last executing test programs: 4m6.372933573s ago: executing program 32 (id=50): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0x100, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x521c, 0x1, 0x61, 0x0, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) setresgid(0xee00, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3ff, 0x2, 0xb5}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r11}) r12 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r12, 0x40045644, 0xc4a77c080d81a3c) close_range(r7, 0xffffffffffffffff, 0x0) 3m50.779712328s ago: executing program 33 (id=133): syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1fe) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_io_uring(0x462a, &(0x7f00000005c0)={0x0, 0x0, 0x20400, 0x0, 0x158}, 0x0, 0x0, &(0x7f0000000140)) memfd_create(&(0x7f00000000c0)=',\xea\x00\xd4\xd7\xf1..\x8es\x0f\xb9\x80\xb9\x13\x92\'\x94N\x00-\xb3\x8d\xa1\xa4d\xda0y\xed\xdb\xf4\xeb-\xcf\xa3\xb8\xa3\x85\x9b\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\x00'/67, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0xc}) mprotect(&(0x7f00001dd000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0xf) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet(0x2, 0x2, 0x0) 3m46.412330417s ago: executing program 34 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@setneightbl={0x7c, 0x43, 0x200, 0x70bd25, 0x25dfdbfd, {0x7}, [@NDTA_THRESH3={0x8, 0x4, 0x8c9f}, @NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_THRESH1={0x8}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_PARMS={0x24, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x5}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x6a0e}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0xffff}]}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_THRESH1={0x8, 0x2, 0x4}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_THRESH1={0x8, 0x2, 0xfffffffa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='dev_mnt/zram0\x00', &(0x7f0000000300)='gadgetfs\x00', 0x2053000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='\x00\x00\x00', 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x2040400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x8) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f0000000280)='cgroup\x00', 0x40000, &(0x7f0000000400)='pptp\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m46.329789606s ago: executing program 35 (id=156): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xc507c000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r3, &(0x7f0000000000)) 3m45.442239161s ago: executing program 36 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 3m43.763490092s ago: executing program 37 (id=168): r0 = fsopen(&(0x7f0000000240)='ncpfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)="ab9b159dd66ca5f3e843e51b5bc1ca0db2aa674676d624c445d3ce46ffb21aae904ae7c18196c210a39a1e9fc77c225bc25d0804f53ce7be69", 0x39) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/filehandle\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)="6d79646fc357696e202f202d3134371e3833553437203078323430302030203020310a", 0x23) setxattr$incfs_id(&(0x7f0000000080)='./nfsd/filehandle\x00', &(0x7f00000000c0), &(0x7f0000000100)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x208501, 0x7737514369be990f) write(r4, &(0x7f0000000200)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='external:', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='raid5', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r7, &(0x7f0000000380)='2', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000440)='65536', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r9, &(0x7f0000000500)='ppl', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r10, &(0x7f0000000580)='1:0', 0x3) r11 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r11, &(0x7f00000007c0)='0', 0x1) write(0xffffffffffffffff, &(0x7f0000000a40)='active', 0x6) 3m39.110201419s ago: executing program 38 (id=176): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7273) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 3m38.416155259s ago: executing program 39 (id=181): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7273) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) (fail_nth: 2) 3m36.668198357s ago: executing program 40 (id=192): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') (fail_nth: 1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) 3m29.754705779s ago: executing program 41 (id=214): setns(0xc9, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @loopback}}, 0x5, 0x3, 0x4, 0x3, 0xc0, 0xf57, 0x2}, &(0x7f0000000400)=0x9c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 3m29.631438256s ago: executing program 42 (id=216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xff}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) (async) r11 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x81, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x9ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa5, 0x7, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x24, 0x6}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0xfa, 0xde, 0x2, 0x20, 0x9}, 0x67, &(0x7f0000000400)={0x5, 0xf, 0x67, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x40, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "53d959ada88d17b72638eea0029a70b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "dfd72b2a53ce8993507147e5b3b09420"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x4, 0xe1, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x1, 0xff00, 0xc000, [0x3f00, 0xc0, 0xffff30, 0x7e30]}]}, 0x1, [{0x49, &(0x7f0000000480)=@string={0x49, 0x3, "3c8f43eb888b20a78b00c91e2676a803842c7a4080882536a9778f3cf3cb864096ba61cd68417863d328ce40b39f0e2a77b908c6ef940141971af5c0447f6d2987d92ab05dc035"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000000880)={0x14, &(0x7f0000000680)={0x40, 0xe, 0xfb, {0xfb, 0x23, "714ee64f6eca344239d9672ac43454792786e75f554a5afd3e3b50c2374181925b71a894e278b59d6162d81320f79422fd9caedb26806e9f5bcd931628fe1bfcb74ed1e7aeaac78451bc0077de429ed98e7baf088fcb8133b941e628fdc2c1c53a6b82ac9a6fefbdf1ec671ea03de5148c348ccf4f820fa65e26ababf9db35bcb6b2cf36af4168d40e9d2731ab8c7ce75fb14502024f3a1c0e57cbe3e411d41dadd09a14c890f1ecec256c549c8b8a9f4cbabb440d38026c43803c774e2de2360c39d8a9154089277406a5077b149ece7abe12710caede8b1bde06770669d301dba1546af2f1010309dd2660c69f18d8f482968bbb69a8fbc1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000800)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0x9, "6e84b671"}, @main=@item_012={0x2, 0x0, 0x8, "4718"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_4={0x3, 0x0, 0x8, "7043fd2f"}, @local=@item_4={0x3, 0x2, 0x1, "e4089db9"}, @main=@item_4={0x3, 0x0, 0xb, "a32c1555"}, @main=@item_4={0x3, 0x0, 0xc, "17c84f36"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf68a, 0x5, 0x1, {0x22, 0x6ca}}}}, &(0x7f0000000a00)={0x18, &(0x7f00000008c0)={0x20, 0x15, 0x1f, "2b34cc3e4aca90b49d2084fe163436bf3a7e2b52a80454c713ae22f6e9977e"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x1, 0x1f, "fc45ad1734458825b4f7c4b1de70e1594183166fd582697743b74b00a223c5"}, &(0x7f00000009c0)={0x20, 0x3, 0x1}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 3m29.451154801s ago: executing program 43 (id=217): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000006c0)={0x101, 0x7fff, 0x0, 0x1004800, 0x2, [0x0, 0x8, 0x0, 0xc]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000480)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) pause() r2 = syz_clone3(&(0x7f0000000700)={0x88a04c00, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x1054800, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='md0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x10001, 0x0) write(r4, &(0x7f0000000280)='externa', 0x7) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='65536\n', 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRES32=r2, @ANYBLOB="00042bbd7000fedbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000508bf0c00af5ea574f4ca32f9fb041f4a499f772253649ff615b9587a5a0bd0539068fa80e4080f3e6fea2df9f3febaccb1ffda08fdcf667560eda3973d2f2f256872fc5da455bf118110b1143421bb8e2c29935f5923141e0d4fdf08923d0469dce76f19893844bef265598c9538e584816a2da535b90ea09"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/layout\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-ram0/size\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1024\n', 0x5) 3m18.984533158s ago: executing program 44 (id=242): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x3e, 0x3c, 0x66, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x14, 0xf, 0x3, 0xb, [{@multicast2, 0x3}, {@empty, 0x4}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5\n', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='65536', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='ppl\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, 0x0, 0x0) write(r6, &(0x7f00000005c0)='1:1\n', 0x4) write(0xffffffffffffffff, &(0x7f00000006c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000740), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r7, &(0x7f00000009c0)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000a40)='active\n', 0x7) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0xfffffffd, 0xffe00001}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0xb05, 0x17e0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xef, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x1, 0xa0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x81c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf1, 0x5, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x72, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x7, 0x4, 0xff, 0x7}, 0x6f, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x8b, &(0x7f0000000200)=ANY=[@ANYBLOB="8b033ab7687c22a5d66fab5e571b49419bcc69702e861f8b1133e22e783e969e74ef6b3fa9c931d90ab5f9ea41f9628342d7c8a8e1d2dbc29526d10a9e3937fee8fed8f761df2725c01c86c94e019bacebd3d246276b57d6d27ae8388585fb3745f5b4e6c08c9c098c94444fa2f1a1f1fa6efa80f363e65ce605664a80220681cbc525e8e856c6fccc04c1"]}]}) socket$phonet_pipe(0x23, 0x5, 0x2) 3m16.522968952s ago: executing program 45 (id=249): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="5f69643d000090f757fcbd0d0c304924d60544c3ab174481dd5887b91a0467a847e0cf5663a60868d0cd146a325adb83c28c49fa2f3ebed54e25a2f04e8b5f9735de92609559ba964f36e01cf31a56bcf5f8c6e88618b9503ed44fa9c79604f973c5e95a439a51a1f42e585a609e4ee936e54627322053c706ae107d21e71db311eec69b970f1f65c71a4b77db329644a4bf5367784c5497bca1c68a87174fb486a70b24276f8aa82e035152a47f48f99a4cbc827c7f7758b67aac7b8edfb1570099dfe7baff0365076e0bfe42c7fc002a25aa", @ANYRES32]) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2d2040) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10, 0x40, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) (fail_nth: 2) 3m9.879210267s ago: executing program 7 (id=260): r0 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 3m9.811521135s ago: executing program 7 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = gettid() prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x27d, @tick=0xe, 0x52, {}, 0x0, 0x0, 0x2}) openat$rfkill(0xffffff9c, &(0x7f0000000180), 0x80800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x8180, 0x7, 0x1, 'queue1\x00', 0x80000000}) mmap(&(0x7f00001e2000/0x1000)=nil, 0x1000, 0x0, 0x8010, r2, 0xdf86e000) tkill(r1, 0x7) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x97, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000401e04103000010000000109028500020100803209040000000101000009240100013f0001010c24020101020002030000000c240202030d0002030000000c24020305060002030000000924050803010203000924030901010008"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = getpid() syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 3m7.733637912s ago: executing program 8 (id=274): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000900)={'filter\x00', 0x4, "c2beb2e1"}, &(0x7f0000000980)=0x2c) 3m7.722089813s ago: executing program 8 (id=275): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x89, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}], 0x1, 0x40000160, 0x0) 3m7.701953939s ago: executing program 8 (id=277): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000980)=0x2c) 3m7.645476182s ago: executing program 8 (id=278): syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x400c0930, 0x0) 3m7.645147351s ago: executing program 3 (id=279): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) 3m7.601964581s ago: executing program 3 (id=280): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) dup(0xffffffffffffffff) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4920}, 0x44860) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x11, r0, 0xd1877000) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 3m7.543739892s ago: executing program 8 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x1ffe, 0x1, 0x401, 0x400, 0x0, [{0xa, 0x5, 0x3, '\x00', 0x2}, {0xf3, 0x2, 0x6, '\x00', 0x1}, {0x21, 0x3, 0xcc, '\x00', 0x4f}, {0x0, 0x2, 0x10, '\x00', 0x9}, {0x7, 0x4, 0x6, '\x00', 0x4}, {0x1, 0x80, 0x3, '\x00', 0x7}, {0x7, 0xf8, 0x6, '\x00', 0x81}, {0x0, 0x1, 0xf2, '\x00', 0x1}, {0x6, 0xa, 0xa, '\x00', 0x4}, {0x5, 0x4, 0x6, '\x00', 0x9e}, {0x3, 0x8, 0xf, '\x00', 0x8}, {0x80, 0xd, 0x5, '\x00', 0x6}, {0x7, 0x1, 0x7, '\x00', 0x5}, {0xff, 0x89, 0xfa, '\x00', 0x9d}, {0x1, 0x8, 0x9, '\x00', 0x2}, {0x2, 0xb}, {0x6, 0xd, 0xe, '\x00', 0x6a}, {0x4, 0x2, 0x7, '\x00', 0x6}, {0x38, 0x9, 0x1, '\x00', 0x9}, {0x7a, 0xa, 0x8, '\x00', 0x3}, {0x7f, 0x9c, 0xf7, '\x00', 0x40}, {0x2, 0xb, 0x21, '\x00', 0x2}, {0x7f, 0x7, 0x6, '\x00', 0x8}, {0x7, 0x9, 0x0, '\x00', 0x5}]}}) 3m7.270029769s ago: executing program 8 (id=282): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0x4126, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000240)={0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'fo\x00', 0x14, 0x7, 0x74}, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af5, 0x10, 0x2, 0x139, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 3m6.705422712s ago: executing program 46 (id=282): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def134b824b3cf4714cf1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c9860900000000000000ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63effe7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0x4126, &(0x7f00000003c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f0000019080)=ANY=[]) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000240)={0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'fo\x00', 0x14, 0x7, 0x74}, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0xffffffffffffff9f, 0x10000000000, 0x8, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x52, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r7 = syz_io_uring_setup(0x141c, &(0x7f0000000140)={0x0, 0x2af5, 0x10, 0x2, 0x139, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 3m6.651228131s ago: executing program 7 (id=285): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04692420"], 