last executing test programs: 4m49.49313838s ago: executing program 32 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000005c0)={0x16, 0x2, 0x10, "9611eeff0ec98885165600d9dc44a5ebf48b1400de5e320000084183df00"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240088c5}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000700000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = openat$cuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400000000000000"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xc4}}, 0x0) 4m42.351545916s ago: executing program 33 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, 0x15, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24008841}, 0x4008094) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) write(r1, &(0x7f00000008c0)='3', 0x1) mmap$qrtrtun(&(0x7f000091d000/0x2000)=nil, 0x2000, 0x3000004, 0x30, r1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs\x00', 0xd7) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./tracefs/dynamic_events\x00', 0x121242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4, 0x33d6e287) r3 = syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000040)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000940)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) mkdir(0x0, 0x1ff) bind$can_j1939(r4, &(0x7f00000009c0)={0x1d, r5, 0x0, {0x0, 0xf0}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000a00)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000000a40), 0x3fffffffffffe3d, 0xf5) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000280)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xd0af, 0x1, 0xb, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x39e8, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000000780)={0x2e, 0x6, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) ioctl$DRM_IOCTL_RM_MAP(r12, 0x4018641b, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000aa2000/0x4000)=nil}) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000004c0)=0x79, 0x4) 4m32.175871671s ago: executing program 34 (id=55): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x0, 0x10, &(0x7f0000000e80), 0xfffffffffffffd64}, 0x48) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) mkdir(&(0x7f0000000140)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000ec0)='mnt\x00', &(0x7f0000000f00)='devtmpfs\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000f40), &(0x7f0000000fc0), 0xe, &(0x7f000023d000/0x1000)=nil, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000f80)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x6, 0x8}) r0 = userfaultfd(0x1) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000040)=[0x5], 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) 4m20.675294965s ago: executing program 35 (id=80): prctl$PR_GET_KEEPCAPS(0x7) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$l2tp6(0xa, 0x2, 0x73) flock(r0, 0x4) recvfrom$l2tp6(r1, 0x0, 0x0, 0x3, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) syz_emit_ethernet(0x5e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000286e46593b01c21d97000000000000000000007e8000000000000000000000000000aa890090780000000000000000000000000000000000000001ff020000000000000000000000000001"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000001800000000000000", @ANYRES32, @ANYBLOB="f04182dc3bf65e706f2b2281f17a65", @ANYRES64=0x0], 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002640)={0x5, &(0x7f0000002600)=[{0xc, 0x3, 0x1, 0x8}, {0x4, 0x6, 0x8, 0x7}, {0x1, 0xb4, 0x0, 0x2}, {0x7ff, 0x4, 0x3, 0xff}, {0x3, 0x40, 0xc7, 0x3}]}) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x10, &(0x7f0000001200)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="e800000012000100000000000300000073686133383400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000080001"], 0xe8}}, 0xc050) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001240)={0x1, [0x0]}, &(0x7f0000001280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000012c0)={0xf5, 0xf, 0x1, 0x0, r8}, 0x10) openat(r4, &(0x7f0000001300)='./file1\x00', 0x15b462, 0x5a) syz_emit_vhci(&(0x7f0000001340)=ANY=[@ANYBLOB="040e02100418"], 0x7) r9 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x6, 0xa1, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xff, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x28}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x2, 0x1, [0x2], 0xa1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x5, 0x7, 0x3ff, 0x8, 0x3f}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x401, 0x1, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6, 0xbe, "9fadf6c10dfe6853e4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x8, 0x9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x3, 0x2, {0x7, 0x25, 0x1, 0x0, 0x9e, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5, 0x3, 0x7, 0xff, 0xc}, 0x1a, &(0x7f0000000240)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x2, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x7, 0x80, 0x80, 0x6}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "6bbd7242d8f1d03e9078d3baff5032792d04903cf78172a2a05dd7a95859f6a4a22dfaea93ec815b1d838a85b9732a41bb02c0f220d787e82108dad646bfcc95aa1ad0f1a34697cd1bc5162e690382232e0e81cf0c139418b527608ec2f37499c0a787cd65a9218cc6179457eb347d36ec013f646e160a6e37f3237d148d09b81741ad9baec875299d31377196731b27fe5ef0d4f8aa3034bf2ac4907577c037f64342601d"}}, {0xb1, &(0x7f00000003c0)=@string={0xb1, 0x3, "4ddb54d7c055ef5449734014a81823d63bfeb303837f2645cee6b29b0ef1c3a976bb8bd46a8ba01c99bb960ba1df5c5d0317e7a7b4ef1c190bd3b1caaf2f5d3f221de58944e1d8143738299115ace3682d386b806da131ac928f20a59e03323e55d04b4623d7ba5a5c79504e96a18add2568e269f076e517054a4a1bbfbd90a8b8764599e546654ba5e3f507d6881515f34af4850d6507cc92b3c35d50ed86c9bdb315a7e5c65917863531078bb02b"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}, {0x54, &(0x7f0000000540)=@string={0x54, 0x3, "0fd5599876d4bc60640990c9fa8552ae9d81339f35dc30ad01e4b5435080c70e86f378b382c6ac55b2e1f71283180ce9d006e3f64765ba7ebf69ec734ef106321024225615b22c8d028617c6112a44e41fed"}}]}) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="d1", 0x1}], 0x1) syz_usb_disconnect(r9) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000025c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002580)={&(0x7f00000013c0)={0x1184, 0x14, 0x10, 0x70bd2c, 0x25dfdbfb, {0x8, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "5b4d0d474281250fd8064f4e1e7278171e63931bc272d90174ba1830597403f207109fb0292116c1067a69ecaef1674bff4c8fc0f9c853ae71b91080b51fb4d70a75cfe15094a5a9c73da0701f010bab107b88d48237a8a67eb4c9336be0b61918ccfbe4948c0d69c40281692da4b4ace2c714ce5e5863c2d00af27068c7c230c54c21709e267b995f69a188138057137d78f64970f99a80de2a9452fa1056d30980bdd0ee8dda1668"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "424aca8dbea87c0cf603f64605a5439e35bb222c5753fc5c34da0754054737d54884b8c96df3981c66dddfbe73d445d73fd87d132e20e3a6342412fc0e0dc39a0727b1d57f1a30c44f0eb712349a094c95efd52c4f6bcafd59be7971376bb64fbd56f448cd02841cb8ba3d91d39d6173e02bd1d832b33379a28ab7d30601d791d672a33db67a5df20f50fbcdf19cedca0b9b4441bdebcab4e72fdf6051ed97c50ff26faeec21fd41c1b570d22529455391cccae53fe0"}]}, 0x1184}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 4m20.626384519s ago: executing program 36 (id=79): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0200"}) setns(0xc9, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat(r2, &(0x7f0000000300)='net/atm/vc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_EVENT(r3, 0x84, 0x7f, &(0x7f0000000340)={r4, 0x800c, 0x1}, 0x8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, &(0x7f0000000140)) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000240)="94b6", 0x2}], 0x1) read(r3, &(0x7f0000000640)=""/4096, 0x1000) 4m9.758720505s ago: executing program 37 (id=99): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = openat$mice(0xffffff9c, &(0x7f0000000180), 0x2080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000200)={0x1fe, 0x1, 0x7000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x8000, r2}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') 3m55.547615111s ago: executing program 38 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000005c0)={0x16, 0x2, 0x10, "9611eeff0ec98885165600d9dc44a5ebf48b1400de5e320000084183df00"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240088c5}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000700000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = openat$cuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x88, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x88}}, 0x0) 3m39.430557292s ago: executing program 9 (id=254): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) sendmsg$NFC_CMD_START_POLL(r1, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r3) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 3m38.565543156s ago: executing program 9 (id=255): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x8a9c}, 0x38) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) dup(r0) 3m34.875735984s ago: executing program 39 (id=236): unshare(0x42000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES64], 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x84, @empty, 0x6e18, 0x3, 'fo\x00', 0x24, 0x80, 0x2}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/file0\x00', 0x1d1) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000180)='ufs\x00', 0x214845, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000003c0)='1', 0x1) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002d40)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="07b25f90fdb912aefaedf79b4a840cbee2bca4905d6eae8f28c95ef70757acd622bb3ab634c8663d69b000ce21798c96159e5ba54c884509e61f3914b43a6fbafc91c12d41b5b2260c97a70099d467d7f8496e834cf9503aa3f1dfa1a326ecc0ae50a30cf84fe557f33f6c8ce0b6b308fb6a55c0852773b6428b40c947384269ed0a4adfd9ebfd72baa42e4cf9b963064f75827e40ffde21f8606d93b1cd16229ea69b048f2afe637fce0ed6a08ddf2ab6f268e66dff9c71", @ANYRES64=0x0], 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000400)='%pB \x00'}, 0x20) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000002000)=ANY=[@ANYBLOB="50000000100001043d5d333e14dd5bf01227bd7000000000000a000000fe090000000000000008e7f1068f7b070000000e3ebd5a5993fb86d5c28b108aaf7efe692877cc9c0243b25e37f964cb4669e6bff4e6e2a3a19e1957ff6a8ae89b393a4ac18ecd80e1b4276caaafb09c6eb3dc8e605926af4b438a6c1f4ce04f6af16435b9d496cee0336d38ba937b717477d8e69034081b2a8a54f8462c7ec64c5b37b5429bb5408507f2bbef8d3b2c0a0387f0ebda4ab709b39d53ecb3c53bac97d112b574b38b36af2a74905976e5ec500d2fb8b75cdd54cbbbffa6aff635f16c382b8bd652741f976b2a0c28e9d19f356df71a3f6351bb00"/262, @ANYRES32=0x0, @ANYBLOB="014800001953010014000200000000000000000000000000000000001c00128009000100626f6e64000000000c00028108000700b1090000"], 0x50}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), r6) write(0xffffffffffffffff, &(0x7f0000001840)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001880)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x400c854) write$nci(r4, &(0x7f0000001980)=ANY=[], 0xb6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000019c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 3m24.658402521s ago: executing program 40 (id=247): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40043d0d, 0x0) io_uring_setup(0x178d, &(0x7f0000000300)={0x0, 0x400052c1, 0x100, 0xfffffffa, 0xc}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0)) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setuid(0xee01) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000380)) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f00001ba000/0x4000)=nil, 0x4000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x7b3fab59dcab1b71, 0x0, 0x4}}, 0x10, 0x0}, 0x10) close(r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000100000000003000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000200000000000000030000001860000003000000000000000100000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000bf78000000000000b7020000000000008500000085000000b7000000001500009500000000002100"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x2a, &(0x7f00000004c0)=""/42, 0x40f00, 0x30, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000840)=[r7, r0, r7, r0, r0, r0, r0, r0], &(0x7f0000000880)=[{0x2, 0x3, 0x6, 0xa}, {0x0, 0x2, 0x9, 0xb}, {0x1, 0x5, 0x5, 0xb}, {0x4, 0x4, 0x0, 0x84c9a45a447a0031}, {0x1, 0x5, 0xd, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x2, 0x1, 0xc, 0x5}, {0x0, 0x2, 0x7, 0x5}, {0x1, 0x3, 0x2, 0x7}, {0x0, 0x5, 0x3, 0xc}], 0x10, 0x2}, 0x94) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 3m22.989423424s ago: executing program 41 (id=255): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x8a9c}, 0x38) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) dup(r0) 3m17.764795884s ago: executing program 42 (id=264): r0 = eventfd2(0x2, 0x801) r1 = syz_io_uring_setup(0x49ba, &(0x7f0000000180)={0x0, 0x5de4, 0x10000, 0x7, 0x40000094}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r1, 0x1ffc, 0xfffffffc, 0xc3, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000300), 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r0}) setns(0xc9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x64) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0, 0x0}, &(0x7f00000026c0)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() r9 = openat(0xffffffffffffff9c, &(0x7f0000002700)='./file1\x00', 0x42, 0x40) copy_file_range(r9, 0x0, r9, 0x0, 0x9, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000002740)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000027c0), 0x2, 0x0) read$FUSE(r12, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r12, &(0x7f0000004840)={0x78, 0x0, r13, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r14, r15, 0x0, 0x0, 0x1000000}}}, 0x78) sendmmsg$unix(r11, &(0x7f00000048c0)=[{{&(0x7f0000004940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004a00)="5747ebda8bcdf80ad2d356c3bc3b3d628c2ba184fae956112c3f76263daadc036c63d0377aa21a3e9812bf2c7f99355c3610e6daad7f433fd12e033a6f03f84d9bea8038aa0c5eba03428e9f62", 0x4d}, {&(0x7f0000004a80)="845e2e9598e99a7269de95a4f2d9b29971399b52f1d97c58bcf95592a35da33b546c824ca768689560d4c4f51a8f446453ba57be3e7e19f9abab7a22e046e9f491ab9ca5b31910d2234359ea6258a3b24fbccd526e6b75eefb0a4565128ee277c454d9aec681b6e1ff2edee991c88f646c1a22ce4101c92ed23d4168967180", 0x7f}, {&(0x7f0000004b00)="b9825fd27347e80e11315166bfb708685041ee6cc4fc", 0x16}], 0x3, &(0x7f0000004b40)=[@rights={{0x1c, 0x1, 0x1, [r10, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r8, r14}}}, @cred={{0x18}}], 0x4c, 0x40880}}, {{&(0x7f0000004bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c40), 0x0, 0x0, 0x0, 0x840}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005080)=[@rights={{0x1c, 0x1, 0x1, [r9, r9, r9, r11]}}, @cred={{0x18, 0x1, 0x2, {r16, r14}}}, @rights={{0x30, 0x1, 0x1, [r9, r7, 0xffffffffffffffff, r12, 0xffffffffffffffff, 0xffffffffffffffff, r11, r6, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r16}}}, @cred={{0x18, 0x1, 0x2, {0x0, r14}}}], 0xac}}], 0x3, 0x0) write$P9_RSTATu(r2, &(0x7f0000005140)={0x68, 0x7d, 0x2, {{0x0, 0x4d, 0x0, 0xea1a, {0x40, 0x3, 0xfffffffffffffffa}, 0x840000, 0xb, 0x8, 0x0, 0x9, 'fdinfo/3\x00', 0x7, '+/![/&[', 0x9, 'fdinfo/3\x00', 0x1, '-'}, 0x6, 'sysfs\x00', 0x0, r5, r14}}, 0x68) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r17 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r17, 0x6, 0x0, 0x0, 0x0) fsmount(r17, 0x0, 0x5) 3m4.13757401s ago: executing program 1 (id=302): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000002c0)=0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000380)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/events/kvm/kvm_vm_set_mem_attributes/id\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r6, 0x4a, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7fff, r5, &(0x7f0000000480)="bf", 0xfd62, 0x0, 0x0, 0x2}]) sendmsg$nl_route_sched_retired(r4, 0x0, 0x40000) write$binfmt_misc(r4, &(0x7f00000004c0), 0x2000011a) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r3, 0x2799f5eec7981083, 0x70bd26, 0x27dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x44000) write(r7, &(0x7f0000000040)="32000300070000002000000000", 0xd) 3m3.531774996s ago: executing program 1 (id=305): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x64) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x1e, 0xc6, 0x63, 0x40, 0x2770, 0x9051, 0xc628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x110, 0xc7, "", [{{0x9, 0x4, 0xd7, 0x9, 0x0, 0xb2, 0xf, 0x7a, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xa}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x143142, 0x120) linkat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file2\x00', 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) io_setup(0x6, &(0x7f0000000d80)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) eventfd2(0x83, 0x80001) io_submit(r5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdafc, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) ioctl$VT_DISALLOCATE(r6, 0x5608) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 3m1.800060305s ago: executing program 1 (id=308): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) openat$tun(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) dup3(r2, r1, 0x80000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = io_uring_setup(0x2db1, &(0x7f0000000200)={0x0, 0x7d1e, 0x1000, 0x0, 0x3c5}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x1, 0x80000000, 0x4d68000}, 0x1) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 3m1.650663031s ago: executing program 1 (id=309): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xffffffff) 3m1.415819819s ago: executing program 1 (id=310): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r3) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 3m0.601662577s ago: executing program 1 (id=311): r0 = syz_usb_connect(0x0, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/ttyUSB0\x00', 0x0, 0x24) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0xfffffffd, 0x1}}], 0x30}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x9}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000700)=0xfff7ffff) 2m51.946277028s ago: executing program 43 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) r0 = socket$inet(0x2, 0x3, 0x32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @dev={0xac, 0x14, 0x14, 0x32}, r2}, 0xc) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0', 0xff7) 2m48.740826346s ago: executing program 44 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffb8, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @loopback, @empty}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='27', 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000}, 0x28) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 2m44.575629287s ago: executing program 45 (id=311): r0 = syz_usb_connect(0x0, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev/ttyUSB0\x00', 0x0, 0x24) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0xfffffffd, 0x1}}], 0x30}], 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x9}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000700)=0xfff7ffff) 2m34.776393155s ago: executing program 5 (id=336): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000154000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80000000}) r5 = syz_open_pts(r2, 0x8182) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x49, 0x0, &(0x7f00000000c0)) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x5, 0x3, 0x4}) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(r5, r2, 0x0) 2m30.77462108s ago: executing program 5 (id=340): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) (async) r1 = syz_io_uring_setup(0x3d6, &(0x7f0000000400)={0x0, 0x5961, 0x40000, 0x3, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = fsopen(&(0x7f0000000180)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @broadcast}, 0x10) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) (async) syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'tunl0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c003f, r11}) (async) close_range(r9, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) r13 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r13, 0xc00c6f3e, &(0x7f00000001c0)={0x800, 0x80000, r0}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r15, 0x1) (async) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r16, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3f}}, {0x13, 0xb, 0x7}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090) (async) ioctl$PIO_CMAP(r13, 0x4b71, &(0x7f0000000480)={0x8000000000000001, 0x1, 0x0, 0x1000000000000, 0x7, 0x3}) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, '*'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) unlink(&(0x7f0000000180)='./file0\x00') 2m30.579505435s ago: executing program 5 (id=341): r0 = io_uring_setup(0x4196, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x1000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fsopen(&(0x7f0000000240)='ubifs\x00', 0x1) 2m29.314442933s ago: executing program 5 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/cpuinfo\x00', 0x0, 0x0) read(r2, &(0x7f0000000980)=""/1024, 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/iomem\x00', 0x0, 0x0) read(r3, &(0x7f0000000dc0)=""/1024, 0x400) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000200)={r4, 0x9093, 0x6, r4}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@nfs_export_off}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2m26.430438453s ago: executing program 5 (id=346): r0 = epoll_create1(0x0) r1 = syz_open_dev$sg(&(0x7f0000000900), 0x0, 0x8842) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000980)='\b\x00\x00\x00\x00\x00', &(0x7f00000009c0)=""/4096, 0x7, 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_init(0x20, 0x0) r3 = fanotify_init(0x0, 0x400) fanotify_mark(r3, 0x445, 0x0, r2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x2, 0xa6, "0ad68aee8e8f980a849127d2130467cc66aacb47f7ec1471727e4f8719e3e980070cc6b518eb78dd8b3a1685fead4bfdfec6efd08dc9865122f166bec2428fefefb768b282eb53b504d564f2f2030a2849539a4e4467a43d9dfbea32b9a4a183175e1e51b69990feb38eb4936061061ec9a020cab7e5bc232c632ecc5df7cc9352e46191ccd7bdd7b184e1a2e617b5b25a202e75b45df49ef566f7b21ab714b7644b6be200df"}, &(0x7f0000000300)=0xae) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r2, 0x84, 0x7d, &(0x7f0000000880)={r4, 0x2}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) r5 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f0000000640)=[{{&(0x7f0000000680)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000700)=@tipc=@id, 0x80, 0x0}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r6, &(0x7f00000008c0)='comm', 0x4) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r8}, 0xc) lseek(r7, 0x0, 0x2) read(r7, &(0x7f0000000040)=""/174, 0xae) 2m25.809271116s ago: executing program 5 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB="000000004d2f3de0d1f3e95f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) 2m25.644171485s ago: executing program 46 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000006000000ff00000000000000", @ANYRES32, @ANYBLOB="000000004d2f3de0d1f3e95f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) 2m6.102814318s ago: executing program 6 (id=476): r0 = syz_open_dev$hiddev(&(0x7f00000025c0), 0x9, 0x1c1140) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000002600)={{0x3, 0x2, 0x4, 0x7, 0x0, 0x1}, 0x3c6, [0x40, 0xb4000000, 0x1d8, 0x9, 0xfffffffa, 0x3, 0x11c, 0x80000001, 0x5, 0x6, 0x6b1812d7, 0x4, 0x5, 0x8001, 0x8, 0x8, 0x1, 0x8, 0x4, 0x10, 0x44, 0x4, 0xffffffff, 0x1, 0x3ff, 0x0, 0x500, 0x3, 0x2, 0x504, 0x0, 0x7, 0xdc5, 0x9000000, 0x0, 0x9, 0x2, 0x4, 0x79b, 0xac61, 0x7fff, 0x6, 0x0, 0x1, 0x1, 0x5, 0x0, 0x9, 0xe, 0x400, 0x8, 0xd5, 0x2, 0xb580, 0x1, 0x2, 0x5, 0x2a, 0x4, 0x5, 0xb, 0x84, 0xfff, 0x1, 0x6, 0xb, 0x8, 0x7, 0x3, 0x6, 0x6, 0x8, 0x0, 0x0, 0xe, 0x1, 0x9, 0x1000, 0x1, 0xffffffa6, 0x1, 0x759, 0x6, 0x4f67, 0x9, 0x3154, 0x9, 0x8001, 0x2a, 0xce1, 0xbb7, 0x2, 0x191, 0x7, 0x5, 0x7000, 0x1, 0x400, 0x3, 0x5de5, 0x7, 0x8, 0x40, 0x1, 0xe, 0x7, 0x7f, 0x200, 0x0, 0x0, 0x1, 0xffffffff, 0x1, 0x400, 0x7f, 0xfda, 0x8, 0x1, 0x10, 0x4, 0x40, 0x7fff, 0x10000, 0x3, 0x9, 0x2, 0x0, 