do_sys_add_key+0xd4/0x460
[ 1086.602903][T21154]  ? __pfx___do_sys_add_key+0x10/0x10
[ 1086.602921][T21154]  ? fput+0x79/0x100
[ 1086.602942][T21154]  ? exit_to_user_mode_loop+0x166/0x6f0
[ 1086.602958][T21154]  ? rcu_is_watching+0x12/0xc0
[ 1086.602984][T21154]  __do_fast_syscall_32+0xe7/0x970
[ 1086.603011][T21154]  ? lockdep_hardirqs_on+0x78/0x100
[ 1086.603038][T21154]  do_fast_syscall_32+0x32/0x70
[ 1086.603064][T21154]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1086.603085][T21154] RIP: 0023:0xf70aefec
[ 1086.603105][T21154] Code: Unable to access opcode bytes at 0xf70aefc2.
[ 1086.603113][T21154] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[ 1086.603130][T21154] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000
[ 1086.603141][T21154] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 0000000023404c53
[ 1086.603151][T21154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1086.603160][T21154] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1086.603172][T21154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1086.603198][T21154]  </TASK>
[ 1086.607073][   T24] usb 7-1: device descriptor read/8, error -71
[ 1086.677948][T21155] lo: Caught tx_queue_len zero misconfig
[ 1086.679863][T21155] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1086.840213][   T42] audit: type=1800 audit(2000000846.940:603): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4039" name="[kvm-gmem]" dev="guest_memfd" ino=77999 res=0 errno=0
[ 1086.907275][   T24] usb 7-1: new low-speed USB device number 102 using dummy_hcd
[ 1086.939351][   T24] usb 7-1: device descriptor read/8, error -71
[ 1087.061242][   T24] usb usb7-port1: unable to enumerate USB device
[ 1088.266760][ T5897] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1088.416472][ T5897] usb 6-1: Using ep0 maxpacket: 32
[ 1088.420065][ T5897] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1088.423489][ T5897] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1088.429058][ T5897] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1088.433241][ T5897] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1088.438677][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1088.443399][ T5897] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1088.447941][ T5897] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1088.451265][ T5897] usb 6-1: Product: syz
[ 1088.453007][ T5897] usb 6-1: Manufacturer: syz
[ 1088.454862][ T5897] usb 6-1: SerialNumber: syz
[ 1088.461782][ T5897] usb 6-1: config 0 descriptor??
[ 1088.467724][ T5897] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1088.472889][ T5897] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1088.778078][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[ 1088.780375][ T6422] usb 6-1: USB disconnect, device number 84
[ 1088.782318][T21172] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[ 1088.800936][T21173] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[ 1088.855985][ T6422] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1088.944953][T21184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4048'.
[ 1088.992401][T21185] FAULT_INJECTION: forcing a failure.
[ 1088.992401][T21185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1088.997552][T21185] CPU: 1 UID: 0 PID: 21185 Comm: syz.4.4047 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1088.997586][T21185] Tainted: [L]=SOFTLOCKUP
[ 1088.997591][T21185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1088.997599][T21185] Call Trace:
[ 1088.997603][T21185]  <TASK>
[ 1088.997608][T21185]  dump_stack_lvl+0x100/0x190
[ 1088.997627][T21185]  should_fail_ex.cold+0x5/0xa
[ 1088.997641][T21185]  _copy_to_user+0x32/0xd0
[ 1088.997661][T21185]  simple_read_from_buffer+0xcb/0x170
[ 1088.997681][T21185]  proc_fail_nth_read+0x1af/0x230
[ 1088.997697][T21185]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1088.997714][T21185]  ? rw_verify_area+0xce/0x6d0
[ 1088.997731][T21185]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1088.997746][T21185]  vfs_read+0x1e4/0xb40
[ 1088.997761][T21185]  ? __pfx_vfs_read+0x10/0x10
[ 1088.997770][T21185]  ? find_held_lock+0x2b/0x80
[ 1088.997785][T21185]  ? __fget_files+0x215/0x3d0
[ 1088.997799][T21185]  ? __fget_files+0x21f/0x3d0
[ 1088.997813][T21185]  ksys_read+0x12a/0x250
[ 1088.997824][T21185]  ? __pfx_ksys_read+0x10/0x10
[ 1088.997839][T21185]  do_int80_emulation+0x14b/0x720
[ 1088.997859][T21185]  asm_int80_emulation+0x1a/0x20
[ 1088.997870][T21185] RIP: 0023:0xf71d74eb
[ 1088.997880][T21185] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1088.997892][T21185] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1088.997903][T21185] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54755d0
[ 1088.997911][T21185] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1088.997929][T21185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1088.997937][T21185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1088.997944][T21185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1088.997959][T21185]  </TASK>
[ 1089.024607][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'.