0x7) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304856755200db549e13d64a3489bfc1961cc504fc1175ce7e3335c86d231c5d64829c1ebfac649a1787882b454975a71a18ece31ee6f69e99707e2a13f4f826a57837744a810058f73e25119f8e0b8787ed2f318a1df960df58a7c091b9a7a60e5a2f546d0fe807dab278a08cb2056295185213037adcec5da72763d52734d7dfd51c27", 0xcf}, {&(0x7f00000003c0)="e8700e444d50a969ff67247cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece98ad3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000140)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @op={0x10}, @op={0x10}], 0x50, 0x40}], 0x1, 0x40800) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="08ff0000000000"], 0x0, 0x600) getpid() setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000400)='tracefs\x00', 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./trace/current_tracer\x00', 0x800, 0x0) read(r3, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 3m6.573400776s ago: executing program 3 (id=287): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3m6.523675491s ago: executing program 3 (id=289): syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x400c0930, 0x0) 3m6.402932322s ago: executing program 3 (id=290): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xc507c000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 3m6.118120595s ago: executing program 3 (id=294): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) dup(0xffffffffffffffff) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4920}, 0x44860) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x11, r1, 0xd1877000) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 3m5.921453678s ago: executing program 47 (id=294): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) dup(0xffffffffffffffff) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4920}, 0x44860) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x11, r1, 0xd1877000) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 3m5.86355103s ago: executing program 7 (id=297): syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x400c0930, 0x0) 3m5.805287273s ago: executing program 7 (id=298): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xd}], 0x10}, 0xfc40) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x24, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@empty}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000140)={0x20080522, r9}, &(0x7f0000000180)={0xc8, 0x8d, 0x4, 0x7, 0x2, 0x5}) connect$phonet_pipe(r8, &(0x7f0000000100)={0x23, 0x0, 0x5, 0x1}, 0x10) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x400000, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x2b, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48223}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xd}], 0x10}, 0xfc40) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x24, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@empty}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) pipe2(&(0x7f0000000040), 0x0) (async) getpgid(0xffffffffffffffff) (async) capget(&(0x7f0000000140)={0x20080522, r9}, &(0x7f0000000180)={0xc8, 0x8d, 0x4, 0x7, 0x2, 0x5}) (async) connect$phonet_pipe(r8, &(0x7f0000000100)={0x23, 0x0, 0x5, 0x1}, 0x10) (async) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x400000, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x2b, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48223}, 0x0) (async) 3m5.433518205s ago: executing program 7 (id=301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xc507c000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 3m5.370631523s ago: executing program 48 (id=301): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r2, 0xc507c000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) 2m15.296280075s ago: executing program 5 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x11, 0x3, [0x5, 0x6, 0x3]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) (async) socket$inet6(0xa, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x11, 0x3, [0x5, 0x6, 0x3]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 2m15.192829369s ago: executing program 6 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+', 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m15.14361278s ago: executing program 5 (id=616): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 2m14.011551767s ago: executing program 5 (id=618): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 2) 2m13.703519002s ago: executing program 5 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000100000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd7080014060000000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) munlock(&(0x7f0000ffa000/0x1000)=nil, 0x800000000000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='kyber', 0x5) 2m13.595192831s ago: executing program 6 (id=623): r0 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x22200, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000075800)={0x0, 0x0}) 2m13.57538938s ago: executing program 5 (id=624): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 2m13.411034843s ago: executing program 6 (id=625): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000000040)='7', 0x1) write$char_usb(r0, &(0x7f0000000bc0)="cc", 0x1) 2m13.41090911s ago: executing program 6 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0xfffffff4, 0xc84d) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000002200000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x110) 2m12.301464822s ago: executing program 6 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x664001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 2m11.785173587s ago: executing program 5 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 2m11.706530237s ago: executing program 6 (id=631): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) 2m8.0661852s ago: executing program 2 (id=648): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 2m7.143660275s ago: executing program 2 (id=652): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000040)={0x0, 0xfff, 0x1dc, '\x00', 0x0}) (fail_nth: 2) 2m7.143314559s ago: executing program 2 (id=654): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00dff21e5ebb63b87ebbddc70468155306acafe3b0469253fbfe7656736c069dcd7106434c468947af1f8ccc33bedac890edbed86c311e8a83f4c3c0ba8e668a460500000000000046f3064c4057f496986dd5b32f"]) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x7, {0x7, 0x29, 0xcf940281, 0x7c2a1421, 0x1, 0x1a73, 0x4, 0x1802, 0x0, 0x0, 0x41, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f000000dcc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0xa, {0x8, 0x0, 0x0, {0x4, 0x80800000009, 0x0, 0x7, 0x40000000000003, 0xfffffffffffffffe, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff8, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m6.260126364s ago: executing program 2 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x47, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2m6.193432309s ago: executing program 2 (id=657): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000080)}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="000100235755b8b19d40c2c287958d9f566fc004743bc06f000000000000", @ANYRES16=r3, @ANYBLOB="080026bd7000fddbdf255a0000000c0099000600000007000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)=0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000028"], 0xfdef) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = socket$key(0xf, 0x3, 0x2) r7 = signalfd4(r6, &(0x7f00000001c0)={[0x7d6, 0x1000]}, 0x8, 0x81800) ioctl$DRM_IOCTL_VERSION(r7, 0xc0246400, &(0x7f0000001a80)={0x7fffffff, 0x1, 0x5000, 0x2c, &(0x7f0000000340)=""/44, 0x1000, &(0x7f0000000a40)=""/4096, 0xf, &(0x7f0000001a40)=""/15}) accept4(r6, 0x0, 0x0, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000010000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000009b00000000004014c30827e45bc6b0722029ddf68bca7fea15a4d3b4d105d5571f73b805ac840dbb4847d8c417493e4cb1e2643d1889444d044c382bb9e976efe141fe9e1fc8872698a35d33c1bfc16a8b90a83097e9c4f3916cd99b86950ba33d5de228240b8484ad07638ad1681300cb846a58b93a476938922be4bd03196f28b89443a7fb42090d0548d7a6d401007ee5dd9cfa0b41dc14a243db8f92c8c779b6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20001, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m6.065387077s ago: executing program 2 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 1m53.476683564s ago: executing program 49 (id=631): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) 1m53.476076308s ago: executing program 50 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 1m50.742099351s ago: executing program 51 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) write(r0, &(0x7f0000000340)='4', 0x1) 17.662553726s ago: executing program 1 (id=961): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25090000002800028008000200020056370080080001020000000014000380080002000700000008000100080000008a2c289c75a3418affed036a69c7f3a45d3a563400"/89], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040821) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 17.012966499s ago: executing program 1 (id=966): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x10) ppoll(&(0x7f0000000240)=[{r0, 0x5400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000040)='7', 0x1) r4 = openat$userio(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x5}, 0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e1e, @local}, 0xc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x4, 0xff7e, 0x7}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000bc0)="cc", 0x1) syz_usb_disconnect(r2) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 6.998726852s ago: executing program 4 (id=975): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000340)=""/154, 0x9a}], 0x3, 0x5, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x7ffffffffffffffe, 0xf, 0x100000001, 0x5, 0x200024, 0x6, 0x6, 0xffffffffffffffff, 0x100fff}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8001e001a00010004021600"], 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 6.99854359s ago: executing program 1 (id=976): r0 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./trace\x00', &(0x7f00000001c0)={0x341002, 0x13, 0x1c}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x13d06, 0x1, 0x92}, 0x0, &(0x7f00000002c0)=0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000054) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a2f1a9d73d51cfdf361e93754d4bfc135f155a79fd5671662faa9d2d49f1376e9e615927c3"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000900)={0x0, 0x1, @raw_data=[0x2000000, 0x0, 0x7, 0x2, 0xa38e5623, 0xf5a, 0x2, 0x1, 0xc90, 0x953, 0xffff, 0x81, 0xcb, 0x46, 0x7, 0x77]}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) 6.998232026s ago: executing program 0 (id=977): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000702c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x77}]}}]}, 0x3c}}, 0x4000010) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0xa, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x4, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x2, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x403, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x8, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.683121323s ago: executing program 9 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000c9637040b75d5fdd0008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000800420000000000"], 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 6.392758246s ago: executing program 4 (id=979): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.302253178s ago: executing program 0 (id=980): r0 = openat$fb0(0xffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r8, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.512921003s ago: executing program 9 (id=981): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x6) recvmmsg(r0, 0x0, 0x0, 0x44000102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b7, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RVERSION(r6, &(0x7f0000000040)={0xb, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r11 = socket$unix(0x1, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000600), 0x4000, 0x3f00) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000300)='drr\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.51255527s ago: executing program 1 (id=982): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 4.162564225s ago: executing program 0 (id=983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) 4.060480633s ago: executing program 9 (id=984): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mprotect(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x4000002) mount(0x0, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', &(0x7f0000000000)='bdev\x00', 0x8, &(0x7f00000001c0)='y\x03!\xe7\xfe\x10\xba\xb9\x90\xc4XN<\x00\x8eGicz5\xec\xc5\xa0W\xf0\x03B/\x0f\x97=\x92\xa8\xaf\xc8\x031\xc6\xfa\x1f\xa6\xfc\xee\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='afs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, 0x0, 0x500) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x3c7) listen(r1, 0xe0d7) r2 = timerfd_create(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffe93) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="1d", 0x1}], 0x1}}], 0x1, 0x40003) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfffc, 0x7}) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) 4.059161841s ago: executing program 0 (id=985): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3047b120e4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r6, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = openat$cgroup_devices(r9, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f22eb75857a25de14998f1371ce27073"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7dd9f7648157f9d6fc2a1c6179999b0b"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a4b3e01375b9b703d2ac8f31aa0438ae"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_PMKID={0x14, 0x55, "beaaf43595b8f09cd09b69bdc37bc99d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0xa884) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x776, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 3.683081022s ago: executing program 4 (id=986): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25090000002800028008000200020056370080080001020000000014000380080002000700000008000100080000008a2c289c75a3418affed036a69c7f3a45d3a563400"/89], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040821) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 3.461840546s ago: executing program 4 (id=987): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) 3.391946928s ago: executing program 1 (id=988): r0 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x22200, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f0000075800)={0x1, &(0x7f0000075780)=[{0x4000000, 0xf7e, &(0x7f0000005340)=[0x1, 0x9, 0x8, 0xb6, 0x28b, 0x80000000, 0xe, 0x3b, 0xa84f, 0x4, 0x8, 0x800, 0x9, 0x5, 0x5, 0x0, 0xfffffffa, 0x3, 0x1cde, 0x2d, 0x100, 0x2, 0x81, 0x7, 0x0, 0x7, 0x6, 0x2, 0x9, 0x7c5, 0x7ff, 0x0, 0xf, 0xfffeffff, 0x7, 0x200, 0x0, 0x7, 0x5, 0x1, 0x0, 0x6, 0xfffffe00, 0x2, 0x9, 0x800, 0x7fff, 0x7ff, 0x5e75, 0x9, 0x6, 0x80f, 0x7fffffff, 0x7fff, 0x2, 0xe, 0x9, 0x20, 0x3ff, 0x7ff, 0x80, 