0xffffffff, 0x7fffffff, 0x40, 0x2, 0x9c89, 0x8c7, 0x20000000, 0x894, 0x0, 0x0, 0x80000000, 0xffff93c7, 0x7f, 0x3, 0x7ff, 0x2316, 0x1, 0x9, 0x3, 0x5, 0x2, 0xfff, 0x6, 0x80, 0x0, 0x401, 0x1, 0x10, 0x8001, 0x2, 0x9, 0x4, 0x100, 0x6, 0x7ff, 0xccdb, 0x10, 0x6, 0x5, 0x0, 0x0, 0xf, 0x7fff, 0xfffffff7, 0x8, 0x5, 0x1abc, 0x5, 0x9, 0x77fc, 0x2, 0xfff, 0xf, 0x8, 0x8bb, 0xe, 0x5, 0x80, 0xfffffffa, 0xc63, 0x3, 0x7, 0xfff, 0x401, 0x9, 0x2, 0x100, 0x80000000, 0x80000001, 0x8, 0x7ff, 0x7, 0x0, 0xbf, 0x10000, 0x256, 0x9, 0x2, 0x9, 0x6f43, 0x101, 0x6, 0x3, 0x91d, 0x8, 0x9, 0x2, 0x6, 0xa5c9, 0xfb7e, 0x8, 0x800, 0x6, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0xff, 0x8000, 0x8c4, 0x4, 0x5, 0x8, 0x3, 0x9, 0x0, 0x3, 0x6, 0x1, 0x523804e6, 0x2, 0x3b6, 0x0, 0x3, 0x8, 0x400, 0xffffffff, 0x0, 0x2, 0x800, 0x6, 0xd, 0xc039, 0x3ff, 0x0, 0x7fffffff, 0x8, 0x4, 0x8, 0xd, 0x92ee, 0x80000001, 0xa, 0x5, 0x3949, 0x5, 0x80000001, 0x7, 0x743, 0x9, 0x4a6190c5, 0x5, 0xfff, 0xa9db, 0x2, 0xacf9, 0x8, 0x91, 0x1, 0xe8d5, 0x8, 0x401, 0x4, 0x6, 0x2, 0x6, 0x9, 0x7, 0x7fffffff, 0x8, 0xffff8000, 0xfe34, 0xfffffffa, 0x4, 0x5, 0x4757, 0xa, 0x7, 0x3, 0x0, 0x1, 0x4, 0x4, 0x9c, 0x7, 0x50dfdd3e, 0x7, 0xe, 0x4, 0x3, 0x101, 0x101, 0x6, 0x1, 0x783, 0x7fff, 0x8, 0xcbf, 0x400, 0xfffffffe, 0x8001, 0x2, 0x7fffffff, 0x1000, 0x401, 0x5, 0x6, 0x1, 0x1, 0x1ff, 0x0, 0x1, 0x800, 0x8, 0xfff, 0x8000, 0x8a, 0x622f1008, 0x6, 0x5, 0xffff1bba, 0x7fffffff, 0x101, 0x70, 0x0, 0x0, 0x1, 0xff, 0x7, 0xc6c7, 0x8001, 0x9, 0x3, 0x1, 0x0, 0x8, 0x9, 0x80, 0x4, 0x3, 0x3, 0x0, 0x2, 0xf, 0x5, 0x7, 0x2, 0xb, 0x4, 0x1, 0xffffff00, 0x0, 0x5, 0x2b30bae0, 0x5, 0x100, 0x0, 0x1, 0xac, 0x6, 0x5, 0x1, 0x3, 0x0, 0x3, 0x2, 0x2, 0x1, 0x6, 0x5210bd02, 0x8, 0x4, 0xe5, 0x5, 0xd, 0x10, 0x9, 0x2d, 0x400, 0x4, 0x5, 0x7, 0x1, 0x6, 0x4a, 0x6, 0x1, 0xb0, 0x3fdd, 0xffff, 0x8000, 0x4, 0x6, 0x7, 0xb, 0xefb8, 0x8, 0xd2c8, 0xaeac, 0x401, 0x1, 0x9, 0xa534, 0x2, 0xfffffffd, 0xff, 0x5, 0x8, 0x7, 0x12, 0x389, 0xfffffff9, 0x3, 0x63, 0x5, 0x40, 0x80, 0x1, 0x1000, 0x3, 0x3, 0x0, 0x8000, 0x2, 0x5, 0x7ff, 0xb, 0xd725, 0xfffffff9, 0x1, 0x1, 0xffffff9b, 0xb90859e, 0x6, 0x0, 0x0, 0xfffffffc, 0xd0, 0x3, 0x7, 0xe, 0x5, 0x13d20, 0x6, 0x3, 0x0, 0x6, 0x883, 0x9, 0x9, 0x5, 0x2, 0x200, 0x0, 0x4, 0x80000000, 0x1, 0xcd8f, 0x9b8, 0x8, 0x341a3eb3, 0x7ff, 0x2, 0x1000, 0x800, 0x3, 0x2, 0xee0, 0x982, 0xd, 0x7144481d, 0x9, 0x2776, 0x9, 0x0, 0x521d, 0x8080, 0x7, 0x80, 0x6, 0x1ff, 0x7f, 0x3, 0x80000001, 0x10000, 0x451654c2, 0x2, 0xf, 0xf, 0x7, 0x3, 0x9, 0x80000001, 0x1, 0x4, 0x3, 0x5, 0x3, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfddb, 0x8, 0x0, 0x2, 0x9, 0x1, 0x46, 0x5, 0x0, 0xefc2, 0x10000, 0x8bb, 0x4, 0x14, 0xfbca, 0x800000, 0xffff7fff, 0x3, 0x5, 0x3ff, 0xe1b, 0x8b50, 0x2, 0x2, 0x0, 0xd047, 0x1, 0x800000, 0x9, 0x7, 0x0, 0x68c6, 0x5, 0x6, 0x7fffffff, 0x1, 0x401, 0x7, 0x3ff, 0x7, 0x4, 0x8, 0xecd, 0x7, 0x6, 0xbf81, 0x7, 0x2, 0xfffffffe, 0x4, 0x3, 0x3, 0x4800, 0x1, 0x1, 0x9, 0x8, 0x8, 0x2, 0x0, 0x5, 0x6, 0x4, 0x0, 0x8001, 0x9, 0x1, 0x2, 0xc1, 0xe, 0x80000000, 0x7, 0x848f, 0x2, 0x8, 0x2b, 0x4a5e, 0x3, 0x6, 0x17, 0x0, 0x7, 0x3, 0x101, 0x3328, 0x5, 0x8, 0x3, 0x5, 0x40, 0x3, 0x0, 0x7, 0x26, 0x1e36, 0x5, 0x7fff, 0x0, 0x6, 0x2, 0x10000, 0x2, 0x1200, 0xfffffff8, 0x7a6, 0x1000, 0x7f, 0x7, 0x84, 0x1dad, 0x1, 0x7fffffff, 0x0, 0x7, 0x6, 0x25d, 0xb5, 0x10001, 0x9, 0x1, 0x4, 0x6, 0x2, 0x200, 0xada, 0xd, 0x7fffffff, 0x1, 0x8e0f, 0x1, 0xfffffff9, 0xa, 0x0, 0x4c, 0x81, 0xb, 0x5, 0x4000, 0x8e3, 0x1, 0x7cd, 0x2, 0x0, 0x1, 0xfffffff8, 0x7fff, 0xfffffffd, 0x4, 0x9, 0x10, 0x4, 0x3, 0x1, 0x3, 0x9, 0x1, 0x9, 0x4d, 0x8001, 0x800, 0xce0, 0x3, 0x9, 0x4482, 0xd8, 0x9, 0x44, 0xd6, 0x5, 0x5, 0x88, 0x8, 0x1, 0xed39, 0xd8b6, 0x7, 0x4, 0x5, 0x3ff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x3, 0x4, 0x40, 0x4, 0x1, 0x8, 0x6, 0x9, 0x401, 0x9, 0x6, 0xff, 0x8, 0xffffffaf, 0x4, 0xffffffff, 0x84, 0x5, 0x1, 0x4, 0x80000001, 0xffff03eb, 0x1, 0x7, 0x80000000, 0x2, 0x10001, 0x5, 0x9, 0x5, 0x10001, 0xfffffffb, 0x3, 0x7, 0x97ac, 0xac5fc9f, 0x80, 0x7, 0x7fff, 0x9, 0x6, 0x6, 0x6d, 0xa, 0x8, 0x6, 0x8, 0x3, 0x8, 0x5, 0xa5b, 0x0, 0x8000, 0x9, 0x8, 0x40, 0xfffffff8, 0x1000000, 0x8, 0x8000, 0x3, 0x1, 0x97aab0bf, 0x8, 0xfffffbff, 0x8, 0x5, 0xde0, 0x2, 0xb04f, 0x1000, 0x2, 0xffffffff, 0x100, 0xfffffffe, 0x8, 0xa, 0x6b, 0x2, 0x1, 0x9, 0xfffffff8, 0x7, 0x5, 0x6, 0x6, 0x6, 0xfffff800, 0x40, 0x8, 0x5, 0x8, 0x1, 0x800, 0x81, 0x4, 0xd, 0xfffffff0, 0x6, 0x4, 0x3, 0x10, 0x80000001, 0xa, 0x8, 0x2000000, 0x4, 0x1, 0xe2e0, 0x1, 0x40, 0x3, 0x3, 0xfb3, 0x7, 0x8, 0x0, 0x9, 0xa84, 0x3ff, 0x7, 0xa7, 0x7, 0x7, 0x5f, 0x8, 0x1, 0xa26, 0x93900, 0x0, 0x0, 0x10001, 0x1, 0x7f, 0x4, 0xc93, 0x2, 0x4bc, 0x5, 0xb, 0x9, 0x8000, 0x400, 0x171, 0x5, 0x3, 0x7, 0x6, 0x9, 0x8, 0xf3, 0x3, 0x837, 0x7f, 0x101, 0x8001, 0xbb46, 0x3, 0x401, 0x80, 0x1, 0x3, 0x8, 0x10, 0xffff, 0x100, 0x4, 0x7, 0x8, 0x2, 0x200, 0x521, 0x0, 0x9, 0xfff, 0x8, 0x3, 0x9, 0x2, 0xf, 0xe, 0xe0e, 0x7, 0x101, 0x4, 0x401, 0x0, 0xfffffffb, 0x3, 0x3, 0x1, 0x0, 0x0, 0x5, 0x5, 0xfffffff7, 0x1ff, 0x3, 0xfffffff5, 0x200, 0x4, 0xf, 0x6, 0x5, 0x4, 0x0, 0x2, 0xfffffff7, 0x4, 0x8, 0x400, 0xffffff8f, 0x40, 0x6, 0x0, 0x80, 0x6, 0x80000001, 0x0, 0x3, 0x4, 0xb, 0x8, 0x9, 0x800, 0x4, 0x7, 0x5, 0x1, 0x8491, 0x1, 0x1, 0xb83, 0x8, 0x5, 0x7, 0x8, 0x1000, 0x8000, 0x6, 0x9, 0xffffff06, 0xefad, 0x4, 0x7, 0x6, 0x9, 0xc9, 0x7, 0xffff, 0x89ba, 0x0, 0x6, 0x80000000, 0x0, 0x1, 0x2, 0x8, 0x58e, 0x2, 0xcee3, 0x24000, 0x3, 0x9, 0x80000001, 0x1000, 0x22, 0x6e, 0x3, 0x9, 0x68, 0xb6, 0x9, 0xffffffff, 0x1, 0x5af9ee19, 0x4, 0x3, 0xffffffff, 0x1000, 0x7, 0x9, 0xfffffffc, 0x2, 0x3, 0x406, 0x1ff, 0x1, 0x96, 0xffffff01, 0x1ff, 0x86f5, 0xff, 0x7, 0x80000001, 0x5, 0xfe, 0xcf, 0x2, 0xe88, 0x5, 0xe, 0x5bea014d, 0x6, 0x10000, 0x8, 0x0, 0xfffffffc, 0x5, 0x1, 0xc, 0x7, 0x4, 0x1, 0x7fffffff, 0x100, 0x3, 0x10000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rxrpc/calls\x00', 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f00000002c0)) read(r2, &(0x7f00000002c0), 0x0) read$nci(r1, &(0x7f0000000300)=""/133, 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000500)=0xe4) read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002580)={r3, r4, r5}, 0xc) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x420, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$incfs_size(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 2m6.099390437s ago: executing program 6 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x14) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080), 0x2040004, &(0x7f0000000a80)={[{@uuid_auto}, {@index_off}, {@redirect_dir_on}, {@uuid_auto}, {@xino_auto}], [{@smackfsdef={'smackfsdef', 0x3d, ']./@:h&:%-{:&\',j\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/urandom\x00'}}, {@euid_eq={'euid', 0x3d, r1}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000200)={0x0, 0x7, 0x2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000600)={r3, 0x12f, 0x2}) socket$alg(0x26, 0x5, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) 2m6.018649329s ago: executing program 6 (id=478): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m6.01589718s ago: executing program 6 (id=479): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x64) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x1e, 0xc6, 0x63, 0x40, 0x2770, 0x9051, 0xc628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x110, 0xc7, "", [{{0x9, 0x4, 0xd7, 0x9, 0x0, 0xb2, 0xf, 0x7a, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xa}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x143142, 0x120) linkat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0/file2\x00', 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) io_setup(0x6, &(0x7f0000000d80)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) eventfd2(0x83, 0x80001) io_submit(r5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdafc, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) ioctl$VT_DISALLOCATE(r6, 0x5608) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 2m4.733065084s ago: executing program 6 (id=481): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250600000008000100", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r5) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 2m3.814949037s ago: executing program 6 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m54.857925849s ago: executing program 8 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300cda3980abae5a002d1adf2cf65b76e3f0756ae84eb22", @ANYRES32=r2, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r3 = syz_clone3(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb7) r4 = getpgid(r3) kcmp(r4, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x0, &(0x7f0000001900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0x0, 0xd5) r6 = openat$cgroup_ro(r5, &(0x7f0000001980)='cpu.stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000019c0)={0x1, &(0x7f0000001a00)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)) r7 = getpid() r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000001ac0)={0xa, 0x4e25, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001b40)='./file0/../file0\x00', &(0x7f0000001b80)='tracefs\x00', 0x0, 0x0) r9 = openat(r6, &(0x7f0000001bc0)='./file0/../file0\x00', 0xc800, 0x10d) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001c40)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = syz_open_dev$vbi(&(0x7f0000001c80), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, &(0x7f0000001cc0)=0x1) ioctl$XFS_IOC_FSGROWFSRT(r11, 0x400c5870, &(0x7f0000001d00)={0x9, 0xf}) sendfile(r10, r9, 0x0, 0x7ffff000) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001d40)={0x1, &(0x7f0000001d80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) syz_pidfd_open(r7, 0x0) 1m54.228569811s ago: executing program 8 (id=517): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20141, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006a80)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000700)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)={0x4c, r4, 0x10, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x50, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc007}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) accept4$nfc_llcp(r5, &(0x7f0000000640), &(0x7f0000000740)=0x58, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000580)={0x100}, 0x30, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f00000008c0)={0x0, 0x58, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d28616573290000000000000000000000000000000000000000000000002400000000172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"], 0x78}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a80)={0x114, r9, 0xc8f, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8810}, 0x80) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000c80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2086}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x587}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x271}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x7059d, 0x606}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xffff}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) write$FUSE_INIT(r1, &(0x7f00000025c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x3, 0x5691409, 0x7ff, 0xffff, 0x0, 0xff, 0x0, 0x0, 0x100, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000046c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006740)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ceb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000006780)='./file0\x00', 0x80700, 0x0) 1m52.78886317s ago: executing program 8 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2010042, &(0x7f0000000100)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = open(&(0x7f0000000180)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r0, 0x400, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40078, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000020064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100010000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m52.74944465s ago: executing program 8 (id=520): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000340)='.\x00', 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) statfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000321414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) flock(r3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000a00), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000a80)={@rand_addr=0x64010101, @multicast2, 0x0, "7beb38c70d477344f6f4c8245dc2982336817a0366f7ce622aef8a1828b58306", 0x1, 0x10, 0x1, 0x4ea85437}, 0x3c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) truncate(0x0, 0x9) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000ec0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000f40)='net/ip_mr_cache\x00') pread64(r9, &(0x7f0000000f80)=""/253, 0xfd, 0x1) flock(r2, 0x5) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x60, r10, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfe, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m52.500038352s ago: executing program 8 (id=521): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250600000008000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r5) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 1m51.627666257s ago: executing program 8 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x1, 0x0, 0x0, @binary='1p'}]}]}, 0x2c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b0601080000000000000000060000020500010007000000440007800900020073797a3100000000"], 0x2c}}, 0x4800) 1m49.874465564s ago: executing program 4 (id=528): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fsopen(&(0x7f0000000500)='nfs\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xd4ad, 0x800, 0x0, 0x4e}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000380)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8e, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r1, 0x1ffd, 0x9c3a, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='proc\x00', &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/kmsg\x00', 0x0, 0x0) read(r5, &(0x7f0000002000)=""/1000, 0x3e8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffe79) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r8, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4093, 0xffd}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r9, &(0x7f0000000e00)={&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/104, 0x68}, {&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/212, 0xd4}, {&(0x7f0000000b40)=""/59, 0x3b}, {0x0}], 0x5, &(0x7f0000000d00)=""/198, 0xc6}, 0x2000) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x94, 0x30, 0xcac229faa96ee7df, 0x70bd2b, 0x1, {}, [{0x80, 0x1, [@m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x850, 0x96b4cd8bad7a3a6c}, 0x1}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x10}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3ff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xd}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x94}, 0x1, 0x500}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000e40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 1m48.592647986s ago: executing program 47 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m48.12374889s ago: executing program 4 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000040)) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b0, 0xa, 0xa, 0x181, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x19c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x39ec}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc9e}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x100}]}}}, {0x4c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x89f}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xdfe2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x78, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xe81e}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r2 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='iocharset', &(0x7f0000000200)='io#harset', 0x0) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0xd4, 0x1, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf322bb98}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m47.892095814s ago: executing program 4 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf254300000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x17, 0x1, 0x0, 0x3, 0x0}) 1m47.723018452s ago: executing program 4 (id=536): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x4007, @fd_index=0x1, 0x2, 0x0, 0x10000, 0xa, 0x1, {0x1}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x2000, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1m47.5044948s ago: executing program 4 (id=537): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250600000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r5) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 1m46.571900261s ago: executing program 4 (id=539): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x1500, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x30000, 0x0, 0x1d4}, 0x8840) 1m36.867257695s ago: executing program 9 (id=531): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x17, 0x1, 0x0, 0x3, 0x0}) (fail_nth: 5) 1m36.714849226s ago: executing program 9 (id=553): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x64) syz_usb_connect(0x0, 0x24, &(0x7f0000001880)={{0x12, 0x1, 0x201, 0x1e, 0xc6, 0x63, 0x40, 0x2770, 0x9051, 0xc628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x4e, 0x110, 0xc7, "", [{{0x9, 0x4, 0xd7, 0x9, 0x0, 0xb2, 0xf, 0x7a, 0x5}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xa}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}]}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x143142, 0x120) linkat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0/file2\x00', 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) io_setup(0x6, &(0x7f0000000d80)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) eventfd2(0x83, 0x80001) io_submit(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdafc, 0x80000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) ioctl$VT_DISALLOCATE(r5, 0x5608) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 1m36.04853895s ago: executing program 48 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x1, 0x0, 0x0, @binary='1p'}]}]}, 0x2c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000b0601080000000000000000060000020500010007000000440007800900020073797a3100000000"], 0x2c}}, 0x4800) 1m35.07484128s ago: executing program 9 (id=556): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000500)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@dev}, {}, {@loopback}, {@private}, {@loopback}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000900)='6', 0x32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250600000008000100", @ANYRES32=r4, @ANYBLOB="080001", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f00000001c0)=""/244, 0xf4}], 0x2, &(0x7f0000000300)}, 0x20) ptrace(0x10, r5) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x80, 0x2, 0x9, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000101000000080009000400000014002000ffffffffffffffe40000ffffac1404bb0500070000000000060002000100000008000a000400000014001f"], 0x5c}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4903, 0x0) 1m34.142639331s ago: executing program 9 (id=559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x7fffffff, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x4, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0xfff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x6, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0xa, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x7], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x400, 0xa, 0x88, 0x2, 0xfffffffa, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x8, 0x10, 0x7, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.current\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f0000000f80), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0xf, &(0x7f0000000340)="29b884acd96e28d087a96c31f6ca6546939da504c74b426758b4d6c3796b63f6cf8333ec2a47d6ca64d1df39285289064f03a1856f1846255aff71a629795381ddb1bf07ce90fc69ad9dd9d7953a95b9169df6ee94f720fb71a9012334889df889dafcce38f1e33f20660a454059ba49e161a291f703a10efbe323815644aa7c02b3a6a11c4cd8abda1d986f45e89a574d") sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf25110000000800010004000000c611d7b6f50e0bbc4a754a5878a48be03045a502dae438f0f2c2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000fc0)={'virt_wifi0\x00', @random="06000000c95d"}) write$input_event(r1, &(0x7f0000001000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) sendto(r2, &(0x7f0000000140)="7fe3dcc39350b7bef2dd62f364ed4ee93c3467de9ce7d5e667ffe331e69deef66a28c4ab076253de8de4044f372e0009390aeeea6334aa88a6ec84ab22341bf0947a0261778b704a39e0d463379194f1782da3e9a61e401c0064397a7e", 0x5d, 0x44, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) r8 = accept4(r0, 0x0, 0x0, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @remote}) sendmmsg$alg(r8, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1}, 0x0) 1m30.680953624s ago: executing program 49 (id=539): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x1500, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x30000, 0x0, 0x1d4}, 0x8840) 1m18.687851111s ago: executing program 50 (id=559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x7fffffff, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x4, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0xfff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x6, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0xa, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x7], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x400, 0xa, 0x88, 0x2, 0xfffffffa, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x8, 0x10, 0x7, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.current\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f0000000f80), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0xf, &(0x7f0000000340)="29b884acd96e28d087a96c31f6ca6546939da504c74b426758b4d6c3796b63f6cf8333ec2a47d6ca64d1df39285289064f03a1856f1846255aff71a629795381ddb1bf07ce90fc69ad9dd9d7953a95b9169df6ee94f720fb71a9012334889df889dafcce38f1e33f20660a454059ba49e161a291f703a10efbe323815644aa7c02b3a6a11c4cd8abda1d986f45e89a574d") sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbdf25110000000800010004000000c611d7b6f50e0bbc4a754a5878a48be03045a502dae438f0f2c2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000fc0)={'virt_wifi0\x00', @random="06000000c95d"}) write$input_event(r1, &(0x7f0000001000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) sendto(r2, &(0x7f0000000140)="7fe3dcc39350b7bef2dd62f364ed4ee93c3467de9ce7d5e667ffe331e69deef66a28c4ab076253de8de4044f372e0009390aeeea6334aa88a6ec84ab22341bf0947a0261778b704a39e0d463379194f1782da3e9a61e401c0064397a7e", 0x5d, 0x44, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) r8 = accept4(r0, 0x0, 0x0, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @remote}) sendmmsg$alg(r8, &(0x7f0000004680)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1}, 0x0) 33.649738417s ago: executing program 7 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./pipefs\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') (fail_nth: 8) 33.495736137s ago: executing program 7 (id=746): openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0), 0x80980, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'pimreg1\x00', {0x3}, 0x7}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x40) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000240)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.158659263s ago: executing program 7 (id=755): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 15.392624609s ago: executing program 7 (id=758): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000013c0), 0x0}}, &(0x7f0000000300)) mount(0x0, 0x0, &(0x7f0000001780)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0xfff, 0xa0000000000}) 15.364619906s ago: executing program 7 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x72) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/options/bin\x00', 0xe0202, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x82d7) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x7f, 0x1a, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x6, 0x20041}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000004900)={'syztnl1\x00', 0x0}) 15.347866101s ago: executing program 7 (id=765): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000001c0), 0x3db66e6159adff3, 0x10100, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x40a, 0x1, 0x4, 0x0, 0x800, {}, {0x4, 0x1, 0x5, 0x4, 0x4, 0x2, "4d11f9bd"}, 0xdd}) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000000440)=@newpolicy={0x11dc, 0x13, 0x10, 0x70bd26, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x4e24, 0x0, 0x4e22, 0x2, 0xa, 0x40, 0x90, 0x4, r4, r5}, {0xcd, 0x559, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x6, 0x401}, {0x7a, 0x5, 0x5, 0x1}, 0x40, 0x6e6bbe, 0x0, 0x1, 0x1}, [@algo_crypt={0x1048, 0x2, {{'ctr-cast5-avx\x00'}, 0x8000, "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"}}, @policy_type={0xa, 0x10, {0x1}}, @algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0xa0}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@mcast1, 0x0, 0xa}}, @iptfs_init_delay={0x8, 0x27, 0x3}, @algo_aead={0x51, 0x12, {{'aegis256-aesni\x00'}, 0x28, 0x0, "67eb3426f5"}}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x80}, 0x24004840) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000400)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, 0x0) 9.240815861s ago: executing program 3 (id=783): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000240)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000300)={0x0, 0x0, 0x3}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x3}, 0x10) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000380)) write(r3, &(0x7f0000000280)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe64e431205f2e760c6966", 0x23) 8.574371663s ago: executing program 2 (id=787): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000800)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x181402, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r4 = syz_open_pts(r3, 0x20800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x44) write(r2, &(0x7f0000000880)='0', 0x1) memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\xb9\xc4\x01@\xfb\x0e\xfa\xe0<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%0\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x8a\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB\a\x00k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xc7\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xac\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\xb6\x94\x13%a\x9bXN\xfem\x1a\x18iO\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xf8\xfa\xc9\xd5\xc7\x1c\xf8r\xb8\xfe\xf2\xe7=\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfaX\x8f\xbd\x06X\x96\xb3X\x0f\bR\xe6-\x81\x0f\xaa+,RY?