last executing test programs: 18m17.907960765s ago: executing program 2 (id=879): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x4a66, &(0x7f0000000300)={0x0, 0x89cc, 0x8000, 0x0, 0x547, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6", 0x81}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) 18m17.729450123s ago: executing program 2 (id=883): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0", 0x22}], 0x2}, 0x44000) 18m17.637573218s ago: executing program 2 (id=886): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 18m17.51662637s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000690000027b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0xffffffff, 0x3147504d, 0x1, @discrete={0xffffff9f, 0x2}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x18, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=0,size=0']) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000080)=[{r8}], 0x1, 0x24b) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="8c870a470000000000001efd963b000000000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000140)="fd85c0f8b1ac906f1ddb4e54e2f688c3ee79d4e0b08994b3fb68484ce505ef220476f577fda66a5bf5de5e948648a67c2b5f014099f2ec9b85c8f3ba0bcb5df04f18feccec3ab2df9a83f64de31d8ff37e8482177aff118f04335f7bb9aea2f63b785a081d74bffa68921b7ca92c6f769ebad7b436808a37da757ea2646f6fa0ca05c62987eb3ee371c31d045d238690d8a1060a38de206e4ef831071063ab6f1c6f0d168cc81402b706453f7347e28ca87909930d10", &(0x7f0000000340)=""/171, &(0x7f0000000400)="044a75954b11ba981d4fabec920a8a7d90ad4f34f1c2562c526f4e", &(0x7f0000000440)="15ca7a9fd4c634bbc3da21928aa4243b99d262e965fe7d6c4ece6aebafdef61df5ea4fb6fe415a09480df157a1c76397ff844ab942a00a8759a02aaa17d5eb4dcc69b176ffc142738e756ea9e12e0dbabb370448df9dfb825642a4794be0371717d6c8097b80be29bb64abaf88883b199f0812fd01d8f33b1881ddb1c01732e7227a0ed2401cfc9d2caf5d1fde37eddc1852d507f6b5368d10173eba92665a1ca59a7cac", 0x5, r9}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_io_uring_complete(0x0, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) 18m16.836176663s ago: executing program 2 (id=889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x4f, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m16.706655733s ago: executing program 2 (id=891): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x4a66, &(0x7f0000000300)={0x0, 0x89cc, 0x8000, 0x0, 0x547, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6", 0x81}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) 18m16.620048386s ago: executing program 32 (id=891): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x4a66, &(0x7f0000000300)={0x0, 0x89cc, 0x8000, 0x0, 0x547, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="92ca3a839be8e27fc536b372000000a296de0d0ffc1741a765bf3f5ca07596cc2ff87ba8aa859a112c04aa9d4840d1624f0a5ae2c074a946be21e2009392db2023965d125247f55fa1bce029e1f40492d9ba71aa7890683c202b50c75f3f955b63ac5826dcdd7d524ff2f656bbfb50275d4b85a96e994dc2746067c63fd67838d6", 0x81}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) 15m18.100485961s ago: executing program 3 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r1, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0xd1, 0x1e, 0xd8, 0x8, 0x1bc7, 0x1060, 0xda95, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe4, 0x2, 0xb0, 0xa, "", [{{0x9, 0x4, 0x2, 0xd7, 0x0, 0xac, 0x9f, 0x66, 0x7}}]}}]}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r3 = socket(0x2, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x4, 0x41, 0x10001, 0x200001, 0x5, 0x3, 0x7, 0x400, 0xfffffffd, 0x40009, 0x31e0be6b, 0x4, 0x7, 0x3, 0x3, 0xfffffff8, 0x5, 0x2, 0x6, 0x7f700c6, 0xfffffff9, 0x9}}) r5 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) lsm_set_self_attr(0x65, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1020, 0x0) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 15m17.141989321s ago: executing program 3 (id=1608): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8084) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x80000003, 0x58, 0x0, 0xfffffffd, 0x5, 0x8, 0x2, 0x31e}) 15m17.019414113s ago: executing program 3 (id=1610): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000003c0)={{@my=0x0}, 0x1, 0x1, 0x200000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x800, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r5 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/pm_print_times', 0x40, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000340000000040900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000004060183feffffffffffffff010000000000000000010000050900020073797a32000000000900020073797a300000000005000100070000000900020073797a300000000005000100d6967ae1a40405aa070000ef509ab74483b11401a95a8e3fa7ff346c478b4b887ab7cd79ce4bb3742be517c32ac9b4075688b1d19d81c5abeb7cf5aeef8b925889a7fb519ddabeaffac65ee1b25bdaebd3425ba46330413cfa34a057b5e82ca5741452facfa908e26363dd2c5b3b58ec95a0afb6cb03a3026dfab23450465949803efabae880e71dc77c77e8f796c388a5c16e00"/234], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x20048080) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) write$tcp_mem(r7, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r8 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000704000000000000"], 0x10}, 0x88800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002100)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15m16.373576381s ago: executing program 3 (id=1612): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e22, 0x80000, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x14, 0x29, 0x39, {0x84, 0x0, 0x0, 0x36}}}], 0x14}, 0x1400c0c0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) close_range(r6, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x419, 0x8001001, r7, 0x0) 15m15.036046775s ago: executing program 3 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="cc00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r1, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x2, 0x104, 0x1, 0x1000000, '\x00', 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 15m15.02048412s ago: executing program 3 (id=1620): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000003c0)={{@my=0x0}, 0x1, 0x1, 0x200000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x800, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r5 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r7, 0x0, 0x200000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000340000000040900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000004060183feffffffffffffff010000000000000000010000050900020073797a32000000000900020073797a300000000005000100070000000900020073797a300000000005000100d6967ae1a40405aa070000ef509ab74483b11401a95a8e3fa7ff346c478b4b887ab7cd79ce4bb3742be517c32ac9b4075688b1d19d81c5abeb7cf5aeef8b925889a7fb519ddabeaffac65ee1b25bdaebd3425ba46330413cfa34a057b5e82ca5741452facfa908e26363dd2c5b3b58ec95a0afb6cb03a3026dfab23450465949803efabae880e71dc77c77e8f796c388a5c16e00"/234], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x20048080) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) write$tcp_mem(r9, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r10 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000704000000000000"], 0x10}, 0x88800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002100)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14m58.813621991s ago: executing program 33 (id=1620): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000003c0)={{@my=0x0}, 0x1, 0x1, 0x200000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x800, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r5 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r7, 0x0, 0x200000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r5, 0x0, 0x31, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c000280080001400000000424000180090001006d6173710000000014000280080002400000001708000340000000040900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000004060183feffffffffffffff010000000000000000010000050900020073797a32000000000900020073797a300000000005000100070000000900020073797a300000000005000100d6967ae1a40405aa070000ef509ab74483b11401a95a8e3fa7ff346c478b4b887ab7cd79ce4bb3742be517c32ac9b4075688b1d19d81c5abeb7cf5aeef8b925889a7fb519ddabeaffac65ee1b25bdaebd3425ba46330413cfa34a057b5e82ca5741452facfa908e26363dd2c5b3b58ec95a0afb6cb03a3026dfab23450465949803efabae880e71dc77c77e8f796c388a5c16e00"/234], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x20048080) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) write$tcp_mem(r9, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r10 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000704000000000000"], 0x10}, 0x88800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002100)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m31.121082467s ago: executing program 4 (id=5211): r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x46, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2d, 0x0, {0x2, 0x20, 0x10, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0007000000050007000000000005000a00ffa100000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r6, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='TH', 0x2) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400623bac00a4000000000000000cfea59b0dc9e5f4756f3d25602d00"/39], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002031000fe0400010000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010003904ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300e0000001938ea9ab45f0e5b9dbaac9a22521598b7d8cfb3aaf31840ada8e9e439fb3699eeb212ab4c6fe3764ce8dc335af3d847a208d22b79484c70c159593e292d12ce20dd02f138b06bdc225c3143de3ad9c1f2480620c752b0c05c3ba4bd8eab6fc1283fa320cd16f103db21da42d94cbe8544cd069ebecfad6bee2cc2e599a1b51026a77bfda49e6dee777e4d84c2428b0251e377311e78195550418abdd3592c24914a775"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 4m30.220292177s ago: executing program 4 (id=5215): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "e591028fa71bbcaf", "e5e3f105d92aba0e0691b41155f06a50f4ff24f299b3f87c4f6f10c88e783976", "cab66a64", "54141eae19a6ec69"}, 0x38) shutdown(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, 0x0) keyctl$join(0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x1, 0x1}, [], {}, [], {}, {0x20, 0x5}}, 0x24, 0x2) 4m30.179330963s ago: executing program 4 (id=5216): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000840)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000340)='./dev/mtdblock0\x00', &(0x7f0000000380)='virtiofs\x00', 0x10, &(0x7f00000003c0)=':%\x00') sendfile(r6, r7, 0x0, 0x10000) 4m27.077103491s ago: executing program 4 (id=5227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000880)={0x2, 0x81, 0x9, 0xff, 0x9, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x3, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/49, 0x31) 4m26.845870014s ago: executing program 1 (id=5228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 4m26.793750067s ago: executing program 1 (id=5229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000880)={0x2, 0x81, 0x9, 0xff, 0x9, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x3, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) read(r1, &(0x7f0000000200)=""/49, 0x31) 4m26.195735141s ago: executing program 4 (id=5232): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000811601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000400600000a0000010a0000020050005000000b0100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0x56, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000400)="10", 0x1}], 0x1, 0x6, 0x3, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)=@mmap={0x401, 0x2, 0x4, 0x4414, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1}, 0xfffffffe, 0x1, {}, 0x400}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="ecff000004000000010000000400000000000000ec9814bc4cec78a34c605e0a8af0fde00ddd6f8a114b3d7a7cbc201719517e110efa8d089d67f9125640aefb8b47c7809b7c349b5a8556226b034a941941210ea4dfbbba81fba2e81c5b67022d83915e975066adcc061845067efc0e0c957f7ec4614e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, 0x1}, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m25.950289218s ago: executing program 4 (id=5233): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 4m25.862801544s ago: executing program 1 (id=5234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="c66ac248d1213a77bff6a327a960997c28c4c0269c2e684e70ce7ca5c6c1cf550ee59b41d4a540285ab1e91a757745cb695b66c52acbbd103d74e9252a6effb9ac10508901b039ff29deee66e3356ec90f327d76501a61bd320c3c9fbdff1105837db68e0c4c4dc1c3d5c456334554890fc02c34ba47", @ANYRESHEX=r2, @ANYBLOB="9cc4cf11ac7858047538814ca08df9e79c78711348e4e59744c963661f177a66ef160d63fc5dd11ebbc876273938caf9eca9875233b73a5c18e9fbc478d35e992b12e49aa7296287db225e0133d2e3c6056ef748aa9bd69cab08", @ANYRESDEC=r2, @ANYRESHEX=r0], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/uevent\x00', 0x21201, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) write(r4, &(0x7f00000001c0)='0', 0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r6, &(0x7f0000000000)=@in={0x2, 0x573, @empty}, 0x10) listen(r6, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='unc=\\127.0.0.1\\share,ip=127.0.0.1,port=1395,vers=3.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r7, &(0x7f0000000080)=""/104, 0x68) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000000f96a002600010008000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write(r9, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000070000001100"/20, @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8, 0xe9, &(0x7f00000003c0)=""/233, 0x41000, 0x4, '\x00', r5, 0x0, r9, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xf, 0x4, 0x8c}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x3, 0x8}, {0x3, 0x1, 0xf, 0xa}, {0x2, 0x3, 0x5, 0x1}], 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="34f1c2f729cd3eefc0b51a32d4ae8871ad50878770315aee524034f80b3feb562f779a1ff023479498fac2bbe944baf3", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c00000099c609543852ac1202d95734ff413a6363d069f371f2b636f26879105ef6bcf7937c8f4274b6f801a8a4159e90ad95d1b2d9f69bb6e0e76a7cb0f669a9a9fe2b3d6dd7b6d66554c33ed97cd07507b49ef0bd2804e814379f74a8adcbb1b55903b0c6dd0c0bd834d4bb04bd7322234b2345886e7dda9eefbafc5f37871d45133fe7ee291d38d173bf56cf2b1149a3237f6e7f8fdee8eb33a02ae378977dfbe4581d49441800"/180, @ANYRESDEC=r6, @ANYBLOB="05000000000c000000000f00000008000300", @ANYRESDEC=r9, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d000000"], 0x5c}}, 0x8000) 4m25.698450626s ago: executing program 1 (id=5237): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x2, 0xfffffffe}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xf0cec0b1beb5cba6, 0x30, 0x5b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5e, 0x2, 0x0, {0xa, 0x25, 0x25, 0x9, 0xa7, 0x5e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x4}}}}}}}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a000000000005000800000000000400180005000600010000000600020001000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffa, 0x88002) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000340)=""/159) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x20009, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x9, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x6, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xeffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0x5, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0x0, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x3, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0xfa, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m23.922291129s ago: executing program 1 (id=5243): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000811601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c000b0000400600000a0000010a0000020050005000000b0100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0x56, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000400)="10", 0x1}], 0x1, 0x6, 0x3, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)=@mmap={0x401, 0x2, 0x4, 0x4414, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1}, 0xfffffffe, 0x1, {}, 0x400}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) syz_clone(0x1001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="ecff000004000000010000000400000000000000ec9814bc4cec78a34c605e0a8af0fde00ddd6f8a114b3d7a7cbc201719517e110efa8d089d67f9125640aefb8b47c7809b7c349b5a8556226b034a941941210ea4dfbbba81fba2e81c5b67022d83915e975066adcc061845067efc0e0c957f7ec4614e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, 0x1}, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m23.426417433s ago: executing program 1 (id=5245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000002a40)={{&(0x7f0000693000/0x2000)=nil, 0x2000}}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020, 0x0, 0x0, 0x0}, 0x17a9) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x20004090) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x32804}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)=ANY=[@ANYBLOB="19918da4", @ANYRES16=r1, @ANYBLOB="200028bd7000fddbdf250300000008000700e0000002050001000000000008000c000200000008000700ac14143806000b001800000008000c00010000000800040002000000"], 0x4c}}, 0x2000840) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001100)={@private0, 0x0}, &(0x7f0000001140)=0x14) pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000024c0)={0x6, 0x13, &(0x7f0000002240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x71c}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002380)={0x3, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000023c0)=[0x1], &(0x7f0000002400)=[{0x4, 0x3, 0x5, 0xc}, {0x1, 0x3, 0x9, 0xa}, {0x2, 0x3, 0x9, 0x5}, {0x4, 0x3, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x1, 0x1, 0xe, 0x9}, {0x0, 0x1, 0x1, 0x6}, {0x5, 0x3, 0x1, 0x7}, {0x4, 0x2, 0x1, 0xc}], 0x10, 0x3ff}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="3000000000000000000000000000000000000a5a322905156f9faf522d0657cd8ff70000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000010000000400"/28], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002640)=@o_path={&(0x7f0000002600)='./file0\x00', 0x0, 0x4010, r4}, 0x14) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', 0x0, 0x4000, r4}, 0x14) syz_usb_connect(0x2, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002700)={0x0, 0x5, 0x8}, 0xc) r12 = socket(0x10, 0x803, 0x0) r13 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r13, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) close_range(r12, r13, 0x0) openat(0xffffffffffffffff, &(0x7f0000002a00)='./dev/ttyUSB0\x00', 0x10002, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x1d, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="186b00000100000000ff18400000060000000000000000000500f1a1534f100000000b41100008000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x12, '\x00', r5, @lsm=0x1b, r6, 0x8, &(0x7f00000011c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002200)={0x5, 0x9, 0x2}, 0x10, 0x0, r7, 0x8, &(0x7f0000002740)=[r8, r9, r10, r11, r13], &(0x7f0000002780)=[{0x4, 0x5, 0xf, 0x4}, {0x2, 0x5, 0x9, 0xc}, {0x5, 0x4, 0x1, 0x2}, {0x3, 0x4, 0x4, 0xa}, {0x2, 0x2, 0x4, 0xb}, {0x5, 0x2, 0xe, 0xb}, {0x4, 0x1, 0xa, 0x9}, {0x4, 0x2, 0xf, 0x2}], 0x10, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r4, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x80000001, 0x1f) 4m9.968222394s ago: executing program 34 (id=5233): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 4m8.052240642s ago: executing program 35 (id=5245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000002a40)={{&(0x7f0000693000/0x2000)=nil, 0x2000}}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r2, &(0x7f0000006040)={0x2020, 0x0, 0x0, 0x0}, 0x17a9) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x20004090) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x32804}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)=ANY=[@ANYBLOB="19918da4", @ANYRES16=r1, @ANYBLOB="200028bd7000fddbdf250300000008000700e0000002050001000000000008000c000200000008000700ac14143806000b001800000008000c00010000000800040002000000"], 0x4c}}, 0x2000840) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001100)={@private0, 0x0}, &(0x7f0000001140)=0x14) pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000024c0)={0x6, 0x13, &(0x7f0000002240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x71c}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002300)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002380)={0x3, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000023c0)=[0x1], &(0x7f0000002400)=[{0x4, 0x3, 0x5, 0xc}, {0x1, 0x3, 0x9, 0xa}, {0x2, 0x3, 0x9, 0x5}, {0x4, 0x3, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x1, 0x1, 0xe, 0x9}, {0x0, 0x1, 0x1, 0x6}, {0x5, 0x3, 0x1, 0x7}, {0x4, 0x2, 0x1, 0xc}], 0x10, 0x3ff}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="3000000000000000000000000000000000000a5a322905156f9faf522d0657cd8ff70000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000010000000400"/28], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002640)=@o_path={&(0x7f0000002600)='./file0\x00', 0x0, 0x4010, r4}, 0x14) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)=@o_path={&(0x7f0000002680)='./file0\x00', 0x0, 0x4000, r4}, 0x14) syz_usb_connect(0x2, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002700)={0x0, 0x5, 0x8}, 0xc) r12 = socket(0x10, 0x803, 0x0) r13 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r13, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) close_range(r12, r13, 0x0) openat(0xffffffffffffffff, &(0x7f0000002a00)='./dev/ttyUSB0\x00', 0x10002, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x1d, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="186b00000100000000ff18400000060000000000000000000500f1a1534f100000000b41100008000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x12, '\x00', r5, @lsm=0x1b, r6, 0x8, &(0x7f00000011c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002200)={0x5, 0x9, 0x2}, 0x10, 0x0, r7, 0x8, &(0x7f0000002740)=[r8, r9, r10, r11, r13], &(0x7f0000002780)=[{0x4, 0x5, 0xf, 0x4}, {0x2, 0x5, 0x9, 0xc}, {0x5, 0x4, 0x1, 0x2}, {0x3, 0x4, 0x4, 0xa}, {0x2, 0x2, 0x4, 0xb}, {0x5, 0x2, 0xe, 0xb}, {0x4, 0x1, 0xa, 0x9}, {0x4, 0x2, 0xf, 0x2}], 0x10, 