0x6, 0x5, 0x5, 0x6, 0xeb8e, 0x6, 0x0, 0x4, 0xffff, 0x85, 0x1, 0x0, 0x2, 0x6, 0x11, 0x6, 0x109, 0x3cd0, 0x8, 0x91bd, 0x0, 0x4, 0x67800000, 0xf00, 0xcbb1, 0x10001, 0x4, 0x5, 0x7, 0x6, 0x3ff, 0x7cc, 0x25, 0x8, 0x3ff, 0x7, 0x3, 0x9, 0x3, 0x8, 0x0, 0x0, 0x8d1, 0x81, 0x4e, 0x0, 0x7, 0x4, 0x1, 0x400, 0xfffffc00, 0x2, 0xfffffff9, 0x5, 0x4, 0x8000, 0x3, 0x80, 0x7ff, 0x1, 0x0, 0x0, 0x4, 0x5, 0x7fff, 0x7, 0x0, 0x2, 0x6, 0x0, 0x3, 0x3010, 0xfffffff6, 0x5, 0x5, 0x3, 0x8, 0x7, 0x0, 0x3, 0xff, 0xfff, 0x6, 0x9, 0x5, 0x8001, 0x101, 0x0, 0x3, 0x3, 0x100, 0xffff, 0x9, 0x1, 0xd, 0x4, 0x0, 0xe11b, 0x2, 0x80000001, 0x8, 0x1, 0x78c, 0x5, 0x6e4f, 0x7ff, 0x3, 0x1, 0x3ff, 0x6, 0x7a, 0x2, 0x6, 0x6, 0x4, 0x8, 0x7b, 0x4, 0xffff, 0x7eb2, 0xec, 0x3, 0x0, 0x8, 0x6, 0x2, 0xe, 0x0, 0x7, 0x88, 0x980, 0x5, 0xfffffffa, 0x3, 0x5, 0x6, 0x6, 0x2, 0x6, 0x9, 0x91e, 0x2, 0xfff, 0x4, 0x255, 0x1ff, 0x3, 0x7fff, 0x0, 0x4, 0xfffffffe, 0x9381c63, 0x3, 0x80000000, 0x675, 0x8a, 0xffffffff, 0x4, 0x9, 0x35f, 0x1000, 0x3, 0x10001, 0x4, 0x114d, 0x5, 0x10000, 0x53f, 0x400, 0xfffffcfe, 0x7, 0x1, 0x7, 0x7ff, 0x8, 0x0, 0x4, 0x8, 0x6, 0x4, 0x0, 0x90000000, 0x6, 0x8, 0xe, 0xd, 0x4, 0x8, 0x8, 0x99, 0x2, 0xac, 0xf, 0x2, 0x7e9, 0xfffffff1, 0x80, 0x7, 0x3ff, 0x8, 0x3, 0x7fffffff, 0x0, 0x0, 0x2, 0x4, 0x9, 0xa64b, 0x1ff, 0xfffffffe, 0x1c, 0x9, 0x8e, 0x8001, 0x9, 0xff, 0x5, 0x0, 0x9, 0xfffffff8, 0xfffffbff, 0xff, 0x8000, 0x6, 0xf6, 0x7, 0x10001, 0x7f, 0x5, 0xfffffffd, 0x7, 0x1, 0xffffff80, 0x40000, 0x8000, 0x1, 0x2, 0x6c, 0x7f, 0x9, 0x10738266, 0x80000000, 0x3, 0x9, 0x2, 0x8, 0x7ff, 0x5, 0x8, 0x1ff, 0x2, 0x40, 0x0, 0x2, 0xd, 0x5e9, 0x5, 0x2, 0x3, 0x4, 0x0, 0x9, 0x100, 0x10001, 0x8, 0x7, 0x48b8, 0x4, 0x7, 0x0, 0x8000, 0x3, 0x40, 0x401, 0xf512, 0x73a17532, 0x7, 0x4, 0x6, 0x6, 0x6, 0x5, 0x80000000, 0x3f0127ab, 0x1, 0xea, 0x7fffffff, 0x3, 0xffffffff, 0x81, 0xcf18, 0x2f4, 0x40, 0x80000001, 0xffff, 0x1, 0x200, 0xfffff108, 0xf, 0x7ff, 0x6c5, 0x5, 0x9, 0x8, 0x1ff, 0x3, 0x9, 0x1, 0x0, 0xbdab, 0x0, 0x0, 0x116d9666, 0x1ff, 0x10001, 0x101, 0xf5e, 0x3, 0x2, 0x4, 0x0, 0x80000000, 0x7fffffff, 0x7f, 0x0, 0x1, 0xb65, 0x5, 0x6f17, 0x1, 0x3, 0x5, 0x7c00, 0xffffffff, 0x8, 0x7, 0x0, 0x6, 0x2, 0x9, 0x5, 0x3a31, 0x7, 0x69, 0x6, 0x800, 0x3, 0x80, 0xfffffffa, 0x101, 0x3ff, 0x5e, 0x72, 0x972, 0x0, 0x0, 0x6, 0x63a, 0xfff, 0x9, 0x3cc2, 0x500000, 0xfffffffa, 0xc8b9, 0xf, 0x2, 0x3, 0x0, 0x3, 0x84, 0x3ff, 0x337, 0xffff6bfd, 0x3, 0xfffffff9, 0x800, 0x3, 0xc6c3, 0x9, 0x42eb, 0x4, 0xa463, 0x10, 0x0, 0x7, 0x3, 0x2, 0x8, 0xd05, 0x4, 0x2, 0x5, 0x6, 0x6, 0x8000, 0x401, 0x9, 0xffff, 0x3ff, 0xb67, 0x1ff, 0x3, 0x5, 0x9, 0x8, 0x81, 0x5, 0xd, 0x7, 0x5, 0xd1ea, 0x8, 0x3, 0x1, 0x7, 0x7fff, 0xd, 0x1d, 0xf, 0x400, 0x8, 0x8, 0x2e, 0x401, 0x1, 0x3, 0xba, 0x1, 0x3, 0x8, 0x9, 0xe8, 0x8, 0x7, 0x60000, 0x0, 0xe, 0x100, 0xb, 0x5, 0x81, 0x9, 0x0, 0xb, 0x0, 0x7b, 0x9, 0x2, 0x8, 0x0, 0x5, 0x0, 0x5, 0x7, 0x6909, 0x6, 0xffff, 0xffff7fff, 0x6, 0x5, 0x8, 0x5, 0x9, 0x2, 0x80, 0x152000, 0xf, 0x3, 0xfffffffa, 0x3, 0x7, 0x0, 0x7f84, 0x3, 0x4, 0x4, 0x8000, 0x80000001, 0x3, 0x14, 0x7, 0x7ff, 0x9, 0x4, 0xc, 0x0, 0xffff, 0x200, 0x6, 0x2b, 0x20a, 0x8000, 0xad7, 0x3, 0x401, 0x9, 0x3, 0x385, 0x5, 0x81, 0x7, 0x1000, 0x7, 0x7, 0xc, 0x9, 0xd, 0x0, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0x2, 0x8, 0x2a0f, 0x0, 0x5, 0x5, 0x684, 0xffffffff, 0x89, 0xffff9473, 0x791c8000, 0x2, 0x40, 0x3, 0x5, 0xb, 0x3, 0xf76e, 0x5, 0xf12bca3, 0xc1e, 0x7, 0x6, 0x400, 0xffffff22, 0x9, 0x1ff, 0x7, 0x9, 0x6, 0x6, 0xbf, 0x5, 0x55f2000, 0x1, 0x10001, 0x8, 0xffffff87, 0x80000000, 0xba, 0xca70, 0xd, 0x1, 0x7f, 0x7fffffff, 0x0, 0xe, 0x5, 0xd, 0x0, 0x3, 0x7, 0x3, 0x9, 0x10001, 0x1ff, 0x5, 0x2, 0x5, 0xc60, 0x5, 0xfb, 0xa, 0xe8, 0x8, 0x8, 0x4, 0x7, 0x7c, 0xba0, 0x0, 0x9, 0xb, 0x3, 0x5, 0x101, 0x80000000, 0x7, 0x6, 0x5, 0x8, 0xcb, 0x6, 0x128000, 0x80000000, 0x5, 0x6, 0x2, 0xb, 0x9, 0xa, 0xdd, 0x80, 0x8000, 0xc, 0xf, 0x571, 0x7f, 0x0, 0x8, 0x3, 0x3, 0x9, 0x401, 0xfffffff9, 0x45d, 0x1, 0x90fe, 0x9, 0xe, 0x9, 0x7, 0xb, 0xd8, 0x11, 0x3, 0x7, 0x0, 0x2, 0x3, 0xfffffffd, 0x9, 0x2, 0x6, 0x4, 0xfff, 0xaa75, 0xffffffff, 0x8, 0x8, 0x4, 0xbb8, 0x8, 0x0, 0x6, 0x9b, 0x5, 0x3, 0x0, 0xfffffff8, 0xb6, 0x1, 0x5, 0x8, 0x8, 0xa, 0x15, 0x5, 0x3, 0x3, 0x7ff, 0x0, 0x7, 0x1c00, 0x0, 0x6, 0x8, 0x101, 0xfff, 0xe954, 0x4365, 0x7, 0x3, 0x1, 0x9, 0x9, 0x3, 0x80000001, 0x7fff, 0x1, 0x200, 0x296, 0x4, 0x10000, 0x90, 0x67, 0x0, 0x1, 0x4, 0x2, 0xb, 0x4, 0x8, 0x0, 0x14, 0x7, 0x5, 0x1, 0x8, 0x1, 0x6, 0x3ff, 0x0, 0x9, 0x8, 0x0, 0x7, 0x1, 0x9, 0x9, 0xd847, 0x2ed, 0x800, 0x3, 0x8, 0x8292, 0x0, 0xb, 0x9, 0x9, 0x5, 0xc8000000, 0x1, 0x3, 0x26, 0x2, 0x9, 0x8e0, 0x4a, 0x1, 0x6, 0x4, 0x3, 0x6e, 0x4, 0x903, 0xca67, 0x7ff, 0x6, 0x6, 0xd, 0x1a, 0xffffff7f, 0x2, 0x0, 0x1, 0x80, 0x9, 0xfffffffc, 0x5, 0x10, 0x1, 0xffff, 0x5e2, 0x80000001, 0x200, 0x6, 0x82, 0x8, 0x1, 0x1400, 0x3, 0x8, 0x800, 0x0, 0x400000, 0x0, 0x3, 0x1, 0x1, 0xe, 0x2, 0x7ff, 0x4, 0x3, 0x7, 0x0, 0x8000, 0x5e6, 0x4f5706d2, 0x4, 0xf5, 0x0, 0x7ff, 0xfffffffb, 0x9, 0xb, 0xff, 0x6, 0x8000, 0x7f, 0x9, 0x9, 0xf16, 0x3, 0x1, 0x9, 0x7, 0xa, 0x712c, 0x0, 0x200, 0x6, 0x2, 0x8, 0x3, 0x1, 0x6, 0x7, 0x81, 0x6, 0x401, 0x400, 0xffff, 0x4, 0x510, 0x0, 0x0, 0x800, 0xff, 0x0, 0x7, 0xff, 0x1, 0xffffffff, 0x7f, 0x8, 0x3, 0x10001, 0x2008000, 0x7, 0x800, 0xffffffff, 0x2a, 0x8, 0xffff1628, 0x0, 0x0, 0xfffffffc, 0xf, 0x34, 0x343, 0x1c, 0x8000, 0x80000000, 0xe5, 0x1, 0x7, 0x2e, 0x1, 0x0, 0x2, 0x2, 0x0, 0x5, 0x6aa, 0x81, 0x4, 0xa56, 0x2, 0x415c7d5, 0x101, 0x0, 0xc, 0x4e4, 0x6, 0x6, 0x72, 0xa, 0x6, 0x101, 0x2, 0x200, 0x10000, 0x4, 0x10000, 0x6, 0x8001, 0x80, 0x9, 0x1, 0x4, 0xa, 0x51ac, 0x5, 0x80000001, 0x0, 0xe874, 0x9, 0x1e0, 0x6, 0x9, 0x6, 0xe8, 0xfffff56f, 0x7, 0x1, 0x1, 0x4, 0x35d7, 0xfffffffa, 0x3ff, 0xcf, 0x7, 0xc6e, 0x4, 0x101, 0x4, 0x7fff, 0x1000, 0x5, 0x4, 0x4b0, 0x4, 0x3, 0x4, 0x7, 0x52, 0x2, 0xd, 0x7, 0xb5f4, 0xff, 0x1173e0d5, 0x0, 0x5, 0xf, 0x2f42, 0xe, 0x3ff, 0xa161ef4, 0x7f, 0x7a3e42a1, 0x7f, 0x10000, 0x9, 0x80000000, 0x5, 0x4, 0x3f6, 0x7ff, 0x4, 0x5, 0x3, 0x100, 0xfffffff3, 0x401, 0x8001, 0x940, 0x3, 0x81, 0x9, 0x3, 0x4, 0x6e1, 0xc, 0x3, 0xfffffffa, 0x9, 0x6, 0x80000000, 0x1, 0x23c4, 0xc261, 0x7fffffff, 0xe4, 0xffffffff, 0x6, 0x81, 0x10000, 0x8, 0x1, 0x401, 0xc, 0xe20, 0x4, 0x24a98639, 0x0, 0x10000, 0x6, 0x7, 0x5a, 0x7fffffff, 0x8, 0x8, 0xb, 0x3, 0xffffffff, 0x8, 0x6, 0x6, 0x1, 0x80000000, 0x2, 0x100, 0x0, 0x3, 0x7a, 0x400, 0x0, 0x80, 0x4, 0xb, 0x992, 0x6, 0x5, 0x8, 0x5, 0x1, 0x6, 0x2, 0x8, 0x6, 0x200, 0x3, 0x9, 0xc, 0x4, 0x3, 0x4, 0x9, 0x3, 0x7, 0x2, 0x8092, 0x10000, 0x10000, 0x10001, 0x9, 0x5, 0x100, 0x4, 0x5, 0x5, 0x2, 0x1, 0xb, 0x4, 0x1, 0x3, 0xdc, 0x9, 0x8, 0x81, 0x9, 0x3, 0x7fffffff, 0x7, 0xfffffc00, 0x9, 0xf, 0x6, 0x7, 0x80000000, 0x1, 0x8001, 0xfffffff3, 0xffff, 0x0, 0x6, 0x7f, 0x8001, 0x400, 0x6, 0x6, 0x8000, 0xc, 0x6, 0x953f, 0xfce, 0x4, 0x8000, 0x3ff, 0x71e7, 0xc, 0x6, 0x200, 0x9, 0x90, 0xfffffff9, 0x3, 0x0, 0x1, 0x3, 0x8, 0x6, 0x500, 0xfff, 0x4, 0xc06f, 0x1, 0xfffffff6, 0xb41, 0xa, 0xfffffffc, 0x10000, 0x1, 0x77649b1d, 0x7fff, 0x4, 0x200, 0xb, 0xb, 0xa7a5, 0xcb, 0xfe, 0x7, 0x2, 0x0, 0x6, 0xa, 0x6, 0x8001, 0x3476e58f, 0x6, 0x6, 0xf7, 0x7f, 0xd, 0x2, 0xfffffff4, 0x6, 0x7, 0xb727, 0x4, 0x7, 0x1000, 0x312, 0x1, 0x8aa, 0xff, 0xd2, 0xffff8000, 0x7fff, 0x0, 0x9, 0x5, 0x4, 0x7, 0x4, 0x55ff3a60, 0xf, 0x7, 0xc0f6, 0xc, 0x7, 0x4, 0x41fe, 0x1, 0x5, 0x0, 0x6, 0x8, 0x7, 0x6bd3, 0x5, 0xfffffff9, 0x1000, 0x3, 0xffffffff, 0x4, 0x9, 0x7fffffff, 0x6, 0x3, 0x8, 0x0, 0x3, 0x401, 0x7, 0x6, 0xfffffff5, 0x401, 0x7, 0x7, 0x10, 0x7f, 0xfffffff7, 0x600000, 0xfffffff7, 0x8000000, 0x5a78, 0x0, 0x7, 0x4, 0x0, 0x4, 0xf0000, 0x6, 0xa8, 0xe, 0x5, 0xfbf5, 0x1, 0x739, 0x6, 0x40000, 0x16ab00, 0x7f, 0x4, 0x5, 0x5, 0x4, 0x7, 0x7fffffff, 0x3, 0x1a64, 0x0, 0x0, 0xea, 0x2, 0xb811, 0xf99d, 0x8, 0x2, 0x800, 0x9, 0x7, 0x0, 0x3, 0xc1, 0xfffffffb, 0x7f, 0xec, 0x5, 0x3, 0x2000, 0x6, 0x0, 0x632f, 0x6, 0x2, 0x4, 0xbe, 0x7, 0x0, 0x2, 0x6, 0x8, 0xffff0ac1, 0x8, 0x3, 0xa, 0x1b4, 0xfffffffd, 0x80000001, 0xa, 0x6, 0x4, 0xffffffae, 0x1, 0x10000, 0x6, 0x2, 0x8, 0x2, 0x9146, 0xc99e, 0x3ff, 0x0, 0x4f2b, 0x7fffffff, 0x3, 0x5, 0x9, 0x80, 0x8001, 0x7ff, 0xaa4, 0x800, 0x89, 0x6, 0x4, 0x0, 0x10000, 0x1, 0x19b, 0x8, 0x9, 0xffffffff, 0xfff, 0x4, 0x7, 0x7ff, 0x9, 0x5, 0x6, 0x9, 0x40, 0x6, 0x7, 0xb3b, 0x8, 0x7fffffff, 0x1c0, 0x5, 0x832, 0x9, 0x1, 0xb498, 0x2, 0x4, 0x367b, 0x9, 0x5, 0x7, 0xff, 0x2, 0x9, 0x8, 0xffffff81, 0xb, 0xfffffc01, 0x0, 0x8, 0x9, 0x3, 0x8, 0x7, 0x10000, 0x7, 0xf, 0xfffffff9, 0x7, 0x0, 0xf3, 0x92, 0x6, 0xc2, 0x9, 0xc6c, 0x1, 0xfffffffa, 0x4, 0xd67, 0x3, 0x81, 0x200, 0x2, 0xfff, 0x6, 0x3, 0x0, 0x0, 0x9, 0x8, 0x8, 0x9, 0x81, 0xfffffff9, 0x5, 0x80000001, 0x3, 0xff, 0x4, 0xae, 0x58, 0x10, 0xfffffffd, 0x907, 0x7ff, 0x3ff, 0x4, 0x2, 0x8000, 0x80, 0xb9b, 0x5, 0x7, 0x9, 0x83, 0x6, 0x3, 0x1, 0xd67, 0xff, 0x3, 0xc, 0x101, 0x2, 0x4, 0x2, 0x6, 0x100, 0x9, 0x3, 0xa, 0xffffff3d, 0xa7, 0xfffffffb, 0x8, 0x8, 0x8001, 0x2, 0x801, 0x6e, 0x3, 0x8, 0x1, 0x8, 0x6, 0xf, 0x0, 0x5, 0x4, 0x6, 0xfffff000, 0x1, 0x41, 0x4, 0x3, 0x43, 0x0, 0x2, 0x8001, 0x8000, 0x0, 0x6, 0x64d, 0x67, 0x6, 0x8, 0x1, 0x9, 0xfffffffd, 0x9, 0xa961, 0x8, 0x5, 0x0, 0x2, 0x2, 0x9, 0x401, 0xd6, 0x7, 0x4, 0x79c5, 0xe7ea, 0x6, 0x80, 0x6, 0x1, 0x4, 0x76, 0xf, 0x1, 0x7, 0x0, 0x6, 0xc, 0x3, 0x17a1, 0x5, 0x3, 0xd65, 0x8, 0x1e, 0x6, 0x81, 0xc, 0x1, 0x8af, 0x0, 0x21, 0x0, 0x8000, 0x9, 0x1000, 0x3, 0xf, 0x0, 0x19, 0x4, 0x3, 0x9, 0x80000001, 0xb, 0x7fff, 0x18, 0x0, 0x1, 0xffffff02, 0x401, 0x9, 0xe1a, 0xfba6, 0x60000000, 0x7, 0xc679, 0xfff, 0x1, 0xffffff01, 0x5, 0x6, 0x1, 0x1, 0x0, 0x4, 0x8, 0x80, 0x9, 0x8000, 0xffff, 0x2, 0x8000, 0xef0, 0x100, 0xc846, 0x1, 0x8, 0x8d6, 0x1, 0x7fff, 0x8, 0x40, 0xb, 0x5, 0x6, 0x8f, 0x800, 0x10001, 0x8f8, 0xffffffff, 0x7, 0xd, 0xc, 0xb, 0x5, 0xd, 0x718, 0x911, 0x6, 0x1000, 0xc26c, 0xfff, 0x15d6, 0x6f, 0xd, 0x8, 0x0, 0xffffffff, 0x4, 0x7, 0x6, 0x1ff, 0xd6e, 0x9, 0x5, 0x10001, 0xff, 0x1, 0x1, 0x3, 0x5, 0x18228d42, 0xb7, 0x1000, 0x5, 0x8, 0x1, 0xe8, 0x2, 0x1, 0x40, 0x1, 0x7, 0x6, 0xfffff801, 0x4, 0x1, 0x1, 0x4, 0x11, 0x9, 0x80, 0x4, 0x722, 0x6, 0x101, 0x6, 0x72f, 0x6, 0xe, 0xffff, 0xa48, 0x1, 0x200, 0x5, 0x7, 0x4, 0x1, 0x4a37, 0x6, 0x4, 0x1000, 0x6, 0x7, 0x200, 0x9, 0x80, 0x2, 0x4, 0x1, 0x7, 0xff, 0x8, 0x6, 0x4, 0x8, 0xfffff801, 0x2, 0x8, 0x0, 0x9, 0x81, 0x6, 0x19be, 0x8, 0xdd6c, 0x2, 0x99, 0x3, 0x0, 0x8, 0x6, 0x37aa, 0xfffffff7, 0x1ff, 0x6, 0x1, 0x4, 0x6, 0xe0000000, 0x4, 0x67c2, 0x47bb1eb9, 0x9b, 0x9, 0x99, 0x101, 0x4, 0x2c2ca7a8, 0x7, 0x200, 0xd, 0x4, 0xfff, 0x0, 0x9, 0x3f6, 0x800, 0x3, 0x7, 0x2, 0x1, 0x3, 0x9, 0x5, 0x2, 0x6, 0x7, 0x1, 0x2, 0xfffffffe, 0xffffffff, 0x20000000, 0x889, 0x2e4, 0x8, 0x1, 0x7, 0x6, 0x2, 0x0, 0xe, 0x5, 0x6, 0x2, 0x3ff, 0x2, 0x1, 0x3, 0xfffffff8, 0x2, 0x7f, 0x401, 0x8, 0x10, 0xf06, 0x7, 0xffffff6c, 0x684, 0xea7, 0x1ca5, 0x0, 0x10000, 0xe6b, 0x1, 0xdccc, 0x6, 0x6, 0x9, 0x5, 0xc0e9, 0x6, 0x1ff, 0xf, 0x6, 0x1, 0x3, 0x4, 0x81, 0x9, 0x100, 0x519a, 0x8, 0x4ca76e7d, 0x4, 0x1, 0x8, 0x0, 0x7a, 0x0, 0x3, 0xfffff676, 0x3, 0xa2a, 0x4, 0x0, 0x3, 0x4, 0xe8b, 0xa, 0x800, 0x1, 0xbb0b, 0x6, 0x2, 0x8, 0x5, 0xb2, 0x120000, 0x7, 0x1, 0x7fffffff, 0xc83, 0x8, 0x7ff, 0x7, 0x7, 0xfffff801, 0x4, 0x80000001, 0x4, 0xffffffff, 0x80, 0x5, 0xf2, 0x5, 0xb, 0x1, 0x6, 0x8000, 0x4, 0x10001, 0x4, 0x7, 0x4, 0x34, 0x2, 0x100, 0xd78f, 0x6, 0xb, 0xa00000, 0x8, 0x1, 0x5, 0x0, 0x64, 0x8, 0x7, 0x0, 0x5, 0x650, 0x7ff, 0x7184, 0x1, 0x4, 0x6, 0x8, 0x1ff, 0x6, 0x6, 0x1000, 0x0, 0x3, 0x80000001, 0x4, 0x99f, 0xab, 0xb3b, 0x8, 0x4, 0xffff, 0x7, 0x401, 0x3, 0x1ff, 0x1, 0x4, 0x1, 0x1, 0x1, 0x6, 0xfffffffe, 0x9, 0xdce8, 0x3, 0xfffffffd, 0x4, 0x1, 0x2, 0x4, 0x2, 0x7, 0x5, 0x2, 0x5, 0x9, 0x7, 0x7, 0x0, 0x80000001, 0xfffffffe, 0x4a0, 0xa, 0x6, 0x4, 0xcc3d, 0x1, 0x8001, 0x2, 0x3, 0x4, 0x400, 0x370, 0x0, 0x6, 0x7f, 0x7fffffff, 0xb, 0x800, 0x6fd, 0xffffffff, 0x6, 0x86d, 0x1, 0x39, 0x10000000, 0x8, 0xd1, 0x80000000, 0x2, 0xf, 0x9, 0x2, 0x5, 0x0, 0x7ff, 0x7, 0x5, 0x3ff, 0x0, 0x1, 0x2, 0x9094, 0x0, 0x6ec6, 0x8f, 0xfffffffa, 0x2, 0x1, 0x4, 0xe, 0x8, 0x0, 0x2, 0x7, 0xfffffc01, 0x2, 0x1, 0xb, 0x54, 0x2, 0x4fe, 0x2c59, 0x5, 0x5, 0x40000000, 0x1, 0x9f35, 0x6, 0x1, 0x9, 0x9, 0x0, 0xddf9, 0x4, 0xffffffff, 0x6, 0x2, 0x864, 0xffffff3e, 0x6, 0x7, 0xf, 0x400, 0xde, 0xc6, 0x1ff, 0x9, 0x8, 0x1, 0x1, 0x3, 0x0, 0xfffffffb, 0x0, 0x3ff, 0x9, 0x10, 0x3, 0x6, 0xffff, 0x1, 0x41c4, 0xfffffffd, 0x2, 0x1, 0xfffffffe, 0x9, 0x3, 0x0, 0x3, 0x10000, 0x8, 0x6, 0x4, 0x85, 0x8, 0x0, 0x1, 0x6e, 0xffffffff, 0x8, 0x80000001, 0x8d, 0x9, 0x1, 0x60c, 0x4, 0x5, 0x0, 0x4, 0x0, 0x3, 0x5, 0xfffffff8, 0x1, 0x7, 0x7fff, 0xd, 0x7, 0x7, 0x400, 0xffffbf7a, 0x4, 0x2, 0x7fffffff, 0x1, 0x0, 0x2, 0x800, 0x2, 0x81, 0x8, 0xfffffffc, 0x7, 0x63, 0x8091, 0x10001, 0x0, 0x5, 0x8, 0x40000000, 0xd, 0x3, 0x4, 0x10001, 0x830, 0x5, 0x80, 0x6, 0x2, 0x7ff, 0x2, 0x9, 0x5, 0x3, 0x7, 0x9, 0x8, 0xeab, 0x1, 0x7, 0x0, 0x2, 0x8, 0x7f, 0x6, 0x7, 0x3, 0xfffffffd, 0x8000, 0x1e5a, 0x3, 0x40, 0x4, 0x1, 0x7f, 0xffff8000, 0x0, 0x1ff, 0x8, 0x99e8, 0x155, 0x8, 0x400, 0x5, 0x660, 0x4, 0x5, 0x7, 0x4, 0x5, 0xfffffff4, 0xfffff800, 0x2, 0xdd1, 0xf8f, 0xe0, 0x6, 0x2, 0x7, 0xffff3223, 0x9, 0x7e, 0x5, 0x10001, 0x5, 0x7, 0x0, 0x98, 0x3, 0xdec, 0xb, 0x4, 0x2, 0x8001, 0x2, 0x739b, 0xc0, 0x5, 0x1, 0x7, 0x38f3, 0x8, 0x5, 0x7fffffff, 0x101, 0x3ff, 0x4, 0xfd2d, 0x50a, 0x2, 0x2e000000, 0xba4, 0xd, 0x3a5ec0b, 0x7, 0x4, 0x37, 0x3, 0x3, 0x3, 0xfffffff9, 0xf9, 0xe, 0x10000, 0x4, 0xb2, 0xffffffff, 0xfffffffc, 0xfc, 0x6, 0x3, 0x200, 0x200, 0x0, 0x7, 0x5, 0x99, 0x0, 0x8, 0xfffffbff, 0x2, 0x8dd4, 0x4, 0xf3c, 0x3, 0x5, 0x1, 0x8, 0x6, 0x10001, 0x0, 0x3, 0xe1db7fde, 0x5, 0xe178, 0xffff1aa8, 0x7fff, 0x80000000, 0x1, 0x5, 0x101, 0x0, 0x8001, 0x6, 0x20000000, 0x8001, 0x3, 0x9, 0x8, 0x3, 0x80000000, 0x1ff, 0x1, 0x826, 0xff, 0x80, 0x1, 0xffffff80, 0x9, 0x3772, 0x1, 0x4, 0x3, 0x2, 0x6, 0x6, 0x0, 0x4, 0x0, 0x6, 0x1, 0x5, 0x3, 0xffff, 0x2, 0x0, 0x3ff, 0x80, 0x8, 0x6, 0x7f, 0xffffb35b, 0x3a5, 0x5, 0x800, 0xfff, 0x4, 0x7, 0x2, 0x2, 0xd4, 0x401, 0x7, 0x0, 0x5, 0x0, 0x4, 0x400, 0xec, 0x6, 0x5, 0x80000001, 0xd3, 0x8, 0x9, 0xb7, 0x800, 0x5, 0x3, 0x1, 0x0, 0x6, 0x9, 0x2, 0x1, 0xffffffff, 0x688, 0xddfb, 0x7329, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x132c, 0x401, 0x3, 0x8, 0x1000, 0x9, 0x5, 0x8, 0xf, 0x2, 0x900000, 0x1000, 0xffff, 0x10, 0x16b1, 0x7, 0x8, 0x53, 0x10001, 0x9, 0x2, 0x5, 0xffffffb3, 0x1, 0x100, 0x10, 0x0, 0x9, 0x200, 0xd34, 0x400000, 0x6, 0xfffffffd, 0x1, 0xfffffffd, 0x1ff, 0x3, 0x8, 0x4, 0x2d, 0x6, 0x5, 0x3, 0x7d, 0x2, 0x199, 0x800, 0x5, 0x7, 0x6, 0x6, 0x1, 0x10000, 0xe772, 0x4, 0xb3cd, 0x5, 0xca, 0x6, 0xfff, 0x998d, 0x80, 0x0, 0x7, 0x10000, 0x2, 0x800, 0x0, 0x401, 0x0, 0x0, 0x5, 0x2, 0xfffffffa, 0x4e08, 0x65, 0xb6, 0xffffffff, 0x6, 0x4, 0x4, 0x6, 0x0, 0xfffffffe, 0x10e, 0x400000, 0x2, 0x7, 0x4, 0x0, 0x99, 0x1, 0x0, 0x9, 0x1, 0x0, 0x80008000, 0x1, 0x5, 0xc, 0x9, 0x6, 0x7fff, 0xb, 0x81, 0x0, 0x0, 0xffff5d27, 0xe6b6, 0x1630, 0xc9, 0x6, 0x9, 0x10, 0x10000, 0x6, 0x7, 0x96, 0xfff, 0x80, 0x8, 0x7, 0xfe, 0x1, 0x1, 0x3, 0x7fff, 0x3, 0x6, 0x5, 0x7, 0xffffffff, 0xfffff2df, 0x1, 0x4, 0xb, 0xffff, 0x8001, 0x0, 0x7, 0x3ff, 0x7, 0xd, 0x57, 0x9, 0x7, 0x4, 0x3, 0x5, 0x0, 0x7, 0x9, 0x101, 0x7eae60f8, 0x0, 0x6, 0x1, 0x4, 0x0, 0x4, 0x6, 0x0, 0xe, 0x1, 0x5, 0xfffffffb, 0x5, 0x1, 0x7, 0x400, 0x1, 0xea1, 0xa, 0xfffffff1, 0x6588, 0xc, 0x80000001, 0xc, 0x2, 0x480000, 0x2f, 0x8, 0x2, 0x8, 0x7, 0x4, 0x2391, 0x1, 0xb, 0x2, 0x6, 0x1, 0x7, 0x2, 0x7fffffff, 0x314, 0xe, 0x1ff, 0x2, 0xd, 0xe, 0x2, 