\x9b\x011\xfe\xd2\"=\x0eK\x85\xde\xbd\xe7\x1eN\x98\x01Y\f\x1f\x1er\xbdx\xcf\x84\xccz\x88Z\xb3~\x12=\xe1\x8d\xeb\tD\fH\xf4\xdd\x96\xee\xca\x8b\xf2\xcb3RG\'\xfe\xf1h\xd0\xf5$8L\xc9\x92D+iI2\xa3Oz\x9d\xb3b\xb6\x04E\xf2\x9c\x99*\x03\x16)y\npKQ\xbf\xfa\x130x\x81\x129\xc4\x18\xdd{\xfbG\x1d\xec\xe9\x84\x98h\xea\x9a\xffg\fq\n1\x87$\xe6O-kT\x13\xda0H2\x1b\x95\x88\xe2\xa4\xf2\xfc\\\xd3]M\x8awn\xee\xb9\x13ks\x9a\xe7\xbbF6\x8bLyZ@,;O\xfd\xc6\x81\xbe(\xdc\nG\xa7\x06X-\xc1\xf6\xc8\xfb\x94\x86\xfb\x83\xc9\xe2\xc1\xc1$\xf5*E\vO\x90%\xdd\xed\xd4\x01\x8c\x17<(y\xbb~\xebm\xbe\x0e\xf3.\x86', 0x6) openat$sysfs(0xffffff9c, &(0x7f0000000cc0)='/sys/power/pm_freeze_timeout', 0x42, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0x1000000}) 7.909078858s ago: executing program 0 (id=788): mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f0000000340)="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", 0x3da245f189630cc9, 0xfffffffffffffffd) syz_clone3(&(0x7f0000000900)={0x180801400, &(0x7f0000000980)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9, 0x8}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000a00)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="0800a5a37a84000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000020000000"], 0x5000) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000c00)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000c80)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000d80)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r5 = syz_open_pts(r4, 0x141401) fcntl$setstatus(r5, 0x4, 0x2000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5509, 0x0) write(r5, &(0x7f0000000e00)="d5", 0xfffffedf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000e40)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f0000000300)='./file1\x00', 0x800, 0x1) 7.641216234s ago: executing program 3 (id=789): openat$tun(0xffffffffffffff9c, 0x0, 0x34d2c1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r1, &(0x7f00000005c0)='3', 0x4e) mount(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x5805, &(0x7f0000000600)={0x0, 0xd7e7, 0x10000, 0x3, 0xee, 0x0, r1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x30}, 0x1, 0x1a000}, 0x40) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) migrate_pages(0x0, 0x2, &(0x7f0000000480)=0x7ff8000000000, &(0x7f0000000680)=0x100) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000091d032ba2e8706720010", @ANYRES32, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) getpid() r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES16=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 7.611416185s ago: executing program 2 (id=790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) capset(&(0x7f0000000340)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8}) mlockall(0x7) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x54, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdir(&(0x7f0000000000)='./cgroup\x00', 0x1fa) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 7.059133316s ago: executing program 3 (id=791): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x19, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x5, 0xfffffffe}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 6.547177926s ago: executing program 0 (id=792): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000002c0)=0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000380)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/events/kvm/kvm_vm_set_mem_attributes/id\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r5, 0x4a, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000480)="bf", 0xfd62, 0x0, 0x0, 0x2}]) sendmsg$nl_route_sched_retired(r3, 0x0, 0x40000) write$binfmt_misc(r3, &(0x7f00000004c0), 0x2000011a) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, 0x0, 0x2799f5eec7981083, 0x70bd26, 0x27dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00fcff00", @ANYRES16=r7, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x44000) write(r8, &(0x7f0000000040)="32000300070000002000000000", 0xd) 6.211588876s ago: executing program 3 (id=793): socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000900)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6}) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x1100) 5.983607957s ago: executing program 3 (id=794): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x60242, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg\x00', 0x3c32}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x44) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20060094}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000440)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r7 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x0, r7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x2000000000000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x5, 0xfffffffe}, 0x8) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4004ae52, &(0x7f0000000240)=0x1) close_range(r1, r3, 0x2) 5.390223196s ago: executing program 2 (id=795): modify_ldt$write(0x1, &(0x7f0000000100)={0x8, 0xffffffffcfefefff, 0x400, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2\x00', 0x1ff) modify_ldt$write2(0x11, &(0x7f0000000280)={0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) 5.173750889s ago: executing program 0 (id=796): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e40), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000e80)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='10 1 4', 0x6) ioctl$UI_DEV_CREATE(r0, 0x5501) mount$fuse(0x0, &(0x7f0000016dc0)='./file0\x00', &(0x7f0000016e00), 0x0, 0x0) write$input_event(r0, &(0x7f0000000f00)={{0x77359400}, 0x12, 0x401, 0xfffffe04}, 0xffffff2c) 5.111797914s ago: executing program 2 (id=797): syz_usb_connect(0x0, 0x371, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 4.902839814s ago: executing program 3 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x50) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000000)='vfat\x00', 0x6484, 0x0) r0 = add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$clear(0x7, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0xffffffff, r2}, 0x38) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000500)={0x0, 0xaaa, &(0x7f0000000700)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000007c0)={{0xffc, 0xfec00000, 0xb4e97df6b51a65a6, 0x0, 0xb, 0xb, 0x1, 0x1, 0x4, 0x81, 0xaf, 0x59}, {0xa000, 0x60000, 0xc, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xe, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x60000, 0x40000, 0x9, 0xc, 0x66, 0x17, 0x43, 0x9, 0x6, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x7, 0x0, 0x81, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x21, 0x9, 0x5, 0x5, 0xff, 0x34, 0x3}, {0x2000, 0x10000, 0xf, 0x9, 0x0, 0x6, 0x2, 0x6, 0xef, 0x82, 0x2, 0x9}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x6, 0x3d01, 0x70000, [0x8000000000000000, 0x2]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000980)={0x0, 0x0, 0x2ffc, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000009c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x8, 0x40000a1d, 0xfffffffffffffff1, 0x5, 0x4, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x7, r2}, 0x38) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xe9000000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x1000)=nil) syz_create_resource$futex(&(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000280)=@req={0x20, &(0x7f0000000240)={'sit0\x00', @ifru_mtu=0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x2, 0x0) 2.364687063s ago: executing program 0 (id=799): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000002c0)=0x3, 0x4) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000380)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/events/kvm/kvm_vm_set_mem_attributes/id\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_submit(r5, 0x4a, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000480)="bf", 0xfd62, 0x0, 0x0, 0x2}]) sendmsg$nl_route_sched_retired(r3, 0x0, 0x40000) write$binfmt_misc(r3, &(0x7f00000004c0), 0x2000011a) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, 0x0, 0x2799f5eec7981083, 0x70bd26, 0x27dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000600)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00fcff00", @ANYRES16=r7, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x44000) write(r8, &(0x7f0000000040)="32000300070000002000000000", 0xd) 1.959579875s ago: executing program 2 (id=800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000180)='nfs4\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x100001, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7809}], 0x2c) mkdir(&(0x7f0000000000)='./cgroup\x00', 0x1fa) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x820100, 0x0) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10) listen(r2, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.10369292s ago: executing program 0 (id=801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x16, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000100)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1fff, 0xfffffffd, 0x9, 0x0, 0x0) (fail_nth: 4) 347.495526ms ago: executing program 2 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x1) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYBLOB="e674d42dcdccb81ea2bdd493a287f647928f2c2c74a9a16a558b25da9becad9152d2f9cafc7eb1aade136c9e97640c06e1c7f0856828a63233ae13ced42ca091a7f9c6805b7addbef082a2b2b41b26bfbb12182a776caee6df9a736c89a4d8919524a21c8b406c92c949899ed8195fe47b0ed31f9a1b07af8e00bd7d32e47c477c391d68f46d267aa012cb822295be4b182ab46b6c8b226e1a16980f4db6e8b7c19ee74ed6d5d89599e2238809a63a5ce1f4ac5a57752eb4807cee08afa79ae972439ac579", @ANYRES64=r3, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000be6500000500000000000000", @ANYRES32=0x1, @ANYBLOB="00cb00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000000000000000b36e000000000000a48b0000000000000000986cadb111a88bfbf8eabb695156"], 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000340)={0x75b2, 0x76, 0xfffffe00, 0x84ea, 0xffffff80, 0x8}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000180)={'macvlan1\x00', 0x7}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000001c0)={r9}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r9, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x8, 0x4, 0x200, 0x10, 0x7, 0x9}, 0x9c) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) close(r10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 331.367486ms ago: executing program 51 (id=765): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000001c0), 0x3db66e6159adff3, 0x10100, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0x0, 0x2, "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"}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000001c0)={0x40a, 0x1, 0x4, 0x0, 0x800, {}, {0x4, 0x1, 0x5, 0x4, 0x4, 0x2, "4d11f9bd"}, 0xdd}) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000000440)=@newpolicy={0x11dc, 0x13, 0x10, 0x70bd26, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x4e24, 0x0, 0x4e22, 0x2, 0xa, 0x40, 0x90, 0x4, r4, r5}, {0xcd, 0x559, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x6, 0x401}, {0x7a, 0x5, 0x5, 0x1}, 0x40, 0x6e6bbe, 0x0, 0x1, 0x1}, [@algo_crypt={0x1048, 0x2, {{'ctr-cast5-avx\x00'}, 0x8000, "5586bf68fa2579221a3cb76aa88a65388ec89c769957305ef0212188d837f3a3924658acc19ad7be97fc7eb4c8e70810d61760cd4e5031192fb65ea6e50cc430d3c5d7f77521610af9d56625b93b1125668d422176aa8d6b7c65899cf08a5eba40caa4fe867eac9c039b252ee33425363e9cfb5c963071268c4dde4a7f8e447762b8dfed355ac1f0b6c4db2bdc352e9eddd4e30302c39e20f4998cebafc9b7c6fcc9097df1aabb10efff40b3cfc3b38c778f5d25139fc938c6d99f14d2e1f61ba7705f0241ca44ca9986782dbe16c6a4599e2dde56fac445a586759d057097ab5eaef66ad0a7a452ea60112bde7cfddc8eca436c5aa64dbd8ea5381988c6037251f807c1ef7b55045098068a215785f8210b8248b96b07c1363ee14b4e98fd87869df4aed27605ec23398f93e12ecfea284d434e345f5e0bf78fe09358db694f1379e6c004d648a69c73ed0b4fa46e38fac7c4e4b6c84b9325c3a99fe89822bfd6de7031a0ce9494164321158c1a537cf417c7ef3e2e3911f0c830f7d38036ccbd8d4e1d1b91d3d81d8766ffa97f1257e7e563ee2c9e4e2f705fa012d006e424d60e770b1033dac3ee90d81d69483959f3947ffa668e16e3034585e026191351dc7cab801b9cec896373d05a0afd1ce47adff0508f546744a26fd2c5546bea97cab13d60252ee57c4fc20a5e2ee0cba40ee15b2f459f5a2ed320423e9c366e276cd061787ab10563d28cc30bd5c06478bd00e4e97c206a05faa1ab60c43d0ad07037b0ee464e0bfebced66e1746e6f8c04e20309cf2158e83d7f7f54df01610a3fdaf7512d7b8636736bbfea6ff9297dbdbce1d85e0f249c7c48ee5628d68dc3beb92fbe092feb66cfdd2d512a4ed1b18772550a88d02c84b637ccf94d7fbde5c24dc4888915ecd10e6f7cf8dfdc910de31e5b9d6d4daa038f7b2d4b0b6db0e51dbeddd9108ea94805d7845a4ee22c4bb1192feeb59d9f5728782cc9a8c703792497930678122a1a7e287469144b4f52eed7d842b18dc378d642be4fe94f757f9d59cd25ab51451e097e9baefb8209c86caeb43f24c34ed916dbadb928e5a7c86d185f4dda01b0492e13d311014fc2e5b6caf6741844eacc3c71a096ecccdc0ce81d0226b3c1eb048b73ce6a778be1636f9e1507e90b93b084318a6b520c1acd3bfa4cd3b0737342494fab5dd0dcdef0d4834751f87a3914dbac8447b0736b7a76c57ed153b313743482d310aeadceaecf4002e92910f021a5b1287cea28d5584f7b2128818dbd50bd45caad281c6ae633069bf8e8e821e460ee02d5d3492ca486cadf6073b5f347767d877df07aa5abace1a293a15c21cf0baf776df371a10229224ad0bd4931b69a498eb8e3fc44f791eb86d234b2241be2ae2048ea4b180de03cf5f4d38466e0ff3d4168cffba75c650048f9c4f981b57da9916bb5dfa7dfd6e4b9c573fe863d6aeff91602623f9a5ded13c5dbf1e4b48fb4f3fa2a15a09f61624a121104cd4e3f0dccab9309b056ecd96e927b1b058e745e3823d56123ac15adfe3b35ce88e3738f90b84b1db029ae962a92730ba247628b8d47933e034ac135fbc203fedd0ba19eb75a0815eb287a5aaefbf2beb90e16e0e2974eb87d3fe57f2f4838340ead0e0b939deb59b5da3a5285f149d976fad03d99aaaf8a26a9c12a58c8746e1e954f20d872cefcc6ea6168a33d6f9851709065d3af537e3e6465dc9facc38cc3f1ac3901a1bbc52329757e2dd2a0eacde7ee6743db38a0e10745557310e72184328b5fa7ff247b59fc2b3bd962417e87f55c2d894dd680e0c41b42d959886e41868d0204df4ee12a58f806d26e631355afb696b8a2de05db6331f0f38bd8060b62dd041d084679678e7739a4fb9fd47da490fe5db5fa09884db0b9ff19e4c03a0e0c0f0d33a6df298f5acaec22fe84a89ebe2149b89ef3e61d420ee304932455d15a369c8f965623b914b8aa1406edca1a7d4135a426e522d4457d8062bcdec24581e44b5a22301cedddfb871854cbe593df9876e5a90627f0d487263665bd1cbf497b9a69868d7bfb2c087b5043ad83f941d46889e63a773cafe039f7f1820d86f26376825c222c0ea567c6c9bdb4ad68a2d5b6ebc9911e72a597a7ae605e3a8b2db8156cf8a287140de04e5bf80905e4218e347b485020dfc60b9b4c1735c5fe73e3ab7ac87c2b8da5bed67ab5aa3e4d360470f851f0e4547b42d68fb894c9f0f9444e9b9e22fd6d4eb8c2283efc22ee11fd4c07545e8748ca6c2e788005b57de1d2662db1a166ed4ef9b3c4136676b8b89d7bc2134dbe0073138f602184c2128db8384b1add8d430b55d3bef577d8e5854d30c6a537f5841c5fcabb19d43c092849ecc9aed73c0eadb310fc7dc16c36a3ba0821bc45dc319adb36bde6dcae58226f51c203592fd686fe19994107047f4ad7c22ea88ad73c3028cb7e4e21b92498f92e709ed162f2975ddb2bb5aa912367d5fbc53ada61128ed4b0fefecc61bb733672a2457f6b58c52a88f088d6580bc8c662c4f71f4c483e66a9c3ca169e5505f90003780f3b82476a480be569a556644692fef807e0906a456a9907799beb8737a62cbd74195ad3a814777a867cb7583c20873c802942c3c2c8aa49c22fad4eb9fd7182ad5bb383a4ce6ff607fb11aa6a203cad9166813027523c3255ed03bbbc7dc9a33ea6b7064682f273773478a9455a1651f641bf34fee1abc501d9b5e9a25676400cc66cbec15b6a909678cc0886fee7d23624edc8accdf5bcb8d07946b0eeae00e5d537fb87fe34418f7b6d796b28efb5e97771e46a03acbe97d95fb5e6665985cb44ecf4da3dd26c193c3665ce9e5555c0a6a87018c0980978ef1308b22f1ef656c73e0e15ec04c9e35f4054e91b1ba86c6f40e0eb60eeaea495a2866330e952721a7951bab6ec704d10e02a6d83e63def4cea6281613a8df2f098b9dbc8ef21241585f8300e274db4e13ec03e2270bedbe7bef17a5774d5b411a9706da91929c3953723121dc1b44fa7503b823446c1a28c22be1ff1e6a5bc066ef555e4e8b9d91f0b4007a208e671a223072bb5cfb9889321f9dcd53b873d682dbdf7e1f9394e648f77f7261fa8e7f0ebb335a9aad4c85591d9ec39db7046135a9e6eb3af89392472e67b70e05b32708816c17302fbbee6494b8be720b904a20826b1b642cd422d82c7b729f923967c5eace5ad0b907a50604bbf9656a7a823648052974c2c92cf535c80143e5976af93cd10d3eb63d388621a44d2d3e1783c81b0a6ab1f75d742f63ff985a2f6b324df794992d8732aae4aa11d38050e2a71a9da59de22b8a0e2e3483eac17e51f15576db5a003c98237a35aa82e0df3af70547433e067ef2a34ace87a6bdf4b2dc0da70d331a038750bd39dccd5e7d852a4ac4a3c86ac55fd25d48c072ad6504a126bb58854dcf0996a8a51aaa1a982825c2a5aae587344d2e266ca0e5350c104f5c06add7f1d796291275240a270e1d7953ea5b0a62c57307bd835a75c30e36b58bec5bfab6141efbb559a39b7a33549352b45948b1641a175ec8fcd7d5b97ed7c4b4e81c807390e016181a863eefafd4c6501035bed1856e70f21a72a27ed20752bea7f396a83517f97002a76d1f629eff544bcbed3d1390a83e9187914625ce6b5edd8966009ec49276042a64339cf12d9c6e0a217a3b816a325dfefa51f4a61d77779ae34e35e4952fc08d6b68fd4321e099dd3975a91c145b946adf8f053f0c43e904e88d45e6a159849681984e0d0463ea0bd841252ee5d8e54b94635e833cf19cd23c49ca1e78755ed41b8c840e3cc467e777501051f62ba60d2ef5d63c11c687d1e164f2b91d3e122822805d3ae652d13f7a8e00e9ab4396f0256bf8827d0c1d9f668cfe4523af7268e01ece9da4d13a9a7643a61fbfb5c3c429e14d86d3d57fa63449fd4c36fc965080598ff1b39432f7a01569d9e7958a7c70bd6ebe9ff9baaad30b66de7c0fb5a829a6d017a149a9d2fc2a3a8c46513710ad20367b206b7b7bfba92b782550fd039331804650c67a31b63a3366e10df8a3bc9dab52dbfbe73ec3392f4186262bc35964e42afe1290ec5dbc6b2b2a5d31046302d3f68002edd89366ae2f3db8a8b198f712cd4a06beab0c35f1754aa0f1eec5ecda8c04a8fd07831aec19d907ac75ac770a7920d28f7efdb647e852fc6020426d7de975081e78141f839a9790be96dc69ecdb7364f48e50d4083d87a4e4c01cd56c5ae1e395fb42f1eece238810e57daa96435710d47854c65f4b8de4222fcde4cff558fd5688698fea4eb4ca6fee6c4207102c7ecb06da717813b8d7d1cb5ca098ec08517c24df464e7c4f0bafb17a9e36b298eb042d7046031461c68588b6506c5bf3fd345ff71b15efd5e9fca143f1b3993f79a42ce005c08a411238d2cd0209550b38e2fab5472a598efb8427936c7261b2fc21a61048a79033a098de323b6c36d99606378492c4549b2cf49e13d5a1c34acbcedb15a707566ddf4039f7ceb57e2c178014ab9b0a93eb5ecb561262ddf82872b32e81ce9c464c36f696c7912d17e0987d62bd23aadd082389db994fb09fca1ee547edcd2b97e62c0b8e15e198e92f6c69ed0b96cab9970c3b76686ae270becbff6e3c6810d49718d3a548dc2dc334f3f300b22ee4d7c0ecc83dac51e2fcc9b0e4ddd889d1e06a6ad78ed4427e18e6b450ac6bcd3a8551daf0045ba9db7f3ed990e6a2d03fe9cfe60bc51d7310a3cea67a7aba6e9b26c3e43f65a774fe113d3e97baa39d2ad595a9be16929188977ebf2fd866dd41f786d772c92c5d03cce93e3083102f2111ff197804e4f21b026b6d96f4b1772713aff958b27512431d7073790251cf1f0ab5d23da1be5a40c22ec637ca84412f2cb75ae2d36b88151644a659464eeef1fb91d3f287f3cdb5b9f40fa17667a110227c77fa500bbbcc1b3a8184cb1f285ec53a3937fcee6d3640a2b7f778be8bec69508edd947538aee2efde0766230d1c155a88fb015342f6f719bbd382792871f9ec438e702c53455ea5b462f0c70a0747d4311d1aab2a4b6804e82908ed6c14798118f1a3e8b11df17deb42a180740ab22a36ab1ce9b7f4bd62d4d4d3d891ae5371d0cb896fa3b677c4932edf3119ba191ae603fd5a777a470e93b6f13a8debef9ff5881a6899a1b50639b60a59dee10adf58a2cf69c5390c1e65530fd95eab602d9ecaf2931ba4b3ed6f9b174ac49b88ea25720f12e17e370aa4d3601d77aee4e4a28381a371e3704bc2e317c044cb604ee02dafe574dd105f37a11e8d793870f7260b95f4662f78a615b5c1cf0f4143c315463c8b77e295a140b9196dd37cf9f23ed75bc28020810c71930d2fc5e24a38a0c8d5633ab6db0a7fe2b3013da0f77425df1d64313b1f69ccea5551056ece20d2ea5611496b35e71317202461d70f6b5e0ca65a6bca0576ea3016c618f40a958ca7178581aa4d5de7c85e385b2d91ce65ad0387cc38b3795233114bf966456c458614559d66eb6bb793e0fe15e17b05d323b05f3d743407f3619f8b0c7e564a67845c5cd6b2886956e611c7846442d5df6cfe79454467e5bf5c05e009387b562953d865b3bf635a67da4585d5fb5f6d299b198410f2bb75926f770d384d349e92c916232c09522f7bab59e5124c4247c1b959fcf931b64e8fcab14dae8b379a6f2ae0881f689ae64d1a7748e622e14d1bd7cb5ece8563192a431ad87cee32cc3fd085a603525f57343c174e4ef299a52b74345d78510b8153b63191f32932db66adc2db29fb3f2f0b4341f66137eb461"}}, @policy_type={0xa, 0x10, {0x1}}, @algo_aead={0x4c, 0x12, {{'morus640\x00'}, 0x0, 0xa0}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@mcast1, 0x0, 0xa}}, @iptfs_init_delay={0x8, 0x27, 0x3}, @algo_aead={0x51, 0x12, {{'aegis256-aesni\x00'}, 0x28, 0x0, "67eb3426f5"}}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x80}, 0x24004840) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000400)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, 0x0) 0s ago: executing program 0 (id=804): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/module/md_mod/parameters/new_array\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000001c0)="01", 0x1, 0x1004) fsync(r2) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000000380)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='md0', 0x3) write(0xffffffffffffffff, &(0x7f00000002c0)='1.2', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1:0', 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) kernel console output (not intermixed with test programs): [ 327.905959][ T76] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 327.906898][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.906928][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.906941][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.907821][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.907871][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.907886][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.908682][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.908702][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.908715][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.909591][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.909611][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.909624][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.910435][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.910532][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.910547][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.911355][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.911375][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.911388][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.912173][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.912193][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.912206][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.921030][ T76] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 327.921054][ T76] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 327.921068][ T76] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.922806][ T76] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 327.922817][ T76] usb 5-1: Product: syz [ 327.922824][ T76] usb 5-1: Manufacturer: syz [ 327.922832][ T76] usb 5-1: SerialNumber: syz [ 327.929042][ T76] usb 5-1: config 0 descriptor?? [ 327.945322][ T76] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 328.152477][T11038] tmpfs: Bad value for 'uid' [ 328.152486][T11038] tmpfs: Bad value for 'uid' [ 328.155381][T11038] Cannot find add_set index 2 as target [ 328.246848][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.249050][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.297378][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.302448][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.392321][ T76] usb 5-1: USB disconnect, device number 10 [ 328.402385][ T76] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 328.455727][T11046] netlink: 'syz.7.682': attribute type 1 has an invalid length. [ 328.457646][T11042] macsec0: entered promiscuous mode [ 328.457658][T11042] macsec0: entered allmulticast mode [ 328.458105][T11044] veth1_macvtap: entered allmulticast mode [ 328.458283][T11044] macsec0: left promiscuous mode [ 328.458427][T11044] macsec0: left allmulticast mode [ 328.458437][T11044] veth1_macvtap: left allmulticast mode [ 328.481752][T11046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.509642][T11042] bond1: (slave gretap1): making interface the new active one [ 328.511610][T11042] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 328.546245][ T6417] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.565172][ T6417] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.565239][ T6417] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.565258][ T6417] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 ** 10376 printk messages dropped ** ** 1463 printk messages dropped ** ** 236 printk messages dropped ** ** 161 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 162 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 30 printk messages dropped ** ** 2690 printk messages dropped ** ** 9258 printk messages dropped ** ** 2654 printk messages dropped ** ** 1 printk messages dropped ** ** 9206 printk messages dropped ** [ 329.574247][T11074] netlink: 'syz.0.687': attribute type 64 has an invalid length. [ 329.574259][T11074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.687'. [ 329.580043][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. ** 2646 printk messages dropped ** ** 14 printk messages dropped ** ** 173 printk messages dropped ** ** 180 printk messages dropped ** ** 157 printk messages dropped ** ** 176 printk messages dropped ** ** 154 printk messages dropped ** ** 175 printk messages dropped ** ** 154 printk messages dropped ** ** 162 printk messages dropped ** ** 577 printk messages dropped ** ** 175 printk messages dropped ** ** 180 printk messages dropped ** ** 169 printk messages dropped ** ** 154 printk messages dropped ** ** 100 printk messages dropped ** ** 149 printk messages dropped ** ** 165 printk messages dropped ** ** 146 printk messages dropped ** ** 160 printk messages dropped ** ** 156 printk messages dropped ** ** 175 printk messages dropped ** ** 162 printk messages dropped ** ** 169 printk messages dropped ** ** 148 printk messages dropped ** ** 304 printk messages dropped ** ** 168 printk messages dropped ** ** 165 printk messages dropped ** ** 162 printk messages dropped ** ** 169 printk messages dropped ** ** 160 printk messages dropped ** ** 167 printk messages dropped ** ** 156 printk messages dropped ** ** 176 printk messages dropped ** ** 187 printk messages dropped ** ** 210 printk messages dropped ** ** 192 printk messages dropped ** ** 159 printk messages dropped ** ** 184 printk messages dropped ** ** 166 printk messages dropped ** ** 168 printk messages dropped ** ** 564 printk messages dropped ** ** 168 printk messages dropped ** ** 160 printk messages dropped ** ** 155 printk messages dropped ** ** 175 printk messages dropped ** ** 154 printk messages dropped ** ** 187 printk messages dropped ** ** 175 printk messages dropped ** ** 159 printk messages dropped ** ** 163 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 157 printk messages dropped ** ** 170 printk messages dropped ** ** 156 printk messages dropped ** ** 230 printk messages dropped ** ** 171 printk messages dropped ** ** 44 printk messages dropped ** ** 20 printk messages dropped ** ** 143 printk messages dropped ** ** 141 printk messages dropped ** ** 158 printk messages dropped ** ** 173 printk messages dropped ** ** 227 printk messages dropped ** ** 186 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 154 printk messages dropped ** ** 342 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 159 printk messages dropped ** ** 162 printk messages dropped ** ** 151 printk messages dropped ** ** 158 printk messages dropped ** ** 151 printk messages dropped ** ** 168 printk messages dropped ** ** 160 printk messages dropped ** ** 199 printk messages dropped ** ** 172 printk messages dropped ** ** 160 printk messages dropped ** ** 155 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 181 printk messages dropped ** ** 172 printk messages dropped ** ** 186 printk messages dropped ** ** 174 printk messages dropped ** ** 161 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 157 printk messages dropped ** ** 163 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 157 printk messages dropped ** ** 163 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 157 printk messages dropped ** ** 138 printk messages dropped ** ** 1 printk messages dropped ** [ 329.914103][ T10] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.934687][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.934701][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.934712][ T10] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.934742][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.939297][ T10] usb 12-1: config 0 descriptor?? [ 330.155092][ C2] net_ratelimit: 70 callbacks suppressed [ 330.155885][ T76] libceph: connect (1)[c::]:6789 error -101 [ 330.157014][ T76] libceph: mon0 (1)[c::]:6789 connect error [ 330.162884][ T76] libceph: connect (1)[c::]:6789 error -101 [ 330.163033][ T76] libceph: mon0 (1)[c::]:6789 connect error [ 330.431224][ T7931] libceph: connect (1)[c::]:6789 error -101 [ 330.431321][ T7931] libceph: mon0 (1)[c::]:6789 connect error [ 330.449952][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 330.690665][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 330.697123][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 330.806372][T11084] ceph: No mds server is up or the cluster is laggy [ 330.911249][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.911889][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.921081][ T5101] Bluetooth: hci0: Zero size dump init pkt [ 330.922428][T11105] FAULT_INJECTION: forcing a failure. [ 330.922428][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 330.922446][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.2.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.922462][T11105] Tainted: [L]=SOFTLOCKUP [ 330.922466][T11105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.922473][T11105] Call Trace: [ 330.922477][T11105] [ 330.922482][T11105] dump_stack_lvl+0x100/0x190 [ 330.922501][T11105] should_fail_ex.cold+0x5/0xa [ 330.922517][T11105] should_failslab+0xc2/0x120 [ 330.922547][T11105] __kmalloc_noprof+0xfc/0x840 [ 330.922564][T11105] ? kobject_get_path+0xcf/0x2c0 [ 330.922581][T11105] kobject_get_path+0xcf/0x2c0 [ 330.922597][T11105] kobject_uevent_env+0x287/0x18b0 [ 330.922614][T11105] ? kobject_put+0xb9/0x640 [ 330.922630][T11105] device_del+0x605/0x9b0 [ 330.922644][T11105] ? __pfx_device_del+0x10/0x10 [ 330.922657][T11105] ? do_raw_spin_lock+0x128/0x260 [ 330.922669][T11105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.922684][T11105] platform_device_del+0x52/0x260 [ 330.922701][T11105] ? mark_held_locks+0x40/0x70 ** 210 printk messages dropped ** ** 152 printk messages dropped ** ** 163 printk messages dropped ** ** 154 printk messages dropped ** ** 159 printk messages dropped ** ** 143 printk messages dropped ** ** 149 printk messages dropped ** ** 156 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 175 printk messages dropped ** ** 154 printk messages dropped ** ** 160 printk messages dropped ** ** 157 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 130 printk messages dropped ** ** 3030 printk messages dropped ** ** 2654 printk messages dropped ** ** 2652 printk messages dropped ** [ 331.752979][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 ** 8671 printk messages dropped ** ** 1 printk messages dropped ** ** 10402 printk messages dropped ** [ 331.921340][ T7931] usb 12-1: reset high-speed USB device number 15 using dummy_hcd ** 11392 printk messages dropped ** ** 167 printk messages dropped ** ** 147 printk messages dropped ** ** 221 printk messages dropped ** ** 188 printk messages dropped ** ** 151 printk messages dropped ** ** 148 printk messages dropped ** ** 192 printk messages dropped ** ** 201 printk messages dropped ** ** 205 printk messages dropped ** ** 175 printk messages dropped ** ** 172 printk messages dropped ** ** 280 printk messages dropped ** ** 100 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 94 printk messages dropped ** ** 93 printk messages dropped ** ** 100 printk messages dropped ** ** 124 printk messages dropped ** ** 137 printk messages dropped ** ** 126 printk messages dropped ** ** 94 printk messages dropped ** ** 91 printk messages dropped ** ** 88 printk messages dropped ** ** 95 printk messages dropped ** ** 104 printk messages dropped ** ** 140 printk messages dropped ** ** 128 printk messages dropped ** ** 117 printk messages dropped ** ** 103 printk messages dropped ** ** 9195 printk messages dropped ** ** 110 printk messages dropped ** ** 103 printk messages dropped ** ** 97 printk messages dropped ** ** 95 printk messages dropped ** ** 110 printk messages dropped ** ** 132 printk messages dropped ** ** 50 printk messages dropped ** ** 14124 printk messages dropped ** ** 140 printk messages dropped ** ** 130 printk messages dropped ** ** 143 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 129 printk messages dropped ** ** 128 printk messages dropped ** ** 132 printk messages dropped ** ** 127 printk messages dropped ** ** 159 printk messages dropped ** ** 186 printk messages dropped ** ** 133 printk messages dropped ** ** 128 printk messages dropped ** ** 127 printk messages dropped ** ** 130 printk messages dropped ** ** 130 printk messages dropped ** ** 129 printk messages dropped ** ** 133 printk messages dropped ** ** 124 printk messages dropped ** ** 120 printk messages dropped ** ** 125 printk messages dropped ** ** 123 printk messages dropped ** ** 128 printk messages dropped ** ** 131 printk messages dropped ** ** 132 printk messages dropped ** ** 130 printk messages dropped ** ** 129 printk messages dropped ** ** 127 printk messages dropped ** ** 129 printk messages dropped ** ** 131 printk messages dropped ** ** 127 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 130 printk messages dropped ** ** 127 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 142 printk messages dropped ** ** 134 printk messages dropped ** ** 125 printk messages dropped ** ** 204 printk messages dropped ** ** 129 printk messages dropped ** ** 129 printk messages dropped ** ** 130 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 137 printk messages dropped ** ** 16 printk messages dropped ** ** 3709 printk messages dropped ** ** 112 printk messages dropped ** ** 88 printk messages dropped ** ** 88 printk messages dropped ** ** 86 printk messages dropped ** ** 84 printk messages dropped ** ** 81 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 84 printk messages dropped ** ** 87 printk messages dropped ** ** 85 printk messages dropped ** ** 85 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 80 printk messages dropped ** ** 80 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 91 printk messages dropped ** ** 85 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 84 printk messages dropped ** ** 86 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 85 printk messages dropped ** ** 87 printk messages dropped ** ** 88 printk messages dropped ** ** 87 printk messages dropped ** ** 80 printk messages dropped ** ** 8386 printk messages dropped ** ** 121 printk messages dropped ** ** 100 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 106 printk messages dropped ** ** 101 printk messages dropped ** ** 102 printk messages dropped ** ** 94 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 100 printk messages dropped ** ** 105 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 107 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 101 printk messages dropped ** ** 8107 printk messages dropped ** ** 584 printk messages dropped ** ** 103 printk messages dropped ** ** 108 printk messages dropped ** ** 104 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 106 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 117 printk messages dropped ** ** 106 printk messages dropped ** ** 102 printk messages dropped ** ** 108 printk messages dropped ** ** 102 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 104 printk messages dropped ** ** 104 printk messages dropped ** ** 102 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 94 printk messages dropped ** ** 92 printk messages dropped ** ** 101 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 104 printk messages dropped ** ** 103 printk messages dropped ** ** 103 printk messages dropped ** ** 98 printk messages dropped ** ** 101 printk messages dropped ** ** 104 printk messages dropped ** ** 165 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 79 printk messages dropped ** ** 2648 printk messages dropped ** ** 7257 printk messages dropped ** ** 165 printk messages dropped ** ** 155 printk messages dropped ** ** 161 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 123 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 150 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 139 printk messages dropped ** ** 140 printk messages dropped ** ** 143 printk messages dropped ** ** 153 printk messages dropped ** ** 81 printk messages dropped ** [ 332.922988][ T10] usb 12-1: USB disconnect, device number 15 [ 332.979690][T11130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. ** 10235 printk messages dropped ** ** 146 printk messages dropped ** ** 9360 printk messages dropped ** ** 169 printk messages dropped ** ** 153 printk messages dropped ** ** 156 printk messages dropped ** ** 150 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 53 printk messages dropped ** ** 6180 printk messages dropped ** ** 165 printk messages dropped ** ** 147 printk messages dropped ** ** 150 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 220 printk messages dropped ** ** 169 printk messages dropped ** ** 160 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 159 printk messages dropped ** ** 156 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 155 printk messages dropped ** ** 157 printk messages dropped ** ** 154 printk messages dropped ** ** 144 printk messages dropped ** ** 142 printk messages dropped ** ** 139 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 156 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 6541 printk messages dropped ** ** 167 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 157 printk messages dropped ** ** 154 printk messages dropped ** ** 169 printk messages dropped ** ** 156 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 87 printk messages dropped ** ** 10366 printk messages dropped ** ** 12282 printk messages dropped ** ** 171 printk messages dropped ** ** 147 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 243 printk messages dropped ** ** 161 printk messages dropped ** ** 156 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 141 printk messages dropped ** ** 214 printk messages dropped ** ** 155 printk messages dropped ** ** 159 printk messages dropped ** ** 154 printk messages dropped ** ** 158 printk messages dropped ** ** 154 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 154 printk messages dropped ** ** 161 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 145 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 152 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 150 printk messages dropped ** ** 158 printk messages dropped ** ** 35 printk messages dropped ** ** 137 printk messages dropped ** ** 147 printk messages dropped ** ** 147 printk messages dropped ** ** 143 printk messages dropped ** ** 143 printk messages dropped ** ** 146 printk messages dropped ** ** 143 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 134 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 222 printk messages dropped ** ** 159 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 148 printk messages dropped ** ** 153 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 152 printk messages dropped ** ** 155 printk messages dropped ** ** 156 printk messages dropped ** ** 326 printk messages dropped ** ** 156 printk messages dropped ** ** 160 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 461 printk messages dropped ** ** 154 printk messages dropped ** ** 159 printk messages dropped ** ** 151 printk messages dropped ** ** 18 printk messages dropped ** ** 8302 printk messages dropped ** ** 8755 printk messages dropped ** ** 164 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 157 printk messages dropped ** ** 157 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 150 printk messages dropped ** ** 138 printk messages dropped ** ** 74 printk messages dropped ** ** 10370 printk messages dropped ** ** 2661 printk messages dropped ** ** 7591 printk messages dropped ** ** 158 printk messages dropped ** ** 147 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 152 printk messages dropped ** ** 152 printk messages dropped ** ** 153 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 151 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 158 printk messages dropped ** ** 10 printk messages dropped ** [ 334.401014][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 334.413558][T11145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.420411][T11149] random: crng reseeded on system resumption ** 7722 printk messages dropped ** ** 153 printk messages dropped ** ** 143 printk messages dropped ** ** 146 printk messages dropped ** ** 159 printk messages dropped ** ** 23 printk messages dropped ** ** 9 printk messages dropped ** ** 2678 printk messages dropped ** ** 993 printk messages dropped ** ** 2667 printk messages dropped ** ** 4 printk messages dropped ** ** 4 printk messages dropped ** ** 1483 printk messages dropped ** ** 5 printk messages dropped ** ** 1367 printk messages dropped ** ** 7186 printk messages dropped ** ** 155 printk messages dropped ** ** 151 printk messages dropped ** ** 135 printk messages dropped ** ** 80 printk messages dropped ** ** 79 printk messages dropped ** ** 84 printk messages dropped ** ** 83 printk messages dropped ** ** 79 printk messages dropped ** ** 77 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 82 printk messages dropped ** ** 80 printk messages dropped ** ** 82 printk messages dropped ** ** 82 printk messages dropped ** ** 79 printk messages dropped ** ** 88 printk messages dropped ** ** 72 printk messages dropped ** ** 1539 printk messages dropped ** ** 1168 printk messages dropped ** [ 335.195157][ T5101] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 335.228427][T11156] FAT-fs (sr0): bogus number of reserved sectors [ 335.228441][T11156] FAT-fs (sr0): Can't find a valid FAT filesystem ** 1247 printk messages dropped ** [ 335.354579][ C2] net_ratelimit: 51 callbacks suppressed ** 6040 printk messages dropped ** ** 1296 printk messages dropped ** ** 1268 printk messages dropped ** ** 1265 printk messages dropped ** ** 1430 printk messages dropped ** ** 1207 printk messages dropped ** ** 169 printk messages dropped ** ** 85 printk messages dropped ** ** 1663 printk messages dropped ** ** 58 printk messages dropped ** ** 12 printk messages dropped ** ** 1583 printk messages dropped ** ** 1233 printk messages dropped ** ** 1041 printk messages dropped ** ** 991 printk messages dropped ** [ 336.299948][T11177] netlink: 92 bytes leftover after parsing attributes in process `syz.7.713'. [ 336.302607][T11177] netlink: 'syz.7.713': attribute type 10 has an invalid length. ** 818 printk messages dropped ** [ 336.413134][T11177] batman_adv: batadv0: Removing interface: dummy0 [ 336.426675][T11180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ ** 957 printk messages dropped ** [ 336.581120][T11180] netlink: 'syz.7.713': attribute type 10 has an invalid length. [ 336.597144][T11168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 336.653515][T11177] team0: Port device dummy0 added ** 982 printk messages dropped ** [ 337.054247][ T8027] usb 8-1: new high-speed USB device number 7 using dummy_hcd ** 1071 printk messages dropped ** ** 1001 printk messages dropped ** [ 337.216325][ T8027] usb 8-1: unable to get BOS descriptor or descriptor too short [ 337.216347][ T8027] usb 8-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=c6.28 [ 337.217299][ T8027] usb 8-1: config 254 has an invalid interface number: 215 but max is 0 [ 337.217312][ T8027] usb 8-1: config 254 has no interface number 0 [ 337.217325][ T8027] usb 8-1: config 254 interface 215 has no altsetting 0 [ 337.219237][ T8027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.219248][ T8027] usb 8-1: Product: syz [ 337.219256][ T8027] usb 8-1: Manufacturer: syz [ 337.219265][ T8027] usb 8-1: SerialNumber: syz ** 894 printk messages dropped ** ** 877 printk messages dropped ** ** 936 printk messages dropped ** [ 337.435045][T11187] sch_fq: defrate 10 ignored. [ 337.438427][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. ** 855 printk messages dropped ** [ 337.634500][ T8027] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 337.637111][ T8027] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 337.637121][ T8027] sq905c 8-1:254.215: Get version command failed [ 337.637151][ T8027] sq905c 8-1:254.215: probe with driver sq905c failed with error -71 [ 337.638562][ T8027] usb 8-1: USB disconnect, device number 7 [ 337.672255][T11199] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt ** 989 printk messages dropped ** ** 219 printk messages dropped ** ** 140 printk messages dropped ** ** 154 printk messages dropped ** ** 165 printk messages dropped ** ** 94 printk messages dropped ** ** 131 printk messages dropped ** ** 148 printk messages dropped ** ** 164 printk messages dropped ** ** 150 printk messages dropped ** ** 460 printk messages dropped ** ** 135 printk messages dropped ** ** 140 printk messages dropped ** ** 132 printk messages dropped ** ** 152 printk messages dropped ** ** 142 printk messages dropped ** ** 167 printk messages dropped ** ** 142 printk messages dropped ** ** 169 printk messages dropped ** ** 188 printk messages dropped ** ** 156 printk messages dropped ** ** 144 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 141 printk messages dropped ** ** 157 printk messages dropped ** ** 142 printk messages dropped ** ** 152 printk messages dropped ** ** 139 printk messages dropped ** ** 194 printk messages dropped ** ** 156 printk messages dropped ** ** 163 printk messages dropped ** ** 145 printk messages dropped ** ** 145 printk messages dropped ** ** 139 printk messages dropped ** ** 160 printk messages dropped ** ** 133 printk messages dropped ** ** 128 printk messages dropped ** ** 131 printk messages dropped ** ** 179 printk messages dropped ** ** 93 printk messages dropped ** ** 120 printk messages dropped ** ** 175 printk messages dropped ** ** 169 printk messages dropped ** ** 163 printk messages dropped ** ** 153 printk messages dropped ** ** 134 printk messages dropped ** ** 134 printk messages dropped ** ** 167 printk messages dropped ** ** 146 printk messages dropped ** ** 228 printk messages dropped ** ** 172 printk messages dropped ** ** 170 printk messages dropped ** ** 155 printk messages dropped ** ** 135 printk messages dropped ** ** 134 printk messages dropped ** ** 135 printk messages dropped ** ** 185 printk messages dropped ** ** 144 printk messages dropped ** ** 154 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 155 printk messages dropped ** ** 134 printk messages dropped ** ** 138 printk messages dropped ** ** 134 printk messages dropped ** ** 155 printk messages dropped ** ** 176 printk messages dropped ** ** 158 printk messages dropped ** ** 176 printk messages dropped ** ** 164 printk messages dropped ** ** 149 printk messages dropped ** ** 128 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 141 printk messages dropped ** ** 145 printk messages dropped ** ** 27 printk messages dropped ** ** 844 printk messages dropped ** ** 800 printk messages dropped ** ** 988 printk messages dropped ** ** 1 printk messages dropped ** [ 338.066680][T11199] i2c i2c-1: Memory type 0x07 not supported yet, not instantiating SPD ** 229 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 163 printk messages dropped ** ** 143 printk messages dropped ** ** 120 printk messages dropped ** ** 140 printk messages dropped ** ** 222 printk messages dropped ** ** 202 printk messages dropped ** ** 192 printk messages dropped ** ** 140 printk messages dropped ** ** 142 printk messages dropped ** ** 142 printk messages dropped ** ** 152 printk messages dropped ** ** 161 printk messages dropped ** ** 167 printk messages dropped ** ** 166 printk messages dropped ** ** 855 printk messages dropped ** ** 142 printk messages dropped ** ** 175 printk messages dropped ** ** 155 printk messages dropped ** ** 159 printk messages dropped ** ** 147 printk messages dropped ** ** 179 printk messages dropped ** ** 161 printk messages dropped ** ** 161 printk messages dropped ** ** 153 printk messages dropped ** ** 136 printk messages dropped ** ** 161 printk messages dropped ** ** 138 printk messages dropped ** ** 155 printk messages dropped ** ** 161 printk messages dropped ** ** 141 printk messages dropped ** ** 135 printk messages dropped ** ** 145 printk messages dropped ** ** 157 printk messages dropped ** ** 44 printk messages dropped ** [ 338.432566][T11222] FAULT_INJECTION: forcing a failure. [ 338.432566][T11222] name failslab, interval 1, probability 0, space 0, times 0 [ 338.432585][T11222] CPU: 2 UID: 0 PID: 11222 Comm: syz.3.