[ 1089.278221][T21192] trusted_key: syz.4.4049 sent an empty control message without MSG_MORE.
[ 1089.880101][T21196] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1090.939821][T21209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1091.126667][ T6422] usb 8-1: new low-speed USB device number 68 using dummy_hcd
[ 1091.181866][T21212] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1091.266611][T21217] netlink: 'syz.4.4057': attribute type 1 has an invalid length.
[ 1091.278203][ T6422] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1091.313945][T21220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4058'.
[ 1091.387435][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4058'.
[ 1091.911588][ T6422] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1092.070355][ T6422] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1092.076482][ T6422] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1092.083436][ T6422] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1092.088153][ T6422] usb 8-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[ 1092.096406][ T6422] usb 8-1: string descriptor 0 read error: -22
[ 1092.099204][ T6422] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1092.104177][ T6422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.109498][ T6422] usb 8-1: rejected 3 configurations due to insufficient available bus power
[ 1092.113124][ T6422] usb 8-1: no configuration chosen from 3 choices
[ 1092.164993][   T42] audit: type=1804 audit(2000000852.260:604): pid=21224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4059" name="/newroot/396/file0" dev="tmpfs" ino=2249 res=1 errno=0
[ 1092.383888][   T42] audit: type=1326 audit(2000000852.480:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.404119][   T42] audit: type=1326 audit(2000000852.500:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.414361][   T42] audit: type=1326 audit(2000000852.500:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.433275][   T42] audit: type=1326 audit(2000000852.520:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.441062][   T42] audit: type=1326 audit(2000000852.530:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.451128][   T42] audit: type=1326 audit(2000000852.530:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.464196][   T42] audit: type=1326 audit(2000000852.560:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.473204][   T42] audit: type=1326 audit(2000000852.560:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1092.486366][   T42] audit: type=1326 audit(2000000852.580:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21225 comm="syz.4.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1093.802144][T21243] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer.
[ 1093.829932][T14915] usb 8-1: USB disconnect, device number 68
[ 1094.202677][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'.
[ 1095.077347][T21258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4069'.
[ 1095.141957][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'.
[ 1095.626435][T14855] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[ 1095.796928][T14855] usb 7-1: Using ep0 maxpacket: 16
[ 1095.800981][T14855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10
[ 1095.805706][T14855] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[ 1095.813339][T14855] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1095.817242][T14855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.819898][T14855] usb 7-1: Product: 虫阞ⰳꂚ䥯骯摫犢䑖
[ 1095.822151][T14855] usb 7-1: Manufacturer: љ
[ 1095.823616][T14855] usb 7-1: SerialNumber: 㢋꾈즌礆甘胏跹醶碪髷ꚧ앹졛늿烙둲覌殿뛿鞷ㅂჱ꬗エ譌内☸픷␦큦퉾뾵໯䱋ᱰ紅쯰鏸ਢ⡅츏ݦުⷔ덟퉵㧠栏ʾɬ楺댯灼꠷콶뷞ᵰ崎녈蹘掁࢛雷䜓ߡ鸣Ệ埽晹侉礄楩똀쯁涧囦욽춰妸㋚靥䫏䔒씍F觔᱐ᾚￕ⚁
[ 1095.883793][T21267] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI
[ 1095.887653][T21267] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 1095.890780][T21267] CPU: 1 UID: 0 PID: 21267 Comm: syz.1.4071 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1095.894378][T21267] Tainted: [L]=SOFTLOCKUP
[ 1095.899038][T21267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1095.902120][T21267] RIP: 0010:uvcg_video_enable+0x12d/0xf80
[ 1095.903932][T21267] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b7 0d 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 18 48 8d 7d 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e5 0d 00 00
[ 1095.909613][T21267] RSP: 0018:ffffc9000e4b7b08 EFLAGS: 00010246
[ 1095.911476][T21267] RAX: dffffc0000000000 RBX: ffff88804233e100 RCX: ffffc90029644000
[ 1095.913977][T21267] RDX: 0000000000000000 RSI: ffffffff87e2c2d5 RDI: 0000000000000003
[ 1095.916296][T21267] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1095.919058][T21267] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002
[ 1095.921779][T21267] R13: 0000000000000000 R14: ffff88806f3968f0 R15: ffff88806f396840
[ 1095.924209][T21267] FS:  0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f541bb40
[ 1095.926942][T21267] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1095.929358][T21267] CR2: 00000000f7fd5588 CR3: 00000000567a3000 CR4: 0000000000352ef0
[ 1095.932084][T21267] Call Trace:
[ 1095.933393][T21267]  <TASK>
[ 1095.934526][T21267]  ? __lock_acquire+0x49f/0x1a40
[ 1095.936166][T21267]  uvc_v4l2_streamon+0x9f/0x130
[ 1095.937832][T21267]  ? v4l_streamon+0x1a/0xa0
[ 1095.939019][T21269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4072'.