0x2, 0xb5ac, 0x40, 0x3, 0x4, 0x5, 0x2, 0xfffffff9, 0x2, 0xcd, 0x0, 0x63f, 0x8, 0x7, 0x6, 0x7, 0x9, 0xdf, 0x0, 0x7fffffff, 0x7, 0x5, 0x9, 0x6, 0x3ad, 0x6, 0x4, 0x5, 0xffffffff, 0x800, 0x3, 0xf, 0x8000, 0x9, 0x1, 0x4ac, 0x9, 0x35, 0x1f9a, 0x4c81f9c1, 0x5, 0x6, 0x4, 0x0, 0x9, 0x7, 0xc, 0x1eee, 0xe4e, 0xffff, 0x1, 0x5, 0x4, 0x9, 0x100, 0xffff, 0x5, 0x11, 0xfffffff9, 0x8, 0x7, 0x8, 0x6, 0x6, 0x401, 0x2, 0xbfbb, 0x10000, 0x2, 0x1, 0x0, 0xfffffffe, 0xfff, 0xc, 0x8, 0x200, 0x2, 0x8, 0x7, 0x3ff, 0x6, 0x401, 0x7fff, 0x10000, 0x3, 0x86, 0x0, 0x2, 0x4, 0x4, 0xffffff5c, 0xfff, 0x5, 0x0, 0x8, 0x7, 0x0, 0x8, 0x7ff, 0xfffff800, 0x4, 0x8, 0x1, 0x401, 0x0, 0x7, 0x1ff, 0x8, 0x800, 0x5, 0x8ea8, 0x2, 0xc, 0x4, 0x0, 0x2d80, 0x6, 0xfffffff7, 0x3, 0x4, 0x23, 0x101, 0x5, 0x8, 0x228, 0x0, 0x0, 0x7, 0xa7, 0x1, 0xff, 0x8a52, 0x2, 0x5, 0x3, 0x4, 0x5, 0xfff, 0x6, 0x754, 0xe, 0x6, 0x5a, 0x40, 0x4, 0x8, 0x4, 0xed, 0xfffffffd, 0x10000, 0x7, 0x9, 0x40, 0x9, 0x401, 0x800, 0xfff, 0x560, 0x5, 0xfee4, 0x9, 0x3ff, 0x5, 0x8, 0xfffffff8, 0x3, 0x400, 0x2, 0x6, 0x5, 0x36b, 0x54, 0x8d87, 0x8, 0x9, 0x5, 0x1, 0x4, 0x80000000, 0xf, 0x81, 0x8, 0x5, 0x5, 0x9, 0xca20, 0x5, 0x101, 0x3, 0x400, 0x40, 0xfffffff9, 0xffffffff, 0x10000, 0xffff1f41, 0xfff, 0x1, 0x9, 0x8, 0xc, 0x3, 0x6, 0xffffffff, 0x6, 0xe, 0x2, 0x7, 0x7, 0x2, 0x71ad, 0x4, 0xb, 0x8000, 0x1, 0x487d, 0x4, 0x4, 0xa00000, 0x4, 0x1, 0x75145340, 0xe, 0x1, 0x0, 0x200, 0x2, 0x5, 0xfcc, 0x1, 0x4, 0x1, 0x2, 0x7, 0x7ad4, 0x1, 0x5, 0x8, 0x0, 0xfff, 0x2, 0x5, 0x0, 0xc6, 0x4, 0x6, 0x2, 0x0, 0x1, 0x2, 0x101, 0x1, 0x100, 0x8, 0x0, 0xffff, 0x0, 0x8, 0xffff, 0x270b, 0x499, 0xd, 0x8, 0x4, 0x6, 0x80000001, 0x1a, 0x3, 0x80, 0x433, 0x533, 0x6, 0xffffffff, 0x7, 0x1, 0xbc, 0xfffffffd, 0xf2b5, 0x7b25, 0xa62, 0x3, 0x8, 0x8, 0x31a00000, 0x1, 0xc, 0xe28, 0x2, 0x6, 0x6, 0x4d11, 0x5, 0x81, 0xffab, 0xfffffffb, 0x1, 0x0, 0x3, 0x0, 0x7ff, 0xfb2, 0x3, 0xfffffffa, 0x7, 0xfffffff7, 0xf, 0x7, 0xa, 0x9c1, 0x7, 0x2, 0x2d, 0x107, 0xfffffffb, 0x0, 0xb, 0x101, 0x8, 0x0, 0xd, 0xfd91, 0xfffffff9, 0x4, 0x7, 0x68cb, 0x6, 0x4, 0x4, 0x8, 0x5, 0x1, 0x7fffffff, 0x8001, 0x0, 0x8, 0x9, 0x9, 0x0, 0xe9, 0x6, 0x1ff, 0xff, 0x4, 0xda, 0xb, 0x8, 0x2, 0x5, 0x43be70e5, 0x1637d213, 0x5, 0x1, 0xaa16, 0x2, 0x3, 0x7, 0x2a10, 0x200, 0xffffffff, 0x4, 0x6add, 0xfffffff9, 0x2, 0xf, 0x148, 0x3ff, 0x9, 0x4, 0x7, 0x2, 0x5, 0xa6, 0x5, 0xc, 0x3, 0xff, 0x98, 0x8, 0x3, 0xfffffffa, 0x7, 0xd, 0x3, 0xa, 0x8001, 0xce, 0x4a6, 0x5, 0x32, 0xd, 0x5, 0x1ff, 0x4000000, 0x800, 0x9, 0x3, 0x2, 0x1000, 0x200, 0x429, 0x7, 0x8, 0x40, 0xfffffff7, 0x8, 0x68, 0xfff, 0x10000, 0x1000, 0x9, 0x2ce, 0x0, 0x81, 0x5, 0x7fffffff, 0x3, 0x5, 0x2d, 0x3, 0x0, 0x2b, 0xdf8, 0x5, 0x8371, 0xa1, 0x3, 0x8, 0x5, 0x100, 0x9, 0xae, 0xfc, 0x7ff, 0x100, 0x7, 0x80000001, 0x9, 0x9, 0xa1d, 0x4, 0x200, 0x100, 0x0, 0x0, 0x4, 0x80000001, 0x2, 0x2, 0x41, 0xa, 0x2e4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x314, 0x6, 0xbdf5, 0x0, 0xffff, 0x7fffffff, 0x2, 0x200, 0x6, 0xe, 0x7ff, 0x5, 0x3, 0x3, 0x4, 0x4, 0x7, 0x957, 0xcfb2, 0xed, 0x5, 0x8001, 0x5, 0x6a7e, 0xfffffffc, 0x6, 0x4, 0x80000000, 0x15f294f4, 0x8200, 0xdb0a, 0x7, 0x5, 0xe13, 0x7fffffff, 0x6, 0x86d5, 0x7, 0x8c90, 0xffff, 0x0, 0x3ff, 0x0, 0x9, 0xd, 0x0, 0x2, 0xd60, 0x4, 0x7, 0x7, 0x6, 0x9, 0x4000, 0x8, 0x80000000, 0x6, 0x300, 0x1, 0x7, 0x8, 0x2, 0x40, 0xff, 0x2, 0x8148, 0x9, 0x3, 0x6, 0x7, 0x5, 0x401, 0xfff, 0xa, 0x7fffffff, 0x2000000, 0xffffffff, 0x40, 0x3, 0xfffffff8, 0xffff0001, 0xb, 0x718, 0x1, 0x2, 0x200, 0x7, 0x9, 0x5, 0xfffffffb, 0x2, 0x5, 0x0, 0x9279, 0x6, 0x5c, 0x3, 0x3, 0x7, 0x9, 0x8, 0xf4, 0x2, 0x7, 0xf5d0, 0x4, 0xf, 0x4, 0xa, 0x7, 0x9, 0x33ff, 0x7ff, 0x1, 0x6, 0x7fffffff, 0x7, 0x6, 0x80000000, 0xbd6, 0x25a7, 0x8, 0x8, 0x0, 0x7, 0x6, 0x0, 0x1bb, 0xe, 0xb4, 0x2, 0x47, 0x1, 0x8, 0xa, 0x52, 0x9, 0xfff, 0x9, 0x0, 0x693, 0x5, 0xb6b, 0x2, 0x8, 0x4, 0xff, 0x6, 0x8, 0x0, 0x200, 0xd23, 0x40, 0x0, 0x4, 0xd3, 0x80, 0x5, 0x7f, 0xe, 0x1, 0x4, 0x7f, 0x4, 0x2, 0xe, 0x100, 0x8, 0x80000000, 0xe182e732, 0x1, 0x3, 0x7, 0x80000000, 0x7, 0x9, 0x9, 0x6, 0xd, 0x4, 0x9, 0x7ff, 0x411, 0x2, 0x4fa4, 0x7, 0x7f, 0x400000, 0x9, 0x3, 0x2, 0x9, 0x0, 0xae9a, 0x18, 0xa0, 0x76bf, 0x8, 0x1, 0x4, 0x80000001, 0x2, 0x4, 0xa35, 0x9, 0x0, 0x7, 0x4, 0x9, 0x4, 0x5, 0x2, 0xc3e4, 0x3, 0x8, 0x7, 0x7, 0x427d5c28, 0x0, 0x10000, 0x100, 0xff, 0x8, 0x80, 0x8, 0x5, 0xf1cf, 0x1, 0x7, 0xe, 0x2, 0x4, 0x7, 0x3, 0x200, 0x9, 0x5, 0x5e7c, 0x9, 0x3, 0x6, 0x4, 0xf, 0x2, 0xffffff48, 0x2, 0x2, 0x7, 0x3, 0x7, 0x0, 0x6, 0x30, 0x6, 0x8, 0x6, 0x4, 0x5, 0x1, 0x9, 0x0, 0xfffff529, 0xe3, 0x667, 0x10, 0x0, 0x7ff, 0x0, 0x9, 0x1, 0x8, 0x10001, 0x2, 0xfffffffc, 0x2, 0x9, 0x925, 0x10001, 0x7, 0x8, 0x5, 0x7, 0x1, 0x3cd, 0x70b, 0xa9ca, 0x3, 0xfff, 0x7, 0x9, 0xd7, 0x4, 0x1, 0x0, 0x7, 0xfffffff8, 0x8, 0x9, 0x41, 0x24, 0x8, 0x3, 0x1, 0x1, 0x9, 0x3fc, 0x58fc, 0x7, 0x9, 0x9, 0x7, 0x1, 0x6e8a, 0xe3cc, 0x9, 0x8, 0x5, 0x1, 0xa, 0x8, 0x6, 0x8, 0x586, 0x10001, 0x7, 0x3, 0x8, 0xffff, 0x2, 0xba, 0xf, 0x4c, 0x8, 0x1000, 0x10000, 0x5, 0x8, 0x7fff, 0x8000, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x4, 0x7, 0xfdf8, 0x1, 0xf, 0x200, 0x400000, 0x0, 0xfffffff8, 0x3, 0xe9c7, 0x663e, 0x101, 0xd, 0x9, 0x3, 0x9, 0xfffffffb, 0x4, 0x8, 0x3, 0x3, 0x3, 0x0, 0x6, 0x3, 0x0, 0x176, 0x2642, 0x5, 0x3, 0x6561da78, 0xe6, 0x7ff, 0x5, 0x3, 0x8, 0x2, 0x36ba, 0xf5, 0x10000, 0x8, 0xffff, 0x8, 0x0, 0x1, 0x8001, 0x5, 0x8, 0x7f, 0x3, 0x9, 0xd5, 0x8, 0x2, 0xfffffff9, 0xab1b, 0x2, 0x1, 0x9, 0x91, 0x4, 0x6, 0x9, 0x1, 0x1, 0x2, 0x8, 0x3d, 0x1, 0xb, 0x6, 0x5, 0xffffa043, 0x7fff, 0x7ff, 0x7fffffff, 0xffff, 0x2a, 0x1, 0x7, 0x40, 0x101, 0x7ff, 0x4, 0x9, 0x5, 0x2, 0x6, 0x8, 0x200, 0x0, 0x9, 0x8, 0x9e, 0x5, 0xff, 0x7, 0x7f, 0x80, 0x10001, 0x4, 0xfc, 0x0, 0x4, 0x8000, 0xacd, 0xfff, 0x5, 0x10, 0x8, 0xffff, 0x1, 0x80000000, 0x9, 0x4, 0x9, 0x0, 0x7, 0xee10, 0xe4, 0x0, 0x2, 0x6, 0x2, 0x6, 0x9a, 0x80000000, 0x5, 0x3, 0x3, 0x3, 0x6b, 0x7, 0x6, 0x8, 0x557d, 0x9, 0x3399, 0x0, 0x14, 0x0, 0x311, 0xffff, 0x2, 0x2d3, 0x5, 0x8d5, 0x1, 0x4, 0x5, 0x9, 0x8, 0x0, 0xfffffffe, 0x4, 0xab, 0x2, 0x7, 0x8, 0x6, 0xb20, 0xa, 0x7, 0x7, 0x3, 0xffffff98, 0x3, 0x9, 0x32e5, 0x7, 0x7, 0x10, 0x1, 0x90, 0x10000, 0x8000, 0xa, 0xb5, 0xecfc, 0x4, 0x10, 0x8, 0xeb, 0x1, 0x1, 0xc, 0xc, 0x2, 0x2, 0x7, 0x2, 0x9, 0x80000001, 0xd, 0x511, 0x2, 0xe, 0xfffffffe, 0x9, 0x80, 0xba59, 0x92, 0x8, 0x0, 0x80000001, 0xb87a, 0x90, 0x7, 0x9, 0x9f, 0x8, 0x1c0, 0x9, 0x7ff, 0x4, 0x1000, 0xb, 0x2, 0x5, 0x0, 0xa, 0x914, 0x4b17, 0xa860, 0x3, 0x3, 0x6, 0x6, 0x6, 0x620, 0x5b9, 0xfffffbff, 0x7, 0x5, 0x3, 0x9, 0x7, 0x1, 0x1, 0x6be, 0x7, 0x1, 0x3, 0x2f3, 0x2, 0x6bf, 0xfffffff5, 0x8000, 0x81, 0x0, 0x0, 0x7, 0x7, 0x5b, 0x0, 0x0, 0xfffffff9, 0x34e4, 0x10000, 0x5, 0xc, 0x880, 0x4, 0xffff, 0xffff, 0x0, 0xd, 0x0, 0x1000, 0x5a6, 0x3, 0x2, 0x8, 0x5, 0x6, 0x0, 0x13, 0x0, 0x0, 0x9, 0x7, 0x8, 0x4, 0xfffffffa, 0x154e0383, 0x3, 0x6, 0x80000000, 0x0, 0x0, 0x6e, 0x2, 0x2, 0xfffffff7, 0xfffffffe, 0x9, 0x9e15, 0x401, 0x80000000, 0xc, 0x1, 0x7, 0xdf4, 0x80, 0x0, 0x6, 0xdc4, 0x2, 0x2fd, 0xea, 0x1000, 0x7ff, 0x52e82484, 0x9, 0x6, 0x40, 0x3, 0x60, 0x3, 0xc, 0x9, 0xca5b, 0x9, 0x9, 0x5, 0x101, 0x8, 0x0, 0xc3, 0x7d, 0x1, 0x6, 0xfffffff1, 0x1, 0x0, 0x19400, 0xffffff80, 0xffffffff, 0x28c, 0xffffffff, 0x55, 0x0, 0x2, 0x9, 0x3, 0x200, 0x40, 0x6, 0x6, 0x1000000, 0x1, 0x0, 0x7, 0x3c, 0x7, 0x80, 0x6, 0x2, 0x1, 0x6, 0x10000, 0x6d47, 0x6, 0xfffffffa, 0x2, 0x65, 0x9, 0x6, 0xf2b, 0xfffff842, 0x5, 0x10000, 0x8, 0x7, 0xc, 0x3, 0x5, 0x5, 0x3, 0x8001000, 0x3, 0x7fff, 0x7, 0x0, 0x10, 0x14a, 0x5c, 0xfffffff8, 0x5, 0x4, 0x4, 0x9, 0x6, 0x1, 0x6, 0x8001, 0xffff, 0x9a, 0x200, 0x401, 0xda, 0xfffffffd, 0x1, 0xdf, 0xfff, 0x80000000, 0x6ec, 0x8, 0x8, 0x3, 0xc3a0, 0xb9, 0xab, 0x1a5f, 0x7, 0x2, 0x1000, 0xb, 0x7, 0x2a8, 0x401, 0x80000001, 0x5, 0x8, 0x1000, 0x101, 0x401, 0x2, 0x6, 0xfff, 0x9129, 0x7, 0x9e, 0x0, 0x7, 0x1, 0x6, 0x1, 0x2, 0x401, 0x3, 0xfffffffa, 0x9, 0x6, 0x8000, 0xf, 0x0, 0x6, 0x2, 0x5, 0xc, 0x0, 0xfffff001, 0x6, 0x7fff, 0xdbc, 0x81, 0xb, 0x5, 0x8000, 0x7fffffff, 0x8001, 0x1, 0x8, 0x9, 0x0, 0x790a, 0x9, 0x2, 0x3ff, 0x1, 0x4, 0x1ff, 0x1, 0x39, 0x5, 0x1, 0x8, 0x5, 0x5a, 0x4, 0xb, 0x8, 0x8, 0x7, 0x100, 0x7, 0x7f, 0xff, 0x9, 0x8000, 0x6, 0x8, 0x81, 0xb, 0x0, 0x8001, 0x3, 0xffff, 0x7, 0x7, 0xac7c, 0xff, 0x0, 0x9d5, 0x9, 0xac2, 0x101, 0x3, 0x1, 0x5, 0xc, 0x80000000, 0x6, 0x3, 0x4000, 0x4, 0x10000, 0x5, 0x9, 0x2, 0x5, 0x80000001, 0x80000001, 0x5, 0xff, 0x10, 0xa, 0x0, 0xffffffff, 0x4, 0x9, 0x0, 0x7, 0xcec7, 0xfffffff9, 0x2, 0x2, 0x5c8ca901, 0x32a, 0x4, 0x10000, 0x536, 0xffffff7a, 0xfffffffa, 0x6, 0x7, 0x3, 0xffffffe5, 0xe, 0x4, 0xe345, 0x0, 0x0, 0xfff, 0x3, 0xe05e, 0x2, 0x80000000, 0x7, 0x679, 0x0, 0x4, 0x4, 0x17d, 0x9, 0x2, 0x9, 0x2, 0xc832, 0x8, 0x9, 0xfff, 0x100, 0xdc8, 0x80, 0x0, 0x4, 0x200, 0x8001, 0x1, 0xbd9f, 0x3, 0x0, 0x1, 0x5, 0x6, 0x8000, 0x10001, 0xfffff2dd, 0x2, 0xf, 0x9, 0x8, 0x3, 0x2, 0x5, 0x3, 0x6, 0xa, 0x10001, 0x10001, 0x613, 0x0, 0xfffff16b, 0x4, 0x7f, 0x6, 0x4, 0x4804, 0x2, 0x800, 0x3, 0x3f, 0x80, 0x5, 0x5, 0x38c, 0x5, 0x3, 0x9, 0x3, 0x9, 0x4, 0x99, 0x80000000, 0x2, 0x7fa, 0x1, 0xfffffff5, 0x0, 0xfffff001, 0x0, 0x1, 0x3, 0xff, 0x7ff, 0xb6dc, 0xc3ba, 0xf37, 0x4, 0x4, 0x7fffffff, 0xae6, 0x317b, 0x9, 0x0, 0x80000000, 0x5004, 0x4, 0x2, 0x4, 0x4, 0x4, 0x3ff, 0x7, 0x9, 0x90, 0x3, 0x1, 0x2, 0x7f, 0x7, 0x8, 0x9, 0x3, 0x3, 0x4, 0x100, 0x482e, 0x7ff, 0x6, 0x80000000, 0x5, 0x4, 0x5, 0x8001, 0xf], 0x1, 0x6}]}) 3.391589124s ago: executing program 1 (id=989): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xe, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x0, 0x40840) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) mmap$snddsp(&(0x7f0000830000/0x4000)=nil, 0x4000, 0x0, 0x80010, r3, 0x9000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'bond_slave_1\x00'}) 3.1211282s ago: executing program 9 (id=990): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) 2.902956918s ago: executing program 0 (id=991): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4040800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x80000000, &(0x7f0000000100)=0xb) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r8 = dup2(r7, r6) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x80001, 0x255, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5c, 0x8, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x1000, 0x3, 0x1e9, 0x0, r0}}], 0x1, &(0x7f0000000500)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0x404, 0x8004, 0x0, 0x0}}, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r13, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=1.0,username=guest,password=,port=20000,soft\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.321171571s ago: executing program 4 (id=992): r0 = openat$fb0(0xffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8286ca8cebed636a, {0x0, 0x0, 0x4a05}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/95, 0x5f}], 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f00000000c0), 0x0) sendmmsg$inet6(r8, &(0x7f0000002940), 0x40000000000017d, 0x811) 1.96605469s ago: executing program 9 (id=993): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3047b120e4000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r6, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = openat$cgroup_devices(r9, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f22eb75857a25de14998f1371ce27073"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7dd9f7648157f9d6fc2a1c6179999b0b"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a4b3e01375b9b703d2ac8f31aa0438ae"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_PMKID={0x14, 0x55, "beaaf43595b8f09cd09b69bdc37bc99d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0xa884) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x776, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 1.302459183s ago: executing program 4 (id=994): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4040800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) migrate_pages(0x0, 0x8, &(0x7f0000000000)=0x80000000, &(0x7f0000000100)=0xb) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r8 = dup2(r7, r6) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x80001, 0x255, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5c, 0x8, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x1000, 0x3, 0x1e9, 0x0, r0}}], 0x1, &(0x7f0000000500)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r9, '\x00', {0x404, 0x8004, 0x0, 0x0}}, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r13, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r13, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=1.0,username=guest,password=,port=20000,soft\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) 762.696803ms ago: executing program 9 (id=995): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) 0s ago: executing program 0 (id=996): r0 = socket(0x2b, 0x1, 0x1) move_pages(0x0, 0x41, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000e544d27a71747972ff18110800ee2e1a83c768e065db1bbfa45f99ed571d91cf1439adfb739ae22d962858f626f36e374e907ebe11fad2e89e88289fb5be6267c0337c29c658b2090900000000000000fbd4d907824e19d74415de1b4e1da6b028f57b5e225c1bda248b554c3ef597b4274803e0db52298e6e548600f140033029dd07cb4e3ee439613e4d94", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200a5"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) kernel console output (not intermixed with test programs): [ 147.584982][ T9844] RIP: 0023:0xf705efec [ 147.584995][ T9844] Code: Unable to access opcode bytes at 0xf705efc2. [ 147.585001][ T9844] RSP: 002b:00000000f544d3dc EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 147.585013][ T9844] RAX: ffffffffffffffda RBX: 00000000f544d410 RCX: 0000000000000058 [ 147.585021][ T9844] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 0000000000000000 [ 147.585027][ T9844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.585034][ T9844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.585041][ T9844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.585056][ T9844] [ 147.713992][ T9851] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 147.714038][ T9851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 147.726570][ T9851] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 147.726613][ T9851] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.125489][ T7034] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.208677][ T9870] FAULT_INJECTION: forcing a failure. [ 148.208677][ T9870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.208701][ T9870] CPU: 3 UID: 0 PID: 9870 Comm: syz.5.