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.432601][T11222] Tainted: [L]=SOFTLOCKUP [ 338.432606][T11222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.432612][T11222] Call Trace: [ 338.432616][T11222] [ 338.432621][T11222] dump_stack_lvl+0x100/0x190 [ 338.432640][T11222] should_fail_ex.cold+0x5/0xa [ 338.432655][T11222] should_failslab+0xc2/0x120 [ 338.432673][T11222] __kmalloc_noprof+0xfc/0x840 [ 338.432689][T11222] ? tomoyo_encode2+0xfb/0x3c0 [ 338.432707][T11222] tomoyo_encode2+0xfb/0x3c0 [ 338.432724][T11222] tomoyo_encode+0x29/0x50 [ 338.432739][T11222] tomoyo_realpath_from_path+0x18c/0x690 [ 338.432758][T11222] tomoyo_path_number_perm+0x23c/0x580 [ 338.432771][T11222] ? tomoyo_path_number_perm+0x22e/0x580 [ 338.432805][T11222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 338.432820][T11222] ? get_pid_task+0x106/0x250 [ 338.432836][T11222] ? __lock_acquire+0x5c0/0x1f40 [ 338.432859][T11222] ? __fget_files+0x34/0x3d0 [ 338.432875][T11222] ? find_held_lock+0x2b/0x80 [ 338.432888][T11222] ? __fget_files+0x215/0x3d0 [ 338.432902][T11222] ? hook_file_ioctl_common+0x140/0x440 [ 338.432916][T11222] ? __fget_files+0x215/0x3d0 [ 338.432933][T11222] ? __fget_files+0x21f/0x3d0 [ 338.432950][T11222] security_file_ioctl_compat+0xd3/0x230 [ 338.432965][T11222] __ia32_compat_sys_ioctl+0xc2/0x360 [ 338.432980][T11222] __do_fast_syscall_32+0x13a/0x8b0 [ 338.432993][T11222] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.433011][T11222] do_fast_syscall_32+0x32/0x70 [ 338.433023][T11222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.433037][T11222] RIP: 0023:0xf7f06fec [ 338.433050][T11222] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 338.433055][T11222] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 338.433066][T11222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 338.433074][T11222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.433081][T11222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.433087][T11222] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.433094][T11222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ** 15 printk messages dropped ** ** 176 printk messages dropped ** ** 191 printk messages dropped ** ** 163 printk messages dropped ** ** 158 printk messages dropped ** ** 177 printk messages dropped ** ** 159 printk messages dropped ** ** 159 printk messages dropped ** ** 150 printk messages dropped ** ** 186 printk messages dropped ** ** 155 printk messages dropped ** ** 173 printk messages dropped ** ** 241 printk messages dropped ** ** 166 printk messages dropped ** ** 170 printk messages dropped ** ** 166 printk messages dropped ** ** 152 printk messages dropped ** ** 155 printk messages dropped ** ** 188 printk messages dropped ** ** 160 printk messages dropped ** ** 172 printk messages dropped ** ** 157 printk messages dropped ** ** 136 printk messages dropped ** ** 139 printk messages dropped ** ** 163 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 76 printk messages dropped ** ** 803 printk messages dropped ** ** 19 printk messages dropped ** ** 2500 printk messages dropped ** ** 13 printk messages dropped ** ** 1941 printk messages dropped ** ** 160 printk messages dropped ** ** 141 printk messages dropped ** ** 176 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 138 printk messages dropped ** ** 166 printk messages dropped ** ** 158 printk messages dropped ** ** 166 printk messages dropped ** ** 162 printk messages dropped ** ** 139 printk messages dropped ** ** 120 printk messages dropped ** ** 46 printk messages dropped ** ** 121 printk messages dropped ** ** 97 printk messages dropped ** ** 103 printk messages dropped ** ** 105 printk messages dropped ** ** 107 printk messages dropped ** ** 131 printk messages dropped ** ** 23 printk messages dropped ** [ 339.134269][ T8027] usb 8-1: new high-speed USB device number 8 using dummy_hcd ** 1687 printk messages dropped ** [ 339.328585][ T8027] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.332071][ T8027] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 339.332086][ T8027] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 339.332100][ T8027] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.332114][ T8027] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.332145][ T8027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 ** 1310 printk messages dropped ** ** 5 printk messages dropped ** ** 18 printk messages dropped ** ** 77 printk messages dropped ** ** 1554 printk messages dropped ** ** 1320 printk messages dropped ** ** 8050 printk messages dropped ** ** 4 printk messages dropped ** ** 7 printk messages dropped ** ** 1 printk messages dropped ** [ 339.804256][ T8027] usb 8-1: GET_CAPABILITIES returned 0 [ 339.804291][ T8027] usbtmc 8-1:16.0: can't read capabilities ** 1804 printk messages dropped ** ** 1720 printk messages dropped ** [ 340.307481][T11253] xt_l2tp: missing protocol rule (udp|l2tpip) ** 1710 printk messages dropped ** ** 1827 printk messages dropped ** ** 161 printk messages dropped ** ** 149 printk messages dropped ** ** 155 printk messages dropped ** ** 161 printk messages dropped ** ** 160 printk messages dropped ** ** 157 printk messages dropped ** ** 135 printk messages dropped ** ** 147 printk messages dropped ** ** 159 printk messages dropped ** ** 34 printk messages dropped ** ** 54 printk messages dropped ** ** 4696 printk messages dropped ** ** 178 printk messages dropped ** ** 81 printk messages dropped ** ** 171 printk messages dropped ** ** 170 printk messages dropped ** ** 164 printk messages dropped ** ** 154 printk messages dropped ** ** 161 printk messages dropped ** ** 399 printk messages dropped ** ** 167 printk messages dropped ** ** 166 printk messages dropped ** ** 187 printk messages dropped ** ** 167 printk messages dropped ** ** 161 printk messages dropped ** ** 161 printk messages dropped ** ** 213 printk messages dropped ** ** 166 printk messages dropped ** ** 166 printk messages dropped ** ** 163 printk messages dropped ** ** 164 printk messages dropped ** ** 186 printk messages dropped ** ** 167 printk messages dropped ** ** 165 printk messages dropped ** ** 169 printk messages dropped ** ** 157 printk messages dropped ** ** 165 printk messages dropped ** ** 158 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 184 printk messages dropped ** ** 156 printk messages dropped ** ** 136 printk messages dropped ** ** 124 printk messages dropped ** ** 147 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 186 printk messages dropped ** ** 163 printk messages dropped ** ** 433 printk messages dropped ** ** 11 printk messages dropped ** ** 1 printk messages dropped ** ** 44 printk messages dropped ** ** 4014 printk messages dropped ** ** 156 printk messages dropped ** ** 213 printk messages dropped ** ** 115 printk messages dropped ** ** 129 printk messages dropped ** ** 110 printk messages dropped ** ** 138 printk messages dropped ** ** 146 printk messages dropped ** ** 142 printk messages dropped ** ** 144 printk messages dropped ** ** 147 printk messages dropped ** ** 145 printk messages dropped ** ** 146 printk messages dropped ** ** 347 printk messages dropped ** ** 146 printk messages dropped ** ** 146 printk messages dropped ** ** 145 printk messages dropped ** ** 141 printk messages dropped ** ** 139 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 144 printk messages dropped ** ** 196 printk messages dropped ** ** 153 printk messages dropped ** ** 148 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 140 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 196 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 121 printk messages dropped ** ** 1061 printk messages dropped ** ** 172 printk messages dropped ** ** 190 printk messages dropped ** ** 157 printk messages dropped ** ** 175 printk messages dropped ** ** 167 printk messages dropped ** ** 151 printk messages dropped ** ** 159 printk messages dropped ** ** 147 printk messages dropped ** ** 159 printk messages dropped ** ** 151 printk messages dropped ** ** 8351 printk messages dropped ** ** 151 printk messages dropped ** ** 135 printk messages dropped ** ** 117 printk messages dropped ** ** 112 printk messages dropped ** ** 127 printk messages dropped ** ** 142 printk messages dropped ** ** 138 printk messages dropped ** ** 137 printk messages dropped ** ** 130 printk messages dropped ** ** 141 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 144 printk messages dropped ** ** 141 printk messages dropped ** ** 140 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 137 printk messages dropped ** ** 133 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 137 printk messages dropped ** ** 135 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 143 printk messages dropped ** ** 144 printk messages dropped ** ** 145 printk messages dropped ** ** 136 printk messages dropped ** ** 146 printk messages dropped ** ** 135 printk messages dropped ** ** 138 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 63 printk messages dropped ** ** 4616 printk messages dropped ** ** 156 printk messages dropped ** ** 154 printk messages dropped ** ** 133 printk messages dropped ** ** 147 printk messages dropped ** ** 130 printk messages dropped ** ** 147 printk messages dropped ** ** 141 printk messages dropped ** ** 152 printk messages dropped ** ** 133 printk messages dropped ** ** 150 printk messages dropped ** ** 151 printk messages dropped ** ** 149 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 159 printk messages dropped ** ** 140 printk messages dropped ** ** 150 printk messages dropped ** ** 141 printk messages dropped ** ** 149 printk messages dropped ** ** 153 printk messages dropped ** ** 147 printk messages dropped ** ** 153 printk messages dropped ** ** 172 printk messages dropped ** ** 194 printk messages dropped ** ** 157 printk messages dropped ** ** 154 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 135 printk messages dropped ** ** 149 printk messages dropped ** ** 76 printk messages dropped ** ** 7055 printk messages dropped ** ** 171 printk messages dropped ** ** 170 printk messages dropped ** ** 159 printk messages dropped ** ** 152 printk messages dropped ** ** 49 printk messages dropped ** ** 7737 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 150 printk messages dropped ** ** 142 printk messages dropped ** ** 144 printk messages dropped ** ** 131 printk messages dropped ** ** 143 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 148 printk messages dropped ** ** 142 printk messages dropped ** ** 133 printk messages dropped ** ** 141 printk messages dropped ** ** 138 printk messages dropped ** ** 143 printk messages dropped ** ** 140 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 140 printk messages dropped ** ** 146 printk messages dropped ** ** 142 printk messages dropped ** ** 144 printk messages dropped ** ** 318 printk messages dropped ** ** 143 printk messages dropped ** ** 148 printk messages dropped ** ** 151 printk messages dropped ** ** 146 printk messages dropped ** ** 145 printk messages dropped ** ** 142 printk messages dropped ** ** 138 printk messages dropped ** ** 150 printk messages dropped ** ** 153 printk messages dropped ** ** 147 printk messages dropped ** ** 132 printk messages dropped ** ** 127 printk messages dropped ** ** 133 printk messages dropped ** ** 134 printk messages dropped ** ** 146 printk messages dropped ** ** 144 printk messages dropped ** ** 147 printk messages dropped ** ** 131 printk messages dropped ** ** 129 printk messages dropped ** ** 133 printk messages dropped ** ** 39 printk messages dropped ** ** 8175 printk messages dropped ** ** 151 printk messages dropped ** ** 133 printk messages dropped ** ** 140 printk messages dropped ** ** 135 printk messages dropped ** ** 133 printk messages dropped ** ** 146 printk messages dropped ** ** 124 printk messages dropped ** ** 130 printk messages dropped ** ** 121 printk messages dropped ** ** 127 printk messages dropped ** ** 129 printk messages dropped ** ** 124 printk messages dropped ** ** 131 printk messages dropped ** ** 142 printk messages dropped ** ** 118 printk messages dropped ** ** 139 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 189 printk messages dropped ** ** 132 printk messages dropped ** ** 121 printk messages dropped ** ** 134 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 144 printk messages dropped ** ** 150 printk messages dropped ** ** 150 printk messages dropped ** ** 132 printk messages dropped ** ** 145 printk messages dropped ** ** 129 printk messages dropped ** ** 137 printk messages dropped ** ** 144 printk messages dropped ** ** 149 printk messages dropped ** ** 142 printk messages dropped ** ** 156 printk messages dropped ** ** 81 printk messages dropped ** ** 8929 printk messages dropped ** ** 163 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 160 printk messages dropped ** ** 167 printk messages dropped ** ** 159 printk messages dropped ** ** 138 printk messages dropped ** ** 133 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 143 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 151 printk messages dropped ** ** 148 printk messages dropped ** ** 140 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 150 printk messages dropped ** ** 162 printk messages dropped ** ** 150 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 167 printk messages dropped ** ** 152 printk messages dropped ** ** 96 printk messages dropped ** ** 6680 printk messages dropped ** [ 341.836596][ T10] usb 8-1: USB disconnect, device number 8 ** 4591 printk messages dropped ** ** 145 printk messages dropped ** ** 151 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 140 printk messages dropped ** ** 158 printk messages dropped ** ** 141 printk messages dropped ** ** 150 printk messages dropped ** ** 6154 printk messages dropped ** ** 149 printk messages dropped ** ** 133 printk messages dropped ** ** 137 printk messages dropped ** ** 128 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 136 printk messages dropped ** ** 163 printk messages dropped ** ** 140 printk messages dropped ** ** 162 printk messages dropped ** ** 87 printk messages dropped ** ** 3 printk messages dropped ** [ 341.999129][T11274] FAULT_INJECTION: forcing a failure. [ 341.999129][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 341.999149][T11274] CPU: 0 UID: 0 PID: 11274 Comm: syz.3.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.999164][T11274] Tainted: [L]=SOFTLOCKUP [ 341.999169][T11274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.999176][T11274] Call Trace: [ 341.999180][T11274] [ 341.999185][T11274] dump_stack_lvl+0x100/0x190 [ 341.999204][T11274] should_fail_ex.cold+0x5/0xa [ 341.999220][T11274] should_failslab+0xc2/0x120 [ 341.999238][T11274] __kmalloc_cache_noprof+0x91/0x6d0 [ 341.999252][T11274] ? snd_timer_instance_new+0x47/0x350 [ 341.999271][T11274] snd_timer_instance_new+0x47/0x350 [ 341.999286][T11274] __snd_timer_user_ioctl.isra.0+0xc0f/0x2750 [ 341.999306][T11274] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 341.999324][T11274] ? lock_acquire+0x1d1/0x380 [ 341.999355][T11274] ? snd_timer_user_ioctl_compat+0xaf/0x430 [ 341.999378][T11274] ? __mutex_lock+0x26c/0x1bd0 [ 341.999390][T11274] ? snd_timer_user_ioctl_compat+0xaf/0x430 ** 259 printk messages dropped ** ** 165 printk messages dropped ** ** 171 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 178 printk messages dropped ** ** 150 printk messages dropped ** ** 303 printk messages dropped ** ** 163 printk messages dropped ** ** 174 printk messages dropped ** ** 156 printk messages dropped ** ** 162 printk messages dropped ** ** 160 printk messages dropped ** ** 178 printk messages dropped ** ** 170 printk messages dropped ** ** 183 printk messages dropped ** ** 161 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 153 printk messages dropped ** ** 154 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 153 printk messages dropped ** ** 184 printk messages dropped ** ** 140 printk messages dropped ** ** 152 printk messages dropped ** ** 178 printk messages dropped ** ** 158 printk messages dropped ** ** 161 printk messages dropped ** ** 173 printk messages dropped ** ** 171 printk messages dropped ** ** 163 printk messages dropped ** ** 185 printk messages dropped ** ** 3394 printk messages dropped ** ** 127 printk messages dropped ** ** 133 printk messages dropped ** ** 142 printk messages dropped ** ** 130 printk messages dropped ** ** 131 printk messages dropped ** ** 134 printk messages dropped ** ** 141 printk messages dropped ** ** 151 printk messages dropped ** ** 128 printk messages dropped ** ** 129 printk messages dropped ** ** 49 printk messages dropped ** ** 9610 printk messages dropped ** ** 159 printk messages dropped ** ** 145 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 155 printk messages dropped ** ** 49 printk messages dropped ** ** 4218 printk messages dropped ** ** 163 printk messages dropped ** ** 150 printk messages dropped ** ** 148 printk messages dropped ** ** 154 printk messages dropped ** ** 149 printk messages dropped ** ** 150 printk messages dropped ** ** 146 printk messages dropped ** ** 168 printk messages dropped ** ** 189 printk messages dropped ** ** 149 printk messages dropped ** ** 143 printk messages dropped ** ** 148 printk messages dropped ** ** 146 printk messages dropped ** ** 141 printk messages dropped ** ** 146 printk messages dropped ** ** 156 printk messages dropped ** ** 162 printk messages dropped ** ** 148 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 23 printk messages dropped ** ** 1064 printk messages dropped ** ** 125 printk messages dropped ** ** 124 printk messages dropped ** ** 124 printk messages dropped ** ** 116 printk messages dropped ** ** 120 printk messages dropped ** ** 116 printk messages dropped ** ** 122 printk messages dropped ** ** 118 printk messages dropped ** ** 125 printk messages dropped ** ** 132 printk messages dropped ** ** 137 printk messages dropped ** ** 131 printk messages dropped ** ** 137 printk messages dropped ** ** 133 printk messages dropped ** ** 140 printk messages dropped ** ** 135 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 126 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 129 printk messages dropped ** ** 136 printk messages dropped ** ** 142 printk messages dropped ** ** 134 printk messages dropped ** ** 118 printk messages dropped ** ** 118 printk messages dropped ** ** 112 printk messages dropped ** ** 6567 printk messages dropped ** ** 28 printk messages dropped ** ** 177 printk messages dropped ** ** 207 printk messages dropped ** ** 188 printk messages dropped ** ** 187 printk messages dropped ** ** 194 printk messages dropped ** ** 140 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 143 printk messages dropped ** ** 136 printk messages dropped ** ** 145 printk messages dropped ** ** 153 printk messages dropped ** ** 139 printk messages dropped ** ** 234 printk messages dropped ** ** 161 printk messages dropped ** ** 147 printk messages dropped ** ** 145 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 142 printk messages dropped ** ** 147 printk messages dropped ** ** 140 printk messages dropped ** ** 169 printk messages dropped ** ** 144 printk messages dropped ** ** 154 printk messages dropped ** ** 125 printk messages dropped ** ** 122 printk messages dropped ** ** 128 printk messages dropped ** ** 142 printk messages dropped ** ** 118 printk messages dropped ** ** 135 printk messages dropped ** ** 156 printk messages dropped ** ** 185 printk messages dropped ** ** 147 printk messages dropped ** ** 158 printk messages dropped ** ** 151 printk messages dropped ** ** 151 printk messages dropped ** ** 152 printk messages dropped ** ** 141 printk messages dropped ** ** 150 printk messages dropped ** ** 190 printk messages dropped ** ** 100 printk messages dropped ** ** 31 printk messages dropped ** ** 122 printk messages dropped ** ** 140 printk messages dropped ** ** 145 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 146 printk messages dropped ** ** 619 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 146 printk messages dropped ** ** 154 printk messages dropped ** ** 145 printk messages dropped ** ** 159 printk messages dropped ** ** 145 printk messages dropped ** ** 151 printk messages dropped ** ** 177 printk messages dropped ** ** 152 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 146 printk messages dropped ** ** 152 printk messages dropped ** ** 227 printk messages dropped ** ** 155 printk messages dropped ** ** 171 printk messages dropped ** ** 160 printk messages dropped ** ** 216 printk messages dropped ** ** 154 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 148 printk messages dropped ** ** 156 printk messages dropped ** ** 135 printk messages dropped ** ** 182 printk messages dropped ** ** 142 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 