[ 1095.939320][T21267]  __video_do_ioctl+0xb2a/0xdf0
[ 1095.944213][T21267]  ? __might_fault+0xc5/0x140
[ 1095.945704][T21267]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1095.947449][T21267]  video_usercopy+0x3d3/0x14c0
[ 1095.948970][T21267]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1095.950658][T21267]  ? __pfx_video_usercopy+0x10/0x10
[ 1095.952346][T21267]  ? __fget_files+0x215/0x3d0
[ 1095.953927][T21267]  ? hook_file_ioctl_common+0x140/0x440
[ 1095.956084][T21267]  v4l2_ioctl+0x1bd/0x250
[ 1095.957772][T21267]  v4l2_compat_ioctl32+0x20f/0x2d0
[ 1095.959770][T21267]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[ 1095.961896][T21267]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1095.963950][T21267]  __do_fast_syscall_32+0xe7/0x970
[ 1095.965847][T21267]  ? lockdep_hardirqs_on+0x78/0x100
[ 1095.967906][T21267]  do_fast_syscall_32+0x32/0x70
[ 1095.969779][T21267]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1095.972048][T21267] RIP: 0023:0xf706efec
[ 1095.973640][T21267] Code: Unable to access opcode bytes at 0xf706efc2.
[ 1095.976217][T21267] RSP: 002b:00000000f541b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1095.979451][T21267] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040045612
[ 1095.982019][T21267] RDX: 00000000800012c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1095.984489][T21267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1095.986896][T21267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1095.989295][T21267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1095.991791][T21267]  </TASK>
[ 1095.992744][T21267] Modules linked in:
[ 1095.994678][T21267] ---[ end trace 0000000000000000 ]---
[ 1096.046611][T21267] RIP: 0010:uvcg_video_enable+0x12d/0xf80
[ 1096.049737][T21267] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b7 0d 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 18 48 8d 7d 03 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 e5 0d 00 00
[ 1096.050148][T14855] cdc_ncm 7-1:1.0: bind() failure
[ 1096.058350][T21267] RSP: 0018:ffffc9000e4b7b08 EFLAGS: 00010246
[ 1096.058426][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'.
[ 1096.060297][T21267] RAX: dffffc0000000000 RBX: ffff88804233e100 RCX: ffffc90029644000
[ 1096.065807][T21267] RDX: 0000000000000000 RSI: ffffffff87e2c2d5 RDI: 0000000000000003
[ 1096.069160][T14855] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1096.071804][T14855] cdc_ncm 7-1:1.1: bind() failure
[ 1096.075484][T21267] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1096.078631][T21267] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002
[ 1096.081264][T21267] R13: 0000000000000000 R14: ffff88806f3968f0 R15: ffff88806f396840
[ 1096.084300][T21267] FS:  0000000000000000(0000) GS:ffff888096edf000(0063) knlGS:00000000f541bb40
[ 1096.087854][T21267] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1096.090781][T21267] CR2: 0000000080121000 CR3: 00000000567a3000 CR4: 0000000000352ef0
[ 1096.094193][T21267] Kernel panic - not syncing: Fatal exception
[ 1096.097339][T21267] Kernel Offset: disabled
[ 1096.098928][T21267] Rebooting in 86400 seconds..