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r4, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x80000001, 0x1f) 1m32.154458092s ago: executing program 7 (id=6026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000880)={0x2, 0x81, 0x9, 0xff, 0x9, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x3, 0x0, 0xfffb, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/49, 0x31) 1m32.117637236s ago: executing program 7 (id=6027): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000800)="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", &(0x7f00000007c0)="cb49f352e3a2aac0d6783102a5dac702a52e6d904be713cb9c429990acb21e709473b326cca882d23978bbd9a020a32e7c32f689b5"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) timerfd_settime(r0, 0x3, &(0x7f0000000440), &(0x7f00000004c0)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001009000000000000000a00000000000a2000000000be01030000000000000000010000010900010073797a31000000002c000000030aef3f9466baf31398000001f300000900030073797a31000000000900010073798b3100000000140000001100010000000000000000000000000a3720f9d62b440b86427373289773864edbd6f5c93a3bc69d0bf267bd696d07000c16fb83eb13a7e984ac3dc84bbd016783e4583595ebdef054714b81252eb556afe3ab3e73cdca20a3d9d3010d33fec6c9b4d1e9b2930f1073f75650ef"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) r5 = eventfd2(0x2, 0x80800) exit(0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) unshare(0x6a020600) statx(0xffffffffffffffff, 0x0, 0x1000, 0x10, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000028000ffffffffffff"], 0x0) io_submit(r4, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x0, 0x0, 0x800002, 0x0, 0x2, r5}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r5, &(0x7f0000000140)="e2", 0x1, 0x5, 0x0, 0x1, r5}]) 1m31.12054508s ago: executing program 7 (id=6029): socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4100) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.75567934s ago: executing program 7 (id=6032): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = socket$inet6(0x10, 0xa, 0x80000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f00005a4000/0x4000)=nil, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x100, 0x4, 0x9, 0x3}, {0x101, 0x2, 0xfb, 0x2}, {0x0, 0x5, 0x4, 0x4}, {0x1, 0x8, 0xf, 0x8}, {0x3, 0x2, 0x9c, 0x9}, {0x92, 0x5, 0x3, 0x9}]}) write(r1, &(0x7f0000000500)=' 294967 95 2\\000 0-00 0\n', 0x18) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x4, 0x0, r1}) ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_driver={0x3, 0x2c000000, &(0x7f0000000200)="98294ed7362b5d6d47250e222299f0edeae3f03878eb5cce2f4c2ecdcffb6db15a"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xe5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x8000, 0x40000, 0x8, 0x4, 0x1ff}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r6 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x4}) write$eventfd(r6, &(0x7f0000000080)=0x430f, 0x8) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m30.455433962s ago: executing program 7 (id=6034): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x524, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x36, 0xf, 0x2f, 0x8, 0x293c, 0x5702, 0x586c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x512, 0x3, 0x80, 0x7, 0x90, 0x6, "", [{{0x9, 0x4, 0x80, 0x8, 0x6, 0xe3, 0xe4, 0xea, 0x2, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xb, "0e", '`'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xc, '5', "2aa3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x1, 0xcf, 0x7}]}], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x36, 0xeb, 0x0, [@generic={0xd1, 0x1, "855ce6830bfee88f986b5863aed034aeba4e73cc0498f5366ef981a2cb2783d04d932bc2fdfa0da84b33dc3e45171de3eee38e8cef3173c898b0a6fd04b3b403b9613d4e311db65ad04de81e9c4b168f35836586cefebb8644f4827aa07f837b6e7a75208aa32d713eea7c48b0f8db135f1c504dc7b045c4a3d48a5f13117783eaee9bb54ce06c3ab6f16892a9d764779ff00f1df4423fd28aff1ac3b7fa8a54cb51be6ceb9c44bc1fc4c27672a22e6478e09315707dc0f58aa7445d641ecda1635f31a22f5c71e552992508323015"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0x0, [@generic={0x83, 0x23, "773cd99ee4d58169ae808ab907890e8ddea66b71a08c70db5ca401814fd2c091f5a0659b841c62fa352c986a6efa15f2ef6fda125f9ef3acb1f5aa25c474cb786d83446c501c3d758b2a951bff92f17c486df09cd61c8f3c4dc79caf88bf7036ea56c84252bd55d592eb67b182bcf20448a679c38c3a6f7231c5e8b0fd0d61abef"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x5d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x39f, 0x3, 0x2, 0xfe, [@generic={0xf, 0x23, "8657808fcc8a5b6d74d31f59a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x74, 0x4, [@generic={0x2, 0x7d}, @generic={0x16, 0x1c, "98a1e9ba1de11961f8c913892e685216e4b35a1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x4, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x800}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x0, 0xf9, [@generic={0xf6, 0x2, "79858a1f5c52aef325d6c715bab79693d2685c380001210b0d08069eed9b39de8db0ca52ae1cf026aaaa44398834766a669d413dd90ef161d89f05b6b451c11ddbf36267db86fefc6cd5e78ce6100b9a454718f6d0fc648e7605ab26154c9679992f9f1a7baf94bd8b407593a1b9907ee79bcb569dc00f84157350fdb0a252a3ab14af3a41b0fad391741038dab78da027d7f1a83877dffd04500c5a0a98ad959906f0ad15ea56aabab835f03517db26ddf112861a9db1e71ae260428d1ea5c85f95d391e5b958152bedd3b2893b454f58de19d701133d63f052560717b7aefd18bbd9e17a694c683d849a708cbe4f34e6dbdd4d"}, @generic={0x2f, 0x23, "a5340737d60746a07880017f677be81a5aaf1f6f9a9a0f5213124266bd9106a16bb8b5aff2bfe823926488956a"}]}}]}}, {{0x9, 0x4, 0x48, 0xf, 0x1, 0xe0, 0x99, 0x1f, 0x2, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0xfe, "428816c51f1b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe3, 0x5f}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x9, 0xe, [@generic={0x38, 0x30, "9e79f38dcd56557dc4cc300496db9c5c7b89e2b34f20f61ead6b97ce454271ec1bd419cfe18ecc7a70dde5162b150f1eebee9e048931"}]}}]}}, {{0x9, 0x4, 0xb7, 0x6, 0x4, 0xf1, 0x28, 0x3a, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff3c, 0x40}}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x39, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x7, 0x0, [@generic={0xd0, 0xd, "da8bcf0faaf3edb3a291afc7dccafcbdbf23ca18e647a0487d33acc4eb138c598a08d7eb750e5874af0e1cd068187220664a6a64f9865b3da675791444fa13920238192d681f89a2c850f2dc69ae100cb1e8b9a0839fe9b04564dac10271f849469b42764b60996ac51d419aba2edd1e74f796bec73f6968d87257ede5de7f592f296c6bbab20cd194cf827e6a41cfab6531c45025a67f3e2cdedb8aa785b2c90d872b20e76ff6a8e27b2187d8f995270e72236d7bf877e54fa15ba2b66ed96ea72c125c8364a6d74207bc5f22d0"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x19, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x24, 0xb1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x9, 0x4, [@generic={0x6, 0x21, "289cfede"}, @generic={0x6f, 0x2, "f5f74f7b918696d6945d49450640137fd2700f80464aa7d468747fb562ee940a8f3390a9b5a77990bfe9d0a68d1cffed79b2ff56b138987a241a1be6ec2e82637afd1595ad2773f5fb91e802ecb2a0b1e5c149ea0ac5314177d896c8a79001c30706d7dd1a86770b6ea04ebfe5"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x18, &(0x7f0000000ec0)={0x40, 0xa, 0x7e, {0x7e, 0x10, "20cac59cd5d08ce49a55bb799a96caf85c0ee0b6dd4dada3fc9e01c0c7303e64e6e47afedeb024ad6eeb7f7edd621e3d070352ddd4d539c45d676556238d94c571a7d1ba3d9b6b9dfd6cd980058a735bb2babd558906ceb6d3746fa1d78b53b8c468d656da70fd1355397ccf9a6b359b904de9bc5d689991a32e4805"}}, &(0x7f0000000f80)={0x0, 0x3, 0x71, @string={0x71, 0x3, "b3c2cdce06bb932a1990cba32077f0c9a30612555283c8678863b73254b0dc377b1491073562d3df734ae62465f0a646158eb93f94cc475dafb238a46831304a0ab6aa24d48d75f11260b0157553e71847d733d250c87343127a96898ed6bb4b21422314e23052318b65620da7871c"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x0, 0xfb, "12e269af", "adc8862c"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x4, 0x5, 0x2, 0x3, 0x5}}}, &(0x7f0000001600)={0x44, &(0x7f0000001200)={0x0, 0x14, 0x18, "48d42213fc440a749b562125650a65ad82a96a46bac83bba"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x73}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000013c0)={0x40, 0xb, 0x2, 'H%'}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001440)={0x40, 0x13, 0x6, @local}, &(0x7f0000001480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "fad6"}, &(0x7f0000001500)={0x40, 0x1a, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001580)={0x40, 0x1e, 0x1}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x6}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/89, 0x59, 0x1, &(0x7f0000000340)=""/79, 0x4f}, &(0x7f0000000480)=0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100020, 0x0) 1m29.912036937s ago: executing program 7 (id=6037): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a3100000000090087bf485a2b903cc71542f23742f79a0171c5797a31000000008014000080040001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)="82201faa6607014bcf962eefd5d7dd3774fa36790a3226c76198988d3aee15b6fe02abac5d94ceebb34014f7b8ec3066051f6895ca1704bbe03c0d8b32ea2200", 0x40}], 0x1) 1m29.794948603s ago: executing program 36 (id=6037): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a3100000000090087bf485a2b903cc71542f23742f79a0171c5797a31000000008014000080040001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000000c0)=0xa4) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)="82201faa6607014bcf962eefd5d7dd3774fa36790a3226c76198988d3aee15b6fe02abac5d94ceebb34014f7b8ec3066051f6895ca1704bbe03c0d8b32ea2200", 0x40}], 0x1) 3.861982059s ago: executing program 0 (id=6329): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f82, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[], 0x20) read$FUSE(r5, &(0x7f0000003940)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), 0x42822, &(0x7f0000000540)=ANY=[@ANYBLOB="687567653d6e657665722c696e030000000000000071756f144c5f626c6f636b5f68ea7200040000690d3d70384133782c657569a73c", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=r2, @ANYBLOB=',euid>', @ANYRESDEC=r6, @ANYBLOB=',seclabel,uid<', @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000002,\x00']) mkdir(0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 3.711511762s ago: executing program 5 (id=6332): lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000300)={[{@gid}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)='\x00', 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000005c0), &(0x7f0000001600)=0x8) 3.441401695s ago: executing program 6 (id=6335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r3, 0xec776000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r7, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000100)=@ax25={{}, [@null, @null, @rose, @null, @remote, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f00000005c0)=""/7, 0x7}], 0x4, &(0x7f0000000740)=""/178, 0xb2}, 0x7}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000000c00)=""/33, 0x21}, {&(0x7f0000000c40)=""/174, 0xae}, {&(0x7f0000000d00)}], 0x5, &(0x7f0000000d80)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000001d80)=@un=@abs, 0x80, &(0x7f0000003f80)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/81, 0x51}, {&(0x7f0000003e80)=""/137, 0x89}, {&(0x7f0000003f40)=""/18, 0x12}], 0x5}, 0xa8}, {{&(0x7f0000003fc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/12, 0xc}], 0x2, &(0x7f00000050c0)=""/239, 0xef}, 0x6}], 0x4, 0x0, &(0x7f0000005240)={0x0, 0x3938700}) flock(r8, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.731849033s ago: executing program 5 (id=6339): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.334829263s ago: executing program 0 (id=6340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000b5be26c596092e4d08000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000400d0"], 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 2.169814643s ago: executing program 5 (id=6341): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x640081, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000000000000044f2f1e949083fa69eab4f6de8a01a0508a15c807dfc9b49fc9efab72bead9bf663b54943cdc18888ab0878d2421e39afd637677956f1444640a184574ff1a132c2483655f10d9b0d5d925dc57b0291f58d08a1f3fe5787003dbb17c026ca035ee58c21e0624c15b7ecf7d7c97f1ea2540299c776da0686f8be91931d67753eb43b85cd927e8a56784f8494000b9c13d0fc0f1c705e3405e73199f0ec72a9d981195557a5b9259a2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) read(r0, &(0x7f0000000340)=""/251, 0xfb) accept4$inet6(r0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.077517789s ago: executing program 0 (id=6342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000b5be26c596092e4d08000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400d0"], 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 2.043095798s ago: executing program 6 (id=6343): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff180100002020642500000c000020da6766f159c8f020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000808000000b703000009000000850000009300000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5debc9c3510c711a2c580291212088623d48d2c27d1260cc7fdeaa552eb619fe05022e3cf72013ac781ec46262c025eed625", @ANYRES16=r3, @ANYBLOB="13010000000000040000410000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0004000000000000000c009000ff03000000000000"], 0x54}}, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) pwritev(r7, &(0x7f0000001580)=[{&(0x7f0000000300)="d4", 0x1}], 0x1, 0xf, 0x83) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000801) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x3, 0x9, 0x6, 0xb0487, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 2.00709536s ago: executing program 0 (id=6344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x8, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x1}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x15f, 0x4, 0x1, 0x0, 0x4, 0xb, 0xc, 0x3, 0x854, 0x9, 0x4, 0x7, 0xc3, 0x0, 0xfffffffc, 0x9, 0xffff0001, 0x80, 0x8000, 0x7, 0xb, 0xe7, 0x1, 0x8, 0x3ff, 0x3, 0x9, 0x2, 0x8, 0x0, 0x7, 0x9, 0x7, 0x0, 0x3, 0x3, 0x6, 0x7ed3, 0x57, 0x9, 0x6, 0x1, 0x6bb, 0x6, 0x80000000, 0x8, 0x7, 0x7, 0x9e, 0x4, 0x8, 0x2, 0x9, 0xa1d69cf, 0x2, 0x2, 0x3, 0x9, 0x6, 0x0, 0x1, 0x10000, 0x91, 0x6, 0x5, 0x9, 0xe, 0x3, 0x8000, 0x7, 0xfffffff7, 0x9, 0xffff, 0x6, 0x4, 0x29e, 0x9, 0x7, 0x8001, 0xfffffffe, 0x40, 0x6, 0x7, 0x8, 0x400, 0x200, 0x7, 0x9, 0x4, 0x7f80000, 0x9, 0x200, 0x8001, 0x39e000, 0xaae, 0x2006, 0x400, 0x10000, 0x7, 0x83bd, 0x1000, 0x1, 0x1, 0x8, 0x2, 0x307, 0x7f, 0x8, 0x6, 0x7, 0x8, 0x0, 0xb3, 0x0, 0x3, 0x8, 0x9, 0xa28a, 0x6, 0x416e, 0xffffff72, 0x8, 0xe68b, 0x99e2, 0x7, 0xfff, 0x97c, 0x1000, 0xe, 0x218, 0x18000000, 0x7fffffff, 0x7, 0x6, 0x7, 0x401, 0xfffffffd, 0x2, 0x5, 0xc, 0x8, 0x1, 0x5, 0x2, 0xe20, 0x7, 0x6, 0x8, 0xe9, 0x1, 0x7, 0x65, 0x316, 0x4, 0xd, 0x4, 0x4, 0x800, 0x7, 0x5, 0x3c9, 0x1, 0x10, 0x3, 0x5, 0x0, 0x8, 0x69b3, 0xfffffff8, 0x1, 0x2, 0x2, 0x0, 0x5, 0xc7b1, 0x101, 0x3, 0xffffff6b, 0x5, 0x9, 0x2, 0x1, 0x1000, 0x4, 0x5, 0x8000, 0x0, 0xffffffff, 0x9aca, 0xb2, 0x9, 0xc, 0x7, 0x7, 0x8, 0x1, 0x7ff, 0x1, 0x6, 0x2d2, 0x8, 0xfffffff9, 0x10001, 0x7, 0x9, 0x2, 0x1008, 0x0, 0x4bb0, 0x5, 0xffff, 0x9, 0x1000, 0x1, 0x2, 0x1, 0x0, 0xbe5, 0x0, 0x2, 0x7, 0x4, 0x6, 0xf, 0x9, 0x7, 0xffff, 0x4, 0x4, 0xc, 0x9, 0x1, 0x400, 0x96, 0x5, 0x3ff, 0x4, 0x6, 0x3, 0x2, 0xa, 0x5, 0x10001, 0x200, 0x100, 0x80000001, 0xf, 0x8, 0x80000000, 0xffff9397, 0x3, 0x9, 0x0, 0x0, 0x2]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff1, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0x1, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef) 1.790648162s ago: executing program 0 (id=6347): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x80000009, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_open_dev$radio(&(0x7f0000000500), 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x2000020, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x20) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000002240)={0x2020}, 0x2020) r11 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r11, &(0x7f0000004280)={0x2020}, 0xfffffce4) read$FUSE(r10, &(0x7f0000002100)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x6}, @IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x4c}, 0x1, 0xd, 0x0, 0x20008045}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r13, r12, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffff01000000000000005501d70000000015"], 0x0) 1.551590872s ago: executing program 8 (id=6348): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getrlimit(0xb, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x62f82, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[], 0x20) read$FUSE(r5, &(0x7f0000003940)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), 0x42822, &(0x7f0000000540)=ANY=[@ANYBLOB="687567653d6e657665722c696e030000000000000071756f144c5f626c6f636b5f68ea7200040000690d3d70384133782c657569a73c", @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=r2, @ANYBLOB=',euid>', @ANYRESDEC=r6, @ANYBLOB=',seclabel,uid<', @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000002,\x00']) mkdir(0x0, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 941.264867ms ago: executing program 6 (id=6349): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 729.08705ms ago: executing program 0 (id=6350): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x9, 0x3, 0xf, 0x3}]}) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x45}, 0x94) 672.126589ms ago: executing program 5 (id=6351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x1000003}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) 640.79519ms ago: executing program 5 (id=6352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='_0', 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'memory'}, {0xf05c57db93bd4877, 'memory'}, {0x2d, 'net_cls'}, {0x2b, 'memory'}, {0x2b, 'io'}]}, 0x25) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'ni_at_a2150\x00', [0x100, 0x2, 0x4, 0x3, 0x4, 0x100, 0x3, 0x20000010, 0xfffffff9, 0xb, 0x0, 0xb, 0x1, 0x401, 0x0, 0x1, 0x3, 0x5, 0xfe9, 0x401, 0x3, 0x1, 0x4, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) 614.791106ms ago: executing program 8 (id=6353): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xe29, 0x80000, r0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "73257b2438de832a90b5c15ed134fc03738e2f1ee75ce78ef25f59eb11fc35ae"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x2, 0xe, "3eccd2000500"}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 519.89288ms ago: executing program 5 (id=6354): socket$kcm(0x21, 0x2, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') socket$vsock_stream(0x28, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 401.728571ms ago: executing program 8 (id=6355): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x464, 0x800, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x80) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r4 = open$dir(&(0x7f0000000000)='./sys/kernel/mm/lru_gen/enabled\x00', 0x40402, 0x131) mkdirat(r4, &(0x7f0000000240)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x100050, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000040000000400000012"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r6, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r5, &(0x7f0000000140)='n', 0x1) mount(&(0x7f00000002c0)=@filename='./sys/kernel/mm/lru_gen/enabled/file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYBLOB="ba2e0167fbba2f477a905cfbab9f2033fc428910c75bbb9d4a6b2ffea6f64fcb9fa10000008000000000c5b45f8b5df9ae8cc2ca98b9eb535d010bd4f73190f50ca1a224b1d471ce782adfd429c03e8759372488bce28b70ed543b792658b8da704ddcad5c31103e3c0b2c58ecf1531f3ea36618fec092fde0d82f36534f58c066d7c4179086baa6d198acdf45a665dcc8e1c1370cfc014d0736"], 0x16) r8 = openat(r7, &(0x7f0000000140)='mtd0\x00', 0x60142, 0x73) write$P9_RLERRORu(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00001f61000000000000000000"], 0xe) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./sys\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x3ff}, 0x16, 0x3) 381.352147ms ago: executing program 6 (id=6356): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) 301.565436ms ago: executing program 6 (id=6357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0', 0x1) 301.266268ms ago: executing program 8 (id=6358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) r2 = openat$audio1(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10010, r2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f00000002c0)="46872870195c88189aeb86bc503181bb2c74b480474b73117baeb5095877e54458817de068c67dc2f0af3616d26a354124faaa7690f0732c2bc84df79dacf56b5040f0486877410d97a23a6cba939701a2463ca123b2bf2bf4eec7e50e838ad1b3fe9456997ce7918087adf688be07d960ce", &(0x7f0000000540)=""/38, &(0x7f0000000580)="18fa8d2dc4cbe0b1355ddd80952e2b5edcd6ca459711f1c13e81893566cb3c725a6bb79bd5d86fbf0821605db81be36ba4a3c79678ff7ce4f5ec021ff7df8781eaa9f1ef3b71f3086785e5d4585599d93cf60eb6e142cd4e25c9aa319f026952a48835de6b1fb6f081471d2d6690105d16b9e4f8a46047d253376238e5bfa13aea9a57d50d7ff2b2292340701dc1423b429f099f7ccab44cf3c545dfa223ca43144200db44e8f094c7145ce676f484c6ab78a45c64178542ecd6a4cdee09ae392016e6b11dec9fae08827f9dea951ab7", &(0x7f0000000680)="db38e3fc0be5e279234f3f52f1a97a7ab64219ef355e22daf0ba2235452cf085c792863fa7458438ec6ff9e64cba3f570eec9c0af27f0aa7b8e438e45bf05d816b5940ae420a7223aff858a35e201fca65c0313a1a93a8", 0x2, r0, 0x4}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb708000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000950000a7"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xffffffff, 0x1b, 0x0, &(0x7f0000000100)="056431bde9dae9be9d38a28e0a84004013ffffffffa000c4353512", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff8}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000007f3fd92e508ad7b100000000", @ANYRES32=r0, @ANYBLOB="0000000000000000c3000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3}, 0x94) 161.938416ms ago: executing program 8 (id=6359): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1c8) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0', 0x1) 121.324478ms ago: executing program 6 (id=6360): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000380)=@newchain={0x1500, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x1, 0x9}, {0xc, 0x2}}, [@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0xc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x700000, 0xd5ff, 0x7f}, {0x7fb, 0x7ff}, 0x84, 0x5, 0xb7}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_SRC={0x8, 