1 printk messages dropped ** ** 6024 printk messages dropped ** ** 210 printk messages dropped ** ** 185 printk messages dropped ** ** 175 printk messages dropped ** ** 168 printk messages dropped ** ** 179 printk messages dropped ** ** 180 printk messages dropped ** ** 227 printk messages dropped ** ** 212 printk messages dropped ** ** 162 printk messages dropped ** ** 167 printk messages dropped ** ** 152 printk messages dropped ** ** 157 printk messages dropped ** ** 158 printk messages dropped ** ** 151 printk messages dropped ** ** 144 printk messages dropped ** ** 145 printk messages dropped ** ** 143 printk messages dropped ** ** 54 printk messages dropped ** ** 2030 printk messages dropped ** ** 187 printk messages dropped ** ** 126 printk messages dropped ** ** 131 printk messages dropped ** ** 122 printk messages dropped ** ** 129 printk messages dropped ** ** 117 printk messages dropped ** ** 121 printk messages dropped ** ** 138 printk messages dropped ** ** 145 printk messages dropped ** ** 146 printk messages dropped ** ** 139 printk messages dropped ** ** 141 printk messages dropped ** ** 139 printk messages dropped ** ** 149 printk messages dropped ** ** 142 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 174 printk messages dropped ** ** 155 printk messages dropped ** ** 177 printk messages dropped ** ** 147 printk messages dropped ** ** 158 printk messages dropped ** ** 152 printk messages dropped ** ** 161 printk messages dropped ** ** 145 printk messages dropped ** ** 167 printk messages dropped ** ** 163 printk messages dropped ** ** 278 printk messages dropped ** ** 148 printk messages dropped ** ** 143 printk messages dropped ** ** 139 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 146 printk messages dropped ** ** 157 printk messages dropped ** ** 160 printk messages dropped ** ** 197 printk messages dropped ** ** 198 printk messages dropped ** ** 186 printk messages dropped ** ** 183 printk messages dropped ** ** 180 printk messages dropped ** ** 167 printk messages dropped ** ** 154 printk messages dropped ** ** 144 printk messages dropped ** ** 143 printk messages dropped ** ** 85 printk messages dropped ** [ 342.837768][ T25] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 342.847315][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.847337][ T25] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.847369][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 ** 1633 printk messages dropped ** ** 133 printk messages dropped ** ** 130 printk messages dropped ** ** 141 printk messages dropped ** ** 147 printk messages dropped ** ** 140 printk messages dropped ** ** 164 printk messages dropped ** ** 132 printk messages dropped ** ** 112 printk messages dropped ** [ 343.104786][ T25] usb 5-1: Direct firmware load for usbduxfast_firmware.bin failed with error -2 [ 343.104799][ T25] usb 5-1: Falling back to sysfs fallback for: usbduxfast_firmware.bin ** 8019 printk messages dropped ** ** 173 printk messages dropped ** ** 155 printk messages dropped ** ** 149 printk messages dropped ** ** 150 printk messages dropped ** ** 152 printk messages dropped ** ** 143 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 150 printk messages dropped ** ** 136 printk messages dropped ** ** 155 printk messages dropped ** ** 133 printk messages dropped ** ** 133 printk messages dropped ** ** 137 printk messages dropped ** ** 139 printk messages dropped ** ** 143 printk messages dropped ** ** 134 printk messages dropped ** ** 176 printk messages dropped ** ** 149 printk messages dropped ** ** 150 printk messages dropped ** ** 144 printk messages dropped ** ** 146 printk messages dropped ** ** 143 printk messages dropped ** ** 142 printk messages dropped ** ** 146 printk messages dropped ** ** 147 printk messages dropped ** ** 147 printk messages dropped ** ** 142 printk messages dropped ** ** 65 printk messages dropped ** ** 5447 printk messages dropped ** ** 167 printk messages dropped ** ** 168 printk messages dropped ** ** 160 printk messages dropped ** ** 150 printk messages dropped ** ** 163 printk messages dropped ** ** 103 printk messages dropped ** ** 122 printk messages dropped ** ** 198 printk messages dropped ** ** 140 printk messages dropped ** ** 133 printk messages dropped ** ** 171 printk messages dropped ** ** 144 printk messages dropped ** ** 151 printk messages dropped ** ** 157 printk messages dropped ** ** 153 printk messages dropped ** ** 134 printk messages dropped ** ** 173 printk messages dropped ** ** 136 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 133 printk messages dropped ** ** 135 printk messages dropped ** ** 132 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 167 printk messages dropped ** ** 147 printk messages dropped ** ** 147 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 139 printk messages dropped ** ** 137 printk messages dropped ** ** 143 printk messages dropped ** ** 138 printk messages dropped ** ** 119 printk messages dropped ** ** 141 printk messages dropped ** ** 124 printk messages dropped ** ** 1340 printk messages dropped ** [ 343.306506][T11279] firmware usbduxfast_firmware.bin: firmware_loading_store: unexpected value (0) [ 343.379558][ T25] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. ** 6914 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 162 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 135 printk messages dropped ** ** 132 printk messages dropped ** ** 163 printk messages dropped ** ** 135 printk messages dropped ** ** 136 printk messages dropped ** ** 130 printk messages dropped ** ** 136 printk messages dropped ** ** 12 printk messages dropped ** ** 3400 printk messages dropped ** ** 162 printk messages dropped ** ** 160 printk messages dropped ** ** 159 printk messages dropped ** ** 155 printk messages dropped ** ** 171 printk messages dropped ** ** 173 printk messages dropped ** ** 159 printk messages dropped ** ** 167 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 110 printk messages dropped ** ** 111 printk messages dropped ** ** 144 printk messages dropped ** ** 156 printk messages dropped ** ** 218 printk messages dropped ** ** 136 printk messages dropped ** ** 159 printk messages dropped ** ** 140 printk messages dropped ** ** 159 printk messages dropped ** ** 135 printk messages dropped ** ** 152 printk messages dropped ** ** 154 printk messages dropped ** ** 163 printk messages dropped ** ** 133 printk messages dropped ** ** 171 printk messages dropped ** ** 158 printk messages dropped ** ** 154 printk messages dropped ** ** 149 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 211 printk messages dropped ** ** 135 printk messages dropped ** ** 135 printk messages dropped ** ** 136 printk messages dropped ** ** 157 printk messages dropped ** ** 147 printk messages dropped ** ** 176 printk messages dropped ** ** 154 printk messages dropped ** ** 161 printk messages dropped ** ** 152 printk messages dropped ** ** 163 printk messages dropped ** ** 130 printk messages dropped ** ** 132 printk messages dropped ** ** 132 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 143 printk messages dropped ** ** 156 printk messages dropped ** ** 166 printk messages dropped ** ** 79 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 165 printk messages dropped ** ** 202 printk messages dropped ** ** 726 printk messages dropped ** ** 148 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 152 printk messages dropped ** ** 163 printk messages dropped ** ** 159 printk messages dropped ** ** 171 printk messages dropped ** ** 164 printk messages dropped ** ** 167 printk messages dropped ** ** 167 printk messages dropped ** ** 194 printk messages dropped ** ** 165 printk messages dropped ** ** 167 printk messages dropped ** ** 166 printk messages dropped ** ** 158 printk messages dropped ** ** 136 printk messages dropped ** ** 137 printk messages dropped ** ** 162 printk messages dropped ** ** 175 printk messages dropped ** ** 166 printk messages dropped ** ** 180 printk messages dropped ** ** 169 printk messages dropped ** ** 163 printk messages dropped ** ** 21 printk messages dropped ** ** 9161 printk messages dropped ** ** 166 printk messages dropped ** ** 153 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 187 printk messages dropped ** ** 163 printk messages dropped ** ** 170 printk messages dropped ** ** 166 printk messages dropped ** ** 154 printk messages dropped ** ** 161 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 152 printk messages dropped ** ** 156 printk messages dropped ** ** 156 printk messages dropped ** ** 151 printk messages dropped ** ** 158 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 152 printk messages dropped ** ** 157 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 140 printk messages dropped ** ** 148 printk messages dropped ** ** 148 printk messages dropped ** ** 156 printk messages dropped ** ** 159 printk messages dropped ** ** 142 printk messages dropped ** ** 97 printk messages dropped ** ** 8915 printk messages dropped ** ** 161 printk messages dropped ** ** 148 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 147 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 148 printk messages dropped ** ** 146 printk messages dropped ** ** 156 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 146 printk messages dropped ** ** 150 printk messages dropped ** ** 148 printk messages dropped ** ** 158 printk messages dropped ** ** 149 printk messages dropped ** ** 147 printk messages dropped ** ** 146 printk messages dropped ** ** 147 printk messages dropped ** ** 146 printk messages dropped ** ** 153 printk messages dropped ** ** 147 printk messages dropped ** ** 161 printk messages dropped ** ** 167 printk messages dropped ** ** 167 printk messages dropped ** ** 165 printk messages dropped ** ** 153 printk messages dropped ** ** 148 printk messages dropped ** ** 153 printk messages dropped ** ** 164 printk messages dropped ** ** 151 printk messages dropped ** ** 155 printk messages dropped ** ** 128 printk messages dropped ** ** 4161 printk messages dropped ** ** 157 printk messages dropped ** ** 189 printk messages dropped ** ** 206 printk messages dropped ** ** 190 printk messages dropped ** ** 171 printk messages dropped ** ** 156 printk messages dropped ** ** 201 printk messages dropped ** ** 188 printk messages dropped ** ** 182 printk messages dropped ** ** 213 printk messages dropped ** ** 52 printk messages dropped ** ** 5603 printk messages dropped ** ** 137 printk messages dropped ** ** 135 printk messages dropped ** ** 139 printk messages dropped ** ** 138 printk messages dropped ** ** 139 printk messages dropped ** ** 139 printk messages dropped ** ** 140 printk messages dropped ** ** 6396 printk messages dropped ** ** 5606 printk messages dropped ** ** 153 printk messages dropped ** ** 141 printk messages dropped ** ** 142 printk messages dropped ** ** 173 printk messages dropped ** ** 151 printk messages dropped ** ** 150 printk messages dropped ** ** 143 printk messages dropped ** ** 148 printk messages dropped ** ** 150 printk messages dropped ** ** 148 printk messages dropped ** ** 139 printk messages dropped ** ** 144 printk messages dropped ** ** 211 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 147 printk messages dropped ** ** 85 printk messages dropped ** ** 8599 printk messages dropped ** ** 154 printk messages dropped ** ** 146 printk messages dropped ** ** 146 printk messages dropped ** ** 147 printk messages dropped ** ** 145 printk messages dropped ** ** 146 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 146 printk messages dropped ** ** 143 printk messages dropped ** ** 146 printk messages dropped ** ** 138 printk messages dropped ** ** 143 printk messages dropped ** ** 147 printk messages dropped ** ** 145 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 149 printk messages dropped ** ** 138 printk messages dropped ** ** 133 printk messages dropped ** ** 6982 printk messages dropped ** ** 5471 printk messages dropped ** ** 161 printk messages dropped ** ** 140 printk messages dropped ** ** 167 printk messages dropped ** ** 18 printk messages dropped ** ** 5870 printk messages dropped ** ** 15 printk messages dropped ** [ 344.706088][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. ** 7951 printk messages dropped ** ** 146 printk messages dropped ** ** 117 printk messages dropped ** ** 122 printk messages dropped ** ** 132 printk messages dropped ** ** 124 printk messages dropped ** ** 48 printk messages dropped ** ** 8646 printk messages dropped ** ** 5719 printk messages dropped ** [ 345.015495][ T10] usb 5-1: USB disconnect, device number 11 ** 2030 printk messages dropped ** [ 345.248597][T11298] 9p: Bad value for 'rfdno' [ 345.426637][T11306] e1000e 0000:00:02.0: resetting [ 345.468865][T11306] e1000e 0000:00:02.0: reset done [ 345.493797][ T7212] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 345.542786][T11307] Invalid argument reading file caps for ./file0 [ 345.644245][ T7212] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 345.645185][ T7212] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 345.645199][ T7212] usb 7-1: config 0 has no interface number 0 [ 345.645221][ T7212] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.646988][ T7212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.646998][ T7212] usb 7-1: Product: syz [ 345.647006][ T7212] usb 7-1: Manufacturer: syz [ 345.647013][ T7212] usb 7-1: SerialNumber: syz [ 345.648814][ T7212] usb 7-1: config 0 descriptor?? [ 345.652437][ T7212] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 345.683800][ C0] net_ratelimit: 21 callbacks suppressed [ 345.843866][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 346.003210][T11311] sch_fq: defrate 10 ignored. [ 346.008276][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 347.913919][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 347.920283][ T8027] usb 7-1: USB disconnect, device number 10 [ 347.935010][ T8027] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 348.344143][T11300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.427780][T11316] FAULT_INJECTION: forcing a failure. [ 348.427780][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 348.429513][T11316] CPU: 0 UID: 0 PID: 11316 Comm: syz.7.744 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.429530][T11316] Tainted: [L]=SOFTLOCKUP [ 348.429534][T11316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.429541][T11316] Call Trace: [ 348.429546][T11316] [ 348.429551][T11316] dump_stack_lvl+0x100/0x190 [ 348.429570][T11316] should_fail_ex.cold+0x5/0xa [ 348.429596][T11316] should_failslab+0xc2/0x120 [ 348.429616][T11316] kmem_cache_alloc_noprof+0x92/0x6a0 [ 348.429632][T11316] ? __pfx_map_id_range_down+0x10/0x10 [ 348.429650][T11316] ? security_inode_alloc+0x3b/0x2c0 [ 348.429666][T11316] security_inode_alloc+0x3b/0x2c0 [ 348.429679][T11316] inode_init_always_gfp+0xc6f/0xfb0 [ 348.429697][T11316] alloc_inode+0x8e/0x250 [ 348.429709][T11316] new_inode+0x22/0x1c0 [ 348.429723][T11316] proc_pid_make_inode+0x22/0x160 [ 348.429741][T11316] proc_pident_instantiate+0x85/0x310 [ 348.429761][T11316] proc_pident_lookup+0x1e3/0x270 [ 348.429779][T11316] ? __pfx_down_read+0x10/0x10 [ 348.429793][T11316] __lookup_slow+0x155/0x320 [ 348.429806][T11316] lookup_slow+0x50/0x70 [ 348.429818][T11316] link_path_walk+0x1377/0x1cc0 [ 348.429838][T11316] path_openat+0x1ac/0x2440 [ 348.429856][T11316] ? __pfx_path_openat+0x10/0x10 [ 348.429877][T11316] do_file_open+0x20e/0x430 [ 348.429894][T11316] ? __pfx_do_file_open+0x10/0x10 [ 348.429916][T11316] ? __pfx_kfree_link+0x10/0x10 [ 348.429934][T11316] ? _raw_spin_unlock+0x28/0x50 [ 348.429949][T11316] ? alloc_fd+0x471/0x7a0 [ 348.429969][T11316] do_sys_openat2+0x10f/0x1e0 [ 348.429981][T11316] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.429993][T11316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.430005][T11316] ? __fget_files+0x21f/0x3d0 [ 348.430022][T11316] __ia32_compat_sys_openat+0x12d/0x210 [ 348.430035][T11316] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 348.430047][T11316] ? ksys_write+0x1ac/0x250 [ 348.430066][T11316] do_int80_emulation+0x166/0x650 [ 348.430080][T11316] asm_int80_emulation+0x1a/0x20 [ 348.430091][T11316] RIP: 0023:0xf71d762b [ 348.430102][T11316] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.430113][T11316] RSP: 002b:00000000f54963cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 348.430125][T11316] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496490 [ 348.430132][T11316] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.430138][T11316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.430145][T11316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.430152][T11316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.430166][T11316] [ 348.773999][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.774023][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=c6.28 [ 348.780956][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 348.780974][ T10] usb 5-1: can't read configurations, error -71 [ 348.963592][ T25] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 348.988398][T11336] xt_cgroup: invalid path, errno=-2 ** 1797 printk messages dropped ** [ 349.112473][T11336] syzkaller0: entered promiscuous mode [ 349.112486][T11336] syzkaller0: entered allmulticast mode ** 384 printk messages dropped ** ** 99 printk messages dropped ** ** 177 printk messages dropped ** ** 99 printk messages dropped ** ** 100 printk messages dropped ** ** 107 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 110 printk messages dropped ** ** 99 printk messages dropped ** ** 155 printk messages dropped ** ** 127 printk messages dropped ** ** 109 printk messages dropped ** ** 36 printk messages dropped ** [ 349.189299][ T25] usb 12-1: Using ep0 maxpacket: 8 [ 349.191218][ T25] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.232148][T11334] CIFS: Attempting to mount //127.0.0.1/share [ 349.237202][ T25] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 349.237255][ T25] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.237269][ T25] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.237286][ T25] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.237304][ T25] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.237350][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.531894][ T25] usb 12-1: usb_control_msg returned -32 [ 349.531950][ T25] usbtmc 12-1:16.0: can't read capabilities [ 349.745147][T11334] CIFS: VFS: Error connecting to socket. Aborting operation. [ 349.751051][T11334] CIFS: VFS: cifs_mount failed w/return code = -4 [ 349.891294][T11352] FAULT_INJECTION: forcing a failure. [ 349.891294][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.891313][T11352] CPU: 2 UID: 0 PID: 11352 Comm: syz.0.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.891328][T11352] Tainted: [L]=SOFTLOCKUP [ 349.891345][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.891353][T11352] Call Trace: [ 349.891357][T11352] [ 349.891362][T11352] dump_stack_lvl+0x100/0x190 [ 349.891382][T11352] should_fail_ex.cold+0x5/0xa [ 349.891397][T11352] _copy_from_iter+0x1f4/0x1690 [ 349.891412][T11352] ? __asan_memset+0x23/0x50 [ 349.891426][T11352] ? __pfx__copy_from_iter+0x10/0x10 [ 349.891438][T11352] ? __pfx___alloc_skb+0x10/0x10 [ 349.891457][T11352] netlink_sendmsg+0x808/0xda0 [ 349.891472][T11352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.891485][T11352] ? apparmor_socket_sendmsg+0x165/0x280 [ 349.891500][T11352] sock_write_iter+0x53a/0x5b0 [ 349.891516][T11352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.891528][T11352] ? __pfx_sock_write_iter+0x10/0x10 [ 349.891552][T11352] do_iter_readv_writev+0x6f7/0x930 [ 349.891567][T11352] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 349.891580][T11352] ? common_file_perm+0x266/0x500 [ 349.891595][T11352] ? bpf_lsm_file_permission+0x9/0x10 [ 349.891613][T11352] ? security_file_permission+0x76/0x210 [ 349.891629][T11352] ? rw_verify_area+0xce/0x6d0 [ 349.891643][T11352] vfs_writev+0x360/0xdd0 [ 349.891657][T11352] ? __lock_acquire+0x5c0/0x1f40 [ 349.891676][T11352] ? __pfx_vfs_writev+0x10/0x10 [ 349.891693][T11352] ? lock_acquire+0x1d1/0x380 [ 349.891709][T11352] ? __fget_files+0x34/0x3d0 [ 349.891728][T11352] ? __fget_files+0x21f/0x3d0 [ 349.891747][T11352] ? do_writev+0x28a/0x340 [ 349.891759][T11352] do_writev+0x28a/0x340 [ 349.891773][T11352] ? __pfx_do_writev+0x10/0x10 [ 349.891785][T11352] ? ksys_write+0x1ac/0x250 [ 349.891799][T11352] ? __pfx_ksys_write+0x10/0x10 [ 349.891817][T11352] __do_fast_syscall_32+0x13a/0x8b0 [ 349.891829][T11352] ? lockdep_hardirqs_on+0x7d/0x110 [ 349.891848][T11352] do_fast_syscall_32+0x32/0x70 [ 349.891859][T11352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.891878][T11352] RIP: 0023:0xf7f94fec [ 349.891892][T11352] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 349.891897][T11352] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 349.891908][T11352] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 349.891916][T11352] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.891923][T11352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.891929][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.891936][T11352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.891950][T11352] [ 351.123459][ C2] net_ratelimit: 22 callbacks suppressed ** 996 printk messages dropped ** ** 158 printk messages dropped ** ** 158 printk messages dropped ** ** 191 printk messages dropped ** ** 136 printk messages dropped ** ** 159 printk messages dropped ** ** 160 printk messages dropped ** ** 170 printk messages dropped ** ** 175 printk messages dropped ** ** 188 printk messages dropped ** ** 130 printk messages dropped ** ** 482 printk messages dropped ** ** 149 printk messages dropped ** ** 171 printk messages dropped ** ** 162 printk messages dropped ** ** 164 printk messages dropped ** ** 133 printk messages dropped ** ** 160 printk messages dropped ** ** 156 printk messages dropped ** ** 297 printk messages dropped ** ** 174 printk messages dropped ** ** 144 printk messages dropped ** ** 133 printk messages dropped ** ** 173 printk messages dropped ** ** 149 printk messages dropped ** ** 188 printk messages dropped ** ** 154 printk messages dropped ** ** 177 printk messages dropped ** ** 155 printk messages dropped ** ** 147 printk messages dropped ** ** 131 printk messages dropped ** ** 152 printk messages dropped ** ** 159 printk messages dropped ** ** 94 printk messages dropped ** ** 148 printk messages dropped ** ** 198 printk messages dropped ** ** 135 printk messages dropped ** ** 136 printk messages dropped ** ** 145 printk messages dropped ** ** 155 printk messages dropped ** ** 145 printk messages dropped ** ** 158 printk messages dropped ** ** 160 printk messages dropped ** ** 195 printk messages dropped ** ** 134 printk messages dropped ** ** 158 printk messages dropped ** ** 137 printk messages dropped ** ** 165 printk messages dropped ** ** 161 printk messages dropped ** ** 165 printk messages dropped ** ** 143 printk messages dropped ** ** 129 printk messages dropped ** ** 142 printk messages dropped ** ** 152 printk messages dropped ** ** 156 printk messages dropped ** ** 178 printk messages dropped ** ** 162 printk messages dropped ** ** 149 printk messages dropped ** ** 133 printk messages dropped ** ** 123 printk messages dropped ** ** 120 printk messages dropped ** ** 148 printk messages dropped ** ** 161 printk messages dropped ** ** 164 printk messages dropped ** ** 194 printk messages dropped ** ** 143 printk messages dropped ** ** 125 printk messages dropped ** ** 134 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 166 printk messages dropped ** ** 24 printk messages dropped ** ** 110 printk messages dropped ** ** 133 printk messages dropped ** ** 168 printk messages dropped ** ** 153 printk messages dropped ** ** 162 printk messages dropped ** ** 136 printk messages dropped ** ** 151 printk messages dropped ** ** 158 printk messages dropped ** ** 141 printk messages dropped ** ** 150 printk messages dropped ** ** 128 