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.208717][ T9870] Tainted: [L]=SOFTLOCKUP [ 148.208721][ T9870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.208727][ T9870] Call Trace: [ 148.208732][ T9870] [ 148.208737][ T9870] dump_stack_lvl+0x100/0x190 [ 148.208756][ T9870] should_fail_ex.cold+0x5/0xa [ 148.208768][ T9870] ? prepare_alloc_pages+0x16d/0x5b0 [ 148.208785][ T9870] should_fail_alloc_page+0xeb/0x140 [ 148.208821][ T9870] prepare_alloc_pages+0x1f0/0x5b0 [ 148.208842][ T9870] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 148.208856][ T9870] ? __lock_acquire+0x5c0/0x1f40 [ 148.208873][ T9870] ? bpf_ksym_find+0x124/0x1c0 [ 148.208887][ T9870] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.208903][ T9870] ? is_bpf_text_address+0x94/0x1a0 [ 148.208922][ T9870] ? do_raw_spin_lock+0x128/0x260 [ 148.208934][ T9870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.208948][ T9870] ? __lock_acquire+0x5c0/0x1f40 [ 148.208966][ T9870] ? __lock_acquire+0x5c0/0x1f40 [ 148.208983][ T9870] ? __lock_acquire+0x5c0/0x1f40 [ 148.208999][ T9870] ? trace_hrtimer_start+0x77/0x220 [ 148.209015][ T9870] ? do_raw_spin_lock+0x128/0x260 [ 148.209027][ T9870] ? __bfs+0x150/0x2a0 [ 148.209040][ T9870] ? __lock_acquire+0x5c0/0x1f40 [ 148.209055][ T9870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.209072][ T9870] ? policy_nodemask+0xed/0x4f0 [ 148.209090][ T9870] alloc_pages_mpol+0x201/0x550 [ 148.209108][ T9870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 148.209126][ T9870] ? check_noncircular+0x97/0x160 [ 148.209143][ T9870] folio_alloc_mpol_noprof+0x36/0x260 [ 148.209156][ T9870] vma_alloc_folio_noprof+0xed/0x1d0 [ 148.209167][ T9870] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.209184][ T9870] do_anonymous_page+0xac9/0x2050 [ 148.209217][ T9870] ? __pfx_do_anonymous_page+0x10/0x10 [ 148.209229][ T9870] ? rcu_read_unlock+0x2d/0xb0 [ 148.209240][ T9870] ? rcu_read_unlock+0x2d/0xb0 [ 148.209251][ T9870] ? __pte_offset_map+0x179/0x310 [ 148.209267][ T9870] __handle_mm_fault+0x1ff3/0x2f60 [ 148.209281][ T9870] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.209291][ T9870] ? __pfx_mt_find+0x10/0x10 [ 148.209314][ T9870] ? find_vma+0xbf/0x140 [ 148.209332][ T9870] ? __pfx_find_vma+0x10/0x10 [ 148.209347][ T9870] handle_mm_fault+0x363/0xa20 [ 148.209361][ T9870] do_user_addr_fault+0x745/0x12f0 [ 148.209380][ T9870] exc_page_fault+0x6f/0xd0 [ 148.209393][ T9870] asm_exc_page_fault+0x26/0x30 [ 148.209404][ T9870] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 148.209421][ T9870] Code: 89 ee 48 89 ef e8 71 da e1 fc 4d 85 ff 75 26 e8 87 e0 e1 fc 89 de 4c 89 e7 e8 1d 56 54 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 61 e0 e1 fc 48 89 d8 5b 5d 41 [ 148.209432][ T9870] RSP: 0000:ffffc9000358fbb8 EFLAGS: 00050246 [ 148.209442][ T9870] RAX: 0000000000000001 RBX: 000000000000006f RCX: 000000000000006f [ 148.209449][ T9870] RDX: 0000000000000001 RSI: ffff88802b1d6800 RDI: 00000000800063c0 [ 148.209456][ T9870] RBP: 00000000800063c0 R08: 0000000000000000 R09: ffffed100563ad0d [ 148.209463][ T9870] R10: ffff88802b1d686e R11: 000000000000001f R12: ffff88802b1d6800 [ 148.209469][ T9870] R13: 000000008000642f R14: 00007ffffffff000 R15: 0000000000000000 [ 148.209484][ T9870] ? _copy_to_user+0x93/0xd0 [ 148.209500][ T9870] snd_pcm_oss_read2+0x294/0x400 [ 148.209516][ T9870] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 148.209528][ T9870] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 148.209544][ T9870] ? snd_pcm_oss_prepare+0x11e/0x240 [ 148.209558][ T9870] snd_pcm_oss_read+0x5aa/0x730 [ 148.209573][ T9870] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 148.209588][ T9870] vfs_read+0x1e4/0xb40 [ 148.209607][ T9870] ? lock_acquire+0x1d1/0x380 [ 148.209631][ T9870] ? __fget_files+0x34/0x3d0 [ 148.209654][ T9870] ? __pfx_vfs_read+0x10/0x10 [ 148.209672][ T9870] ? find_held_lock+0x2b/0x80 [ 148.209693][ T9870] ? __fget_files+0x215/0x3d0 [ 148.209709][ T9870] ? __fget_files+0x215/0x3d0 [ 148.209725][ T9870] ? __fget_files+0x21f/0x3d0 [ 148.209743][ T9870] ksys_read+0x12a/0x250 [ 148.209755][ T9870] ? __pfx_ksys_read+0x10/0x10 [ 148.209767][ T9870] ? ksys_write+0x1ac/0x250 [ 148.209780][ T9870] ? __pfx_ksys_write+0x10/0x10 [ 148.209796][ T9870] __do_fast_syscall_32+0x13a/0x8b0 [ 148.209810][ T9870] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.209825][ T9870] do_fast_syscall_32+0x32/0x70 [ 148.209839][ T9870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.209853][ T9870] RIP: 0023:0xf705efec [ 148.209866][ T9870] Code: Unable to access opcode bytes at 0xf705efc2. [ 148.209871][ T9870] RSP: 002b:00000000f540b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 148.209881][ T9870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800063c0 [ 148.209888][ T9870] RDX: 00000000fffffe46 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.209894][ T9870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.209901][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.209907][ T9870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.209921][ T9870] [ 148.355941][ T7034] usb 6-1: Using ep0 maxpacket: 32 [ 148.356419][ T7034] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 148.357315][ T7034] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 148.357335][ T7034] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 148.357354][ T7034] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 148.357369][ T7034] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 148.357388][ T7034] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.359047][ T7034] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 148.359061][ T7034] usb 6-1: Product: syz [ 148.359070][ T7034] usb 6-1: Manufacturer: syz [ 148.359078][ T7034] usb 6-1: SerialNumber: syz [ 148.360903][ T7034] usb 6-1: config 0 descriptor?? [ 148.366709][ T7034] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 148.384449][ T7034] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 148.521960][ T9877] netlink: 'syz.5.552': attribute type 10 has an invalid length. [ 148.528251][ T9877] syz_tun: entered promiscuous mode [ 148.536787][ T9877] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.570951][ T9877] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.570991][ T9877] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.571032][ T9877] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 148.593173][ T9877] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.659862][ T9877] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.687969][ T9862] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 148.688355][ T9882] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 148.690852][ T7034] usb 6-1: USB disconnect, device number 6 [ 148.690940][ C3] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 148.694310][ T7034] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 148.716055][ T5749] Bluetooth: hci1: command 0x2016 tx timeout [ 148.716082][ T5749] Bluetooth: hci0: command 0x041b tx timeout [ 148.716096][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.716110][ T5749] Bluetooth: hci2: command 0x2016 tx timeout [ 149.775469][ T9889] syz.2.545 (9889) used greatest stack depth: 19208 bytes left [ 150.010967][ T9918] jffs2: notice: (9918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.039174][ T44] audit: type=1800 audit(1790724687.497:7): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.546" name="file0" dev="overlay" ino=371 res=0 errno=0 [ 150.188591][ T9925] jffs2: notice: (9925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.424287][ T9925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.549'. [ 150.805171][ T5099] Bluetooth: hci2: command 0x2016 tx timeout [ 150.805381][ T5099] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.805436][ T5099] Bluetooth: hci0: command 0x041b tx timeout [ 150.805497][ T5099] Bluetooth: hci1: command 0x2016 tx timeout [ 151.753101][ T9941] FAULT_INJECTION: forcing a failure. [ 151.753101][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 151.753122][ T9941] CPU: 2 UID: 0 PID: 9941 Comm: syz.2.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.753137][ T9941] Tainted: [L]=SOFTLOCKUP [ 151.753141][ T9941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.753148][ T9941] Call Trace: [ 151.753152][ T9941] [ 151.753156][ T9941] dump_stack_lvl+0x100/0x190 [ 151.753175][ T9941] should_fail_ex.cold+0x5/0xa [ 151.753210][ T9941] should_failslab+0xc2/0x120 [ 151.753228][ T9941] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 151.753242][ T9941] ? __alloc_skb+0x5b7/0x710 [ 151.753259][ T9941] ? __alloc_skb+0x140/0x710 [ 151.753278][ T9941] __alloc_skb+0x140/0x710 [ 151.753294][ T9941] ? __alloc_skb+0x5b7/0x710 [ 151.753310][ T9941] ? __pfx___alloc_skb+0x10/0x10 [ 151.753330][ T9941] netlink_alloc_large_skb+0x69/0x150 [ 151.753348][ T9941] netlink_sendmsg+0x680/0xda0 [ 151.753366][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.753384][ T9941] ? apparmor_socket_sendmsg+0x165/0x280 [ 151.753403][ T9941] ____sys_sendmsg+0xa4d/0xbe0 [ 151.753416][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.753433][ T9941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.753453][ T9941] ___sys_sendmsg+0x190/0x1e0 [ 151.753468][ T9941] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.753489][ T9941] ? find_held_lock+0x2b/0x80 [ 151.753510][ T9941] __sys_sendmsg+0x160/0x210 [ 151.753521][ T9941] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.753536][ T9941] ? __pfx_ksys_write+0x10/0x10 [ 151.753552][ T9941] __do_fast_syscall_32+0x13a/0x8b0 [ 151.753566][ T9941] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.753580][ T9941] do_fast_syscall_32+0x32/0x70 [ 151.753594][ T9941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.753608][ T9941] RIP: 0023:0xf704efec [ 151.753621][ T9941] Code: Unable to access opcode bytes at 0xf704efc2. [ 151.753626][ T9941] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 151.753637][ T9941] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 151.753644][ T9941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.753650][ T9941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.753656][ T9941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.753663][ T9941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.753676][ T9941] [ 152.348113][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 152.495682][ T9] usb 11-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 152.496865][ T9] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.496901][ T9] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.496920][ T9] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 152.496950][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.505677][ T9953] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 152.525233][ T9] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 152.525486][ T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 152.539479][ T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 152.539542][ T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 152.540935][ T9] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 152.542171][ T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 88 [ 152.542228][ T9] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 152.543422][ T9] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 152.789207][ T9] usb 11-1: USB disconnect, device number 4 [ 152.791599][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 152.809842][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 152.810446][ T9] keyspan 11-1:1.0: device disconnected [ 152.875046][ T5099] Bluetooth: hci2: command 0x2016 tx timeout [ 152.875081][ T5745] Bluetooth: hci1: command 0x2016 tx timeout [ 153.216048][ T9978] jffs2: notice: (9978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.282895][ T9980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.560'. [ 153.707699][ T9992] netlink: 'syz.6.562': attribute type 4 has an invalid length. [ 153.717348][ T9992] Invalid ELF header magic: != ELF [ 153.724288][ T9992] overlayfs: overlapping lowerdir path [ 154.119074][ T9994] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 154.157824][ T9996] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.565'. [ 154.157842][ T9996] openvswitch: netlink: Message has 512 unknown bytes. [ 154.208854][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.270194][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.322979][T10002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.346219][ T5745] Bluetooth: hci1: unexpected event for opcode 0x1003 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 155.625072][ T6827] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 155.794967][ T6827] usb 11-1: Using ep0 maxpacket: 32 [ 155.795409][ T6827] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 155.796200][ T6827] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 155.796218][ T6827] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 155.796237][ T6827] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 155.796250][ T6827] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 155.796264][ T6827] usb 11-1: config 0 interface 0 has no altsetting 0 [ 155.800867][ T6827] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 155.800880][ T6827] usb 11-1: Product: syz [ 155.800887][ T6827] usb 11-1: Manufacturer: syz [ 155.800895][ T6827] usb 11-1: SerialNumber: syz [ 155.802114][ T6827] usb 11-1: config 0 descriptor?? [ 155.822433][ T6827] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 155.824376][ T6827] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 155.850625][T10042] jffs2: notice: (10042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.700778][T10052] jffs2: notice: (10052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.809649][T10054] FAULT_INJECTION: forcing a failure. [ 156.809649][T10054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.809680][T10054] CPU: 2 UID: 0 PID: 10054 Comm: syz.1.