0x3, @empty}]}}, @f_rsvp6={{0xa}, {0xf2c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x10, 0x3d3c, 0x2, 0x401, 0x7, 0x0, 0xdcfe, 0x5d1f, 0x9, 0xd81, 0x0, 0xffff1557, 0xef72, 0x8, 0x372a, 0x2, 0xa, 0x323e, 0x5, 0x10, 0x9, 0x47, 0x3, 0x9, 0x5, 0x40fd17, 0x9, 0x3, 0xdcc7, 0x80, 0x1, 0xffff0001, 0x7, 0xa2cd, 0xfff, 0x7ff, 0xb4b, 0x1, 0x9, 0x5, 0x0, 0x7ff, 0x0, 0xe, 0x8, 0x9, 0x101, 0x3744, 0xffffffff, 0x5, 0xd3, 0x7, 0x5, 0x0, 0xe000000, 0x9, 0xb32c, 0x1, 0xffff, 0x9, 0x8, 0x401, 0x1, 0x80000001, 0xcb9, 0x3, 0xfffffff7, 0x3, 0x80000001, 0x8, 0x5, 0x2, 0x7ff, 0xfc0, 0x5, 0x5, 0x3, 0x7, 0x7ff, 0x8, 0xd, 0x20, 0x4, 0x6, 0x800, 0x7, 0x3ff, 0xfffffffb, 0x8, 0xfffffffa, 0x200, 0x3ff, 0xffffff81, 0x7, 0x3ff, 0x1, 0xffff61a9, 0x1000, 0x2, 0x3, 0x0, 0x1000, 0x808, 0x10001, 0x7fffffff, 0x0, 0x8, 0x7, 0x0, 0x6, 0x7, 0x0, 0x400, 0x4, 0x3, 0x5, 0x4, 0x0, 0x9, 0xa, 0x6, 0x8, 0x1000, 0x4, 0x0, 0xc058, 0x8001, 0xffff, 0x83, 0x3, 0x2, 0xffffff60, 0x6, 0x2, 0x0, 0x0, 0x10, 0x1, 0xffffffff, 0x2, 0x9, 0x224871c5, 0x7, 0x4, 0xfff, 0x67, 0x2, 0x3, 0x146, 0x2, 0x101, 0x4, 0x4a, 0x6, 0xd, 0x2, 0xfad8, 0x6, 0x1, 0xe09e, 0x7, 0x5, 0x61cf, 0x8, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xa, 0x100, 0x1, 0x101, 0x7b18, 0x1, 0x10, 0x5, 0xffffff1f, 0x0, 0x9, 0x7fff, 0x8001, 0x0, 0x2, 0x800, 0xdc4, 0x9, 0x6b8, 0x7, 0x7, 0x2, 0x4, 0x0, 0x0, 0x88, 0x1, 0x7f, 0x3, 0x9, 0x2, 0x8ac, 0x3, 0xc8da7d2, 0x800, 0x6, 0x6, 0xffff, 0x5, 0x7, 0x1ffc00, 0xffffffff, 0xed6, 0xc, 0xaf, 0xc000, 0x4, 0x6a3973c8, 0x3, 0x9, 0x5, 0x7, 0x6, 0x2, 0x1, 0x7, 0x6, 0xfff, 0x0, 0xbc1d2524, 0xfffffffe, 0x400, 0x80, 0x40, 0x6, 0x5, 0x7, 0x1, 0x370, 0x2, 0x4, 0x3ff, 0x5, 0xd, 0xffffffff, 0xb425, 0xa80, 0xf9, 0xfffffff9, 0x7, 0x4008, 0x0, 0x7f, 0x6, 0xffffff81, 0x3929, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x4, 0x1}, {0x200, 0x37, 0x459}, 0x0, 0x1}}, @TCA_RSVP_POLICE={0x8b4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x40, 0x4, 0xffffffff, 0x32f, 0x9, 0xbcb9, 0x2, 0x1, 0x9, 0x800, 0x7856, 0x2, 0x2e2, 0x2, 0x7, 0x1, 0xffff, 0x30f, 0x5, 0x1, 0x5, 0x9, 0x1, 0x3, 0x4523, 0x1, 0xa, 0x9, 0xa, 0x0, 0x4, 0x4, 0x1, 0x37, 0x7fffffff, 0x9, 0x6, 0x45, 0xda, 0x7900, 0x3, 0x9, 0x1, 0x401, 0x4, 0xf, 0x400, 0x8, 0x80, 0xb5f, 0x6, 0x8, 0xa87f, 0x1, 0x9, 0x8001, 0x10, 0x1f, 0x9, 0xffffffff, 0x3, 0x4, 0x10001, 0x7fff, 0x401, 0xd03c, 0x3, 0x80000001, 0xfffffffc, 0x3, 0x68c4, 0x326, 0xde6, 0xc, 0x80000001, 0x4, 0xd, 0x2, 0xeb4, 0x8, 0xe3, 0x40, 0x0, 0x9, 0x5, 0x7, 0x5, 0x81, 0xa56, 0x7, 0x6, 0x2, 0x8, 0x7, 0x5, 0x8c9, 0xfffffff2, 0xd, 0xe, 0x2, 0x8, 0x6, 0x2c, 0x0, 0x1000, 0x5d5, 0xfffff30f, 0x6, 0x8, 0x1, 0x3, 0x6, 0x8001, 0x7, 0x9, 0x7, 0x4, 0xa4, 0x80, 0x7, 0x2, 0x0, 0x6000000, 0x6, 0xfffff11c, 0xe63c, 0xb, 0x4, 0x1, 0x80000000, 0x8, 0x1, 0x24, 0x10000, 0xffffffc0, 0xf0, 0x1ffd, 0x3, 0x6, 0x4, 0x2, 0x1cb3, 0x8000, 0x1ff, 0xb8e, 0x5, 0xfffffffd, 0x1, 0x1333, 0x4, 0x80000001, 0x5008, 0x400, 0x0, 0x4, 0x3, 0xce98, 0x0, 0x3, 0xfff, 0x5, 0x3, 0x7, 0x6, 0x2, 0x200, 0xfffffff8, 0x0, 0x8, 0x9, 0x8, 0x400, 0x7ff, 0xb, 0x49, 0x8, 0x3, 0xfff, 0xd6d, 0xc92e, 0x7fff, 0x93, 0x10, 0x8, 0xfffffffd, 0x2, 0x7, 0x8, 0xe3, 0x4, 0x4, 0x5, 0x885c, 0x1, 0x7fffffff, 0x6, 0x325f, 0xffff8001, 0xe, 0x4, 0xe, 0x8, 0x3, 0x5, 0x6, 0x4, 0x80000001, 0x7, 0x2, 0x8001, 0x7, 0x3, 0xfffffff8, 0x33ef00, 0x7, 0x8, 0xe, 0x3, 0x80000000, 0xffff, 0x7, 0x2, 0x6, 0x6, 0x5, 0x9, 0x6, 0x1, 0x10000, 0x8000, 0xac4, 0xf, 0x2, 0xfffffffe, 0x8, 0x7, 0x1, 0x40, 0x8001, 0x7, 0x6, 0x200, 0x1, 0x401, 0x71, 0x2, 0x7, 0xb, 0x6, 0x0, 0x5e3d, 0x9, 0x3791, 0x0, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf9, 0xf, 0x6181, 0x80000000, 0xffffffff, 0x6, 0x0, 0x2, 0x1, 0x6, 0x1, 0xffff518d, 0x9, 0x0, 0x19, 0xfffffff9, 0xe365, 0x6, 0x7, 0x0, 0x0, 0xf9, 0xf, 0x9, 0x0, 0x8, 0x4, 0x8b, 0x1, 0x101, 0x80000001, 0x8, 0x0, 0x581b4d4d, 0x72, 0x6, 0x2, 0x8f2, 0x9, 0x1, 0xc, 0x4, 0x8001, 0x1ff, 0x40, 0x7, 0xfff, 0xe23e, 0x7, 0x7, 0x1, 0x6, 0x7, 0x1, 0xe86, 0x6, 0x8, 0xf, 0xc57, 0x8, 0x7000000, 0xf, 0x100, 0x5, 0x9, 0x7, 0xe2, 0x101, 0xfff, 0x5, 0x3, 0x7, 0x8, 0x1, 0xfff, 0xc8bd, 0x9, 0x0, 0x401, 0x7, 0x0, 0x9, 0x6, 0x81, 0xd, 0x2, 0xe, 0xfff, 0xb8aa, 0x3, 0xfffffffb, 0x4, 0x9, 0x8000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x7ff, 0x6000, 0xffff, 0x3, 0x6, 0x4, 0x1, 0x40, 0xa3d, 0x80, 0x6, 0x10, 0x10000, 0x8000, 0x8, 0x7, 0xf, 0x6, 0x0, 0x1, 0xc, 0x1, 0x10001, 0xffffff81, 0x9, 0x6, 0x9, 0x9, 0x6, 0x81, 0xffff8000, 0x7900, 0x8001, 0xfffffffb, 0x5, 0x9, 0x8, 0x5, 0x401, 0x8000, 0xd, 0x3, 0x972, 0x6, 0x0, 0x6, 0x1, 0x397, 0x9, 0x8, 0x1, 0x2, 0x1, 0x0, 0x7, 0xfffffffc, 0x72, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x2, 0x4, 0x4, 0x9b, 0x3, 0x5, 0x800, 0x763e, 0x6, 0x7, 0xfff, 0x4b, 0x100, 0x10000, 0x6, 0xca4, 0xfffffc00, 0x9, 0x0, 0x3, 0x4, 0xd, 0x4, 0xffff0000, 0x9, 0x7, 0x7, 0x0, 0xbe, 0x2, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0xeede, 0xfda, 0x4, 0x97, 0xfffffffe, 0x3a3fa87f, 0x8, 0x5, 0x1, 0x7426, 0x948, 0x0, 0x8, 0x800000, 0x5, 0x9, 0x9e8, 0x3, 0x94, 0x1, 0x1, 0x6be, 0x9, 0x8, 0x4, 0x4, 0x8a, 0x100, 0x3, 0x0, 0xe, 0x3, 0x8, 0x2, 0x5, 0x0, 0x10, 0x8001, 0x7, 0x5, 0x9, 0x7fffffff, 0x3, 0x2, 0x7, 0x3f6, 0x0, 0x3, 0x5, 0x1, 0x0, 0x8001, 0x1000, 0x1000, 0x8, 0x6, 0x1, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x30000005, 0x5c8, 0x1, 0xe, {0x2, 0x0, 0x5f2, 0x6a56, 0x9, 0xec3}, {0x5, 0x2, 0x8, 0xac00, 0xffc0, 0x3}, 0x0, 0x7, 0xfff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x0, 0x5, {0x5, 0x0, 0xfffe, 0xfff, 0x4, 0x4}, {0xe, 0x2, 0xd, 0xfff, 0x2, 0x5}, 0x2, 0x5, 0x10001}}]}, @TCA_RSVP_ACT={0x210, 0x6, [@m_gact={0x108, 0x11, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd87, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x5, 0x4e5, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x28, 0x0, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x400, 0xffffffffffffffff, 0xffff8000, 0x7611}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x6, 0x0, 0x4, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3ee, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x5, 0x9, 0x3}}]}, {0x49, 0x6, "a5cf17be334baedc1816c41fe8aa9c28e4b2af4f9a3e63ab201fb95c0af045b54ca968da879932902f7e978913a3629ea329b3bbc967e19c2543f464e348e6e8761441b846"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x5, 0x1, 0x8}, 0x4d}}]}, {0xb9, 0x6, "526c9cc953f5d88e7022726172b20ae90963a2414a8e3299027d14483f1efb55b25123baa500eff15a83a400fe82138a37475983ba13e4bbba5e1628c9536836d4788eea6b39e3e4e2d9d8a16bdb669a2278777061485a7437b340908e62557a62dc8d10081a6d4e621921f0a33d70f4d0da51590811d2112e8782185c92e8bd89e16ec09522eda270844a9573bc67346c21c76da70cf35db58584cd7c407b34410af2f6ad11551bc1a8c98eece49c57de037d2277"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x9, 0x9}, {0xfffffc00, 0x1, 0x9}, 0x79, 0x31, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00'}]}}, @f_rsvp={{0x9}, {0x540, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_RSVP_ACT={0x124, 0x6, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*(74}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x4, 0x8, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc5, 0x6, "f531b7c8c4fa1686caac90fd5431b8cefc1e77e85bc99f9c412472d93c00b86f012125f625b546f3362ecbe473cb7efe29b2382f038333c99a1e27373a156054129c1f3182593887cac1dd9d54978fb4bc6e01c2895281423c7d31a00f4ed2bf5a4d7be4316d8a788583ccfdaada73c09f73dfeb947aa5b11078c9de9971583c05918fb8b6868a323e400bdd85ecea9c175e8e93b4a9d0971e812279b391e5c13cadfce6103f61ca782eca4d207ed1a86f0960f5eea29dad333b27f60969a025fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd, 0x4, 0x3, 0xd178, 0x80000001, 0x1, 0x5c0, 0x0, 0x5, 0x6, 0x7, 0x0, 0xfffffffa, 0x7, 0x3, 0x7, 0x9, 0x1, 0x7fff, 0x4, 0x8001, 0xfff, 0x5, 0xe, 0xd4, 0x903, 0x4, 0x6, 0x10, 0x6, 0x0, 0x151, 0x3, 0x5, 0xffffffcc, 0x689, 0x2, 0x1, 0x0, 0xfffffff9, 0x6, 0x8, 0x606, 0x80000000, 0x97, 0x2, 0xb6, 0x7660, 0x6, 0x4, 0x4, 0x9, 0x30, 0x80000001, 0xfd09, 0x6, 0x1, 0x5, 0x4, 0x6, 0x3ff, 0xd, 0x7, 0x100, 0x67, 0x6, 0x8000, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x3, 0x5, 0x9, 0x8, 0x6, 0x400, 0x0, 0xffff8001, 0x9, 0xbd92, 0x5468, 0x9, 0xffffffc4, 0x8, 0x33d, 0xfff, 0x6, 0x10001, 0x3, 0x6, 0x756, 0x80000001, 0x938, 0x1000, 0x76, 0x3, 0x4bc6, 0x5, 0x7fb, 0x100, 0x9, 0x8, 0x9, 0x9d2, 0xd, 0x7, 0x10, 0x258d, 0x81, 0x4, 0x7, 0x2f6a, 0x8, 0xe00, 0x0, 0x7, 0x7f, 0x3, 0x388e, 0x2, 0x80, 0xdf5, 0x3, 0xf, 0x0, 0x6, 0x1, 0x1, 0x75d7, 0x8, 0xa4c, 0x9, 0x36619a9e, 0x1, 0x6f61, 0x6, 0x80000000, 0x0, 0x5, 0x4, 0x2, 0x0, 0xd4b, 0x7fff, 0x9, 0xffff1395, 0xfffffffe, 0x3, 0x0, 0x9, 0x70a5000, 0x4, 0x4, 0x8b1, 0x3, 0x7, 0xb0f, 0x2, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x6, 0x81, 0x7fff, 0x7ff, 0x7, 0x0, 0x2b4, 0x0, 0x3ff, 0x8, 0x5, 0x9, 0x7, 0x7, 0x8, 0x9, 0x0, 0x800, 0x9, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x1, 0xc6, 0x5, 0x6, 0x7ee, 0x1, 0x8, 0x5, 0x9, 0x8001, 0x7, 0xf5, 0xb90, 0x5, 0x0, 0x3635, 0x1, 0x8, 0x5, 0x0, 0x80000001, 0xe, 0x8, 0x1, 0x2, 0x8001, 0x55, 0x3a48, 0x4, 0x7, 0x1, 0x2, 0x5, 0x5, 0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x1, 0xb, 0x4, 0xe0, 0x400, 0x616c, 0x3, 0x2d, 0x5, 0xfffffff8, 0x9, 0x80000000, 0x3e, 0x3, 0x0, 0x8, 0x9, 0x1, 0x3, 0xadf, 0x3, 0x6, 0xfc, 0x9]}]}]}}]}, 0x1500}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x80000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000049500000000000000b70200000200000085ec000084000000b7000000000000009500"/96], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xe, 0xd}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r13, &(0x7f0000000100)='measure #', 0x9) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r14) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="cc1100001900010000000000000000001d0109005000108049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000681106"], 0x11cc}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 8 (id=6361): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 5 (id=6362): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000680)="b571", 0x2}], 0x1, 0x3e8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) kernel console output (not intermixed with test programs): 1251.349223][T26785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.380599][T26785] team0: Port device team_slave_0 added [ 1251.385526][T26785] team0: Port device team_slave_1 added [ 1251.401125][T26785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.401163][T26785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.401233][T26785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.402283][T26785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.402306][T26785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.402341][T26785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.424928][T26785] hsr_slave_0: entered promiscuous mode [ 1251.425388][T26785] hsr_slave_1: entered promiscuous mode [ 1251.425784][T26785] debugfs: 'hsr0' already exists in 'hsr' [ 1251.425796][T26785] Cannot create hsr debugfs directory [ 1251.496612][ T9960] IPVS: stop unused estimator thread 0... [ 1251.599192][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1251.888481][T26785] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1251.898650][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1251.901725][T26785] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1251.903832][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1251.904255][T26785] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1251.906164][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1251.906571][T26785] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1251.911266][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1252.017501][T26785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.033100][T26176] Bluetooth: hci2: command tx timeout [ 1252.220132][T26785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.256270][T25460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.259142][T25460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.310180][ T6299] hid (null): invalid report_size 1734701673 [ 1252.314698][ T6299] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:7.0/0003:0458:5010.00AC/input/input175 [ 1252.339485][ T6299] kye 0003:0458:5010.00AC: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1252.358256][T25469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.358377][T25469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.375436][ T6299] usb 11-1: USB disconnect, device number 39 [ 1252.405623][T26897] netlink: 'syz.5.6061': attribute type 4 has an invalid length. [ 1252.466324][T26899] overlayfs: failed to resolve './trace': -2 [ 1252.490876][T26899] 9p: Bad value for 'wfdno' [ 1252.495506][T26898] fido_id[26898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 1252.805377][T26912] ptrace attach of "/syz-executor exec"[23532] was attempted by "/syz-executor exec"[26912] [ 1252.900185][T26785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.169938][T26785] veth0_vlan: entered promiscuous mode [ 1253.192601][T26785] veth1_vlan: entered promiscuous mode [ 1253.227399][T19528] svc: failed to register nfsdv3 RPC service (errno 113). [ 1253.227844][T19528] svc: failed to register nfsaclv3 RPC service (errno 113). [ 1253.227855][T19528] failed to unregister udp with rpcbind [ 1253.228210][T19528] svc: failed to register nfsdv3 RPC service (errno 97). [ 1253.228220][T19528] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1253.228227][T19528] failed to unregister udp with rpcbind [ 1253.230852][T26785] veth0_macvtap: entered promiscuous mode [ 1253.234257][T26785] veth1_macvtap: entered promiscuous mode [ 1253.246509][T26785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.257718][T26785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.434535][ T9957] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.434774][ T9957] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.435011][ T9957] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.435294][ T9957] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.582595][T25471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.587008][T25471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.619752][T25461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.619916][T25461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.753573][T26929] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 1253.799814][T26932] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1253.823658][T26932] picdev_read: 4 callbacks suppressed [ 1253.824331][T26932] kvm: pic: non byte read [ 1253.827946][T26932] pic_ioport_write: 1 callbacks suppressed [ 1253.827959][T26932] kvm: pic: level sensitive irq not supported [ 1253.828298][T26932] kvm: pic: non byte read [ 1253.835527][T26932] kvm: pic: level sensitive irq not supported [ 1253.835855][T26932] kvm: pic: non byte read [ 1253.836722][T26932] kvm: pic: level sensitive irq not supported [ 1253.836985][T26932] kvm: pic: non byte read [ 1253.841320][T26932] kvm: pic: level sensitive irq not supported [ 1253.843607][T26932] kvm: pic: non byte read [ 1253.962100][T26937] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1253.975644][T26937] kvm: pic: non byte read [ 1253.977491][T26937] kvm: pic: level sensitive irq not supported [ 1253.978534][T26937] kvm: pic: non byte read [ 1253.981275][T26937] kvm: pic: level sensitive irq not supported [ 1253.981640][T26937] kvm: pic: non byte read [ 1253.982545][T26937] kvm: pic: level sensitive irq not supported [ 1253.982875][T26937] kvm: pic: non byte read [ 1254.517197][T26953] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1254.525923][T26953] CPU: 0 UID: 0 PID: 26953 Comm: syz.0.6069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.525984][T26953] Tainted: [L]=SOFTLOCKUP [ 1254.525993][T26953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1254.526007][T26953] Call Trace: [ 1254.526015][T26953] [ 1254.526025][T26953] dump_stack_lvl+0x100/0x190 [ 1254.526058][T26953] sysfs_warn_dup.cold+0x1c/0x28 [ 1254.526091][T26953] sysfs_create_dir_ns+0x24b/0x2b0 [ 1254.526114][T26953] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1254.526134][T26953] ? find_held_lock+0x2b/0x80 [ 1254.526155][T26953] ? kobject_add_internal+0x25f/0x930 [ 1254.526187][T26953] ? kobject_add_internal+0x25f/0x930 [ 1254.526219][T26953] ? class_dir_child_ns_type+0xd/0x60 [ 1254.526247][T26953] kobject_add_internal+0x2c8/0x930 [ 1254.526280][T26953] kobject_add+0x16a/0x1e0 [ 1254.526308][T26953] ? __pfx_kobject_add+0x10/0x10 [ 1254.526338][T26953] ? get_device_parent+0x1b3/0x4c0 [ 1254.526359][T26953] ? kobject_put+0xb9/0x640 [ 1254.526392][T26953] device_add+0x294/0x1970 [ 1254.526417][T26953] ? lockdep_init_map_type+0x5c/0x250 [ 1254.526444][T26953] ? __pfx_device_add+0x10/0x10 [ 1254.526468][T26953] ? lockdep_init_map_type+0x5c/0x250 [ 1254.526501][T26953] ? __init_waitqueue_head+0xca/0x150 [ 1254.526537][T26953] tty_register_device_attr+0x388/0x7f0 [ 1254.526562][T26953] ? lockdep_init_map_type+0x5c/0x250 [ 1254.526590][T26953] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1254.526621][T26953] ? tty_port_init+0x156/0x1c0 [ 1254.526649][T26953] gsm_activate_mux+0x155/0x2a0 [ 1254.526674][T26953] gsmld_ioctl+0xbbc/0x15c0 [ 1254.526708][T26953] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1254.526752][T26953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1254.526786][T26953] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1254.526808][T26953] tty_compat_ioctl+0x396/0x420 [ 1254.526830][T26953] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1254.526852][T26953] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1254.526887][T26953] __do_fast_syscall_32+0x13a/0x8b0 [ 1254.526913][T26953] do_fast_syscall_32+0x32/0x70 [ 1254.526938][T26953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1254.526963][T26953] RIP: 0023:0xf7f66fec [ 1254.526986][T26953] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1254.526994][T26953] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1254.527015][T26953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 1254.527029][T26953] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1254.527043][T26953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1254.527056][T26953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1254.527072][T26953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1254.527100][T26953] [ 1254.593540][ T9] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 1254.644721][T26953] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1254.657245][T26954] 8021q: VLANs not supported on ip6tnl0 [ 1254.760267][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 1254.763347][ T9] usb 11-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1254.767779][ T9] usb 11-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.772259][ T9] usb 11-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.772283][ T9] usb 11-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.772300][ T9] usb 11-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1254.772319][ T9] usb 11-1: config 7 interface 0 has no altsetting 0 [ 1254.772345][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.933013][T26963] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1255.280810][ T9] hid (null): invalid report_size 1734701673 [ 1255.308546][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:7.0/0003:0458:5010.00AD/input/input176 [ 1255.378127][ T9] kye 0003:0458:5010.00AD: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 1255.467346][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6072'. [ 1255.520241][T14372] usb 11-1: USB disconnect, device number 40 [ 1255.795293][T26982] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6077'. [ 1255.798572][T26982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.273559][T26987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1256.367453][T26987] kvm: pic: non byte read [ 1256.485275][T26987] kvm: pic: level sensitive irq not supported [ 1256.486238][T26987] kvm: pic: level sensitive irq not supported [ 1256.487420][T26987] kvm: pic: level sensitive irq not supported [ 1257.038990][T14372] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1257.193796][T14372] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1257.198452][T14372] usb 10-1: not running at top speed; connect to a high speed hub [ 1257.201450][T14372] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1257.209673][T14372] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1257.209721][T14372] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1257.209773][T14372] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.209803][T14372] usb 10-1: config 14 has no interface number 0 [ 1257.209856][T14372] usb 10-1: config 14 has no interface number 1 [ 1257.209910][T14372] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1257.209944][T14372] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1257.209977][T14372] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1257.210011][T14372] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1257.210046][T14372] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1257.210075][T14372] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1257.268063][T14372] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.268102][T14372] usb 10-1: Product: syz [ 1257.268151][T14372] usb 10-1: Manufacturer: syz [ 1257.268174][T14372] usb 10-1: SerialNumber: syz [ 1258.195417][T14372] legousbtower 10-1:14.57: interrupt endpoints not found [ 1258.518054][T14372] legousbtower 10-1:14.228: get version request failed: -71 [ 1258.520659][T14372] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -71 [ 1258.527727][T14372] usb 10-1: USB disconnect, device number 10 [ 1258.593523][T27024] warn_alloc: 1 callbacks suppressed [ 1258.593685][T27024] syz.8.6089: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1258.593883][T27024] CPU: 2 UID: 0 PID: 27024 Comm: syz.8.6089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.593925][T27024] Tainted: [L]=SOFTLOCKUP [ 1258.593936][T27024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1258.593949][T27024] Call Trace: [ 1258.593955][T27024] [ 1258.593964][T27024] dump_stack_lvl+0x100/0x190 [ 1258.593995][T27024] warn_alloc.cold+0x9e/0xb2 [ 1258.594021][T27024] ? __pfx_warn_alloc+0x10/0x10 [ 1258.594056][T27024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1258.594085][T27024] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1258.594121][T27024] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1258.594160][T27024] ? mt_validate_nulls+0x22f/0xae0 [ 1258.594184][T27024] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1258.594216][T27024] ? irqentry_exit+0x24d/0xa10 [ 1258.594236][T27024] ? lockdep_hardirqs_on+0x7d/0x110 [ 1258.594264][T27024] ? __lock_acquire+0x4c5/0x1ec0 [ 1258.594298][T27024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1258.594321][T27024] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1258.594342][T27024] ? policy_nodemask+0xed/0x4f0 [ 1258.594368][T27024] alloc_pages_mpol+0x201/0x550 [ 1258.594395][T27024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1258.594417][T27024] ? __lock_acquire+0x4c5/0x1ec0 [ 1258.594447][T27024] folio_alloc_mpol_noprof+0x36/0x260 [ 1258.594475][T27024] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1258.594575][T27024] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1258.594615][T27024] ? __pfx___might_resched+0x10/0x10 [ 1258.594640][T27024] ? bpf_ksym_find+0x124/0x1c0 [ 1258.594666][T27024] migrate_pages_batch+0x5c4/0x4680 [ 1258.594696][T27024] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1258.594732][T27024] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1258.594758][T27024] ? stack_trace_save+0x8e/0xc0 [ 1258.594790][T27024] ? kasan_save_stack+0x3f/0x50 [ 1258.594810][T27024] ? kasan_save_stack+0x30/0x50 [ 1258.594829][T27024] ? kasan_save_track+0x14/0x30 [ 1258.594849][T27024] ? __kasan_slab_alloc+0x89/0x90 [ 1258.594869][T27024] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1258.594887][T27024] ? __mpol_dup+0x74/0x390 [ 1258.594910][T27024] ? mbind_range+0x2ad/0x550 [ 1258.594936][T27024] ? do_mbind+0x7dc/0xfd0 [ 1258.594960][T27024] ? kernel_mbind+0x1b7/0x200 [ 1258.594989][T27024] migrate_pages_sync+0x12c/0x880 [ 1258.595017][T27024] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1258.595081][T27024] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1258.595116][T27024] migrate_pages+0x1a83/0x2850 [ 1258.595144][T27024] ? lockdep_hardirqs_on+0x7d/0x110 [ 1258.595166][T27024] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1258.595202][T27024] ? __pfx_migrate_pages+0x10/0x10 [ 1258.595235][T27024] ? do_mbind+0x555/0xfd0 [ 1258.595273][T27024] do_mbind+0x5a4/0xfd0 [ 1258.595310][T27024] ? __pfx_do_mbind+0x10/0x10 [ 1258.595339][T27024] ? futex_wait+0x11e/0x370 [ 1258.595367][T27024] ? __pfx_get_nodes+0x10/0x10 [ 1258.595395][T27024] kernel_mbind+0x1b7/0x200 [ 1258.595424][T27024] ? __pfx_kernel_mbind+0x10/0x10 [ 1258.595460][T27024] __do_fast_syscall_32+0x13a/0x8b0 [ 1258.595492][T27024] ? lockdep_hardirqs_on+0x7d/0x110 [ 1258.595521][T27024] do_fast_syscall_32+0x32/0x70 [ 1258.595544][T27024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1258.595567][T27024] RIP: 0023:0xf700efec [ 1258.595591][T27024] Code: Unable to access opcode bytes at 0xf700efc2. [ 1258.595601][T27024] RSP: 002b:00000000f534b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1258.595621][T27024] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1258.595635][T27024] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1258.595648][T27024] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1258.595662][T27024] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1258.595675][T27024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1258.595702][T27024] [ 1258.595894][T27024] Mem-Info: [ 1258.595905][T27024] active_anon:3224 inactive_anon:3628 isolated_anon:13 [ 1258.595905][T27024] active_file:6268 inactive_file:7224 isolated_file:10 [ 1258.595905][T27024] unevictable:971 dirty:176 writeback:0 [ 1258.595905][T27024] slab_reclaimable:7539 slab_unreclaimable:84325 [ 1258.595905][T27024] mapped:23916 shmem:3912 pagetables:1822 [ 1258.595905][T27024] sec_pagetables:374 bounce:0 [ 1258.595905][T27024] kernel_misc_reclaimable:0 [ 1258.595905][T27024] free:27573 free_pcp:0 free_cma:0 [ 1258.595957][T27024] Node 0 active_anon:0kB inactive_anon:32kB active_file:516kB inactive_file:2720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:248kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8288kB pagetables:1120kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1258.596002][T27024] Node 0 DMA free:2076kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.596054][T27024] lowmem_reserve[]: 0 278 278 278 278 [ 1258.596086][T27024] Node 0 DMA32 free:24620kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:516kB inactive_file:2716kB unevictable:0kB writepending:0kB zspages:564kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.596136][T27024] lowmem_reserve[]: 0 0 0 0 0 [ 1258.596165][T27024] Node 0 DMA: 29*4kB (UM) 3*8kB (UM) 3*16kB (UM) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 1258.596288][T27024] Node 0 DMA32: 312*4kB (UME) 275*8kB (UME) 92*16kB (UM) 174*32kB (UME) 64*64kB (UME) 15*128kB (UME) 12*256kB (UME) 8*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 24696kB [ 1258.596428][T27024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.596441][T27024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.596456][T27024] 18306 total pagecache pages [ 1258.596465][T27024] 868 pages in swap cache [ 1258.596472][T27024] Free swap = 93260kB [ 1258.596487][T27024] Total swap = 124996kB [ 1258.596498][T27024] 524155 pages RAM [ 1258.596506][T27024] 0 pages HighMem/MovableOnly [ 1258.596513][T27024] 212073 pages reserved [ 1258.596520][T27024] 0 pages cma reserved [ 1258.628926][ T5823] usb 11-1: new full-speed USB device number 41 using dummy_hcd [ 1258.789413][ T5823] usb 11-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1258.790297][ T5823] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 1258.790495][ T5823] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1258.792054][ T5823] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.792067][ T5823] usb 11-1: Product: syz [ 1258.792075][ T5823] usb 11-1: Manufacturer: syz [ 1258.792082][ T5823] usb 11-1: SerialNumber: syz [ 1259.171910][T27036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.182594][T27036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.254749][T27023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.331737][ T5823] usb 11-1: Unsupported UAC3 BADD profile [ 1259.349562][ T5823] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1259.352609][ T5823] usb 11-1: USB disconnect, device number 41 [ 1259.365755][T27037] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1259.397233][T23881] udevd[23881]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1259.455824][T27041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1259.670982][T27049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1259.701205][T27049] picdev_read: 4 callbacks suppressed [ 1259.704173][T27049] kvm: pic: non byte read [ 1259.707177][T27049] pic_ioport_write: 1 callbacks suppressed [ 1259.707293][T27049] kvm: pic: level sensitive irq not supported [ 1259.710467][T27049] kvm: pic: non byte read [ 1259.712140][T27049] kvm: pic: level sensitive irq not supported [ 1259.712397][T27049] kvm: pic: non byte read [ 1259.713222][T27049] kvm: pic: level sensitive irq not supported [ 1259.713509][T27049] kvm: pic: non byte read [ 1259.716721][T27049] kvm: pic: level sensitive irq not supported [ 1259.717093][T27049] kvm: pic: non byte read [ 1259.719324][T27049] kvm: pic: level sensitive irq not supported [ 1259.719709][T27049] kvm: pic: non byte read [ 1259.998378][T27063] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1259.998558][T27063] CPU: 3 UID: 0 PID: 27063 Comm: syz.6.6097 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.998589][T27063] Tainted: [L]=SOFTLOCKUP [ 1259.998595][T27063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1259.998602][T27063] Call Trace: [ 1259.998608][T27063] [ 1259.998614][T27063] dump_stack_lvl+0x100/0x190 [ 1259.998633][T27063] sysfs_warn_dup.cold+0x1c/0x28 [ 1259.998652][T27063] sysfs_create_dir_ns+0x24b/0x2b0 [ 1259.998666][T27063] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1259.998679][T27063] ? find_held_lock+0x2b/0x80 [ 1259.998692][T27063] ? kobject_add_internal+0x25f/0x930 [ 1259.998711][T27063] ? kobject_add_internal+0x25f/0x930 [ 1259.998730][T27063] ? class_dir_child_ns_type+0xd/0x60 [ 1259.998745][T27063] kobject_add_internal+0x2c8/0x930 [ 1259.998765][T27063] kobject_add+0x16a/0x1e0 [ 1259.998783][T27063] ? __pfx_kobject_add+0x10/0x10 [ 1259.998802][T27063] ? get_device_parent+0x1b3/0x4c0 [ 1259.998817][T27063] ? kobject_put+0xb9/0x640 [ 1259.998838][T27063] device_add+0x294/0x1970 [ 1259.998852][T27063] ? lockdep_init_map_type+0x5c/0x250 [ 1259.998868][T27063] ? __pfx_device_add+0x10/0x10 [ 1259.998881][T27063] ? lockdep_init_map_type+0x5c/0x250 [ 1259.998899][T27063] ? __init_waitqueue_head+0xca/0x150 [ 1259.998920][T27063] tty_register_device_attr+0x388/0x7f0 [ 1259.998934][T27063] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1259.998950][T27063] ? tty_port_init+0x156/0x1c0 [ 1259.998965][T27063] gsm_activate_mux+0x155/0x2a0 [ 1259.998978][T27063] gsmld_ioctl+0xbbc/0x15c0 [ 1259.998997][T27063] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1259.999021][T27063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1259.999041][T27063] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1259.999054][T27063] tty_compat_ioctl+0x396/0x420 [ 1259.999066][T27063] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1259.999079][T27063] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1259.999098][T27063] __do_fast_syscall_32+0x13a/0x8b0 [ 1259.999115][T27063] do_fast_syscall_32+0x32/0x70 [ 1259.999129][T27063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.999144][T27063] RIP: 0023:0xf7fc5fec [ 1259.999158][T27063] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1259.999164][T27063] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1259.999175][T27063] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 1259.999183][T27063] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.999190][T27063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.999197][T27063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1259.999203][T27063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.999218][T27063] [ 1259.999821][T27063] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1260.889537][T26176] Bluetooth: Frame is too long (len 18, expected len 4) [ 1260.944397][T27076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1261.605695][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1261.610337][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1261.874773][T27101] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6109'. [ 1262.262018][T27104] wg2 speed is unknown, defaulting to 1000 [ 1262.662735][T27108] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1262.662918][T27108] CPU: 1 UID: 0 PID: 27108 Comm: syz.5.6111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.662964][T27108] Tainted: [L]=SOFTLOCKUP [ 1262.662973][T27108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1262.662992][T27108] Call Trace: [ 1262.663000][T27108] [ 1262.663009][T27108] dump_stack_lvl+0x100/0x190 [ 1262.663041][T27108] sysfs_warn_dup.cold+0x1c/0x28 [ 1262.663072][T27108] sysfs_create_dir_ns+0x24b/0x2b0 [ 1262.663094][T27108] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1262.663114][T27108] ? preempt_schedule_common+0x3c/0xb0 [ 1262.663137][T27108] ? preempt_schedule_thunk+0x16/0x40 [ 1262.663163][T27108] ? class_dir_child_ns_type+0xd/0x60 [ 1262.663193][T27108] kobject_add_internal+0x2c8/0x930 [ 1262.663227][T27108] kobject_add+0x16a/0x1e0 [ 1262.663255][T27108] ? __pfx_kobject_add+0x10/0x10 [ 1262.663285][T27108] ? get_device_parent+0x1b3/0x4c0 [ 1262.663308][T27108] ? kobject_put+0xb9/0x640 [ 1262.663339][T27108] device_add+0x294/0x1970 [ 1262.663364][T27108] ? lockdep_init_map_type+0x5c/0x250 [ 1262.663392][T27108] ? __pfx_device_add+0x10/0x10 [ 1262.663415][T27108] ? lockdep_init_map_type+0x5c/0x250 [ 1262.663442][T27108] ? __init_waitqueue_head+0xca/0x150 [ 1262.663477][T27108] tty_register_device_attr+0x388/0x7f0 [ 1262.663501][T27108] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1262.663531][T27108] ? gsm_activate_mux+0x82/0x2a0 [ 1262.663554][T27108] gsm_activate_mux+0x155/0x2a0 [ 1262.663577][T27108] gsmld_ioctl+0xbbc/0x15c0 [ 1262.663608][T27108] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1262.663652][T27108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1262.663684][T27108] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1262.663708][T27108] tty_compat_ioctl+0x396/0x420 [ 1262.663728][T27108] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1262.663750][T27108] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1262.663780][T27108] __do_fast_syscall_32+0x13a/0x8b0 [ 1262.663808][T27108] do_fast_syscall_32+0x32/0x70 [ 1262.663831][T27108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1262.663855][T27108] RIP: 0023:0xf705efec [ 1262.663878][T27108] Code: Unable to access opcode bytes at 0xf705efc2. [ 1262.663887][T27108] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1262.663908][T27108] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 1262.663923][T27108] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1262.663937][T27108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1262.663951][T27108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1262.663965][T27108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1262.664001][T27108] [ 1262.664143][T27108] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1262.910455][T27108] 8021q: VLANs not supported on ip6tnl0 [ 1263.176668][T27120] FAULT_INJECTION: forcing a failure. [ 1263.176668][T27120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.176740][T27120] CPU: 0 UID: 0 PID: 27120 Comm: syz.0.6112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.176768][T27120] Tainted: [L]=SOFTLOCKUP [ 1263.176774][T27120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1263.176781][T27120] Call Trace: [ 1263.176785][T27120] [ 1263.176791][T27120] dump_stack_lvl+0x100/0x190 [ 1263.176811][T27120] should_fail_ex.cold+0x5/0xa [ 1263.176827][T27120] strncpy_from_user+0x3b/0x2d0 [ 1263.176842][T27120] __do_sys_add_key+0xd4/0x460 [ 1263.176862][T27120] ? __pfx___do_sys_add_key+0x10/0x10 [ 1263.176884][T27120] __do_fast_syscall_32+0x13a/0x8b0 [ 1263.176902][T27120] do_fast_syscall_32+0x32/0x70 [ 1263.176917][T27120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1263.176932][T27120] RIP: 0023:0xf7f66fec [ 1263.176946][T27120] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1263.176951][T27120] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 1263.176963][T27120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1263.176970][T27120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1263.176977][T27120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.176984][T27120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1263.176991][T27120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.177005][T27120] [ 1263.503451][T27127] bond2: (slave bond_slave_1): Device is not our slave [ 1263.507662][T27127] bond2: option active_slave: invalid value (bond_slave_1) [ 1263.523073][T27127] bond2 (unregistering): Released all slaves [ 1265.231472][T27139] overlay: ./file0 is not a directory [ 1265.283493][T27139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1265.283527][T27139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1265.283614][T27139] vhci_hcd vhci_hcd.0: Device attached [ 1265.321908][T27148] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1265.329843][T27148] kvm: pic: non byte read [ 1265.331260][T27148] kvm: pic: level sensitive irq not supported [ 1265.331547][T27148] kvm: pic: non byte read [ 1265.332695][T27148] kvm: pic: level sensitive irq not supported [ 1265.333019][T27148] kvm: pic: non byte read [ 1265.334518][T27148] kvm: pic: level sensitive irq not supported [ 1265.335046][T27148] kvm: pic: non byte read [ 1265.336686][T27148] kvm: pic: level sensitive irq not supported [ 1265.337012][T27148] kvm: pic: non byte read [ 1265.345636][T27143] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1265.363429][T27143] kvm: pic: non byte read [ 1265.364518][T27143] kvm: pic: level sensitive irq not supported [ 1265.372790][T27143] kvm: pic: non byte read [ 1265.376325][T27143] kvm: pic: level sensitive irq not supported [ 1265.377033][T27143] kvm: pic: non byte read [ 1265.390003][T27143] kvm: pic: level sensitive irq not supported [ 1265.390543][T27143] kvm: pic: non byte read [ 1265.518821][ T5823] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1265.529118][ T5889] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 1265.558487][T27165] FAULT_INJECTION: forcing a failure. [ 1265.558487][T27165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.558539][T27165] CPU: 0 UID: 0 PID: 27165 Comm: syz.6.6123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.558566][T27165] Tainted: [L]=SOFTLOCKUP [ 1265.558572][T27165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1265.558579][T27165] Call Trace: [ 1265.558583][T27165] [ 1265.558588][T27165] dump_stack_lvl+0x100/0x190 [ 1265.558606][T27165] should_fail_ex.cold+0x5/0xa [ 1265.558621][T27165] _copy_from_user+0x2e/0xd0 [ 1265.558639][T27165] copy_from_sockptr_offset+0x15c/0x1b0 [ 1265.558654][T27165] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 1265.558684][T27165] do_tcp_getsockopt+0xbad/0x2a50 [ 1265.558704][T27165] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1265.558722][T27165] ? is_bpf_text_address+0x25/0x1a0 [ 1265.558738][T27165] ? find_held_lock+0x2b/0x80 [ 1265.558749][T27165] ? is_bpf_text_address+0x8a/0x1a0 [ 1265.558763][T27165] ? begin_current_label_crit_section+0x21c/0x980 [ 1265.558781][T27165] ? bpf_ksym_find+0x124/0x1c0 [ 1265.558794][T27165] ? kernel_text_address+0x8d/0x100 [ 1265.558809][T27165] ? aa_inet_opt_perm+0x30d/0x970 [ 1265.558827][T27165] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1265.558844][T27165] ? __lock_acquire+0x4c5/0x1ec0 [ 1265.558858][T27165] ? _parse_integer_limit+0x1ac/0x220 [ 1265.558880][T27165] ? _kstrtoull+0x144/0x200 [ 1265.558893][T27165] ? __pfx__kstrtoull+0x10/0x10 [ 1265.558908][T27165] ? lock_acquire+0x1d1/0x380 [ 1265.558921][T27165] ? __might_fault+0xc5/0x140 [ 1265.558946][T27165] ? lock_acquire+0x1d1/0x380 [ 1265.558962][T27165] tcp_getsockopt+0xe4/0x110 [ 1265.558979][T27165] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1265.558995][T27165] do_sock_getsockopt+0x50a/0x6e0 [ 1265.559012][T27165] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1265.559029][T27165] ? __fget_files+0x34/0x3d0 [ 1265.559041][T27165] ? find_held_lock+0x2b/0x80 [ 1265.559055][T27165] ? __fget_files+0x21f/0x3d0 [ 1265.559070][T27165] __sys_getsockopt+0x133/0x1d0 [ 1265.559085][T27165] ? __ia32_sys_getsockopt+0xbc/0x160 [ 1265.559096][T27165] __ia32_sys_getsockopt+0xbc/0x160 [ 1265.559107][T27165] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1265.559121][T27165] ? lockdep_hardirqs_on+0x7d/0x110 [ 1265.559134][T27165] __do_fast_syscall_32+0x13a/0x8b0 [ 1265.559147][T27165] ? lockdep_hardirqs_on+0x7d/0x110 [ 1265.559160][T27165] do_fast_syscall_32+0x32/0x70 [ 1265.559174][T27165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.559188][T27165] RIP: 0023:0xf7fc5fec [ 1265.559201][T27165] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1265.559206][T27165] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 1265.559218][T27165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 1265.559225][T27165] RDX: 0000000000000023 RSI: 0000000080000000 RDI: 0000000080000580 [ 1265.559232][T27165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.559238][T27165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1265.559245][T27165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.559259][T27165] [ 1265.689278][ T5889] usb 13-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1265.697217][ T5889] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 1265.698860][ T5889] usb 13-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1265.731912][ T5889] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.731963][ T5889] usb 13-1: Product: syz [ 1265.732008][ T5889] usb 13-1: Manufacturer: syz [ 1265.732040][ T5889] usb 13-1: SerialNumber: syz [ 1265.759026][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1265.908853][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1265.932554][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1265.932621][ T9] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 1265.933322][ T9] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1265.933340][ T9] usb 10-1: can't read configurations, error -71 [ 1265.985666][T27144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.015723][T27144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.019166][T27144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.058175][T27146] vhci_hcd: connection reset by peer [ 1266.061609][T22676] vhci_hcd vhci_hcd.0: stop threads [ 1266.061693][T22676] vhci_hcd vhci_hcd.0: release socket [ 1266.061757][T22676] vhci_hcd vhci_hcd.0: disconnect device [ 1266.095058][ T5889] usb 13-1: Unsupported UAC3 BADD profile [ 1266.116279][ T5889] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1266.120992][ T5889] usb 13-1: USB disconnect, device number 2 [ 1266.123628][T23881] udevd[23881]: setting owner of /dev/bus/usb/013/002 to uid=0, gid=0 failed: No such file or directory [ 1266.132758][T23881] udevd[23881]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1266.562236][T27181] FAULT_INJECTION: forcing a failure. [ 1266.562236][T27181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.562419][T27181] CPU: 3 UID: 0 PID: 27181 Comm: syz.5.6126 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.562448][T27181] Tainted: [L]=SOFTLOCKUP [ 1266.562453][T27181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1266.562460][T27181] Call Trace: [ 1266.562465][T27181] [ 1266.562470][T27181] dump_stack_lvl+0x100/0x190 [ 1266.562489][T27181] should_fail_ex.cold+0x5/0xa [ 1266.562503][T27181] _copy_to_user+0x32/0xd0 [ 1266.562522][T27181] simple_read_from_buffer+0xcb/0x170 [ 1266.562535][T27181] proc_fail_nth_read+0x1af/0x230 [ 1266.562554][T27181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1266.562573][T27181] ? rw_verify_area+0xce/0x6d0 [ 1266.562590][T27181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1266.562607][T27181] vfs_read+0x1e4/0xb40 [ 1266.562625][T27181] ? lock_acquire+0x1d1/0x380 [ 1266.562640][T27181] ? __fget_files+0x34/0x3d0 [ 1266.562651][T27181] ? __pfx_vfs_read+0x10/0x10 [ 1266.562667][T27181] ? find_held_lock+0x2b/0x80 [ 1266.562679][T27181] ? __fget_files+0x215/0x3d0 [ 1266.562692][T27181] ? __fget_files+0x21f/0x3d0 [ 1266.562707][T27181] ksys_read+0x12a/0x250 [ 1266.562717][T27181] ? __pfx_ksys_read+0x10/0x10 [ 1266.562732][T27181] do_int80_emulation+0x166/0x650 [ 1266.562748][T27181] asm_int80_emulation+0x1a/0x20 [ 1266.562759][T27181] RIP: 0023:0xf71975ab [ 1266.562769][T27181] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1266.562780][T27181] RSP: 002b:00000000f542c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1266.562792][T27181] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542c5d0 [ 1266.562799][T27181] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.562805][T27181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.562812][T27181] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1266.562818][T27181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.562833][T27181] [ 1266.691891][T27187] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1266.692018][T27187] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1266.692279][T27189] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1266.692314][T27189] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1266.787731][T27192] netlink: NAT attribute has 8 unknown bytes [ 1266.787812][T27192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.844537][T27206] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1267.853054][T27206] kvm: pic: non byte read [ 1267.855705][T27206] kvm: pic: level sensitive irq not supported [ 1267.857115][T27206] kvm: pic: level sensitive irq not supported [ 1267.862094][T27206] kvm: pic: level sensitive irq not supported [ 1268.138971][ T5889] usb 11-1: new full-speed USB device number 42 using dummy_hcd [ 1268.289432][ T5889] usb 11-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1268.290295][ T5889] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 1268.290319][ T5889] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1268.292056][ T5889] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.292071][ T5889] usb 11-1: Product: syz [ 1268.292079][ T5889] usb 11-1: Manufacturer: syz [ 1268.292087][ T5889] usb 11-1: SerialNumber: syz [ 1268.374834][T27215] Set syz0 is full, maxelem 65536 reached [ 1268.522687][T27197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.529576][T27197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.529952][T27197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.545404][ T5889] usb 11-1: Unsupported UAC3 BADD profile [ 1268.563830][ T5889] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1268.569172][ T5889] usb 11-1: USB disconnect, device number 42 [ 1268.650595][T27220] FAULT_INJECTION: forcing a failure. [ 1268.650595][T27220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.650672][T27220] CPU: 2 UID: 0 PID: 27220 Comm: syz.0.6139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.650716][T27220] Tainted: [L]=SOFTLOCKUP [ 1268.650724][T27220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1268.650736][T27220] Call Trace: [ 1268.650744][T27220] [ 1268.650753][T27220] dump_stack_lvl+0x100/0x190 [ 1268.650776][T27220] should_fail_ex.cold+0x5/0xa [ 1268.650793][T27220] _copy_to_user+0x32/0xd0 [ 1268.650816][T27220] simple_read_from_buffer+0xcb/0x170 [ 1268.650832][T27220] proc_fail_nth_read+0x1af/0x230 [ 1268.650854][T27220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.650876][T27220] ? rw_verify_area+0xce/0x6d0 [ 1268.650895][T27220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.650915][T27220] vfs_read+0x1e4/0xb40 [ 1268.650936][T27220] ? lock_acquire+0x1d1/0x380 [ 1268.650953][T27220] ? __fget_files+0x34/0x3d0 [ 1268.650967][T27220] ? __pfx_vfs_read+0x10/0x10 [ 1268.650986][T27220] ? find_held_lock+0x2b/0x80 [ 1268.651000][T27220] ? __fget_files+0x215/0x3d0 [ 1268.651016][T27220] ? __fget_files+0x21f/0x3d0 [ 1268.651033][T27220] ksys_read+0x12a/0x250 [ 1268.651045][T27220] ? __pfx_ksys_read+0x10/0x10 [ 1268.651062][T27220] do_int80_emulation+0x166/0x650 [ 1268.651081][T27220] asm_int80_emulation+0x1a/0x20 [ 1268.651094][T27220] RIP: 0023:0xf71675ab [ 1268.651105][T27220] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1268.651118][T27220] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1268.651132][T27220] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 1268.651140][T27220] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1268.651148][T27220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1268.651155][T27220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1268.651163][T27220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.651179][T27220] [ 1268.778608][T23881] udevd[23881]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1269.199456][T27232] netlink: 'syz.6.6142': attribute type 10 has an invalid length. [ 1269.206564][T27232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1269.207835][T27232] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1269.208481][T27232] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6142'. [ 1269.221794][T27232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.227216][T27232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.236408][T27232] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1269.242230][T27232] bond0 (unregistering): Released all slaves [ 1269.337789][T27233] warn_alloc: 1 callbacks suppressed [ 1269.337850][T27233] syz.6.6142: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1269.337960][T27233] CPU: 2 UID: 0 PID: 27233 Comm: syz.6.6142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.337987][T27233] Tainted: [L]=SOFTLOCKUP [ 1269.337992][T27233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1269.337999][T27233] Call Trace: [ 1269.338004][T27233] [ 1269.338009][T27233] dump_stack_lvl+0x100/0x190 [ 1269.338027][T27233] warn_alloc.cold+0x9e/0xb2 [ 1269.338040][T27233] ? __pfx_warn_alloc+0x10/0x10 [ 1269.338065][T27233] ? __lock_acquire+0x4c5/0x1ec0 [ 1269.338082][T27233] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1269.338098][T27233] ? __lock_acquire+0x4c5/0x1ec0 [ 1269.338112][T27233] ? __lock_acquire+0x4c5/0x1ec0 [ 1269.338130][T27233] ? do_replace+0x1c6/0x490 [ 1269.338161][T27233] ? do_raw_spin_lock+0x128/0x260 [ 1269.338180][T27233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1269.338196][T27233] ? __lock_acquire+0x4c5/0x1ec0 [ 1269.338210][T27233] ? do_raw_spin_unlock+0x145/0x1e0 [ 1269.338229][T27233] ? do_replace+0x1c6/0x490 [ 1269.338245][T27233] __vmalloc_node_noprof+0xad/0xf0 [ 1269.338260][T27233] ? do_replace+0x1c6/0x490 [ 1269.338278][T27233] __vmalloc_noprof+0xa3/0x120 [ 1269.338292][T27233] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1269.338316][T27233] do_replace+0x1c6/0x490 [ 1269.338334][T27233] ? __pfx_do_replace+0x10/0x10 [ 1269.338356][T27233] ? register_lock_class+0x3f/0x7b0 [ 1269.338374][T27233] compat_do_replace+0x589/0x7a0 [ 1269.338393][T27233] ? __pfx_compat_do_replace+0x10/0x10 [ 1269.338419][T27233] ? bpf_lsm_capable+0x9/0x10 [ 1269.338435][T27233] ? security_capable+0x80/0x260 [ 1269.338455][T27233] do_ebt_set_ctl+0x3f4/0x4a0 [ 1269.338473][T27233] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1269.338492][T27233] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1269.338507][T27233] ? futex_wake+0x4ea/0x5e0 [ 1269.338521][T27233] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1269.338535][T27233] nf_setsockopt+0x8d/0xf0 [ 1269.338548][T27233] ip_setsockopt+0xcb/0xf0 [ 1269.338564][T27233] tcp_setsockopt+0xa7/0x100 [ 1269.338582][T27233] smc_setsockopt+0x1b6/0xa40 [ 1269.338600][T27233] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1269.338616][T27233] ? __pfx_smc_setsockopt+0x10/0x10 [ 1269.338635][T27233] ? aa_sock_opt_perm+0x114/0x1e0 [ 1269.338654][T27233] ? __pfx_smc_setsockopt+0x10/0x10 [ 1269.338673][T27233] do_sock_setsockopt+0xf3/0x1d0 [ 1269.338688][T27233] __sys_setsockopt+0x119/0x190 [ 1269.338702][T27233] __ia32_sys_setsockopt+0xbc/0x160 [ 1269.338713][T27233] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1269.338727][T27233] ? lockdep_hardirqs_on+0x7d/0x110 [ 1269.338739][T27233] __do_fast_syscall_32+0x13a/0x8b0 [ 1269.338755][T27233] do_fast_syscall_32+0x32/0x70 [ 1269.338769][T27233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.338783][T27233] RIP: 0023:0xf7fc5fec [ 1269.338797][T27233] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1269.338802][T27233] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1269.338813][T27233] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 1269.338820][T27233] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 1269.338827][T27233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.338833][T27233] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1269.338840][T27233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.338854][T27233] [ 1269.342785][T27233] Mem-Info: [ 1269.342793][T27233] active_anon:514 inactive_anon:9187 isolated_anon:0 [ 1269.342793][T27233] active_file:3850 inactive_file:9817 isolated_file:0 [ 1269.342793][T27233] unevictable:1000 dirty:458 writeback:0 [ 1269.342793][T27233] slab_reclaimable:7561 slab_unreclaimable:84170 [ 1269.342793][T27233] mapped:29041 shmem:6757 pagetables:1886 [ 1269.342793][T27233] sec_pagetables:374 bounce:0 [ 1269.342793][T27233] kernel_misc_reclaimable:0 [ 1269.342793][T27233] free:23548 free_pcp:1617 free_cma:0 [ 1269.342821][T27233] Node 0 active_anon:0kB inactive_anon:32kB active_file:524kB inactive_file:2496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:248kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1116kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1269.342848][T27233] Node 1 active_anon:2056kB inactive_anon:36716kB active_file:14876kB inactive_file:36772kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:115916kB dirty:1816kB writeback:0kB shmem:27028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9548kB pagetables:6428kB sec_pagetables:384kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1269.342875][T27233] Node 0 DMA free:2076kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.342905][T27233] lowmem_reserve[]: 0 278 278 278 278 [ 1269.342923][T27233] Node 0 DMA32 free:25532kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:32kB active_file:524kB inactive_file:2492kB unevictable:0kB writepending:16kB zspages:556kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.342952][T27233] lowmem_reserve[]: 0 0 0 0 0 [ 1269.342969][T27233] Node 1 DMA32 free:66584kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2056kB inactive_anon:36716kB active_file:14876kB inactive_file:36772kB unevictable:4000kB writepending:1816kB zspages:6248kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:6468kB local_pcp:1968kB free_cma:0kB [ 1269.343008][T27233] lowmem_reserve[]: 0 0 0 0 0 [ 1269.343030][T27233] Node 0 DMA: 29*4kB (UM) 3*8kB (UM) 3*16kB (UM) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 1269.343112][T27233] Node 0 DMA32: 320*4kB (UME) 284*8kB (UME) 100*16kB (UM) 194*32kB (UME) 64*64kB (UME) 15*128kB (UME) 12*256kB (UME) 8*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 25568kB [ 1269.343186][T27233] Node 1 DMA32: 172*4kB (U) 120*8kB (UM) 123*16kB (U) 160*32kB (U) 76*64kB (UME) 49*128kB (U) 72*256kB (UE) 39*512kB (UME) 6*1024kB (UM) 1*2048kB (U) 0*4096kB = 66464kB [ 1269.343262][T27233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.343271][T27233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1269.343279][T27233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1269.343288][T27233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1269.343301][T27233] 21547 total pagecache pages [ 1269.343306][T27233] 1125 pages in swap cache [ 1269.343310][T27233] Free swap = 91444kB [ 1269.343314][T27233] Total swap = 124996kB [ 1269.343319][T27233] 524155 pages RAM [ 1269.343323][T27233] 0 pages HighMem/MovableOnly [ 1269.343327][T27233] 212073 pages reserved [ 1269.343330][T27233] 0 pages cma reserved [ 1270.649097][ T5823] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1270.771522][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 1270.773919][ T43] audit: type=1326 audit(1787940790.593:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27260 comm="syz.6.6149" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x0 [ 1271.050660][T27266] fuse: Bad value for 'fd' [ 1271.118983][ T5992] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1271.269529][ T5992] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1271.270627][ T5992] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 1271.270652][ T5992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1271.272874][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.272889][ T5992] usb 5-1: Product: syz [ 1271.272898][ T5992] usb 5-1: Manufacturer: syz [ 1271.272906][ T5992] usb 5-1: SerialNumber: syz [ 1271.541016][T27269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.541409][T27269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.572223][ T5992] usb 5-1: Unsupported UAC3 BADD profile [ 1271.600759][ T5992] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1271.606526][ T5992] usb 5-1: USB disconnect, device number 48 [ 1271.617937][T23881] udevd[23881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1273.272908][T27306] 9p: Bad value for 'rfdno' [ 1275.895542][T27323] Set syz0 is full, maxelem 65536 reached [ 1279.667316][T27345] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6163'. [ 1279.667372][T27345] openvswitch: netlink: IPv4 frag type 110 is out of range max 2 [ 1279.994096][T27351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1280.014446][T27351] picdev_read: 4 callbacks suppressed [ 1280.014630][T27351] kvm: pic: non byte read [ 1280.015696][T27351] pic_ioport_write: 1 callbacks suppressed [ 1280.015707][T27351] kvm: pic: level sensitive irq not supported [ 1280.016118][T27351] kvm: pic: non byte read [ 1280.018216][T27351] kvm: pic: level sensitive irq not supported [ 1280.018611][T27351] kvm: pic: non byte read [ 1280.678779][ T5823] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 1281.038850][ T1354] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1281.148781][ T5823] usb 11-1: Using ep0 maxpacket: 8 [ 1281.151762][ T5823] usb 11-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1281.160791][ T5823] usb 11-1: config 0 has an invalid interface number: 186 but max is 0 [ 1281.160870][ T5823] usb 11-1: config 0 has no interface number 0 [ 1281.160950][ T5823] usb 11-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1281.160987][ T5823] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1281.161023][ T5823] usb 11-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1281.161060][ T5823] usb 11-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1281.161098][ T5823] usb 11-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1281.189488][ T1354] usb 13-1: Using ep0 maxpacket: 16 [ 1281.190130][ T1354] usb 13-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1281.191804][ T1354] usb 13-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.191840][ T1354] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.191861][ T1354] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.191878][ T1354] usb 13-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1281.191899][ T1354] usb 13-1: config 7 interface 0 has no altsetting 0 [ 1281.191924][ T1354] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.217346][ T5823] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.217385][ T5823] usb 11-1: Product: syz [ 1281.217442][ T5823] usb 11-1: Manufacturer: syz [ 1281.217464][ T5823] usb 11-1: SerialNumber: syz [ 1281.228451][ T5823] usb 11-1: config 0 descriptor?? [ 1281.419922][T27371] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1281.453606][ T5823] iowarrior 11-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1281.455358][T27371] kvm: pic: non byte read [ 1281.457567][T27371] kvm: pic: level sensitive irq not supported [ 1281.458040][T27371] kvm: pic: non byte read [ 1281.462608][T27371] kvm: pic: level sensitive irq not supported [ 1281.463396][T27371] kvm: pic: non byte read [ 1281.640908][T27358] FAULT_INJECTION: forcing a failure. [ 1281.640908][T27358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.640974][T27358] CPU: 1 UID: 0 PID: 27358 Comm: syz.6.6168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1281.641003][T27358] Tainted: [L]=SOFTLOCKUP [ 1281.641009][T27358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1281.641017][T27358] Call Trace: [ 1281.641022][T27358] [ 1281.641027][T27358] dump_stack_lvl+0x100/0x190 [ 1281.641047][T27358] should_fail_ex.cold+0x5/0xa [ 1281.641063][T27358] _copy_to_user+0x32/0xd0 [ 1281.641083][T27358] simple_read_from_buffer+0xcb/0x170 [ 1281.641098][T27358] proc_fail_nth_read+0x1af/0x230 [ 1281.641117][T27358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.641137][T27358] ? rw_verify_area+0xce/0x6d0 [ 1281.641154][T27358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1281.641173][T27358] vfs_read+0x1e4/0xb40 [ 1281.641191][T27358] ? lock_acquire+0x1d1/0x380 [ 1281.641207][T27358] ? __fget_files+0x34/0x3d0 [ 1281.641219][T27358] ? __pfx_vfs_read+0x10/0x10 [ 1281.641236][T27358] ? find_held_lock+0x2b/0x80 [ 1281.641248][T27358] ? __fget_files+0x215/0x3d0 [ 1281.641263][T27358] ? __fget_files+0x21f/0x3d0 [ 1281.641279][T27358] ksys_read+0x12a/0x250 [ 1281.641289][T27358] ? __pfx_ksys_read+0x10/0x10 [ 1281.641310][T27358] do_int80_emulation+0x166/0x650 [ 1281.641327][T27358] asm_int80_emulation+0x1a/0x20 [ 1281.641339][T27358] RIP: 0023:0xf71c75ab [ 1281.641350][T27358] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1281.641461][T27358] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1281.641474][T27358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 1281.641482][T27358] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.641489][T27358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1281.641496][T27358] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1281.641503][T27358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1281.641519][T27358] [ 1281.676703][ T5992] usb 11-1: USB disconnect, device number 43 [ 1281.688448][ T1354] hid (null): invalid report_size 1734701673 [ 1281.743082][ T1354] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:7.0/0003:0458:5010.00AE/input/input177 [ 1281.760901][ T1354] kye 0003:0458:5010.00AE: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1281.845492][T27377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1281.993848][T27377] kvm: pic: non byte read [ 1282.003489][T27377] kvm: pic: level sensitive irq not supported [ 1282.004268][T27377] kvm: pic: non byte read [ 1282.007285][T27377] kvm: pic: level sensitive irq not supported [ 1282.017538][T27377] kvm: pic: non byte read [ 1282.943483][T27387] libceph: resolve ' [ 1282.943483][T27387] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 1282.943483][T27387] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 1282.967056][T27379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1282.967115][T27379] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1283.033120][T27379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1283.033161][T27379] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1283.103179][T27379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1283.103257][T27379] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1283.721854][ T5823] usb 13-1: USB disconnect, device number 3 [ 1283.836164][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6181'. [ 1283.920625][T27382] warn_alloc: 2 callbacks suppressed [ 1283.920856][T27382] syz.0.6174: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1283.921290][T27382] CPU: 1 UID: 0 PID: 27382 Comm: syz.0.6174 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.921321][T27382] Tainted: [L]=SOFTLOCKUP [ 1283.921329][T27382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1283.921341][T27382] Call Trace: [ 1283.921350][T27382] [ 1283.921361][T27382] dump_stack_lvl+0x100/0x190 [ 1283.921394][T27382] warn_alloc.cold+0x9e/0xb2 [ 1283.921410][T27382] ? __pfx_warn_alloc+0x10/0x10 [ 1283.921435][T27382] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1283.921453][T27382] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1283.921479][T27382] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1283.921509][T27382] ? mt_validate_nulls+0x22f/0xae0 [ 1283.921527][T27382] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1283.921550][T27382] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1283.921573][T27382] ? __lock_acquire+0x4c5/0x1ec0 [ 1283.921597][T27382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1283.921615][T27382] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1283.921631][T27382] ? policy_nodemask+0xed/0x4f0 [ 1283.921650][T27382] alloc_pages_mpol+0x201/0x550 [ 1283.921669][T27382] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1283.921685][T27382] ? __lock_acquire+0x4c5/0x1ec0 [ 1283.921740][T27382] folio_alloc_mpol_noprof+0x36/0x260 [ 1283.921769][T27382] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1283.921798][T27382] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1283.921819][T27382] ? __pfx___might_resched+0x10/0x10 [ 1283.921837][T27382] ? bpf_ksym_find+0x124/0x1c0 [ 1283.921853][T27382] migrate_pages_batch+0x5c4/0x4680 [ 1283.921874][T27382] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1283.921901][T27382] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1283.921919][T27382] ? stack_trace_save+0x8e/0xc0 [ 1283.921941][T27382] ? kasan_save_stack+0x3f/0x50 [ 1283.921955][T27382] ? kasan_save_stack+0x30/0x50 [ 1283.921969][T27382] ? kasan_save_track+0x14/0x30 [ 1283.921983][T27382] ? __kasan_slab_alloc+0x89/0x90 [ 1283.921998][T27382] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1283.922012][T27382] ? __mpol_dup+0x74/0x390 [ 1283.922030][T27382] ? mbind_range+0x2ad/0x550 [ 1283.922049][T27382] ? do_mbind+0x7dc/0xfd0 [ 1283.922068][T27382] ? kernel_mbind+0x1b7/0x200 [ 1283.922090][T27382] migrate_pages_sync+0x12c/0x880 [ 