printk messages dropped ** ** 136 printk messages dropped ** ** 181 printk messages dropped ** ** 153 printk messages dropped ** ** 165 printk messages dropped ** ** 151 printk messages dropped ** ** 137 printk messages dropped ** ** 146 printk messages dropped ** ** 224 printk messages dropped ** ** 153 printk messages dropped ** ** 145 printk messages dropped ** ** 194 printk messages dropped ** ** 159 printk messages dropped ** ** 143 printk messages dropped ** ** 130 printk messages dropped ** ** 129 printk messages dropped ** ** 157 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 162 printk messages dropped ** ** 134 printk messages dropped ** ** 175 printk messages dropped ** ** 138 printk messages dropped ** ** 365 printk messages dropped ** ** 746 printk messages dropped ** ** 1012 printk messages dropped ** ** 1048 printk messages dropped ** ** 98 printk messages dropped ** ** 178 printk messages dropped ** ** 148 printk messages dropped ** ** 143 printk messages dropped ** ** 165 printk messages dropped ** ** 167 printk messages dropped ** ** 111 printk messages dropped ** ** 159 printk messages dropped ** ** 158 printk messages dropped ** ** 188 printk messages dropped ** ** 160 printk messages dropped ** ** 140 printk messages dropped ** ** 170 printk messages dropped ** ** 173 printk messages dropped ** ** 188 printk messages dropped ** ** 164 printk messages dropped ** ** 159 printk messages dropped ** ** 130 printk messages dropped ** ** 177 printk messages dropped ** ** 150 printk messages dropped ** ** 185 printk messages dropped ** ** 160 printk messages dropped ** ** 157 printk messages dropped ** ** 165 printk messages dropped ** ** 152 printk messages dropped ** ** 157 printk messages dropped ** ** 174 printk messages dropped ** ** 212 printk messages dropped ** ** 126 printk messages dropped ** ** 99 printk messages dropped ** ** 96 printk messages dropped ** ** 81 printk messages dropped ** ** 88 printk messages dropped ** ** 83 printk messages dropped ** ** 100 printk messages dropped ** ** 92 printk messages dropped ** ** 109 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 96 printk messages dropped ** ** 96 printk messages dropped ** ** 79 printk messages dropped ** ** 90 printk messages dropped ** ** 88 printk messages dropped ** ** 99 printk messages dropped ** ** 91 printk messages dropped ** ** 106 printk messages dropped ** ** 111 printk messages dropped ** ** 110 printk messages dropped ** ** 108 printk messages dropped ** ** 39 printk messages dropped ** [ 351.709111][ T25] usb 12-1: USB disconnect, device number 16 ** 1387 printk messages dropped ** ** 74 printk messages dropped ** ** 119 printk messages dropped ** ** 201 printk messages dropped ** ** 184 printk messages dropped ** ** 167 printk messages dropped ** ** 155 printk messages dropped ** ** 166 printk messages dropped ** ** 150 printk messages dropped ** ** 160 printk messages dropped ** ** 144 printk messages dropped ** ** 170 printk messages dropped ** ** 154 printk messages dropped ** ** 175 printk messages dropped ** ** 155 printk messages dropped ** ** 159 printk messages dropped ** ** 158 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 213 printk messages dropped ** ** 150 printk messages dropped ** ** 161 printk messages dropped ** ** 100 printk messages dropped ** ** 164 printk messages dropped ** ** 150 printk messages dropped ** ** 169 printk messages dropped ** ** 149 printk messages dropped ** ** 168 printk messages dropped ** ** 99 printk messages dropped ** ** 89 printk messages dropped ** ** 88 printk messages dropped ** ** 90 printk messages dropped ** ** 152 printk messages dropped ** ** 164 printk messages dropped ** ** 159 printk messages dropped ** ** 149 printk messages dropped ** ** 148 printk messages dropped ** ** 156 printk messages dropped ** ** 154 printk messages dropped ** ** 176 printk messages dropped ** ** 149 printk messages dropped ** ** 78 printk messages dropped ** ** 143 printk messages dropped ** ** 147 printk messages dropped ** ** 151 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 155 printk messages dropped ** ** 147 printk messages dropped ** ** 143 printk messages dropped ** ** 142 printk messages dropped ** ** 162 printk messages dropped ** ** 143 printk messages dropped ** ** 167 printk messages dropped ** ** 138 printk messages dropped ** ** 150 printk messages dropped ** ** 157 printk messages dropped ** ** 147 printk messages dropped ** ** 157 printk messages dropped ** ** 146 printk messages dropped ** ** 149 printk messages dropped ** ** 159 printk messages dropped ** ** 148 printk messages dropped ** ** 158 printk messages dropped ** ** 142 printk messages dropped ** ** 162 printk messages dropped ** ** 144 printk messages dropped ** ** 149 printk messages dropped ** ** 144 printk messages dropped ** ** 145 printk messages dropped ** ** 234 printk messages dropped ** ** 154 printk messages dropped ** ** 153 printk messages dropped ** ** 160 printk messages dropped ** ** 166 printk messages dropped ** ** 164 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 148 printk messages dropped ** ** 89 printk messages dropped ** ** 142 printk messages dropped ** ** 138 printk messages dropped ** ** 135 printk messages dropped ** ** 144 printk messages dropped ** ** 130 printk messages dropped ** ** 204 printk messages dropped ** ** 131 printk messages dropped ** ** 138 printk messages dropped ** ** 144 printk messages dropped ** ** 190 printk messages dropped ** ** 146 printk messages dropped ** ** 147 printk messages dropped ** ** 151 printk messages dropped ** ** 139 printk messages dropped ** ** 150 printk messages dropped ** ** 151 printk messages dropped ** ** 138 printk messages dropped ** ** 159 printk messages dropped ** ** 148 printk messages dropped ** ** 157 printk messages dropped ** ** 145 printk messages dropped ** ** 139 printk messages dropped ** ** 145 printk messages dropped ** ** 138 printk messages dropped ** ** 146 printk messages dropped ** ** 207 printk messages dropped ** ** 182 printk messages dropped ** ** 160 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 139 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 148 printk messages dropped ** ** 139 printk messages dropped ** ** 158 printk messages dropped ** ** 148 printk messages dropped ** ** 110 printk messages dropped ** ** 157 printk messages dropped ** ** 151 printk messages dropped ** ** 133 printk messages dropped ** ** 131 printk messages dropped ** ** 142 printk messages dropped ** ** 174 printk messages dropped ** ** 141 printk messages dropped ** ** 147 printk messages dropped ** ** 139 printk messages dropped ** ** 145 printk messages dropped ** ** 170 printk messages dropped ** ** 131 printk messages dropped ** ** 138 printk messages dropped ** ** 131 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 138 printk messages dropped ** ** 133 printk messages dropped ** ** 145 printk messages dropped ** ** 149 printk messages dropped ** ** 142 printk messages dropped ** ** 143 printk messages dropped ** ** 141 printk messages dropped ** ** 169 printk messages dropped ** ** 134 printk messages dropped ** ** 129 printk messages dropped ** ** 44 printk messages dropped ** ** 113 printk messages dropped ** ** 136 printk messages dropped ** ** 144 printk messages dropped ** ** 137 printk messages dropped ** ** 133 printk messages dropped ** ** 119 printk messages dropped ** ** 176 printk messages dropped ** ** 154 printk messages dropped ** ** 142 printk messages dropped ** ** 129 printk messages dropped ** ** 134 printk messages dropped ** ** 134 printk messages dropped ** ** 138 printk messages dropped ** ** 144 printk messages dropped ** ** 194 printk messages dropped ** ** 149 printk messages dropped ** ** 160 printk messages dropped ** ** 148 printk messages dropped ** ** 169 printk messages dropped ** ** 175 printk messages dropped ** ** 173 printk messages dropped ** ** 163 printk messages dropped ** ** 145 printk messages dropped ** ** 136 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 60 printk messages dropped ** [ 352.333391][ T6324] usb 5-1: new high-speed USB device number 14 using dummy_hcd ** 2087 printk messages dropped ** ** 1061 printk messages dropped ** [ 352.640476][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. ** 2218 printk messages dropped ** ** 695 printk messages dropped ** ** 2646 printk messages dropped ** ** 2688 printk messages dropped ** ** 1312 printk messages dropped ** ** 2297 printk messages dropped ** ** 179 printk messages dropped ** ** 174 printk messages dropped ** ** 116 printk messages dropped ** ** 150 printk messages dropped ** ** 202 printk messages dropped ** ** 180 printk messages dropped ** ** 179 printk messages dropped ** ** 172 printk messages dropped ** ** 198 printk messages dropped ** ** 224 printk messages dropped ** ** 229 printk messages dropped ** ** 237 printk messages dropped ** ** 261 printk messages dropped ** ** 180 printk messages dropped ** ** 180 printk messages dropped ** ** 175 printk messages dropped ** ** 175 printk messages dropped ** ** 179 printk messages dropped ** ** 175 printk messages dropped ** ** 183 printk messages dropped ** ** 181 printk messages dropped ** ** 207 printk messages dropped ** ** 177 printk messages dropped ** ** 168 printk messages dropped ** ** 166 printk messages dropped ** ** 173 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 173 printk messages dropped ** ** 141 printk messages dropped ** ** 160 printk messages dropped ** ** 225 printk messages dropped ** ** 124 printk messages dropped ** ** 160 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 136 printk messages dropped ** ** 135 printk messages dropped ** ** 134 printk messages dropped ** ** 142 printk messages dropped ** ** 104 printk messages dropped ** ** 164 printk messages dropped ** ** 135 printk messages dropped ** ** 136 printk messages dropped ** ** 134 printk messages dropped ** ** 132 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 137 printk messages dropped ** ** 178 printk messages dropped ** ** 138 printk messages dropped ** ** 143 printk messages dropped ** ** 176 printk messages dropped ** ** 168 printk messages dropped ** ** 163 printk messages dropped ** ** 186 printk messages dropped ** ** 171 printk messages dropped ** ** 146 printk messages dropped ** ** 197 printk messages dropped ** ** 171 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 173 printk messages dropped ** ** 171 printk messages dropped ** ** 171 printk messages dropped ** ** 160 printk messages dropped ** ** 164 printk messages dropped ** ** 65 printk messages dropped ** ** 698 printk messages dropped ** ** 342 printk messages dropped ** ** 1629 printk messages dropped ** ** 239 printk messages dropped ** ** 162 printk messages dropped ** ** 185 printk messages dropped ** ** 155 printk messages dropped ** ** 167 printk messages dropped ** ** 160 printk messages dropped ** ** 161 printk messages dropped ** ** 162 printk messages dropped ** ** 165 printk messages dropped ** ** 152 printk messages dropped ** ** 165 printk messages dropped ** ** 139 printk messages dropped ** ** 147 printk messages dropped ** ** 156 printk messages dropped ** ** 160 printk messages dropped ** ** 159 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 160 printk messages dropped ** ** 159 printk messages dropped ** ** 180 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 158 printk messages dropped ** ** 161 printk messages dropped ** ** 161 printk messages dropped ** ** 953 printk messages dropped ** ** 169 printk messages dropped ** ** 168 printk messages dropped ** ** 165 printk messages dropped ** ** 365 printk messages dropped ** ** 164 printk messages dropped ** ** 166 printk messages dropped ** ** 193 printk messages dropped ** ** 159 printk messages dropped ** ** 169 printk messages dropped ** ** 165 printk messages dropped ** ** 164 printk messages dropped ** ** 164 printk messages dropped ** ** 165 printk messages dropped ** ** 159 printk messages dropped ** ** 166 printk messages dropped ** ** 176 printk messages dropped ** ** 235 printk messages dropped ** ** 163 printk messages dropped ** ** 133 printk messages dropped ** ** 1825 printk messages dropped ** ** 1392 printk messages dropped ** ** 164 printk messages dropped ** ** 147 printk messages dropped ** ** 150 printk messages dropped ** ** 329 printk messages dropped ** ** 154 printk messages dropped ** ** 149 printk messages dropped ** ** 155 printk messages dropped ** ** 152 printk messages dropped ** ** 171 printk messages dropped ** ** 160 printk messages dropped ** ** 171 printk messages dropped ** ** 170 printk messages dropped ** ** 172 printk messages dropped ** ** 174 printk messages dropped ** ** 160 printk messages dropped ** ** 165 printk messages dropped ** ** 170 printk messages dropped ** ** 156 printk messages dropped ** ** 162 printk messages dropped ** ** 167 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 47 printk messages dropped ** ** 504 printk messages dropped ** ** 1347 printk messages dropped ** ** 2691 printk messages dropped ** ** 1865 printk messages dropped ** ** 157 printk messages dropped ** ** 155 printk messages dropped ** ** 163 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 60 printk messages dropped ** [ 356.336040][T11373] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 356.383788][ T7212] e1000 0000:00:06.0 eth0: Reset adapter [ 356.403419][ C2] net_ratelimit: 42 callbacks suppressed [ 356.514259][T11361] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 356.539885][T11369] sch_fq: defrate 10 ignored. [ 356.697207][T11394] jffs2: notice: (11394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 356.857924][ T6324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.857945][ T6324] usb 5-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=c6.28 [ 356.858820][ T6324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 356.858836][ T6324] usb 5-1: can't read configurations, error -71 [ 356.976882][ T10] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 357.185596][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 357.272497][T11423] netlink: 'syz.3.764': attribute type 4 has an invalid length. [ 357.471162][T11425] Invalid ELF header magic: != ELF [ 358.794166][ T6324] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 361.592892][ C2] net_ratelimit: 75 callbacks suppressed [ 366.792578][ C2] net_ratelimit: 22 callbacks suppressed ** 2877 printk messages dropped ** ** 21 printk messages dropped ** ** 167 printk messages dropped ** ** 173 printk messages dropped ** ** 166 printk messages dropped ** ** 157 printk messages dropped ** ** 144 printk messages dropped ** ** 140 printk messages dropped ** ** 153 printk messages dropped ** ** 154 printk messages dropped ** ** 150 printk messages dropped ** ** 144 printk messages dropped ** ** 151 printk messages dropped ** ** 170 printk messages dropped ** ** 148 printk messages dropped ** ** 146 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 138 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 98 printk messages dropped ** ** 133 printk messages dropped ** ** 156 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 138 printk messages dropped ** ** 157 printk messages dropped ** ** 151 printk messages dropped ** ** 174 printk messages dropped ** ** 136 printk messages dropped ** ** 142 printk messages dropped ** ** 141 printk messages dropped ** ** 170 printk messages dropped ** ** 143 printk messages dropped ** ** 152 printk messages dropped ** ** 146 printk messages dropped ** ** 151 printk messages dropped ** ** 140 printk messages dropped ** ** 131 printk messages dropped ** ** 139 printk messages dropped ** ** 140 printk messages dropped ** ** 144 printk messages dropped ** ** 177 printk messages dropped ** ** 146 printk messages dropped ** ** 131 printk messages dropped ** ** 134 printk messages dropped ** ** 144 printk messages dropped ** ** 136 printk messages dropped ** ** 140 printk messages dropped ** ** 139 printk messages dropped ** ** 144 printk messages dropped ** ** 148 printk messages dropped ** ** 168 printk messages dropped ** ** 146 printk messages dropped ** ** 162 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 151 printk messages dropped ** ** 146 printk messages dropped ** ** 142 printk messages dropped ** ** 159 printk messages dropped ** ** 152 printk messages dropped ** ** 151 printk messages dropped ** ** 157 printk messages dropped ** ** 155 printk messages dropped ** ** 143 printk messages dropped ** ** 135 printk messages dropped ** ** 130 printk messages dropped ** ** 127 printk messages dropped ** ** 81 printk messages dropped ** ** 2792 printk messages dropped ** ** 208 printk messages dropped ** ** 139 printk messages dropped ** ** 120 printk messages dropped ** ** 23 printk messages dropped ** [ 367.223437][ T6324] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 367.387067][ T6324] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 367.387879][ T6324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.387901][ T6324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 367.387913][ T6324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 367.387925][ T6324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 367.387937][ T6324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.387948][ T6324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 367.387959][ T6324] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 367.389594][ T6324] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 367.389604][ T6324] usb 5-1: Product: syz [ 367.389612][ T6324] usb 5-1: Manufacturer: syz [ 367.389619][ T6324] usb 5-1: SerialNumber: syz [ 367.391906][T11463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.392008][T11463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.392059][T11463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.394674][ T6324] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 367.394973][ T6324] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 367.395745][ T6324] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 367.395817][ T6324] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 367.399247][ T6324] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 367.556177][T11467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. ** 170 printk messages dropped ** ** 1655 printk messages dropped ** ** 192 printk messages dropped ** ** 163 printk messages dropped ** ** 155 printk messages dropped ** ** 150 printk messages dropped ** ** 156 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 156 printk messages dropped ** ** 33 printk messages dropped ** ** 184 printk messages dropped ** ** 175 printk messages dropped ** ** 175 printk messages dropped ** ** 149 printk messages dropped ** ** 164 printk messages dropped ** ** 163 printk messages dropped ** ** 191 printk messages dropped ** ** 145 printk messages dropped ** ** 157 printk messages dropped ** ** 175 printk messages dropped ** ** 170 printk messages dropped ** ** 244 printk messages dropped ** ** 172 printk messages dropped ** ** 159 printk messages dropped ** ** 170 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 154 printk messages dropped ** ** 182 printk messages dropped ** ** 150 printk messages dropped ** ** 168 printk messages dropped ** ** 161 printk messages dropped ** ** 166 printk messages dropped ** ** 152 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 150 printk messages dropped ** ** 178 printk messages dropped ** ** 150 printk messages dropped ** ** 144 printk messages dropped ** ** 126 printk messages dropped ** ** 89 printk messages dropped ** ** 115 printk messages dropped ** ** 130 printk messages dropped ** ** 128 printk messages dropped ** ** 126 printk messages dropped ** ** 134 printk messages dropped ** ** 151 printk messages dropped ** ** 155 printk messages dropped ** ** 169 printk messages dropped ** ** 146 printk messages dropped ** ** 132 printk messages dropped ** ** 126 printk messages dropped ** ** 129 printk messages dropped ** ** 166 printk messages dropped ** ** 136 printk messages dropped ** ** 179 printk messages dropped ** ** 161 printk messages dropped ** ** 163 printk messages dropped ** ** 156 printk messages dropped ** ** 132 printk messages dropped ** ** 130 printk messages dropped ** ** 116 printk messages dropped ** ** 100 printk messages dropped ** ** 149 printk messages dropped ** ** 184 printk messages dropped ** ** 154 printk messages dropped ** ** 173 printk messages dropped ** ** 156 printk messages dropped ** ** 165 printk messages dropped ** ** 162 printk messages dropped ** ** 152 printk messages dropped ** ** 156 printk messages dropped ** ** 155 printk messages dropped ** ** 178 printk messages dropped ** ** 144 printk messages dropped ** ** 161 printk messages dropped ** ** 158 printk messages dropped ** ** 155 printk messages dropped ** ** 158 printk messages dropped ** ** 148 printk messages dropped ** ** 80 printk messages dropped ** [ 367.818977][T11460] comedi comedi1: Minor 4 could not be opened [ 367.821726][ T6324] usb 5-1: USB disconnect, device number 16 [ 367.840522][ T6324] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 367.846241][ T6324] keyspan 5-1:1.0: device disconnected [ 368.666375][T11478] tmpfs: Bad value for 'mpol' [ 368.683656][T11478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.770'. [ 368.864434][ T38] IPVS: starting estimator thread 0... [ 368.974219][T11483] IPVS: using max 43 ests per chain, 103200 per kthread ** 2505 printk messages dropped ** ** 2633 printk messages dropped ** [ 369.498056][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. ** 2504 printk messages dropped ** ** 1121 printk messages dropped ** ** 2928 printk messages dropped ** ** 1648 printk messages dropped ** ** 3558 printk messages dropped ** [ 371.332437][ T5626] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 371.482368][ T5626] usb 5-1: Using ep0 maxpacket: 8 [ 371.515992][T11518] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 371.516010][T11518] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 371.516033][T11518] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 371.519760][T11518] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 371.529553][T11518] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 ** 2194 printk messages dropped ** ** 1117 printk messages dropped ** ** 11 printk messages dropped ** [ 371.912315][ C2] net_ratelimit: 80 callbacks suppressed ** 3597 printk messages dropped ** ** 43 printk messages dropped ** ** 2941 printk messages dropped ** ** 179 printk messages dropped ** ** 19 printk messages dropped ** [ 372.576129][ T5626] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.576153][ T5626] usb 5-1: New USB device found, idVendor=413c, idProduct=8137, bcdDevice=e3.82 [ 372.580846][ T5626] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 372.580864][ T5626] usb 5-1: can't read configurations, error -71 ** 906 printk messages dropped ** ** 87 printk messages dropped ** ** 34 printk messages dropped ** ** 1 printk messages dropped ** ** 95 printk messages dropped ** ** 34 printk messages dropped ** ** 2634 printk messages dropped ** [ 373.122277][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 373.292733][ T25] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 373.293618][ T25] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.293633][ T25] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.293648][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 373.293675][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.295013][ T25] usb 8-1: config 0 descriptor?? [ 373.753004][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 373.753072][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 373.755653][ T25] usb 8-1: USB disconnect, device number 9 [ 374.459011][T11547] FAULT_INJECTION: forcing a failure. [ 374.459011][T11547] name failslab, interval 1, probability 0, space 0, times 0 [ 374.459031][T11547] CPU: 0 UID: 0 PID: 11547 Comm: syz.3.