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.809704][T10054] Tainted: [L]=SOFTLOCKUP [ 156.809710][T10054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.809720][T10054] Call Trace: [ 156.809726][T10054] [ 156.809733][T10054] dump_stack_lvl+0x100/0x190 [ 156.809761][T10054] should_fail_ex.cold+0x5/0xa [ 156.809783][T10054] strncpy_from_user+0x3b/0x2d0 [ 156.809811][T10054] do_getname+0x78/0x390 [ 156.809837][T10054] do_sys_openat2+0xc7/0x1e0 [ 156.809864][T10054] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.809891][T10054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.809918][T10054] __ia32_compat_sys_openat+0x12d/0x210 [ 156.809936][T10054] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 156.809952][T10054] ? fput+0x7c/0x100 [ 156.809974][T10054] ? ksys_write+0x1ac/0x250 [ 156.809993][T10054] ? __pfx_ksys_write+0x10/0x10 [ 156.810032][T10054] __do_fast_syscall_32+0x13a/0x8b0 [ 156.810055][T10054] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.810077][T10054] do_fast_syscall_32+0x32/0x70 [ 156.810099][T10054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.810121][T10054] RIP: 0023:0xf7f67fec [ 156.810141][T10054] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 156.810149][T10054] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 156.810167][T10054] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 156.810177][T10054] RDX: 0000000000121302 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.810188][T10054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.810197][T10054] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 156.810208][T10054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.810230][T10054] [ 157.113220][T10056] can0: slcan on ptm0. [ 157.205829][T10056] md/raid:md0: not clean -- starting background reconstruction [ 157.205850][T10056] md/raid:md0: invalid chunk size 512 [ 157.206404][T10056] md: pers->run() failed ... [ 157.266022][T10055] can0 (unregistered): slcan off ptm0. [ 157.938422][T10094] can0: slcan on ptm0. [ 157.996793][T10094] md/raid:md0: not clean -- starting background reconstruction [ 157.996811][T10094] md/raid:md0: invalid chunk size 512 [ 157.996823][T10094] md: pers->run() failed ... [ 158.029961][T10099] nvme nvme0: rdma_resolve_addr failed (-19). [ 158.065317][T10093] can0 (unregistered): slcan off ptm0. [ 158.147443][T10116] tipc: Started in network mode [ 158.147469][T10116] tipc: Node identity 7f000001, cluster identity 4711 [ 158.148242][T10116] tipc: New replicast peer: 127.0.0.2 [ 158.148848][T10116] tipc: Enabled bearer , priority 10 [ 158.505019][ T6827] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 158.592292][T10139] pci_bus 0000:01: busn_res: [bus 01] is released [ 158.655847][T10140] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 158.659903][T10140] pci 0000:00:04.0: PCI bridge to [bus 01] [ 158.660044][T10140] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 158.660163][T10140] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 158.661452][T10140] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 158.661886][T10140] pci 0000:00:04.0: enabling Extended Tags [ 158.676639][T10140] pci 0000:00:04.0: Adding to iommu group 4 [ 158.690319][ T6827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.690347][ T6827] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 158.705944][ T6827] usb 7-1: config 142 has an invalid interface number: 251 but max is 0 [ 158.705960][ T6827] usb 7-1: config 142 descriptor has 1 excess byte, ignoring [ 158.705971][ T6827] usb 7-1: config 142 has no interface number 0 [ 158.705990][ T6827] usb 7-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 158.706004][ T6827] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 158.706017][ T6827] usb 7-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 158.706029][ T6827] usb 7-1: config 142 interface 251 has no altsetting 0 [ 158.708286][ T6827] usb 7-1: string descriptor 0 read error: -22 [ 158.708345][ T6827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.712003][T10128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.712056][T10128] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.713322][ T6827] cypress_m8 7-1:142.251: HID->COM RS232 Adapter converter detected [ 158.737607][T10140] pci 0000:00:04.0: PCI bridge to [bus 01] [ 158.742064][T10140] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 158.742096][T10140] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 158.742166][T10140] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff]: assigned [ 158.742183][T10140] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 158.742199][T10140] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 158.742264][T10140] pci 0000:00:04.0: PCI bridge to [bus 01] [ 158.742325][T10140] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 158.745559][T10140] pci 0000:00:04.0: bridge window [mem 0x80000000-0x801fffff] [ 158.746616][T10140] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 158.786248][ T6827] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 158.820173][T10140] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 158.840554][T10140] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 158.904352][T10146] FAULT_INJECTION: forcing a failure. [ 158.904352][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 158.904376][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.5.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.904395][T10146] Tainted: [L]=SOFTLOCKUP [ 158.904399][T10146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.904405][T10146] Call Trace: [ 158.904409][T10146] [ 158.904415][T10146] dump_stack_lvl+0x100/0x190 [ 158.904436][T10146] should_fail_ex.cold+0x5/0xa [ 158.904453][T10146] should_failslab+0xc2/0x120 [ 158.904473][T10146] __kvmalloc_node_noprof+0x113/0x9b0 [ 158.904489][T10146] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 158.904502][T10146] ? ip_vs_rht_alloc+0x142/0x710 [ 158.904523][T10146] ip_vs_rht_alloc+0x142/0x710 [ 158.904540][T10146] ? ip_vs_add_service+0x1659/0x2240 [ 158.904557][T10146] ip_vs_svc_table_alloc.isra.0+0x2d/0xd0 [ 158.904570][T10146] ip_vs_add_service+0x166e/0x2240 [ 158.904589][T10146] ? __ip_vs_service_find+0x4d0/0x9c0 [ 158.904603][T10146] ? find_held_lock+0x2b/0x80 [ 158.904617][T10146] ? do_ip_vs_set_ctl+0x7e4/0xc90 [ 158.904634][T10146] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 158.904650][T10146] do_ip_vs_set_ctl+0xb86/0xc90 [ 158.904667][T10146] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 158.904682][T10146] ? rcu_is_watching+0x13/0xc0 [ 158.904725][T10146] ? find_held_lock+0x2b/0x80 [ 158.904741][T10146] ? nf_sockopt_find.isra.0+0x222/0x290 [ 158.904754][T10146] ? nf_sockopt_find.isra.0+0x222/0x290 [ 158.904773][T10146] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.904797][T10146] ? nf_setsockopt+0x8d/0xf0 [ 158.904808][T10146] nf_setsockopt+0x8d/0xf0 [ 158.904823][T10146] ip_setsockopt+0xcb/0xf0 [ 158.904846][T10146] udp_setsockopt+0x64/0xb0 [ 158.904860][T10146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.904879][T10146] do_sock_setsockopt+0xf3/0x1d0 [ 158.904896][T10146] __sys_setsockopt+0x119/0x190 [ 158.904918][T10146] __ia32_sys_setsockopt+0xbc/0x160 [ 158.904936][T10146] ? __do_fast_syscall_32+0xb3/0x8b0 [ 158.904951][T10146] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.904965][T10146] __do_fast_syscall_32+0x13a/0x8b0 [ 158.904982][T10146] do_fast_syscall_32+0x32/0x70 [ 158.904998][T10146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.905014][T10146] RIP: 0023:0xf705efec [ 158.905029][T10146] Code: Unable to access opcode bytes at 0xf705efc2. [ 158.905034][T10146] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 158.905047][T10146] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 158.905054][T10146] RDX: 0000000000000482 RSI: 0000000080000100 RDI: 000000000000002c [ 158.905063][T10146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.905069][T10146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.905077][T10146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.905092][T10146] [ 159.157105][ T6827] tipc: Node number set to 2130706433 [ 159.460751][T10128] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 159.460807][T10128] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 159.461200][ C0] usb 7-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 159.734988][ T61] usb 7-1: USB disconnect, device number 6 [ 159.740606][ T61] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 159.740984][ T61] cypress_m8 7-1:142.251: device disconnected [ 160.155086][ T5099] Bluetooth: hci0: command 0x041b tx timeout [ 160.155280][ T5745] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.038283][T10039] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 161.053739][ T6874] usb 11-1: USB disconnect, device number 5 [ 161.065283][ T6874] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 161.775178][ T7448] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.926187][ T7448] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 161.938260][ T7448] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.938296][ T7448] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 161.938317][ T7448] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 161.938357][ T7448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.974814][T10177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.981297][ T7448] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 161.981589][ T7448] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 161.995649][ T7448] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 161.995688][ T7448] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 161.997843][ T7448] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 161.998656][ T7448] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 161.998690][ T7448] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 162.003075][ T7448] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 162.184628][ T61] usb 6-1: USB disconnect, device number 7 [ 162.188574][ T61] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 162.192578][ T61] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 162.192978][ T61] keyspan 6-1:1.0: device disconnected [ 162.315177][T10184] FAULT_INJECTION: forcing a failure. [ 162.315177][T10184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.315201][T10184] CPU: 3 UID: 0 PID: 10184 Comm: syz.5.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.315216][T10184] Tainted: [L]=SOFTLOCKUP [ 162.315220][T10184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.315227][T10184] Call Trace: [ 162.315231][T10184] [ 162.315236][T10184] dump_stack_lvl+0x100/0x190 [ 162.315255][T10184] should_fail_ex.cold+0x5/0xa [ 162.315271][T10184] _copy_to_user+0x32/0xd0 [ 162.315288][T10184] snd_pcm_oss_read2+0x294/0x400 [ 162.315303][T10184] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 162.315315][T10184] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 162.315332][T10184] ? snd_pcm_oss_prepare+0x11e/0x240 [ 162.315345][T10184] snd_pcm_oss_read+0x5aa/0x730 [ 162.315360][T10184] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 162.315380][T10184] vfs_read+0x1e4/0xb40 [ 162.315394][T10184] ? lock_acquire+0x1d1/0x380 [ 162.315410][T10184] ? __fget_files+0x34/0x3d0 [ 162.315424][T10184] ? __pfx_vfs_read+0x10/0x10 [ 162.315435][T10184] ? find_held_lock+0x2b/0x80 [ 162.315447][T10184] ? __fget_files+0x215/0x3d0 [ 162.315461][T10184] ? __fget_files+0x215/0x3d0 [ 162.315476][T10184] ? __fget_files+0x21f/0x3d0 [ 162.315494][T10184] ksys_read+0x12a/0x250 [ 162.315506][T10184] ? __pfx_ksys_read+0x10/0x10 [ 162.315518][T10184] ? ksys_write+0x1ac/0x250 [ 162.315531][T10184] ? __pfx_ksys_write+0x10/0x10 [ 162.315546][T10184] __do_fast_syscall_32+0x13a/0x8b0 [ 162.315561][T10184] ? lockdep_hardirqs_on+0x7d/0x110 [ 162.315574][T10184] do_fast_syscall_32+0x32/0x70 [ 162.315589][T10184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.315603][T10184] RIP: 0023:0xf705efec [ 162.315617][T10184] Code: Unable to access opcode bytes at 0xf705efc2. [ 162.315622][T10184] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 162.315633][T10184] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800063c0 [ 162.315640][T10184] RDX: 00000000fffffe46 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.315646][T10184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.315652][T10184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.315659][T10184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.315672][T10184] [ 162.549962][T10188] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.905025][ T5846] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 163.035136][ T6874] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 163.055695][ T5846] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 163.056510][ T5846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 163.056528][ T5846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 163.056541][ T5846] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.056560][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.058621][T10200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.058719][T10200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.060039][ T5846] pl2303 7-1:1.0: required interrupt-in endpoint missing [ 163.200185][ T6874] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.201169][ T6874] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.201182][ T6874] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.201192][ T6874] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.201211][ T6874] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.202552][ T6874] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.202569][ T6874] usb 11-1: Product: syz [ 163.202581][ T6874] usb 11-1: Manufacturer: syz [ 163.211196][ T6874] cdc_wdm 11-1:1.0: skipping garbage [ 163.211206][ T6874] cdc_wdm 11-1:1.0: skipping garbage [ 163.232919][ T6874] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 163.232931][ T6874] cdc_wdm 11-1:1.0: Unknown control protocol [ 163.513802][ T5846] usb 7-1: USB disconnect, device number 7 [ 163.585403][ T7034] usb 11-1: USB disconnect, device number 6 [ 163.824462][T10212] FAULT_INJECTION: forcing a failure. [ 163.824462][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 163.824485][T10212] CPU: 3 UID: 0 PID: 10212 Comm: syz.5.618 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.824500][T10212] Tainted: [L]=SOFTLOCKUP [ 163.824505][T10212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.824511][T10212] Call Trace: [ 163.824515][T10212] [ 163.824520][T10212] dump_stack_lvl+0x100/0x190 [ 163.824540][T10212] should_fail_ex.cold+0x5/0xa [ 163.824554][T10212] should_failslab+0xc2/0x120 [ 163.824571][T10212] __kmalloc_noprof+0xfc/0x840 [ 163.824585][T10212] ? do_raw_spin_lock+0x128/0x260 [ 163.824596][T10212] ? sock_kmalloc+0x111/0x170 [ 163.824612][T10212] sock_kmalloc+0x111/0x170 [ 163.824626][T10212] hash_alloc_result+0xd7/0x150 [ 163.824640][T10212] hash_recvmsg+0x196/0x930 [ 163.824652][T10212] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 163.824667][T10212] ? __pfx_hash_recvmsg+0x10/0x10 [ 163.824680][T10212] sock_recvmsg+0x1d5/0x220 [ 163.824695][T10212] ____sys_recvmsg+0x21e/0x670 [ 163.824710][T10212] ? __pfx_____sys_recvmsg+0x10/0x10 [ 163.824745][T10212] ? __lock_acquire+0x5c0/0x1f40 [ 163.824764][T10212] ___sys_recvmsg+0x16a/0x1a0 [ 163.824779][T10212] ? __pfx____sys_recvmsg+0x10/0x10 [ 163.824793][T10212] ? lock_acquire+0x1d1/0x380 [ 163.824834][T10212] do_recvmmsg+0x54d/0x740 [ 163.824851][T10212] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.824867][T10212] ? find_held_lock+0x2b/0x80 [ 163.824879][T10212] ? ksys_write+0x190/0x250 [ 163.824892][T10212] ? ksys_write+0x190/0x250 [ 163.824910][T10212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.824926][T10212] __sys_recvmmsg+0x21f/0x270 [ 163.824938][T10212] ? __pfx___sys_recvmmsg+0x10/0x10 [ 163.824951][T10212] ? ksys_write+0x1ac/0x250 [ 163.824965][T10212] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 163.824981][T10212] ? __do_fast_syscall_32+0xb3/0x8b0 [ 163.825009][T10212] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.825021][T10212] __do_fast_syscall_32+0x13a/0x8b0 [ 163.825035][T10212] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.825049][T10212] do_fast_syscall_32+0x32/0x70 [ 163.825063][T10212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.825077][T10212] RIP: 0023:0xf705efec [ 163.825089][T10212] Code: Unable to access opcode bytes at 0xf705efc2. [ 163.825094][T10212] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 163.825105][T10212] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080003700 [ 163.825112][T10212] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.825119][T10212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.825144][T10212] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.825152][T10212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.825166][T10212] [ 164.388479][T10230] jffs2: notice: (10230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.550901][T10234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.622'. [ 166.812596][T10260] input: syz0 as /devices/virtual/input/input10 [ 166.928061][T10263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.637'. [ 166.984380][T10265] netlink: 'syz.1.637': attribute type 39 has an invalid length. [ 167.082249][T10263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.082266][T10263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.090324][T10263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.090337][T10263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.378378][T10288] ptp ptp0: guarantee physical clock free running [ 168.875126][ T5745] Bluetooth: hci1: command 0x2016 tx timeout [ 169.190353][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 169.190370][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 169.226941][T10294] input: syz0 as /devices/virtual/input/input11 [ 169.269380][ T44] audit: type=1326 audit(1790724706.767:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10295 comm="syz.1.646" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x0 [ 169.371567][T10297] PM: Enabling pm_trace changes system date and time during resume. [ 169.371567][T10297] PM: Correct system time has to be restored manually after resume. [ 170.227286][T10307] md/raid:md0: not clean -- starting background reconstruction [ 170.227305][T10307] md/raid:md0: invalid chunk size 512 [ 170.227317][T10307] md: pers->run() failed ... [ 170.523872][T10313] FAULT_INJECTION: forcing a failure. [ 170.523872][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.523895][T10313] CPU: 0 UID: 0 PID: 10313 Comm: syz.1.