1283.922110][T27382] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1283.922135][T27382] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1283.922161][T27382] migrate_pages+0x1a83/0x2850 [ 1283.922182][T27382] ? current_cpuset_is_being_rebound+0x24/0x370 [ 1283.922204][T27382] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1283.922229][T27382] ? __pfx_migrate_pages+0x10/0x10 [ 1283.922283][T27382] ? do_mbind+0x555/0xfd0 [ 1283.922326][T27382] do_mbind+0x5a4/0xfd0 [ 1283.922352][T27382] ? __pfx_do_mbind+0x10/0x10 [ 1283.922372][T27382] ? madvise_unlock+0xa9/0x220 [ 1283.922396][T27382] ? __pfx_get_nodes+0x10/0x10 [ 1283.922425][T27382] kernel_mbind+0x1b7/0x200 [ 1283.922461][T27382] ? __pfx_kernel_mbind+0x10/0x10 [ 1283.922501][T27382] __do_fast_syscall_32+0x13a/0x8b0 [ 1283.922527][T27382] ? lockdep_hardirqs_on+0x7d/0x110 [ 1283.922555][T27382] do_fast_syscall_32+0x32/0x70 [ 1283.922582][T27382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.922609][T27382] RIP: 0023:0xf7f66fec [ 1283.922634][T27382] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1283.922643][T27382] RSP: 002b:00000000f537450c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1283.922665][T27382] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1283.922682][T27382] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1283.922695][T27382] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1283.922708][T27382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1283.922721][T27382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.922748][T27382] [ 1283.922882][T27382] Mem-Info: [ 1283.922893][T27382] active_anon:48 inactive_anon:4699 isolated_anon:0 [ 1283.922893][T27382] active_file:4565 inactive_file:7638 isolated_file:0 [ 1283.922893][T27382] unevictable:1000 dirty:63 writeback:0 [ 1283.922893][T27382] slab_reclaimable:7459 slab_unreclaimable:84505 [ 1283.922893][T27382] mapped:26247 shmem:3875 pagetables:1873 [ 1283.922893][T27382] sec_pagetables:391 bounce:0 [ 1283.922893][T27382] kernel_misc_reclaimable:0 [ 1283.922893][T27382] free:14427 free_pcp:0 free_cma:0 [ 1283.922946][T27382] Node 0 active_anon:228kB inactive_anon:10828kB active_file:4904kB inactive_file:220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11304kB dirty:112kB writeback:0kB shmem:10952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1144kB sec_pagetables:1168kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1283.923003][T27382] Node 0 DMA free:1572kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:512kB inactive_file:0kB unevictable:0kB writepending:112kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.923061][T27382] lowmem_reserve[]: 0 278 278 278 278 [ 1283.923100][T27382] Node 0 DMA32 free:8560kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:228kB inactive_anon:10828kB active_file:4392kB inactive_file:220kB unevictable:0kB writepending:0kB zspages:1156kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.923159][T27382] lowmem_reserve[]: 0 0 0 0 0 [ 1283.923195][T27382] Node 0 DMA: 27*4kB (UM) 3*8kB (UM) 2*16kB (U) 8*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1572kB [ 1283.923345][T27382] Node 0 DMA32: 83*4kB (UME) 171*8kB (UME) 64*16kB (UM) 51*32kB (UME) 32*64kB (UME) 7*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8580kB [ 1283.923486][T27382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.923504][T27382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1283.923522][T27382] 17591 total pagecache pages [ 1283.923531][T27382] 1464 pages in swap cache [ 1283.923539][T27382] Free swap = 81364kB [ 1283.923548][T27382] Total swap = 124996kB [ 1283.923556][T27382] 524155 pages RAM [ 1283.923564][T27382] 0 pages HighMem/MovableOnly [ 1283.923571][T27382] 212073 pages reserved [ 1283.923579][T27382] 0 pages cma reserved [ 1284.798321][T27406] FAULT_INJECTION: forcing a failure. [ 1284.798321][T27406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1284.798371][T27406] CPU: 2 UID: 0 PID: 27406 Comm: syz.0.6184 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.798399][T27406] Tainted: [L]=SOFTLOCKUP [ 1284.798404][T27406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1284.798414][T27406] Call Trace: [ 1284.798420][T27406] [ 1284.798426][T27406] dump_stack_lvl+0x100/0x190 [ 1284.798452][T27406] should_fail_ex.cold+0x5/0xa [ 1284.798469][T27406] ? prepare_alloc_pages+0x16d/0x5b0 [ 1284.798485][T27406] should_fail_alloc_page+0xeb/0x140 [ 1284.798500][T27406] prepare_alloc_pages+0x1f0/0x5b0 [ 1284.798517][T27406] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1284.798536][T27406] ? arch_stack_walk+0xa6/0xf0 [ 1284.798552][T27406] ? __lock_acquire+0x4c5/0x1ec0 [ 1284.798568][T27406] ? stack_trace_save+0x8e/0xc0 [ 1284.798583][T27406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1284.798603][T27406] ? lock_acquire+0x1d1/0x380 [ 1284.798617][T27406] ? __update_page_owner_handle+0x63/0x530 [ 1284.798634][T27406] ? __lock_acquire+0x4c5/0x1ec0 [ 1284.798655][T27406] ? __lock_acquire+0x4c5/0x1ec0 [ 1284.798682][T27406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1284.798700][T27406] ? policy_nodemask+0xed/0x4f0 [ 1284.798716][T27406] alloc_pages_mpol+0x201/0x550 [ 1284.798731][T27406] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1284.798745][T27406] ? do_raw_spin_lock+0x128/0x260 [ 1284.798762][T27406] ? find_held_lock+0x2b/0x80 [ 1284.798773][T27406] ? swap_cache_alloc_folio+0x374/0xc50 [ 1284.798786][T27406] folio_alloc_mpol_noprof+0x36/0x260 [ 1284.798803][T27406] swap_cache_alloc_folio+0x3d7/0xc50 [ 1284.798817][T27406] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1284.798836][T27406] ? swap_cache_get_folio+0x28d/0x360 [ 1284.798854][T27406] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1284.798876][T27406] swap_cache_read_folio+0x47/0x140 [ 1284.798888][T27406] swap_cluster_readahead+0x477/0x5d0 [ 1284.798902][T27406] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1284.798914][T27406] ? kasan_save_stack+0x30/0x50 [ 1284.798928][T27406] ? swap_table_get+0x28/0x2c0 [ 1284.798951][T27406] swapin_readahead+0xf0/0x260 [ 1284.798963][T27406] ? __pfx_swapin_readahead+0x10/0x10 [ 1284.798973][T27406] ? __pfx_get_swap_device+0x10/0x10 [ 1284.798991][T27406] do_swap_page+0xf72/0x5580 [ 1284.799008][T27406] ? lockdep_hardirqs_on+0x7d/0x110 [ 1284.799025][T27406] ? __pfx_do_swap_page+0x10/0x10 [ 1284.799039][T27406] ? lock_acquire+0x1d1/0x380 [ 1284.799053][T27406] ? __pte_offset_map+0x2f/0x310 [ 1284.799069][T27406] ? rcu_is_watching+0x13/0xc0 [ 1284.799080][T27406] ? __pte_offset_map+0x179/0x310 [ 1284.799094][T27406] __handle_mm_fault+0x15bd/0x2f60 [ 1284.799112][T27406] ? __pfx___handle_mm_fault+0x10/0x10 [ 1284.799127][T27406] ? __pfx_mt_find+0x10/0x10 [ 1284.799149][T27406] ? find_vma+0xbf/0x140 [ 1284.799160][T27406] ? __pfx_find_vma+0x10/0x10 [ 1284.799172][T27406] handle_mm_fault+0x363/0xa20 [ 1284.799191][T27406] do_user_addr_fault+0x745/0x12f0 [ 1284.799207][T27406] exc_page_fault+0x6f/0xd0 [ 1284.799225][T27406] asm_exc_page_fault+0x26/0x30 [ 1284.799236][T27406] RIP: 0010:_copy_from_user+0x93/0xd0 [ 1284.799255][T27406] Code: 27 e4 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 89 44 56 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 f5 21 [ 1284.799266][T27406] RSP: 0018:ffffc9000314fb08 EFLAGS: 00050297 [ 1284.799276][T27406] RAX: 0000000000000001 RBX: 0000000080000040 RCX: 000000000000001c [ 1284.799283][T27406] RDX: 0000000000000001 RSI: 0000000080000040 RDI: ffffc9000314fb58 [ 1284.799290][T27406] RBP: 000000000000001c R08: 0000000000000001 R09: fffff52000629f6e [ 1284.799297][T27406] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1284.799303][T27406] R13: ffffc9000314fb58 R14: 1ffff92000629f67 R15: ffffc9000314fc30 [ 1284.799318][T27406] ? _copy_from_user+0x87/0xd0 [ 1284.799336][T27406] get_compat_msghdr+0xb3/0x480 [ 1284.799351][T27406] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1284.799370][T27406] ___sys_sendmsg+0x1b6/0x1e0 [ 1284.799387][T27406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.799408][T27406] ? find_held_lock+0x2b/0x80 [ 1284.799428][T27406] __sys_sendmsg+0x160/0x210 [ 1284.799441][T27406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1284.799456][T27406] ? __pfx_ksys_write+0x10/0x10 [ 1284.799469][T27406] __do_fast_syscall_32+0x13a/0x8b0 [ 1284.799483][T27406] ? lockdep_hardirqs_on+0x7d/0x110 [ 1284.799497][T27406] do_fast_syscall_32+0x32/0x70 [ 1284.799510][T27406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1284.799524][T27406] RIP: 0023:0xf7f66fec [ 1284.799537][T27406] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1284.799542][T27406] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1284.799552][T27406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1284.799559][T27406] RDX: 0000000004008030 RSI: 0000000000000000 RDI: 0000000000000000 [ 1284.799566][T27406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1284.799572][T27406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1284.799578][T27406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1284.799592][T27406] [ 1285.500548][T27417] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1285.500620][T27417] CPU: 2 UID: 0 PID: 27417 Comm: syz.0.6186 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.500650][T27417] Tainted: [L]=SOFTLOCKUP [ 1285.500656][T27417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1285.500664][T27417] Call Trace: [ 1285.500669][T27417] [ 1285.500675][T27417] dump_stack_lvl+0x100/0x190 [ 1285.500695][T27417] sysfs_warn_dup.cold+0x1c/0x28 [ 1285.500713][T27417] sysfs_create_dir_ns+0x24b/0x2b0 [ 1285.500727][T27417] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1285.500739][T27417] ? find_held_lock+0x2b/0x80 [ 1285.500751][T27417] ? kobject_add_internal+0x25f/0x930 [ 1285.500770][T27417] ? kobject_add_internal+0x25f/0x930 [ 1285.500788][T27417] ? class_dir_child_ns_type+0xd/0x60 [ 1285.500804][T27417] kobject_add_internal+0x2c8/0x930 [ 1285.500824][T27417] kobject_add+0x16a/0x1e0 [ 1285.500841][T27417] ? __pfx_kobject_add+0x10/0x10 [ 1285.500860][T27417] ? get_device_parent+0x1b3/0x4c0 [ 1285.500876][T27417] ? kobject_put+0xb9/0x640 [ 1285.500895][T27417] device_add+0x294/0x1970 [ 1285.500910][T27417] ? lockdep_init_map_type+0x5c/0x250 [ 1285.500925][T27417] ? __pfx_device_add+0x10/0x10 [ 1285.500938][T27417] ? lockdep_init_map_type+0x5c/0x250 [ 1285.500955][T27417] ? __init_waitqueue_head+0xca/0x150 [ 1285.500975][T27417] tty_register_device_attr+0x388/0x7f0 [ 1285.500988][T27417] ? lockdep_init_map_type+0x5c/0x250 [ 1285.501004][T27417] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1285.501020][T27417] ? tty_port_init+0x156/0x1c0 [ 1285.501042][T27417] gsm_activate_mux+0x155/0x2a0 [ 1285.501057][T27417] gsmld_ioctl+0xbbc/0x15c0 [ 1285.501078][T27417] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1285.501105][T27417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1285.501125][T27417] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1285.501140][T27417] tty_compat_ioctl+0x396/0x420 [ 1285.501153][T27417] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1285.501168][T27417] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1285.501187][T27417] __do_fast_syscall_32+0x13a/0x8b0 [ 1285.501204][T27417] do_fast_syscall_32+0x32/0x70 [ 1285.501220][T27417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.501235][T27417] RIP: 0023:0xf7f66fec [ 1285.501251][T27417] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1285.501256][T27417] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1285.501268][T27417] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000404c4701 [ 1285.501280][T27417] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.501291][T27417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.501302][T27417] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.501313][T27417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.501333][T27417] [ 1285.501390][T27417] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1285.698977][ T1354] usb 11-1: new full-speed USB device number 44 using dummy_hcd [ 1285.849408][ T1354] usb 11-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1285.850486][ T1354] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 1285.850560][ T1354] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1285.852273][ T1354] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.852287][ T1354] usb 11-1: Product: syz [ 1285.852295][ T1354] usb 11-1: Manufacturer: syz [ 1285.852302][ T1354] usb 11-1: SerialNumber: syz [ 1286.129763][T23881] udevd[23881]: setting mode of /dev/gsmtty4 to 020600 failed: No such file or directory [ 1286.129868][T23881] udevd[23881]: setting owner of /dev/gsmtty4 to uid=0, gid=0 failed: No such file or directory [ 1286.212899][T27421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.217017][T27421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.631906][T27408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.667882][ T1354] usb 11-1: Unsupported UAC3 BADD profile [ 1286.685014][ T1354] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1286.710144][ T1354] usb 11-1: USB disconnect, device number 44 [ 1286.735522][T27431] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1287.219477][T23881] udevd[23881]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1287.670502][T27430] file system registered [ 1288.701657][T27439] FAULT_INJECTION: forcing a failure. [ 1288.701657][T27439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.701736][T27439] CPU: 0 UID: 0 PID: 27439 Comm: syz.6.6195 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.701763][T27439] Tainted: [L]=SOFTLOCKUP [ 1288.701768][T27439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1288.701776][T27439] Call Trace: [ 1288.701780][T27439] [ 1288.701786][T27439] dump_stack_lvl+0x100/0x190 [ 1288.701804][T27439] should_fail_ex.cold+0x5/0xa [ 1288.701818][T27439] _copy_to_iter+0x5a4/0x1720 [ 1288.701839][T27439] ? __pfx__copy_to_iter+0x10/0x10 [ 1288.701858][T27439] ? begin_current_label_crit_section+0x21c/0x980 [ 1288.701879][T27439] simple_copy_to_iter+0x46/0x90 [ 1288.701896][T27439] __skb_datagram_iter+0x5c8/0x900 [ 1288.701911][T27439] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1288.701931][T27439] skb_copy_datagram_iter+0xa1/0x250 [ 1288.701949][T27439] tcp_recvmsg_locked+0x2221/0x2a30 [ 1288.701964][T27439] ? reacquire_held_locks+0xdd/0x1f0 [ 1288.701979][T27439] ? release_sock+0x21/0x280 [ 1288.701993][T27439] ? do_raw_spin_lock+0x128/0x260 [ 1288.702011][T27439] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1288.702028][T27439] ? __local_bh_enable_ip+0xa5/0x120 [ 1288.702047][T27439] tcp_recvmsg+0x141/0x630 [ 1288.702063][T27439] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1288.702081][T27439] ? copy_compat_iovec_from_user+0x13a/0x180 [ 1288.702101][T27439] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1288.702115][T27439] inet_recvmsg+0xd5/0x4c0 [ 1288.702131][T27439] ? __pfx_inet_recvmsg+0x10/0x10 [ 1288.702144][T27439] ____sys_recvmsg+0x5cd/0x670 [ 1288.702161][T27439] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1288.702180][T27439] ? rcu_is_watching+0x13/0xc0 [ 1288.702191][T27439] ? ___sys_recvmsg+0x177/0x1a0 [ 1288.702205][T27439] ? kfree+0x1e5/0x6d0 [ 1288.702224][T27439] ___sys_recvmsg+0x16a/0x1a0 [ 1288.702239][T27439] ? __pfx____sys_recvmsg+0x10/0x10 [ 1288.702255][T27439] ? lock_acquire+0x1d1/0x380 [ 1288.702276][T27439] ? __pfx___might_resched+0x10/0x10 [ 1288.702293][T27439] do_recvmmsg+0x54d/0x740 [ 1288.702310][T27439] ? __pfx_do_recvmmsg+0x10/0x10 [ 1288.702326][T27439] ? find_held_lock+0x2b/0x80 [ 1288.702337][T27439] ? ksys_write+0x190/0x250 [ 1288.702347][T27439] ? ksys_write+0x190/0x250 [ 1288.702363][T27439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1288.702385][T27439] __sys_recvmmsg+0x21f/0x270 [ 1288.702398][T27439] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1288.702411][T27439] ? ksys_write+0x1ac/0x250 [ 1288.702423][T27439] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1288.702439][T27439] ? __do_fast_syscall_32+0xb3/0x8b0 [ 1288.702452][T27439] ? lockdep_hardirqs_on+0x7d/0x110 [ 1288.702465][T27439] __do_fast_syscall_32+0x13a/0x8b0 [ 1288.702478][T27439] ? lockdep_hardirqs_on+0x7d/0x110 [ 1288.702491][T27439] do_fast_syscall_32+0x32/0x70 [ 1288.702505][T27439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1288.702520][T27439] RIP: 0023:0xf7fc5fec [ 1288.702533][T27439] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1288.702538][T27439] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1288.702550][T27439] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800031c0 [ 1288.702557][T27439] RDX: 0000000000000002 RSI: 0000000000000022 RDI: 0000000000000000 [ 1288.702564][T27439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1288.702570][T27439] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1288.702577][T27439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1288.702591][T27439] [ 1288.769504][ T1354] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1288.928875][ T1354] usb 5-1: Using ep0 maxpacket: 8 [ 1288.998755][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1289.067916][ T1354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1289.068000][ T1354] usb 5-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 1289.069655][ T1354] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1289.069720][ T1354] usb 5-1: can't read configurations, error -71 [ 1289.148954][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1289.149854][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1289.150969][ T9] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.151005][ T9] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.151025][ T9] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.151043][ T9] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1289.151063][ T9] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1289.151088][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.194205][ T9] hid (null): invalid report_size 1734701673 [ 1290.251399][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:7.0/0003:0458:5010.00AF/input/input178 [ 1290.258548][ T9] kye 0003:0458:5010.00AF: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 1290.491049][ T9] usb 10-1: USB disconnect, device number 13 [ 1291.891208][T27466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1292.117682][T27451] fido_id[27451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory [ 1292.396215][T27474] netlink: 'syz.5.6203': attribute type 1 has an invalid length. [ 1292.396260][T27474] netlink: 756 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1292.445059][T27475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6204'. [ 1292.445385][T27475] openvswitch: netlink: IPv4 frag type 110 is out of range max 2 [ 1294.356440][T27489] warn_alloc: 1 callbacks suppressed [ 1294.356490][T27489] syz.6.6208: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1294.356607][T27489] CPU: 2 UID: 0 PID: 27489 Comm: syz.6.6208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.356636][T27489] Tainted: [L]=SOFTLOCKUP [ 1294.356642][T27489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1294.356649][T27489] Call Trace: [ 1294.356654][T27489] [ 1294.356659][T27489] dump_stack_lvl+0x100/0x190 [ 1294.356679][T27489] warn_alloc.cold+0x9e/0xb2 [ 1294.356693][T27489] ? __pfx_warn_alloc+0x10/0x10 [ 1294.356715][T27489] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1294.356731][T27489] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1294.356755][T27489] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1294.356782][T27489] ? mt_validate_nulls+0x22f/0xae0 [ 1294.356797][T27489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1294.356818][T27489] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1294.356838][T27489] ? irqentry_exit+0x24d/0xa10 [ 1294.356851][T27489] ? lockdep_hardirqs_on+0x7d/0x110 [ 1294.356869][T27489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1294.356886][T27489] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1294.356900][T27489] ? policy_nodemask+0xed/0x4f0 [ 1294.356917][T27489] alloc_pages_mpol+0x201/0x550 [ 1294.356933][T27489] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1294.356948][T27489] ? __lock_acquire+0x4c5/0x1ec0 [ 1294.356968][T27489] folio_alloc_mpol_noprof+0x36/0x260 [ 1294.356986][T27489] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1294.357006][T27489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1294.357025][T27489] ? __pfx___might_resched+0x10/0x10 [ 1294.357040][T27489] ? bpf_ksym_find+0x124/0x1c0 [ 1294.357055][T27489] migrate_pages_batch+0x5c4/0x4680 [ 1294.357073][T27489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1294.357097][T27489] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1294.357113][T27489] ? stack_trace_save+0x8e/0xc0 [ 1294.357145][T27489] ? kasan_save_stack+0x3f/0x50 [ 1294.357158][T27489] ? kasan_save_stack+0x30/0x50 [ 1294.357170][T27489] ? kasan_save_track+0x14/0x30 [ 1294.357182][T27489] ? __kasan_slab_alloc+0x89/0x90 [ 1294.357196][T27489] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1294.357208][T27489] ? __mpol_dup+0x74/0x390 [ 1294.357224][T27489] ? mbind_range+0x2ad/0x550 [ 1294.357240][T27489] ? do_mbind+0x7dc/0xfd0 [ 1294.357256][T27489] ? kernel_mbind+0x1b7/0x200 [ 1294.357275][T27489] migrate_pages_sync+0x12c/0x880 [ 1294.357292][T27489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1294.357315][T27489] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1294.357338][T27489] migrate_pages+0x1a83/0x2850 [ 1294.357356][T27489] ? current_cpuset_is_being_rebound+0x24/0x370 [ 1294.357380][T27489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1294.357402][T27489] ? __pfx_migrate_pages+0x10/0x10 [ 1294.357421][T27489] ? do_mbind+0x555/0xfd0 [ 1294.357444][T27489] do_mbind+0x5a4/0xfd0 [ 1294.357465][T27489] ? __pfx_do_mbind+0x10/0x10 [ 1294.357483][T27489] ? madvise_unlock+0xa9/0x220 [ 1294.357505][T27489] ? __pfx_get_nodes+0x10/0x10 [ 1294.357523][T27489] kernel_mbind+0x1b7/0x200 [ 1294.357542][T27489] ? __pfx_kernel_mbind+0x10/0x10 [ 1294.357565][T27489] __do_fast_syscall_32+0x13a/0x8b0 [ 1294.357580][T27489] ? lockdep_hardirqs_on+0x7d/0x110 [ 1294.357595][T27489] do_fast_syscall_32+0x32/0x70 [ 1294.357610][T27489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1294.357626][T27489] RIP: 0023:0xf7fc5fec [ 1294.357660][T27489] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 