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.459068][T11547] Tainted: [L]=SOFTLOCKUP [ 374.459073][T11547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.459080][T11547] Call Trace: [ 374.459085][T11547] [ 374.459090][T11547] dump_stack_lvl+0x100/0x190 [ 374.459110][T11547] should_fail_ex.cold+0x5/0xa [ 374.459126][T11547] should_failslab+0xc2/0x120 [ 374.459145][T11547] kmem_cache_alloc_noprof+0x92/0x6a0 [ 374.459165][T11547] ? do_getname+0x35/0x390 [ 374.459180][T11547] do_getname+0x35/0x390 [ 374.459192][T11547] user_path_at+0x26/0x60 [ 374.459208][T11547] __ia32_sys_mount+0x1fb/0x310 [ 374.459220][T11547] ? __pfx___ia32_sys_mount+0x10/0x10 [ 374.459236][T11547] __do_fast_syscall_32+0x13a/0x8b0 [ 374.459251][T11547] do_fast_syscall_32+0x32/0x70 [ 374.459269][T11547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.459284][T11547] RIP: 0023:0xf7f06fec [ 374.459297][T11547] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 374.459303][T11547] RSP: 002b:00000000f53b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 374.459316][T11547] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 374.459324][T11547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.459332][T11547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.459340][T11547] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.459347][T11547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.459363][T11547] ** 10450 printk messages dropped ** ** 168 printk messages dropped ** ** 494 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 152 printk messages dropped ** ** 184 printk messages dropped ** ** 153 printk messages dropped ** ** 159 printk messages dropped ** ** 149 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 143 printk messages dropped ** ** 152 printk messages dropped ** ** 149 printk messages dropped ** ** 145 printk messages dropped ** ** 175 printk messages dropped ** ** 156 printk messages dropped ** ** 1132 printk messages dropped ** ** 186 printk messages dropped ** ** 157 printk messages dropped ** ** 163 printk messages dropped ** ** 151 printk messages dropped ** ** 87 printk messages dropped ** [ 374.905250][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.789'. ** 1142 printk messages dropped ** [ 375.260317][T11555] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 375.260330][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.2.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.260348][T11555] Tainted: [L]=SOFTLOCKUP [ 375.260352][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 375.260360][T11555] Call Trace: [ 375.260364][T11555] [ 375.260369][T11555] dump_stack_lvl+0x100/0x190 [ 375.260390][T11555] sysfs_warn_dup.cold+0x1c/0x28 [ 375.260409][T11555] sysfs_create_dir_ns+0x24b/0x2b0 [ 375.260427][T11555] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 375.260443][T11555] ? find_held_lock+0x2b/0x80 [ 375.260457][T11555] ? kobject_add_internal+0x25f/0x930 [ 375.260478][T11555] ? kobject_add_internal+0x25f/0x930 [ 375.260500][T11555] ? class_dir_child_ns_type+0xd/0x60 [ 375.260523][T11555] kobject_add_internal+0x2c8/0x930 [ 375.260539][T11555] kobject_add+0x16a/0x1e0 [ 375.260553][T11555] ? __pfx_kobject_add+0x10/0x10 [ 375.260569][T11555] ? get_device_parent+0x1b3/0x4c0 [ 375.260583][T11555] ? kobject_put+0xb9/0x640 [ 375.260600][T11555] device_add+0x294/0x1970 [ 375.260638][T11555] ? lockdep_init_map_type+0x5c/0x250 [ 375.260658][T11555] ? __pfx_device_add+0x10/0x10 [ 375.260673][T11555] ? lockdep_init_map_type+0x5c/0x250 [ 375.260692][T11555] ? __init_waitqueue_head+0xca/0x150 [ 375.260710][T11555] tty_register_device_attr+0x388/0x810 [ 375.260725][T11555] ? lockdep_init_map_type+0x5c/0x250 [ 375.260743][T11555] ? __pfx_tty_register_device_attr+0x10/0x10 [ 375.260763][T11555] ? tty_port_init+0x156/0x1c0 [ 375.260779][T11555] gsm_activate_mux+0x155/0x2a0 [ 375.260793][T11555] gsmld_ioctl+0xbbc/0x15c0 [ 375.260812][T11555] ? __pfx_gsmld_ioctl+0x10/0x10 [ 375.260837][T11555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.260859][T11555] ? __pfx_gsmld_ioctl+0x10/0x10 [ 375.260873][T11555] tty_compat_ioctl+0x396/0x420 [ 375.260886][T11555] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 375.260899][T11555] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 375.260915][T11555] __do_fast_syscall_32+0x13a/0x8b0 [ 375.260929][T11555] do_fast_syscall_32+0x32/0x70 [ 375.260942][T11555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.260957][T11555] RIP: 0023:0xf7fa7fec [ 375.260971][T11555] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 375.260976][T11555] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 375.260988][T11555] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000404c4701 [ 375.260996][T11555] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.261003][T11555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.261010][T11555] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 375.261020][T11555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.261036][T11555] [ 375.261054][T11555] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. ** 1277 printk messages dropped ** ** 1687 printk messages dropped ** ** 1571 printk messages dropped ** ** 15 printk messages dropped ** ** 3 printk messages dropped ** ** 26 printk messages dropped ** ** 7 printk messages dropped ** [ 377.089644][T11578] input: syz1 as /devices/virtual/input/input18 [ 377.197857][T11581] bridge0: port 3(syz_tun) entered blocking state [ 377.197902][T11581] bridge0: port 3(syz_tun) entered disabled state [ 377.198005][T11581] syz_tun: entered allmulticast mode [ 377.199010][T11581] syz_tun: entered promiscuous mode [ 377.205512][T11581] bridge0: port 3(syz_tun) entered blocking state [ 377.205557][T11581] bridge0: port 3(syz_tun) entered forwarding state [ 377.282022][ C2] net_ratelimit: 17 callbacks suppressed [ 378.156765][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.156830][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 ** 4225 printk messages dropped ** ** 66 printk messages dropped ** ** 3422 printk messages dropped ** ** 68 printk messages dropped ** ** 32 printk messages dropped ** ** 3512 printk messages dropped ** ** 3440 printk messages dropped ** ** 178 printk messages dropped ** ** 160 printk messages dropped ** ** 167 printk messages dropped ** ** 158 printk messages dropped ** ** 166 printk messages dropped ** ** 159 printk messages dropped ** ** 153 printk messages dropped ** ** 48 printk messages dropped ** [ 379.513527][T11579] Bluetooth: hci0: Opcode 0x0c03 failed: -110 ** 1702 printk messages dropped ** ** 176 printk messages dropped ** ** 158 printk messages dropped ** ** 161 printk messages dropped ** ** 155 printk messages dropped ** ** 53 printk messages dropped ** [ 381.098552][ T43] audit: type=1326 audit(1791776220.276:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.0.801" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94fec code=0x0 [ 381.225240][T11600] FAULT_INJECTION: forcing a failure. [ 381.225240][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 381.225259][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.0.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.225275][T11600] Tainted: [L]=SOFTLOCKUP [ 381.225280][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.225286][T11600] Call Trace: [ 381.225291][T11600] [ 381.225296][T11600] dump_stack_lvl+0x100/0x190 [ 381.225315][T11600] should_fail_ex.cold+0x5/0xa [ 381.225331][T11600] should_failslab+0xc2/0x120 [ 381.225350][T11600] __kmalloc_cache_noprof+0x91/0x6d0 [ 381.225364][T11600] ? create_io_worker+0xc6/0x5b0 [ 381.225376][T11600] ? create_io_worker+0x17/0x5b0 [ 381.225387][T11600] create_io_worker+0xc6/0x5b0 [ 381.225400][T11600] io_wq_enqueue+0x4d8/0x970 [ 381.225412][T11600] ? __pfx_io_wq_enqueue+0x10/0x10 [ 381.225423][T11600] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 381.225442][T11600] ? io_prep_async_work+0x3ab/0x720 [ 381.225461][T11600] io_queue_iowq+0x238/0x5b0 [ 381.225479][T11600] io_queue_async+0x22e/0x290 ** 68 printk messages dropped ** [ 381.225901][T11600] __do_fast_syscall_32+0x59f/0x8b0 ** 231 printk messages dropped ** ** 93 printk messages dropped ** ** 86 printk messages dropped ** ** 88 printk messages dropped ** ** 83 printk messages dropped ** ** 86 printk messages dropped ** ** 81 printk messages dropped ** ** 123 printk messages dropped ** ** 92 printk messages dropped ** ** 86 printk messages dropped ** ** 98 printk messages dropped ** ** 85 printk messages dropped ** ** 91 printk messages dropped ** ** 82 printk messages dropped ** ** 84 printk messages dropped ** ** 87 printk messages dropped ** ** 85 printk messages dropped ** ** 88 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 98 printk messages dropped ** ** 83 printk messages dropped ** ** 91 printk messages dropped ** ** 84 printk messages dropped ** ** 86 printk messages dropped ** ** 63 printk messages dropped ** [ 381.878963][T11603] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 381.914840][T11603] pci 0000:00:04.0: PCI bridge to [bus 01] [ 381.945812][T11603] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 381.945909][T11603] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] ** 91 printk messages dropped ** ** 121 printk messages dropped ** ** 131 printk messages dropped ** ** 131 printk messages dropped ** ** 110 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 113 printk messages dropped ** ** 163 printk messages dropped ** ** 122 printk messages dropped ** ** 119 printk messages dropped ** ** 106 printk messages dropped ** ** 88 printk messages dropped ** ** 114 printk messages dropped ** ** 140 printk messages dropped ** ** 141 printk messages dropped ** ** 143 printk messages dropped ** ** 168 printk messages dropped ** ** 59 printk messages dropped ** ** 7913 printk messages dropped ** ** 161 printk messages dropped ** ** 141 printk messages dropped ** ** 158 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 155 printk messages dropped ** ** 158 printk messages dropped ** ** 158 printk messages dropped ** ** 163 printk messages dropped ** ** 156 printk messages dropped ** ** 152 printk messages dropped ** ** 157 printk messages dropped ** ** 153 printk messages dropped ** ** 153 printk messages dropped ** ** 158 printk messages dropped ** ** 253 printk messages dropped ** ** 156 printk messages dropped ** ** 159 printk messages dropped ** ** 162 printk messages dropped ** ** 154 printk messages dropped ** ** 148 printk messages dropped ** ** 152 printk messages dropped ** ** 155 printk messages dropped ** ** 153 printk messages dropped ** ** 157 printk messages dropped ** ** 41 printk messages dropped ** [ 382.156838][T11603] pci 0000:00:04.0: Adding to iommu group 4 [ 382.158650][T ** replaying previous printk message ** [ 382.158650][T11603] FAULT_INJECTION: forcing a failure. [ 382.158650][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 382.158669][T11603] CPU: 2 UID: 0 PID: 11603 Comm: syz.2.802 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.158686][T11603] Tainted: [L]=SOFTLOCKUP [ 382.158690][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.158698][T11603] Call Trace: [ 382.158703][T11603] [ 382.158708][T11603] dump_stack_lvl+0x100/0x190 [ 382.158730][T11603] should_fail_ex.cold+0x5/0xa [ 382.158747][T11603] should_failslab+0xc2/0x120 [ 382.158767][T11603] __kmalloc_cache_noprof+0x91/0x6d0 [ 382.158781][T11603] ? kasan_save_track+0x14/0x30 [ 382.158798][T11603] ? cache_tag_assign+0xee/0x7a0 [ 382.158816][T11603] cache_tag_assign+0xee/0x7a0 [ 382.158831][T11603] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.158850][T11603] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 382.158869][T11603] cache_tag_assign_domain+0x1f3/0x650 [ 382.158888][T11603] intel_iommu_attach_device+0x706/0xe00 [ 382.158906][T11603] ? __pfx_intel_iommu_attach_device+0x10/0x10 [ 382.158921][T11603] __iommu_attach_device+0x73/0x340 [ 382.158935][T11603] __iommu_device_set_domain+0x178/0x250 [ 382.158951][T11603] __iommu_group_set_domain_internal+0x1b1/0x450 [ 382.158969][T11603] iommu_setup_default_domain+0xb9b/0xf30 [ 382.158990][T11603] __iommu_probe_device+0x1174/0x1550 [ 382.159007][T11603] ? __pfx___iommu_probe_device+0x10/0x10 [ 382.159029][T11603] iommu_probe_device+0x28/0x130 [ 382.159045][T11603] iommu_bus_notifier+0x5b/0x110 [ 382.159061][T11603] notifier_call_chain+0x99/0x3f0 [ 382.159078][T11603] blocking_notifier_call_chain+0x69/0xa0 [ 382.159094][T11603] bus_notify+0x56/0x80 [ 382.159106][T11603] device_add+0x1169/0x1970 [ 382.159122][T11603] ? __pfx_device_add+0x10/0x10 [ 382.159136][T11603] ? pci_device_add+0xd4f/0x1820 [ 382.159166][T11603] ? down_write+0x146/0x1f0 [ 382.159179][T11603] ? pcibios_device_add+0x492/0x600 [ 382.159196][T11603] ? up_write+0x2dc/0x5b0 [ 382.159211][T11603] pci_device_add+0xdb6/0x1820 [ 382.159230][T11603] ? __pfx_pci_device_add+0x10/0x10 [ 382.159247][T11603] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 382.159264][T11603] ? __raw_spin_lock_init+0x3a/0x110 [ 382.159280][T11603] pci_scan_single_device+0x1d0/0x240 [ 382.159298][T11603] ? __pfx_pci_scan_single_device+0x10/0x10 [ 382.159320][T11603] pci_scan_slot+0x1c9/0x7c0 [ 382.159339][T11603] ? __pfx_pci_scan_slot+0x10/0x10 [ 382.159360][T11603] pci_scan_child_bus_extend+0x6b/0x7b0 [ 382.159377][T11603] ? pci_find_next_bus+0x60/0xb0 [ 382.159391][T11603] pci_rescan_bus+0x18/0x40 [ 382.159408][T11603] rescan_store+0xfb/0x130 [ 382.159426][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.159444][T11603] ? sysfs_file_kobj+0xe4/0x290 [ 382.159460][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.159477][T11603] bus_attr_store+0x74/0xb0 [ 382.159492][T11603] ? __pfx_bus_attr_store+0x10/0x10 [ 382.159508][T11603] sysfs_kf_write+0xf2/0x150 [ 382.159524][T11603] kernfs_fop_write_iter+0x3e0/0x5f0 [ 382.159537][T11603] ? __pfx_sysfs_kf_write+0x10/0x10 [ 382.159554][T11603] vfs_write+0x6af/0x1050 [ 382.159570][T11603] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 382.159585][T11603] ? __pfx_vfs_write+0x10/0x10 [ 382.159599][T11603] ? find_held_lock+0x2b/0x80 [ 382.159623][T11603] ksys_write+0x12a/0x250 [ 382.159638][T11603] ? __pfx_ksys_write+0x10/0x10 [ 382.159657][T11603] __do_fast_syscall_32+0x13a/0x8b0 [ 382.159672][T11603] do_fast_syscall_32+0x32/0x70 [ 382.159685][T11603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.159700][T11603] RIP: 0023:0xf7fa7fec [ 382.159715][T11603] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 382.159721][T11603] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 382.159732][T11603] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 382.159740][T11603] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.159747][T11603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.159754][T11603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.159761][T11603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.159776][T11603] [ 382.160202][T11603] ------------[ cut here ]------------ [ 382.160210][T11603] ret [ 382.160214][T11603] WARNING: drivers/iommu/iommu.c:3205 at iommu_setup_default_domain+0xbb6/0xf30, CPU#2: syz.2.802/11603 [ 382.294100][T11603] Modules linked in: [ 382.296434][T11603] CPU: 2 UID: 0 PID: 11603 Comm: syz.2.802 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.300049][T11603] Tainted: [L]=SOFTLOCKUP [ 382.301412][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.305049][T11603] RIP: 0010:iommu_setup_default_domain+0xbb6/0xf30 [ 382.307456][T11603] Code: 24 10 48 89 de ba 01 00 00 00 e8 25 5e ff ff 31 ff 41 89 c4 89 c6 e8 79 97 42 fc 45 85 e4 0f 84 37 fc ff ff e8 fb 9c 42 fc 90 <0f> 0b 90 e9 4b fd ff ff e8 ed 9c 42 fc 8b 35 c7 c9 7c 0c 48 8b 7c [ 382.314346][T11603] RSP: 0018:ffffc90002d87610 EFLAGS: 00010287 [ 382.316595][T11603] [ 382.317490][T11603] RAX: 000000000003c9f5 RBX: ffff88801d082c00 RCX: ffffc9000c001000 [ 382.320341][T11603] RDX: 0000000000080000 RSI: ffffffff85c90575 RDI: ffff888024200000 [ 382.323031][T11603] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 382.325504][T11603] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000fffffff4 [ 382.327937][T11603] R13: 0000000000000000 R14: ffff888026609150 R15: ffff888026609048 [ 382.330395][T11603] FS: 0000000000000000(0000) GS:ffff88809594a000(0063) knlGS:00000000f5456b40 [ 382.333440][T11603] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 382.335828][T11603] CR2: 00000000f7fa8000 CR3: 000000004dc43000 CR4: 0000000000352ef0 [ 382.338625][T11603] Call Trace: [ 382.339873][T11603] [ 382.340979][T11603] __iommu_probe_device+0x1174/0x1550 [ 382.342805][T11603] ? __pfx___iommu_probe_device+0x10/0x10 [ 382.344599][T11603] iommu_probe_device+0x28/0x130 [ 382.346164][T11603] iommu_bus_notifier+0x5b/0x110 [ 382.347714][T11603] notifier_call_chain+0x99/0x3f0 [ 382.349295][T11603] blocking_notifier_call_chain+0x69/0xa0 [ 382.351061][T11603] bus_notify+0x56/0x80 [ 382.352473][T11603] device_add+0x1169/0x1970 [ 382.354134][T11603] ? __pfx_device_add+0x10/0x10 [ 382.355668][T11603] ? pci_device_add+0xd4f/0x1820 [ 382.357457][T11603] ? down_write+0x146/0x1f0 [ 382.359056][T11603] ? pcibios_device_add+0x492/0x600 [ 382.360966][T11603] ? up_write+0x2dc/0x5b0 [ 382.362479][T11603] pci_device_add+0xdb6/0x1820 [ 382.363983][T11603] ? __pfx_pci_device_add+0x10/0x10 [ 382.365637][T11603] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 382.367359][T11603] ? __raw_spin_lock_init+0x3a/0x110 [ 382.369019][T11603] pci_scan_single_device+0x1d0/0x240 [ 382.370800][T11603] ? __pfx_pci_scan_single_device+0x10/0x10 [ 382.372787][T11603] pci_scan_slot+0x1c9/0x7c0 [ 382.374500][T11603] ? __pfx_pci_scan_slot+0x10/0x10 [ 382.376395][T11603] pci_scan_child_bus_extend+0x6b/0x7b0 [ 382.378446][T11603] ? pci_find_next_bus+0x60/0xb0 [ 382.380268][T11603] pci_rescan_bus+0x18/0x40 [ 382.381952][T11603] rescan_store+0xfb/0x130 [ 382.383360][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.384957][T11603] ? sysfs_file_kobj+0xe4/0x290 [ 382.386511][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.388095][T11603] bus_attr_store+0x74/0xb0 [ 382.389690][T11603] ? __pfx_bus_attr_store+0x10/0x10 [ 382.391367][T11603] sysfs_kf_write+0xf2/0x150 [ 382.393326][T11603] kernfs_fop_write_iter+0x3e0/0x5f0 [ 382.395024][T11603] ? __pfx_sysfs_kf_write+0x10/0x10 [ 382.396815][T11603] vfs_write+0x6af/0x1050 [ 382.398225][T11603] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 382.400240][T11603] ? __pfx_vfs_write+0x10/0x10 [ 382.402017][T11603] ? find_held_lock+0x2b/0x80 [ 382.403577][T11603] ksys_write+0x12a/0x250 [ 382.405107][T11603] ? __pfx_ksys_write+0x10/0x10 [ 382.406687][T11603] __do_fast_syscall_32+0x13a/0x8b0 [ 382.408470][T11603] do_fast_syscall_32+0x32/0x70 [ 382.410054][T11603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.412247][T11603] RIP: 0023:0xf7fa7fec [ 382.413708][T11603] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 382.415859][T11603] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 382.418623][T11603] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 382.421284][T11603] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.423852][T11603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.426432][T11603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.426442][T11603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.431532][T11603] [ 382.432686][T11603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.434928][T11603] CPU: 2 UID: 0 PID: 11603 Comm: syz.2.802 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.438267][T11603] Tainted: [L]=SOFTLOCKUP [ 382.439668][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.442883][T11603] Call Trace: [ 382.443993][T11603] [ 382.445016][T11603] dump_stack_lvl+0x100/0x190 [ 382.446682][T11603] vpanic+0x553/0x970 [ 382.448340][T11603] ? __pfx_vpanic+0x10/0x10 [ 382.450085][T11603] panic+0xd1/0xe0 [ 382.451537][T11603] ? __pfx_panic+0x10/0x10 [ 382.453097][T11603] check_panic_on_warn.cold+0x19/0x34 [ 382.454794][T11603] ? iommu_setup_default_domain+0xbb6/0xf30 [ 382.456595][T11603] __warn.cold+0x191/0x318 [ 382.458000][T11603] __report_bug+0x30f/0x440 [ 382.459438][T11603] ? iommu_setup_default_domain+0xbb6/0xf30 [ 382.461300][T11603] ? __pfx___report_bug+0x10/0x10 [ 382.462896][T11603] ? device_block_translation+0x4aa/0x700 [ 382.464732][T11603] ? iommu_setup_default_domain+0xbb6/0xf30 [ 382.466470][T11603] report_bug+0xb3/0x220 [ 382.467800][T11603] ? iommu_setup_default_domain+0xbb6/0xf30 [ 382.469653][T11603] handle_bug+0x16a/0x2a0 [ 382.471013][T11603] exc_invalid_op+0x17/0x50 [ 382.472378][T11603] asm_exc_invalid_op+0x1a/0x20 [ 382.473942][T11603] RIP: 0010:iommu_setup_default_domain+0xbb6/0xf30 [ 382.475970][T11603] Code: 24 10 48 89 de ba 01 00 00 00 e8 25 5e ff ff 31 ff 41 89 c4 89 c6 e8 79 97 42 fc 45 85 e4 0f 84 37 fc ff ff e8 fb 9c 42 fc 90 <0f> 0b 90 e9 4b fd ff ff e8 ed 9c 42 fc 8b 35 c7 c9 7c 0c 48 8b 7c [ 382.481902][T11603] RSP: 0018:ffffc90002d87610 EFLAGS: 00010287 [ 382.483798][T11603] RAX: 000000000003c9f5 RBX: ffff88801d082c00 RCX: ffffc9000c001000 [ 382.486279][T11603] RDX: 0000000000080000 RSI: ffffffff85c90575 RDI: ffff888024200000 [ 382.488730][T11603] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 382.491187][T11603] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000fffffff4 [ 382.493643][T11603] R13: 0000000000000000 R14: ffff888026609150 R15: ffff888026609048 [ 382.496120][T11603] ? iommu_setup_default_domain+0xbb5/0xf30 [ 382.497909][T11603] __iommu_probe_device+0x1174/0x1550 [ 382.499598][T11603] ? __pfx___iommu_probe_device+0x10/0x10 [ 382.501402][T11603] iommu_probe_device+0x28/0x130 [ 382.502966][T11603] iommu_bus_notifier+0x5b/0x110 [ 382.504541][T11603] notifier_call_chain+0x99/0x3f0 [ 382.506148][T11603] blocking_notifier_call_chain+0x69/0xa0 [ 382.507931][T11603] bus_notify+0x56/0x80 [ 382.509254][T11603] device_add+0x1169/0x1970 [ 382.510691][T11603] ? __pfx_device_add+0x10/0x10 [ 382.512222][T11603] ? pci_device_add+0xd4f/0x1820 [ 382.513793][T11603] ? down_write+0x146/0x1f0 [ 382.515252][T11603] ? pcibios_device_add+0x492/0x600 [ 382.516907][T11603] ? up_write+0x2dc/0x5b0 [ 382.518448][T11603] pci_device_add+0xdb6/0x1820 [ 382.520261][T11603] ? __pfx_pci_device_add+0x10/0x10 [ 382.522286][T11603] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 382.524120][T11603] ? __raw_spin_lock_init+0x3a/0x110 [ 382.525959][T11603] pci_scan_single_device+0x1d0/0x240 [ 382.528101][T11603] ? __pfx_pci_scan_single_device+0x10/0x10 [ 382.530458][T11603] pci_scan_slot+0x1c9/0x7c0 [ 382.532191][T11603] ? __pfx_pci_scan_slot+0x10/0x10 [ 382.534238][T11603] pci_scan_child_bus_extend+0x6b/0x7b0 [ 382.536443][T11603] ? pci_find_next_bus+0x60/0xb0 [ 382.538436][T11603] pci_rescan_bus+0x18/0x40 [ 382.540262][T11603] rescan_store+0xfb/0x130 [ 382.541982][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.544001][T11603] ? sysfs_file_kobj+0xe4/0x290 [ 382.545989][T11603] ? __pfx_rescan_store+0x10/0x10 [ 382.547996][T11603] bus_attr_store+0x74/0xb0 [ 382.549825][T11603] ? __pfx_bus_attr_store+0x10/0x10 [ 382.551896][T11603] sysfs_kf_write+0xf2/0x150 [ 382.553767][T11603] kernfs_fop_write_iter+0x3e0/0x5f0 [ 382.555850][T11603] ? __pfx_sysfs_kf_write+0x10/0x10 [ 382.557940][T11603] vfs_write+0x6af/0x1050 [ 382.559672][T11603] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 382.562036][T11603] ? __pfx_vfs_write+0x10/0x10 [ 382.563932][T11603] ? find_held_lock+0x2b/0x80 [ 382.565879][T11603] ksys_write+0x12a/0x250 [ 382.567609][T11603] ? __pfx_ksys_write+0x10/0x10 [ 382.569571][T11603] __do_fast_syscall_32+0x13a/0x8b0 [ 382.571644][T11603] do_fast_syscall_32+0x32/0x70 [ 382.573607][T11603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.576112][T11603] RIP: 0023:0xf7fa7fec [ 382.577752][T11603] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 382.580371][T11603] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 382.583668][T11603] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 382.586816][T11603] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.589951][T11603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.593000][T11603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.596103][T11603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.599243][T11603] [ 382.600996][T11603] Kernel Offset: disabled [ 382.602701][T11603] Rebooting in 86400 seconds..