1294.357668][T27489] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1294.357680][T27489] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1294.357688][T27489] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1294.357696][T27489] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1294.357704][T27489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1294.357711][T27489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1294.357726][T27489] [ 1294.357782][T27489] Mem-Info: [ 1294.357801][T27489] active_anon:3538 inactive_anon:1685 isolated_anon:0 [ 1294.357801][T27489] active_file:6015 inactive_file:2460 isolated_file:0 [ 1294.357801][T27489] unevictable:1000 dirty:18 writeback:0 [ 1294.357801][T27489] slab_reclaimable:7448 slab_unreclaimable:85267 [ 1294.357801][T27489] mapped:25512 shmem:3862 pagetables:1851 [ 1294.357801][T27489] sec_pagetables:395 bounce:0 [ 1294.357801][T27489] kernel_misc_reclaimable:0 [ 1294.357801][T27489] free:16682 free_pcp:0 free_cma:0 [ 1294.357844][T27489] Node 0 active_anon:11496kB inactive_anon:12kB active_file:112kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11596kB dirty:4kB writeback:0kB shmem:11440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1116kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1294.357889][T27489] Node 0 DMA free:2048kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.357950][T27489] lowmem_reserve[]: 0 278 278 278 278 [ 1294.358069][T27489] Node 0 DMA32 free:9256kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11488kB inactive_anon:12kB active_file:112kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:1016kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.358131][T27489] lowmem_reserve[]: 0 0 0 0 0 [ 1294.358251][T27489] Node 0 DMA: 25*4kB (UE) 4*8kB (UE) 2*16kB (U) 9*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2052kB [ 1294.358636][T27489] Node 0 DMA32: 123*4kB (UME) 114*8kB (UE) 17*16kB (UM) 19*32kB (UME) 8*64kB (UME) 4*128kB (UME) 5*256kB (ME) 7*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 9196kB [ 1294.359424][T27489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.359449][T27489] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1294.359473][T27489] 13859 total pagecache pages [ 1294.359492][T27489] 1477 pages in swap cache [ 1294.359511][T27489] Free swap = 81312kB [ 1294.359530][T27489] Total swap = 124996kB [ 1294.359550][T27489] 524155 pages RAM [ 1294.359568][T27489] 0 pages HighMem/MovableOnly [ 1294.359587][T27489] 212073 pages reserved [ 1294.359606][T27489] 0 pages cma reserved [ 1294.506796][ T6299] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1294.659379][ T6299] usb 5-1: Using ep0 maxpacket: 8 [ 1294.772608][ T6299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1294.772676][ T6299] usb 5-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 1294.774214][ T6299] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1294.774246][ T6299] usb 5-1: can't read configurations, error -71 [ 1295.107395][T27502] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input179 [ 1295.181154][T27502] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 1295.332126][T27502] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 1295.332642][T27502] tcpci 0-0022: probe with driver tcpci failed with error -16 [ 1295.332996][T27502] i2c i2c-0: new_device: Instantiated device tcpci at 0x22 [ 1295.354632][ T5992] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 1295.608949][ T5992] usb 13-1: Using ep0 maxpacket: 16 [ 1295.611245][ T5992] usb 13-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1295.615039][ T5992] usb 13-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.615706][ T5992] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.615841][ T5992] usb 13-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.616171][ T5992] usb 13-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1295.616221][ T5992] usb 13-1: config 7 interface 0 has no altsetting 0 [ 1295.616266][ T5992] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.645237][T27513] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1296.375697][ T5992] hid (null): invalid report_size 1734701673 [ 1296.483849][ T5992] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:7.0/0003:0458:5010.00B0/input/input180 [ 1296.658450][ T5992] kye 0003:0458:5010.00B0: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 1296.669389][ T5992] usb 13-1: USB disconnect, device number 4 [ 1296.964381][T27523] fido_id[27523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb13/report_descriptor': No such file or directory [ 1300.106357][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.106433][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.334092][T27551] misc userio: Invalid payload size [ 1300.334955][T27551] misc userio: Invalid payload size [ 1300.688879][ T1354] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1300.839852][ T1354] usb 5-1: Using ep0 maxpacket: 16 [ 1300.843417][ T1354] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1300.852904][ T1354] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.857365][ T1354] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.863548][ T1354] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.869672][ T1354] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1300.869728][ T1354] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1300.869778][ T1354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.015431][T27550] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.295824][ T1354] hid (null): invalid report_size 1734701673 [ 1301.308963][ T1354] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:7.0/0003:0458:5010.00B1/input/input183 [ 1301.383572][ T1354] kye 0003:0458:5010.00B1: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 1301.572086][T27550] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.775119][T27564] CacheFiles: Empty directory specified [ 1301.776392][T27550] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.821381][ T9] usb 5-1: USB disconnect, device number 53 [ 1301.979208][T27550] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.103820][T27562] fido_id[27562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 1302.403954][T27580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1304.259543][ T9959] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.259751][ T9960] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.259801][ T9960] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.305137][T22676] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.352408][T27612] FAULT_INJECTION: forcing a failure. [ 1308.352408][T27612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.356876][T27612] CPU: 2 UID: 0 PID: 27612 Comm: syz.0.6240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.356907][T27612] Tainted: [L]=SOFTLOCKUP [ 1308.356913][T27612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1308.356920][T27612] Call Trace: [ 1308.356925][T27612] [ 1308.356930][T27612] dump_stack_lvl+0x100/0x190 [ 1308.356949][T27612] should_fail_ex.cold+0x5/0xa [ 1308.356964][T27612] _copy_to_user+0x32/0xd0 [ 1308.356984][T27612] simple_read_from_buffer+0xcb/0x170 [ 1308.356997][T27612] proc_fail_nth_read+0x1af/0x230 [ 1308.357016][T27612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.357035][T27612] ? rw_verify_area+0xce/0x6d0 [ 1308.357051][T27612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.357069][T27612] vfs_read+0x1e4/0xb40 [ 1308.357087][T27612] ? lock_acquire+0x1d1/0x380 [ 1308.357101][T27612] ? __fget_files+0x34/0x3d0 [ 1308.357118][T27612] ? __pfx_vfs_read+0x10/0x10 [ 1308.357134][T27612] ? find_held_lock+0x2b/0x80 [ 1308.357145][T27612] ? __fget_files+0x215/0x3d0 [ 1308.357159][T27612] ? __fget_files+0x21f/0x3d0 [ 1308.357174][T27612] ksys_read+0x12a/0x250 [ 1308.357184][T27612] ? __pfx_ksys_read+0x10/0x10 [ 1308.357199][T27612] do_int80_emulation+0x166/0x650 [ 1308.357215][T27612] asm_int80_emulation+0x1a/0x20 [ 1308.357228][T27612] RIP: 0023:0xf71675ab [ 1308.357238][T27612] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1308.357249][T27612] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1308.357261][T27612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54265d0 [ 1308.357268][T27612] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.357275][T27612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.357282][T27612] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1308.357288][T27612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.357302][T27612] [ 1310.928881][ T9] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 1310.937545][T27646] syz.0.6248: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1310.937789][T27646] CPU: 2 UID: 0 PID: 27646 Comm: syz.0.6248 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.937821][T27646] Tainted: [L]=SOFTLOCKUP [ 1310.937828][T27646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1310.937837][T27646] Call Trace: [ 1310.937842][T27646] [ 1310.937848][T27646] dump_stack_lvl+0x100/0x190 [ 1310.937870][T27646] warn_alloc.cold+0x9e/0xb2 [ 1310.937886][T27646] ? __pfx_warn_alloc+0x10/0x10 [ 1310.937911][T27646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1310.937929][T27646] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1310.937954][T27646] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1310.937984][T27646] ? mt_validate_nulls+0x22f/0xae0 [ 1310.938001][T27646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1310.938024][T27646] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1310.938047][T27646] ? __lock_acquire+0x4c5/0x1ec0 [ 1310.938070][T27646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1310.938088][T27646] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1310.938104][T27646] ? policy_nodemask+0xed/0x4f0 [ 1310.938123][T27646] alloc_pages_mpol+0x201/0x550 [ 1310.938140][T27646] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1310.938157][T27646] ? __lock_acquire+0x4c5/0x1ec0 [ 1310.938178][T27646] folio_alloc_mpol_noprof+0x36/0x260 [ 1310.938199][T27646] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1310.938224][T27646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1310.938245][T27646] ? __pfx___might_resched+0x10/0x10 [ 1310.938262][T27646] ? bpf_ksym_find+0x124/0x1c0 [ 1310.938278][T27646] migrate_pages_batch+0x5c4/0x4680 [ 1310.938298][T27646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1310.938324][T27646] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1310.938342][T27646] ? stack_trace_save+0x8e/0xc0 [ 1310.938363][T27646] ? kasan_save_stack+0x3f/0x50 [ 1310.938377][T27646] ? kasan_save_stack+0x30/0x50 [ 1310.938390][T27646] ? kasan_save_track+0x14/0x30 [ 1310.938404][T27646] ? __kasan_slab_alloc+0x89/0x90 [ 1310.938418][T27646] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1310.938432][T27646] ? __mpol_dup+0x74/0x390 [ 1310.938449][T27646] ? mbind_range+0x2ad/0x550 [ 1310.938467][T27646] ? do_mbind+0x7dc/0xfd0 [ 1310.938485][T27646] ? kernel_mbind+0x1b7/0x200 [ 1310.938504][T27646] migrate_pages_sync+0x12c/0x880 [ 1310.938521][T27646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1310.938542][T27646] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1310.938565][T27646] migrate_pages+0x1a83/0x2850 [ 1310.938583][T27646] ? current_cpuset_is_being_rebound+0x24/0x370 [ 1310.938602][T27646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1310.938624][T27646] ? __pfx_migrate_pages+0x10/0x10 [ 1310.938643][T27646] ? do_mbind+0x555/0xfd0 [ 1310.938677][T27646] do_mbind+0x5a4/0xfd0 [ 1310.938700][T27646] ? __pfx_do_mbind+0x10/0x10 [ 1310.938722][T27646] ? madvise_unlock+0xa9/0x220 [ 1310.938743][T27646] ? __pfx_get_nodes+0x10/0x10 [ 1310.938760][T27646] kernel_mbind+0x1b7/0x200 [ 1310.938779][T27646] ? __pfx_kernel_mbind+0x10/0x10 [ 1310.938800][T27646] __do_fast_syscall_32+0x13a/0x8b0 [ 1310.938817][T27646] do_fast_syscall_32+0x32/0x70 [ 1310.938831][T27646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1310.938846][T27646] RIP: 0023:0xf7f66fec [ 1310.938861][T27646] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1310.938867][T27646] RSP: 002b:00000000f537450c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1310.938879][T27646] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1310.938886][T27646] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1310.938893][T27646] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1310.938900][T27646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1310.938907][T27646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1310.938922][T27646] [ 1310.939118][T27646] Mem-Info: [ 1310.939138][T27646] active_anon:2805 inactive_anon:1733 isolated_anon:5 [ 1310.939138][T27646] active_file:2752 inactive_file:6243 isolated_file:0 [ 1310.939138][T27646] unevictable:1000 dirty:22 writeback:0 [ 1310.939138][T27646] slab_reclaimable:7451 slab_unreclaimable:84742 [ 1310.939138][T27646] mapped:25677 shmem:3820 pagetables:1649 [ 1310.939138][T27646] sec_pagetables:395 bounce:0 [ 1310.939138][T27646] kernel_misc_reclaimable:0 [ 1310.939138][T27646] free:17430 free_pcp:0 free_cma:0 [ 1310.939178][T27646] Node 0 active_anon:11112kB inactive_anon:144kB active_file:172kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11428kB dirty:4kB writeback:0kB shmem:11272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1140kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1310.939223][T27646] Node 0 DMA free:2060kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.939280][T27646] lowmem_reserve[]: 0 278 278 278 278 [ 1310.939393][T27646] Node 0 DMA32 free:12096kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11104kB inactive_anon:144kB active_file:172kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:688kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.939451][T27646] lowmem_reserve[]: 0 0 0 0 0 [ 1310.939564][T27646] Node 0 DMA: 27*4kB (UM) 4*8kB (UM) 2*16kB (U) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2060kB [ 1310.939965][T27646] Node 0 DMA32: 107*4kB (UME) 124*8kB (UME) 47*16kB (UM) 53*32kB (UME) 9*64kB (UME) 6*128kB (UME) 7*256kB (UME) 8*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 12124kB [ 1310.940047][T27646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.940057][T27646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1310.940066][T27646] 14032 total pagecache pages [ 1310.940070][T27646] 1224 pages in swap cache [ 1310.940074][T27646] Free swap = 88476kB [ 1310.940078][T27646] Total swap = 124996kB [ 1310.940083][T27646] 524155 pages RAM [ 1310.940087][T27646] 0 pages HighMem/MovableOnly [ 1310.940091][T27646] 212073 pages reserved [ 1310.940095][T27646] 0 pages cma reserved [ 1311.328766][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 1311.472107][ T9] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1311.472182][ T9] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 1311.473067][ T9] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 1311.473112][ T9] usb 11-1: can't read configurations, error -71 [ 1312.510967][T19133] svc: failed to register nfsdv3 RPC service (errno 111). [ 1312.517601][T19133] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1312.517681][T19133] failed to unregister udp with rpcbind [ 1312.517824][T19133] svc: failed to register nfsdv3 RPC service (errno 97). [ 1312.517854][T19133] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1312.517882][T19133] failed to unregister udp with rpcbind [ 1312.654447][T27682] netlink: 'syz.8.6260': attribute type 1 has an invalid length. [ 1312.654504][T27682] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6260'. [ 1312.654549][T27682] netlink: 41 bytes leftover after parsing attributes in process `syz.8.6260'. [ 1312.663750][T27682] netlink: 'syz.8.6260': attribute type 3 has an invalid length. [ 1312.663772][T27682] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6260'. [ 1315.739885][T27720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1315.862301][T27724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 1316.371371][T19133] svc: failed to register nfsdv3 RPC service (errno 111). [ 1316.383712][T19133] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1316.390297][T19133] failed to unregister udp with rpcbind [ 1316.392449][T19133] svc: failed to register nfsdv3 RPC service (errno 97). [ 1316.395604][T19133] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1316.398788][T19133] failed to unregister udp with rpcbind [ 1316.436660][T26785] svc: failed to register nfsdv3 RPC service (errno 111). [ 1316.437516][T26785] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1316.437535][T26785] failed to unregister udp with rpcbind [ 1316.437711][T26785] svc: failed to register nfsdv3 RPC service (errno 97). [ 1316.437728][T26785] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1316.437741][T26785] failed to unregister udp with rpcbind [ 1317.631288][T11473] input: syz0 as /devices/virtual/misc/uhid/0007:0001:0002.00B2/input/input184 [ 1317.647171][T11473] hid-generic 0007:0001:0002.00B2: input,hidraw0: HID v0.01 Mouse [syz0] on syz0 [ 1317.792385][T27761] netlink: 'syz.8.6280': attribute type 1 has an invalid length. [ 1317.795799][T27761] netlink: 756 bytes leftover after parsing attributes in process `syz.8.6280'. [ 1318.977306][T27790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6286'. [ 1319.005472][T27789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1321.092009][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1322.304352][T27803] warning: `syz.8.6289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1322.936855][T27813] FAULT_INJECTION: forcing a failure. [ 1322.936855][T27813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.936914][T27813] CPU: 1 UID: 0 PID: 27813 Comm: syz.5.6292 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.936942][T27813] Tainted: [L]=SOFTLOCKUP [ 1322.936948][T27813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1322.936955][T27813] Call Trace: [ 1322.936960][T27813] [ 1322.936965][T27813] dump_stack_lvl+0x100/0x190 [ 1322.936984][T27813] should_fail_ex.cold+0x5/0xa [ 1322.937000][T27813] _copy_to_user+0x32/0xd0 [ 1322.937019][T27813] simple_read_from_buffer+0xcb/0x170 [ 1322.937033][T27813] proc_fail_nth_read+0x1af/0x230 [ 1322.937052][T27813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1322.937070][T27813] ? rw_verify_area+0xce/0x6d0 [ 1322.937087][T27813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1322.937105][T27813] vfs_read+0x1e4/0xb40 [ 1322.937122][T27813] ? lock_acquire+0x1d1/0x380 [ 1322.937137][T27813] ? __fget_files+0x34/0x3d0 [ 1322.937148][T27813] ? __pfx_vfs_read+0x10/0x10 [ 1322.937164][T27813] ? find_held_lock+0x2b/0x80 [ 1322.937176][T27813] ? __fget_files+0x215/0x3d0 [ 1322.937190][T27813] ? __fget_files+0x21f/0x3d0 [ 1322.937205][T27813] ksys_read+0x12a/0x250 [ 1322.937215][T27813] ? __pfx_ksys_read+0x10/0x10 [ 1322.937229][T27813] do_int80_emulation+0x166/0x650 [ 1322.937246][T27813] asm_int80_emulation+0x1a/0x20 [ 1322.937265][T27813] RIP: 0023:0xf71975ab [ 1322.937274][T27813] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1322.937285][T27813] RSP: 002b:00000000f542c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1322.937296][T27813] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542c5d0 [ 1322.937303][T27813] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1322.937310][T27813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1322.937317][T27813] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1322.937323][T27813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.937337][T27813] [ 1323.027516][T27815] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1323.028178][T27815] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6293'. [ 1323.225169][T27818] binder: 27817:27818 ioctl c0306201 0 returned -14 [ 1324.948987][ T5823] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 1325.098911][ T5823] usb 11-1: Using ep0 maxpacket: 8 [ 1325.214141][T27837] overlayfs: overlapping lowerdir path [ 1325.234505][ T5823] usb 11-1: unable to get BOS descriptor or descriptor too short [ 1325.234592][ T5823] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 1325.235413][ T5823] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 1325.235438][ T5823] usb 11-1: can't read configurations, error -71 [ 1325.310276][T27851] kvm: user requested TSC rate below hardware speed [ 1325.318839][T27851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1325.587968][T27856] warn_alloc: 5 callbacks suppressed [ 1325.588035][T27856] syz.8.6307: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1325.588151][T27856] CPU: 1 UID: 0 PID: 27856 Comm: syz.8.6307 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.588179][T27856] Tainted: [L]=SOFTLOCKUP [ 1325.588185][T27856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1325.588192][T27856] Call Trace: [ 1325.588197][T27856] [ 1325.588202][T27856] dump_stack_lvl+0x100/0x190 [ 1325.588223][T27856] warn_alloc.cold+0x9e/0xb2 [ 1325.588244][T27856] ? __pfx_warn_alloc+0x10/0x10 [ 1325.588276][T27856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1325.588294][T27856] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1325.588317][T27856] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 1325.588343][T27856] ? mt_validate_nulls+0x22f/0xae0 [ 1325.588358][T27856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1325.588379][T27856] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1325.588398][T27856] ? __lock_acquire+0x4c5/0x1ec0 [ 1325.588419][T27856] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1325.588435][T27856] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1325.588449][T27856] ? policy_nodemask+0xed/0x4f0 [ 1325.588465][T27856] alloc_pages_mpol+0x201/0x550 [ 1325.588480][T27856] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1325.588495][T27856] ? __lock_acquire+0x4c5/0x1ec0 [ 1325.588513][T27856] folio_alloc_mpol_noprof+0x36/0x260 [ 1325.588534][T27856] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1325.588553][T27856] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1325.588572][T27856] ? __pfx___might_resched+0x10/0x10 [ 1325.588586][T27856] ? bpf_ksym_find+0x124/0x1c0 [ 1325.588600][T27856] migrate_pages_batch+0x5c4/0x4680 [ 1325.588618][T27856] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1325.588641][T27856] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1325.588657][T27856] ? stack_trace_save+0x8e/0xc0 [ 1325.588691][T27856] ? kasan_save_stack+0x3f/0x50 [ 1325.588703][T27856] ? kasan_save_stack+0x30/0x50 [ 1325.588715][T27856] ? kasan_save_track+0x14/0x30 [ 1325.588727][T27856] ? __kasan_slab_alloc+0x89/0x90 [ 1325.588740][T27856] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1325.588752][T27856] ? __mpol_dup+0x74/0x390 [ 1325.588767][T27856] ? mbind_range+0x2ad/0x550 [ 1325.588783][T27856] ? do_mbind+0x7dc/0xfd0 [ 1325.588799][T27856] ? kernel_mbind+0x1b7/0x200 [ 1325.588818][T27856] migrate_pages_sync+0x12c/0x880 [ 1325.588835][T27856] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1325.588856][T27856] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1325.588879][T27856] migrate_pages+0x1a83/0x2850 [ 1325.588897][T27856] ? current_cpuset_is_being_rebound+0x24/0x370 [ 1325.588916][T27856] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1325.588938][T27856] ? __pfx_migrate_pages+0x10/0x10 [ 1325.588957][T27856] ? do_mbind+0x555/0xfd0 [ 1325.588979][T27856] do_mbind+0x5a4/0xfd0 [ 1325.589000][T27856] ? __pfx_do_mbind+0x10/0x10 [ 1325.589017][T27856] ? madvise_unlock+0xa9/0x220 [ 1325.589047][T27856] ? __pfx_get_nodes+0x10/0x10 [ 1325.589064][T27856] kernel_mbind+0x1b7/0x200 [ 1325.589083][T27856] ? __pfx_kernel_mbind+0x10/0x10 [ 1325.589104][T27856] __do_fast_syscall_32+0x13a/0x8b0 [ 1325.589121][T27856] do_fast_syscall_32+0x32/0x70 [ 1325.589135][T27856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1325.589150][T27856] RIP: 0023:0xf700efec [ 1325.589165][T27856] Code: Unable to access opcode bytes at 0xf700efc2. [ 1325.589171][T27856] RSP: 002b:00000000f534b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 1325.589182][T27856] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 1325.589190][T27856] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 1325.589197][T27856] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1325.589204][T27856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1325.589211][T27856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1325.589226][T27856] [ 1325.592226][T27856] Mem-Info: [ 1325.592235][T27856] active_anon:842 inactive_anon:999 isolated_anon:0 [ 1325.592235][T27856] active_file:5015 inactive_file:3258 isolated_file:2 [ 1325.592235][T27856] unevictable:1000 dirty:170 writeback:1 [ 1325.592235][T27856] slab_reclaimable:7470 slab_unreclaimable:84298 [ 1325.592235][T27856] mapped:22644 shmem:1046 pagetables:1702 [ 1325.592235][T27856] sec_pagetables:395 bounce:0 [ 1325.592235][T27856] kernel_misc_reclaimable:0 [ 1325.592235][T27856] free:21171 free_pcp:80 free_cma:0 [ 1325.592263][T27856] Node 0 active_anon:80kB inactive_anon:96kB active_file:112kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:92kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1156kB sec_pagetables:1184kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1325.592292][T27856] Node 0 DMA free:2056kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1325.592322][T27856] lowmem_reserve[]: 0 278 278 278 278 [ 1325.592342][T27856] Node 0 DMA32 free:20524kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32kB inactive_anon:96kB active_file:112kB inactive_file:32kB unevictable:0kB writepending:0kB zspages:672kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:0kB free_cma:0kB [ 1325.592378][T27856] lowmem_reserve[]: 0 0 0 0 0 [ 1325.592406][T27856] Node 0 DMA: 28*4kB (UM) 4*8kB (UM) 2*16kB (U) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2064kB [ 1325.592490][T27856] Node 0 DMA32: 139*4kB (UME) 226*8kB (UME) 77*16kB (UM) 98*32kB (ME) 56*64kB (UME) 15*128kB (ME) 12*256kB (ME) 8*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 20428kB [ 1325.592588][T27856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1325.592598][T27856] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1325.592607][T27856] 10742 total pagecache pages [ 1325.592611][T27856] 1357 pages in swap cache [ 1325.592615][T27856] Free swap = 87736kB [ 1325.592619][T27856] Total swap = 124996kB [ 1325.592624][T27856] 524155 pages RAM [ 1325.592628][T27856] 0 pages HighMem/MovableOnly [ 1325.592632][T27856] 212073 pages reserved [ 1325.592635][T27856] 0 pages cma reserved [ 1326.022292][T27865] FAULT_INJECTION: forcing a failure. [ 1326.022292][T27865] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.022353][T27865] CPU: 1 UID: 0 PID: 27865 Comm: syz.0.6311 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.022381][T27865] Tainted: [L]=SOFTLOCKUP [ 1326.022387][T27865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1326.022393][T27865] Call Trace: [ 1326.022398][T27865] [ 1326.022403][T27865] dump_stack_lvl+0x100/0x190 [ 1326.022421][T27865] should_fail_ex.cold+0x5/0xa [ 1326.022436][T27865] should_failslab+0xc2/0x120 [ 1326.022450][T27865] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1326.022462][T27865] ? __alloc_skb+0x5b7/0x710 [ 1326.022473][T27865] ? __alloc_skb+0x140/0x710 [ 1326.022486][T27865] __alloc_skb+0x140/0x710 [ 1326.022496][T27865] ? __alloc_skb+0x5b7/0x710 [ 1326.022506][T27865] ? __pfx___alloc_skb+0x10/0x10 [ 1326.022521][T27865] netlink_alloc_large_skb+0x69/0x150 [ 1326.022540][T27865] netlink_sendmsg+0x680/0xda0 [ 1326.022559][T27865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.022583][T27865] ? apparmor_socket_sendmsg+0x165/0x280 [ 1326.022598][T27865] ____sys_sendmsg+0xa4d/0xbe0 [ 1326.022612][T27865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.022630][T27865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1326.022650][T27865] ___sys_sendmsg+0x190/0x1e0 [ 1326.022668][T27865] ? __pfx____sys_sendmsg+0x10/0x10 [ 1326.022689][T27865] ? find_held_lock+0x2b/0x80 [ 1326.022710][T27865] __sys_sendmsg+0x160/0x210 [ 1326.022722][T27865] ? __pfx___sys_sendmsg+0x10/0x10 [ 1326.022738][T27865] ? __pfx_ksys_write+0x10/0x10 [ 1326.022752][T27865] __do_fast_syscall_32+0x13a/0x8b0 [ 1326.022767][T27865] ? lockdep_hardirqs_on+0x7d/0x110 [ 1326.022781][T27865] do_fast_syscall_32+0x32/0x70 [ 1326.022795][T27865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.022809][T27865] RIP: 0023:0xf7f66fec [ 1326.022823][T27865] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 1326.022828][T27865] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1326.022840][T27865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1326.022847][T27865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1326.022853][T27865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1326.022860][T27865] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1326.022867][T27865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1326.022880][T27865] [ 1326.250860][T27868] use of bytesused == 0 is deprecated and will be removed in the future, [ 1326.250922][T27868] use the actual size instead. [ 1326.459448][T27875] bridge_slave_0: left allmulticast mode [ 1326.459491][T27875] bridge_slave_0: left promiscuous mode [ 1326.459619][T27875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.469635][T27875] bridge_slave_1: left allmulticast mode [ 1326.469688][T27875] bridge_slave_1: left promiscuous mode [ 1326.469840][T27875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.489295][T27875] bond0: (slave bond_slave_0): Releasing backup interface [ 1326.499513][T27875] bond0: (slave bond_slave_1): Releasing backup interface [ 1326.511708][T27875] team0: Port device team_slave_0 removed [ 1326.532851][T27875] team0: Port device team_slave_1 removed [ 1326.534365][T27875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.534379][T27875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.543372][T27875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.543444][T27875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.552337][T27875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1326.601464][T27878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1326.624227][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6314'. [ 1326.624281][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6314'. [ 1326.782370][T27875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.788876][T27875] bond2: (slave bond0): Enslaving as an active interface with a down link [ 1328.632308][T27905] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1329.199559][T27916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1329.420130][T27924] FAULT_INJECTION: forcing a failure. [ 1329.420130][T27924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.420196][T27924] CPU: 0 UID: 0 PID: 27924 Comm: syz.5.6328 Tainted: G L syzkaller #0 PREEMPT(full) [ 1329.420224][T27924] Tainted: [L]=SOFTLOCKUP [ 1329.420230][T27924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1329.420237][T27924] Call Trace: [ 1329.420242][T27924] [ 1329.420247][T27924] dump_stack_lvl+0x100/0x190 [ 1329.420266][T27924] should_fail_ex.cold+0x5/0xa [ 1329.420280][T27924] _copy_to_user+0x32/0xd0 [ 1329.420299][T27924] simple_read_from_buffer+0xcb/0x170 [ 1329.420313][T27924] proc_fail_nth_read+0x1af/0x230 [ 1329.420331][T27924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1329.420350][T27924] ? rw_verify_area+0xce/0x6d0 [ 1329.420366][T27924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1329.420384][T27924] vfs_read+0x1e4/0xb40 [ 1329.420403][T27924] ? lock_acquire+0x1d1/0x380 [ 1329.420417][T27924] ? __fget_files+0x34/0x3d0 [ 1329.420429][T27924] ? __pfx_vfs_read+0x10/0x10 [ 1329.420445][T27924] ? find_held_lock+0x2b/0x80 [ 1329.420456][T27924] ? __fget_files+0x215/0x3d0 [ 1329.420470][T27924] ? __fget_files+0x21f/0x3d0 [ 1329.420485][T27924] ksys_read+0x12a/0x250 [ 1329.420495][T27924] ? __pfx_ksys_read+0x10/0x10 [ 1329.420509][T27924] do_int80_emulation+0x166/0x650 [ 1329.420526][T27924] asm_int80_emulation+0x1a/0x20 [ 1329.420539][T27924] RIP: 0023:0xf71975ab [ 1329.420549][T27924] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1329.420560][T27924] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1329.420571][T27924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0 [ 1329.420578][T27924] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1329.420586][T27924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1329.420592][T27924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1329.420599][T27924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1329.420620][T27924] [ 1330.858342][T27954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1331.267209][T27966] 0: reclassify loop, rule prio 0, protocol 03 [ 1331.560794][ T43] audit: type=1326 audit(1787940851.373:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.571135][ T43] audit: type=1326 audit(1787940851.393:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623221][ T43] audit: type=1326 audit(1787940851.443:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623320][ T43] audit: type=1326 audit(1787940851.443:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623556][ T43] audit: type=1326 audit(1787940851.443:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623721][ T43] audit: type=1326 audit(1787940851.443:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623845][ T43] audit: type=1326 audit(1787940851.443:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.623971][ T43] audit: type=1326 audit(1787940851.443:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.624353][ T43] audit: type=1326 audit(1787940851.443:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1331.624394][ T43] audit: type=1326 audit(1787940851.443:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27969 comm="syz.6.6343" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 1332.658896][T27987] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1332.669208][T27998] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6353'. [ 1332.803553][T28003] MTD: Couldn't look up './sys/kernel/mm/lru_gen/enabled/file0': -2 [ 1333.100964][T28012] Cache volume key already in use (9p,syz,) [ 1333.578803][T28014] [ 1333.579594][T28014] ====================================================== [ 1333.581725][T28014] WARNING: possible circular locking dependency detected [ 1333.583842][T28014] syzkaller #0 Tainted: G L [ 1333.586271][T28014] ------------------------------------------------------ [ 1333.588484][T28014] syz.5.6362/28014 is trying to acquire lock: [ 1333.590278][T28014] ffff888067585680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 1333.592926][T28014] [ 1333.592926][T28014] but task is already holding lock: [ 1333.595032][T28014] ffff88802acf6798 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 1333.598092][T28014] [ 1333.598092][T28014] which lock already depends on the new lock. [ 1333.598092][T28014] [ 1333.601222][T28014] [ 1333.601222][T28014] the existing dependency chain (in reverse order) is: [ 1333.604300][T28014] [ 1333.604300][T28014] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1333.607123][T28014] lock_acquire+0x1d1/0x380 [ 1333.608708][T28014] __mutex_lock+0x1a4/0x1bc0 [ 1333.610198][T28014] ima_file_truncate+0xe6/0x190 [ 1333.611831][T28014] security_file_truncate+0x11e/0x1e0 [ 1333.613540][T28014] path_openat+0x1d7e/0x2440 [ 1333.614995][T28014] do_file_open+0x20e/0x430 [ 1333.616450][T28014] do_sys_openat2+0x10f/0x1e0 [ 1333.617933][T28014] __ia32_compat_sys_openat+0x12d/0x210 [ 1333.619650][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.621340][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.622989][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.625063][T28014] [ 1333.625063][T28014] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 1333.627309][T28014] lock_acquire+0x1d1/0x380 [ 1333.628772][T28014] mnt_want_write+0x6f/0x420 [ 1333.630366][T28014] lookup_open+0x150/0x1990 [ 1333.631817][T28014] path_openat+0xa2c/0x2440 [ 1333.633332][T28014] do_file_open+0x20e/0x430 [ 1333.634798][T28014] file_open_name+0x1c3/0x3e0 [ 1333.636398][T28014] filp_open+0x2e/0x50 [ 1333.637776][T28014] nvmet_file_ns_enable+0x95/0x420 [ 1333.639492][T28014] nvmet_ns_enable+0x35f/0x5d0 [ 1333.641147][T28014] nvmet_ns_enable_store+0x11e/0x160 [ 1333.642824][T28014] configfs_write_iter+0x302/0x4e0 [ 1333.644509][T28014] vfs_write+0x6af/0x1050 [ 1333.646042][T28014] ksys_write+0x12a/0x250 [ 1333.647614][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.649310][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.650971][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.652967][T28014] [ 1333.652967][T28014] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 1333.655122][T28014] lock_acquire+0x1d1/0x380 [ 1333.656608][T28014] __mutex_lock+0x1a4/0x1bc0 [ 1333.658097][T28014] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 1333.660071][T28014] configfs_write_iter+0x302/0x4e0 [ 1333.661775][T28014] vfs_write+0x6af/0x1050 [ 1333.663264][T28014] ksys_write+0x12a/0x250 [ 1333.664728][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.666988][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.668842][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.671234][T28014] [ 1333.671234][T28014] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 1333.673862][T28014] lock_acquire+0x1d1/0x380 [ 1333.675582][T28014] down_read+0x99/0x4c0 [ 1333.677246][T28014] configfs_write_iter+0x218/0x4e0 [ 1333.679192][T28014] vfs_write+0x6af/0x1050 [ 1333.680947][T28014] ksys_write+0x12a/0x250 [ 1333.682804][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.684861][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.686651][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.688923][T28014] [ 1333.688923][T28014] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 1333.691443][T28014] check_prev_add+0xeb/0xe60 [ 1333.693152][T28014] __lock_acquire+0x1492/0x1ec0 [ 1333.695433][T28014] lock_acquire+0x1d1/0x380 [ 1333.697076][T28014] __mutex_lock+0x1a4/0x1bc0 [ 1333.699122][T28014] configfs_read_iter+0x79/0x6f0 [ 1333.701342][T28014] __kernel_read+0x397/0xad0 [ 1333.703208][T28014] integrity_kernel_read+0x7e/0xb0 [ 1333.705179][T28014] ima_calc_file_hash_tfm+0x25e/0x350 [ 1333.707176][T28014] ima_calc_file_hash+0x1e3/0x380 [ 1333.709009][T28014] ima_collect_measurement+0x94f/0xb30 [ 1333.711091][T28014] process_measurement+0xdfe/0x2350 [ 1333.712922][T28014] ima_file_check+0xcc/0x120 [ 1333.714735][T28014] security_file_post_open+0xc4/0x210 [ 1333.716623][T28014] path_openat+0x5cd/0x2440 [ 1333.718224][T28014] do_file_open+0x20e/0x430 [ 1333.720123][T28014] do_sys_openat2+0x10f/0x1e0 [ 1333.721907][T28014] __ia32_compat_sys_openat+0x12d/0x210 [ 1333.724033][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.725911][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.727601][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.729946][T28014] [ 1333.729946][T28014] other info that might help us debug this: [ 1333.729946][T28014] [ 1333.733448][T28014] Chain exists of: [ 1333.733448][T28014] &buffer->mutex --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 1333.733448][T28014] [ 1333.738058][T28014] Possible unsafe locking scenario: [ 1333.738058][T28014] [ 1333.740625][T28014] CPU0 CPU1 [ 1333.742400][T28014] ---- ---- [ 1333.744147][T28014] lock(&ima_iint_mutex_key[depth]); [ 1333.745884][T28014] lock(sb_writers#5); [ 1333.747937][T28014] lock(&ima_iint_mutex_key[depth]); [ 1333.750615][T28014] lock(&buffer->mutex); [ 1333.752073][T28014] [ 1333.752073][T28014] *** DEADLOCK *** [ 1333.752073][T28014] [ 1333.754862][T28014] locks held by syz.5.6362/28014: 1, last CPU#0: [ 1333.756898][T28014] #0: ffff88802acf6798 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 1333.760645][T28014] [ 1333.760645][T28014] stack backtrace: [ 1333.762634][T28014] CPU: 0 UID: 0 PID: 28014 Comm: syz.5.6362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.766323][T28014] Tainted: [L]=SOFTLOCKUP [ 1333.767794][T28014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1333.771386][T28014] Call Trace: [ 1333.772587][T28014] [ 1333.773701][T28014] dump_stack_lvl+0x100/0x190 [ 1333.775591][T28014] print_circular_bug.cold+0x178/0x1be [ 1333.777618][T28014] check_noncircular+0x146/0x160 [ 1333.779446][T28014] check_prev_add+0xeb/0xe60 [ 1333.781035][T28014] __lock_acquire+0x1492/0x1ec0 [ 1333.782729][T28014] ? is_bpf_text_address+0x8a/0x1a0 [ 1333.784596][T28014] lock_acquire+0x1d1/0x380 [ 1333.786252][T28014] ? configfs_read_iter+0x79/0x6f0 [ 1333.788201][T28014] ? __pfx___might_resched+0x10/0x10 [ 1333.789969][T28014] ? arch_stack_walk+0xa6/0xf0 [ 1333.791570][T28014] __mutex_lock+0x1a4/0x1bc0 [ 1333.793054][T28014] ? configfs_read_iter+0x79/0x6f0 [ 1333.795072][T28014] ? configfs_read_iter+0x79/0x6f0 [ 1333.797047][T28014] ? stack_trace_save+0x8e/0xc0 [ 1333.798850][T28014] ? __pfx___mutex_lock+0x10/0x10 [ 1333.800555][T28014] ? stack_depot_save_flags+0x27/0x9f0 [ 1333.802369][T28014] ? __kasan_kmalloc+0xaa/0xb0 [ 1333.803904][T28014] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1333.805686][T28014] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1333.807412][T28014] ? ima_calc_file_hash+0x1e3/0x380 [ 1333.809044][T28014] ? ima_collect_measurement+0x94f/0xb30 [ 1333.810961][T28014] ? process_measurement+0xdfe/0x2350 [ 1333.812753][T28014] ? ima_file_check+0xcc/0x120 [ 1333.814385][T28014] ? security_file_post_open+0xc4/0x210 [ 1333.816418][T28014] ? configfs_read_iter+0x79/0x6f0 [ 1333.818331][T28014] configfs_read_iter+0x79/0x6f0 [ 1333.820257][T28014] __kernel_read+0x397/0xad0 [ 1333.822055][T28014] ? __pfx___kernel_read+0x10/0x10 [ 1333.823845][T28014] integrity_kernel_read+0x7e/0xb0 [ 1333.825569][T28014] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1333.827503][T28014] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1333.829351][T28014] ima_calc_file_hash_tfm+0x25e/0x350 [ 1333.831147][T28014] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1333.833185][T28014] ? stack_trace_consume_entry+0x170/0x170 [ 1333.835213][T28014] ? look_up_lock_class+0x64/0x120 [ 1333.836939][T28014] ? ima_alloc_tfm+0x21a/0x2e0 [ 1333.838883][T28014] ima_calc_file_hash+0x1e3/0x380 [ 1333.840631][T28014] ima_collect_measurement+0x94f/0xb30 [ 1333.842693][T28014] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1333.845125][T28014] ? process_measurement+0x5ab/0x2350 [ 1333.847324][T28014] ? is_bad_inode+0xd/0x40 [ 1333.849215][T28014] ? xattr_resolve_name+0x27d/0x3f0 [ 1333.851581][T28014] ? vfs_getxattr_alloc+0xec/0x350 [ 1333.853927][T28014] ? ima_get_hash_algo+0x241/0x400 [ 1333.856203][T28014] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1333.858530][T28014] ? process_measurement+0xdfe/0x2350 [ 1333.860793][T28014] process_measurement+0xdfe/0x2350 [ 1333.863102][T28014] ? __pfx_process_measurement+0x10/0x10 [ 1333.865828][T28014] ? lock_acquire+0x1d1/0x380 [ 1333.868102][T28014] ? __configfs_open_file+0x6ca/0x9c0 [ 1333.870518][T28014] ima_file_check+0xcc/0x120 [ 1333.872471][T28014] ? __pfx_ima_file_check+0x10/0x10 [ 1333.874687][T28014] security_file_post_open+0xc4/0x210 [ 1333.876955][T28014] path_openat+0x5cd/0x2440 [ 1333.878901][T28014] ? __pfx_path_openat+0x10/0x10 [ 1333.881003][T28014] do_file_open+0x20e/0x430 [ 1333.882933][T28014] ? __pfx_do_file_open+0x10/0x10 [ 1333.885056][T28014] ? _raw_spin_unlock+0x28/0x50 [ 1333.887000][T28014] ? alloc_fd+0x471/0x7a0 [ 1333.888861][T28014] do_sys_openat2+0x10f/0x1e0 [ 1333.890941][T28014] ? __pfx_do_sys_openat2+0x10/0x10 [ 1333.893238][T28014] ? __fget_files+0x21f/0x3d0 [ 1333.895253][T28014] __ia32_compat_sys_openat+0x12d/0x210 [ 1333.897721][T28014] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1333.900069][T28014] __do_fast_syscall_32+0x13a/0x8b0 [ 1333.902075][T28014] ? lockdep_hardirqs_on+0x7d/0x110 [ 1333.904042][T28014] do_fast_syscall_32+0x32/0x70 [ 1333.905911][T28014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.908244][T28014] RIP: 0023:0xf705efec [ 1333.909608][T28014] Code: Unable to access opcode bytes at 0xf705efc2. [ 1333.911742][T28014] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1333.914408][T28014] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 1333.916871][T28014] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.919744][T28014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.922544][T28014] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1333.925291][T28014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.927979][T28014] [ 1334.576845][T28020] ima: policy update completed