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.523910][T10313] Tainted: [L]=SOFTLOCKUP [ 170.523914][T10313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.523921][T10313] Call Trace: [ 170.523924][T10313] [ 170.523929][T10313] dump_stack_lvl+0x100/0x190 [ 170.523949][T10313] should_fail_ex.cold+0x5/0xa [ 170.523972][T10313] _copy_from_iter+0x1f4/0x1690 [ 170.524000][T10313] ? __lock_acquire+0x5c0/0x1f40 [ 170.524029][T10313] ? __pfx__copy_from_iter+0x10/0x10 [ 170.524058][T10313] ? lock_acquire+0x1d1/0x380 [ 170.524084][T10313] ? aa_file_perm+0x197/0x14d0 [ 170.524102][T10313] ? find_held_lock+0x2b/0x80 [ 170.524117][T10313] tun_get_user+0x3ba/0x3cc0 [ 170.524140][T10313] ? __lock_acquire+0x5c0/0x1f40 [ 170.524156][T10313] ? __pfx_tun_get_user+0x10/0x10 [ 170.524174][T10313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 170.524190][T10313] ? find_held_lock+0x2b/0x80 [ 170.524203][T10313] ? tun_get+0x191/0x370 [ 170.524218][T10313] ? tun_get+0x191/0x370 [ 170.524236][T10313] tun_chr_write_iter+0xdc/0x200 [ 170.524257][T10313] vfs_write+0x6af/0x1050 [ 170.524271][T10313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 170.524290][T10313] ? __pfx_vfs_write+0x10/0x10 [ 170.524302][T10313] ? find_held_lock+0x2b/0x80 [ 170.524323][T10313] ksys_write+0x12a/0x250 [ 170.524336][T10313] ? __pfx_ksys_write+0x10/0x10 [ 170.524348][T10313] ? ksys_write+0x1ac/0x250 [ 170.524361][T10313] ? __pfx_ksys_write+0x10/0x10 [ 170.524376][T10313] __do_fast_syscall_32+0x13a/0x8b0 [ 170.524390][T10313] ? lockdep_hardirqs_on+0x7d/0x110 [ 170.524404][T10313] do_fast_syscall_32+0x32/0x70 [ 170.524419][T10313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.524433][T10313] RIP: 0023:0xf7f67fec [ 170.524446][T10313] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 170.524451][T10313] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 170.524463][T10313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 170.524470][T10313] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.524476][T10313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.524482][T10313] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.524488][T10313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.524502][T10313] [ 170.593860][T10315] FAULT_INJECTION: forcing a failure. [ 170.593860][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 170.593882][T10315] CPU: 3 UID: 0 PID: 10315 Comm: syz.2.652 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.593897][T10315] Tainted: [L]=SOFTLOCKUP [ 170.593901][T10315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.593907][T10315] Call Trace: [ 170.593911][T10315] [ 170.593916][T10315] dump_stack_lvl+0x100/0x190 [ 170.593934][T10315] should_fail_ex.cold+0x5/0xa [ 170.593949][T10315] should_failslab+0xc2/0x120 [ 170.593966][T10315] __kmalloc_noprof+0xfc/0x840 [ 170.593981][T10315] ? tomoyo_encode2+0xfb/0x3c0 [ 170.593997][T10315] tomoyo_encode2+0xfb/0x3c0 [ 170.594017][T10315] tomoyo_encode+0x29/0x50 [ 170.594030][T10315] tomoyo_realpath_from_path+0x18c/0x690 [ 170.594047][T10315] tomoyo_path_number_perm+0x23c/0x580 [ 170.594058][T10315] ? tomoyo_path_number_perm+0x22e/0x580 [ 170.594071][T10315] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.594083][T10315] ? get_pid_task+0x106/0x250 [ 170.594098][T10315] ? __lock_acquire+0x5c0/0x1f40 [ 170.594121][T10315] ? __fget_files+0x34/0x3d0 [ 170.594135][T10315] ? find_held_lock+0x2b/0x80 [ 170.594148][T10315] ? __fget_files+0x215/0x3d0 [ 170.594161][T10315] ? hook_file_ioctl_common+0x140/0x440 [ 170.594172][T10315] ? __fget_files+0x215/0x3d0 [ 170.594188][T10315] ? __fget_files+0x21f/0x3d0 [ 170.594204][T10315] security_file_ioctl_compat+0xd3/0x230 [ 170.594216][T10315] __ia32_compat_sys_ioctl+0xc2/0x360 [ 170.594231][T10315] __do_fast_syscall_32+0x13a/0x8b0 [ 170.594245][T10315] ? lockdep_hardirqs_on+0x7d/0x110 [ 170.594258][T10315] do_fast_syscall_32+0x32/0x70 [ 170.594272][T10315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.594286][T10315] RIP: 0023:0xf704efec [ 170.594299][T10315] Code: Unable to access opcode bytes at 0xf704efc2. [ 170.594304][T10315] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 170.594315][T10315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0285628 [ 170.594322][T10315] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.594328][T10315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.594334][T10315] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.594340][T10315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.594355][T10315] [ 170.594364][T10315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.285086][ T5745] Bluetooth: hci0: command 0x041b tx timeout [ 171.368744][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 171.368762][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 171.945744][ T7448] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 173.445128][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.456244][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 173.456265][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 173.995851][ T7448] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 174.000204][T10342] netlink: 88 bytes leftover after parsing attributes in process `syz.1.662'. [ 174.887774][T10372] input: syz0 as /devices/virtual/input/input12 [ 175.155062][ T7448] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.315085][ T7448] usb 6-1: Using ep0 maxpacket: 32 [ 175.315888][ T7448] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 175.316901][ T7448] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 175.316921][ T7448] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 175.316940][ T7448] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 175.316955][ T7448] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 175.316970][ T7448] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.318505][ T7448] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 175.318519][ T7448] usb 6-1: Product: syz [ 175.318530][ T7448] usb 6-1: Manufacturer: syz [ 175.318539][ T7448] usb 6-1: SerialNumber: syz [ 175.319792][ T7448] usb 6-1: config 0 descriptor?? [ 175.323706][ T7448] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 175.324535][ T7448] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 175.627366][T10374] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 175.629948][T10375] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 175.629953][ T10] usb 6-1: USB disconnect, device number 8 [ 175.630041][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 175.633171][ T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 175.835078][ T5745] Bluetooth: hci2: command 0x2016 tx timeout [ 175.837941][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 175.837965][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 184.338409][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.343624][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.352674][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.360764][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.361344][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.375928][ T5749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.380721][ T5745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.383608][ T5745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.383831][ T5745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.393018][ T5749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.394579][ T5749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.397498][ T5749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.398396][ T5745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.398861][ T5749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.513999][ T5745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.208020][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.208094][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.208187][T10402] bridge_slave_0: entered allmulticast mode [ 185.208974][T10402] bridge_slave_0: entered promiscuous mode [ 185.214580][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.214620][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.214679][T10402] bridge_slave_1: entered allmulticast mode [ 185.215945][T10402] bridge_slave_1: entered promiscuous mode [ 185.248475][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.248619][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.248725][T10400] bridge_slave_0: entered allmulticast mode [ 185.250170][T10400] bridge_slave_0: entered promiscuous mode [ 185.257624][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.260699][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.260882][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.260954][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.261072][T10400] bridge_slave_1: entered allmulticast mode [ 185.262421][T10400] bridge_slave_1: entered promiscuous mode [ 185.309138][T10402] team0: Port device team_slave_0 added [ 185.315767][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.318841][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.320416][T10402] team0: Port device team_slave_1 added [ 185.353076][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.353088][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.353102][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.355343][T10400] team0: Port device team_slave_0 added [ 185.356659][T10400] team0: Port device team_slave_1 added [ 185.363318][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.363328][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.363341][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.390002][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.390013][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.390026][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.391008][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.391015][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.391028][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.401144][T10402] hsr_slave_0: entered promiscuous mode [ 185.401790][T10402] hsr_slave_1: entered promiscuous mode [ 185.402103][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 185.402114][T10402] Cannot create hsr debugfs directory [ 185.441442][T10400] hsr_slave_0: entered promiscuous mode [ 185.441898][T10400] hsr_slave_1: entered promiscuous mode [ 185.442229][T10400] debugfs: 'hsr0' already exists in 'hsr' [ 185.442241][T10400] Cannot create hsr debugfs directory [ 186.295956][T10402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 186.304587][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.310271][T10402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 186.320566][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.321017][T10402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 186.323018][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.434004][ T44] audit: type=1800 audit(1790724723.927:9): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.674" name="file0" dev="overlay" ino=667 res=0 errno=0 [ 186.467501][T10402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 186.469328][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.508702][T10402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.539958][T10402] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.545166][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.545212][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.549762][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.549825][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.556253][ T5745] Bluetooth: hci4: command tx timeout [ 186.556268][ T5737] Bluetooth: hci5: command tx timeout [ 187.106793][T10400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.113352][ T5745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.119705][ T5745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.132620][ T5745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.147750][ T5745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.150793][ T5745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.193198][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.196931][T10400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.207781][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.219360][T10400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.222196][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.222614][T10400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.230490][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.232295][T10402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.389492][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.405272][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.413211][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.413257][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.425035][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.425082][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.683534][T10402] veth0_vlan: entered promiscuous mode [ 187.690655][T10402] veth1_vlan: entered promiscuous mode [ 187.727998][T10402] veth0_macvtap: entered promiscuous mode [ 187.738245][T10402] veth1_macvtap: entered promiscuous mode [ 187.878075][T10402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.900486][T10402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.123101][ T5789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.123591][ T5789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.123810][ T5789] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.124168][ T5789] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.220175][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.220191][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.262143][ T44] audit: type=1326 audit(1790724725.757:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.262276][ T44] audit: type=1326 audit(1790724725.757:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.264817][ T44] audit: type=1326 audit(1790724725.757:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.265077][ T44] audit: type=1326 audit(1790724725.757:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.283157][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.283177][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.308747][ T44] audit: type=1326 audit(1790724725.797:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.308794][ T44] audit: type=1326 audit(1790724725.807:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.308831][ T44] audit: type=1326 audit(1790724725.807:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.308867][ T44] audit: type=1326 audit(1790724725.807:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.311259][ T44] audit: type=1326 audit(1790724725.807:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.1.678" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 188.394246][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.394384][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.394481][T10504] bridge_slave_0: entered allmulticast mode [ 188.395998][T10504] bridge_slave_0: entered promiscuous mode [ 188.398188][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.398259][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.398353][T10504] bridge_slave_1: entered allmulticast mode [ 188.399765][T10504] bridge_slave_1: entered promiscuous mode [ 188.452965][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.458462][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.478909][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.493496][T10504] team0: Port device team_slave_0 added [ 188.635255][ T5745] Bluetooth: hci4: command tx timeout [ 188.645180][ T5745] Bluetooth: hci5: command tx timeout [ 188.736094][T10504] team0: Port device team_slave_1 added [ 188.756410][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.756423][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.756436][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.794450][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.794466][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.794487][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.840773][T10504] hsr_slave_0: entered promiscuous mode [ 188.843210][T10504] hsr_slave_1: entered promiscuous mode [ 188.846136][T10504] debugfs: 'hsr0' already exists in 'hsr' [ 188.846155][T10504] Cannot create hsr debugfs directory [ 188.961583][T10400] veth0_vlan: entered promiscuous mode [ 189.000927][T10400] veth1_vlan: entered promiscuous mode [ 189.088957][T10400] veth0_macvtap: entered promiscuous mode [ 189.110217][T10400] veth1_macvtap: entered promiscuous mode [ 189.196523][ T5745] Bluetooth: hci6: command tx timeout [ 189.264736][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.273233][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.300165][T10588] kAFS: No cell specified [ 189.448272][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.448497][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.448722][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.449060][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.669419][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.669433][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.869074][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.869089][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.892715][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 189.892736][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 189.894072][T10609] sctp: [Deprecated]: syz.1.682 (pid 10609) Use of int in max_burst socket option. [ 189.894072][T10609] Use struct sctp_assoc_value instead [ 190.042183][T10504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.162693][T10504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.167725][T10504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.192586][T10504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.193250][T10504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.203888][T10504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.212235][T10504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.232365][T10504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.324612][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.391924][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.436781][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.438312][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.521873][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.521935][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.725119][ T5745] Bluetooth: hci5: command tx timeout [ 190.725142][ T5745] Bluetooth: hci4: command tx timeout [ 191.229448][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.274757][T10504] veth0_vlan: entered promiscuous mode [ 191.275204][ T5737] Bluetooth: hci6: command tx timeout [ 191.299684][T10504] veth1_vlan: entered promiscuous mode [ 191.332167][T10504] veth0_macvtap: entered promiscuous mode [ 191.339285][T10504] veth1_macvtap: entered promiscuous mode [ 191.365593][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.373898][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.475376][ T6156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.475415][ T6156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.475433][ T6156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.475484][ T6156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.538570][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.538585][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.574742][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.574757][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.945145][ T7449] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 192.084961][ T7449] usb 14-1: device descriptor read/64, error -71 [ 192.284521][T10687] CIFS: Attempting to mount //127.0.0.1/share,ser=root [ 192.293919][T10687] CIFS: VFS: Error connecting to socket. Aborting operation. [ 192.293973][T10687] CIFS: VFS: cifs_mount failed w/return code = -111 [ 192.307375][T10687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.307385][T10687] IPv6: NLM_F_CREATE should be set when creating new route [ 192.307403][T10687] IPv6: NLM_F_CREATE should be set when creating new route [ 192.307414][T10687] IPv6: NLM_F_CREATE should be set when creating new route [ 192.324962][ T7449] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 192.465045][ T7449] usb 14-1: device descriptor read/64, error -71 [ 192.615051][ T7449] usb usb14-port1: attempt power cycle [ 192.820027][ T5745] Bluetooth: hci5: command tx timeout [ 192.820074][ T5737] Bluetooth: hci4: command tx timeout [ 193.254958][ T7449] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 193.315410][ T7449] usb 14-1: device descriptor read/8, error -71 [ 193.355338][ T5737] Bluetooth: hci6: command tx timeout [ 193.614983][ T7449] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 193.651255][ T7449] usb 14-1: device descriptor read/8, error -71 [ 193.755099][ T7449] usb usb14-port1: unable to enumerate USB device [ 193.760068][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.159658][T10707] pimreg: entered allmulticast mode [ 194.319400][T10707] pimreg: left allmulticast mode [ 194.325142][T10716] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 194.325142][T10716] [ 194.325461][T10716] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 194.326146][T10716] CIFS: Attempting to mount //172.20.20.170/share [ 195.189508][T10716] CIFS: VFS: cifs_mount failed w/return code = -512 [ 195.435265][ T5737] Bluetooth: hci6: command tx timeout [ 196.308331][T10756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.518206][T10759] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 196.528078][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.697'. [ 196.590645][T10765] netlink: 'syz.4.697': attribute type 39 has an invalid length. [ 196.653395][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.653419][T10766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.657994][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.658019][T10766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.773969][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 196.773982][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.698'. [ 196.775461][T10770] virtio-fs: tag not found [ 199.157167][ T6876] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 199.337645][ T6876] usb 6-1: Using ep0 maxpacket: 32 [ 199.339378][ T6876] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.345503][ T6876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.345579][ T6876] usb 6-1: config 0 has no interfaces? [ 199.358823][ T6876] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.358877][ T6876] usb 6-1: Product: syz [ 199.359069][ T6876] usb 6-1: Manufacturer: syz [ 199.359101][ T6876] usb 6-1: SerialNumber: syz [ 199.509133][ T6876] usb 6-1: config 0 descriptor?? [ 201.512236][ T5817] usb 6-1: USB disconnect, device number 9 [ 202.515039][ T7034] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 202.665102][ T7034] usb 6-1: device descriptor read/64, error -71 [ 202.934958][ T7034] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 203.065007][ T7034] usb 6-1: device descriptor read/64, error -71 [ 203.185482][ T7034] usb usb6-port1: attempt power cycle [ 203.555071][ T7034] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 203.577097][ T7034] usb 6-1: device descriptor read/8, error -71 [ 203.609380][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 203.835078][ T7034] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 203.855405][ T7034] usb 6-1: device descriptor read/8, error -71 [ 203.975377][ T7034] usb usb6-port1: unable to enumerate USB device [ 206.524727][T10742] syz.1.693 (10742) used greatest stack depth: 18104 bytes left [ 210.717439][T10944] jfs: Unknown parameter 'discardSô®à¶Œçï+Ÿˆ—.7 [ 210.717439][T10944] 3ýF;òñ£•' [ 211.977150][T10879] syz.9.711 (10879) used greatest stack depth: 17256 bytes left [ 212.994990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 213.302291][T10967] 9p: Bad value for 'rfdno' [ 213.304108][T10967] jffs2: notice: (10967) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 213.405043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 213.994657][T10982] netlink: 855 bytes leftover after parsing attributes in process `syz.9.739'. [ 214.769171][T10999] FAULT_INJECTION: forcing a failure. [ 214.769171][T10999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.769193][T10999] CPU: 3 UID: 0 PID: 10999 Comm: syz.9.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.769208][T10999] Tainted: [L]=SOFTLOCKUP [ 214.769213][T10999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.769219][T10999] Call Trace: [ 214.769223][T10999] [ 214.769227][T10999] dump_stack_lvl+0x100/0x190 [ 214.769247][T10999] should_fail_ex.cold+0x5/0xa [ 214.769262][T10999] _copy_from_user+0x2e/0xd0 [ 214.769279][T10999] memdup_user+0x6b/0xe0 [ 214.769292][T10999] strndup_user+0x78/0xe0 [ 214.769305][T10999] __ia32_sys_mount+0x136/0x310 [ 214.769323][T10999] ? __pfx___ia32_sys_mount+0x10/0x10 [ 214.769344][T10999] __do_fast_syscall_32+0x13a/0x8b0 [ 214.769358][T10999] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.769372][T10999] do_fast_syscall_32+0x32/0x70 [ 214.769386][T10999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.769401][T10999] RIP: 0023:0xf701efec [ 214.769414][T10999] Code: Unable to access opcode bytes at 0xf701efc2. [ 214.769419][T10999] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 214.769430][T10999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 214.769437][T10999] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000080002140 [ 214.769443][T10999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.769450][T10999] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.769456][T10999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.769469][T10999] [ 217.327280][T11051] syzkaller0: entered promiscuous mode [ 217.327295][T11051] syzkaller0: entered allmulticast mode [ 218.035315][T11064] FAULT_INJECTION: forcing a failure. [ 218.035315][T11064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.035337][T11064] CPU: 1 UID: 0 PID: 11064 Comm: syz.1.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.035352][T11064] Tainted: [L]=SOFTLOCKUP [ 218.035356][T11064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.035363][T11064] Call Trace: [ 218.035378][T11064] [ 218.035384][T11064] dump_stack_lvl+0x100/0x190 [ 218.035417][T11064] should_fail_ex.cold+0x5/0xa [ 218.035432][T11064] _copy_from_iter+0x1f4/0x1690 [ 218.035452][T11064] ? __pfx__copy_from_iter+0x10/0x10 [ 218.035468][T11064] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 218.035487][T11064] ? lock_acquire+0x1d1/0x380 [ 218.035506][T11064] copy_page_from_iter+0x238/0x300 [ 218.035526][T11064] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 218.035551][T11064] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 218.035571][T11064] ? __lock_acquire+0x5c0/0x1f40 [ 218.035593][T11064] ? aa_file_perm+0x197/0x14d0 [ 218.035607][T11064] ? find_held_lock+0x2b/0x80 [ 218.035622][T11064] tun_get_user+0x1674/0x3cc0 [ 218.035644][T11064] ? __lock_acquire+0x5c0/0x1f40 [ 218.035660][T11064] ? __pfx_tun_get_user+0x10/0x10 [ 218.035678][T11064] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.035695][T11064] ? find_held_lock+0x2b/0x80 [ 218.035707][T11064] ? tun_get+0x191/0x370 [ 218.035722][T11064] ? tun_get+0x191/0x370 [ 218.035741][T11064] tun_chr_write_iter+0xdc/0x200 [ 218.035759][T11064] vfs_write+0x6af/0x1050 [ 218.035773][T11064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 218.035791][T11064] ? __pfx_vfs_write+0x10/0x10 [ 218.035803][T11064] ? find_held_lock+0x2b/0x80 [ 218.035824][T11064] ksys_write+0x12a/0x250 [ 218.035837][T11064] ? __pfx_ksys_write+0x10/0x10 [ 218.035854][T11064] do_int80_emulation+0x166/0x650 [ 218.035870][T11064] asm_int80_emulation+0x1a/0x20 [ 218.035881][T11064] RIP: 0023:0xf71675ab [ 218.035890][T11064] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 218.035901][T11064] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 218.035915][T11064] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800002c0 [ 218.035921][T11064] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.035928][T11064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.035934][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.035940][T11064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.035954][T11064] [ 218.627553][T11075] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 219.016007][T11090] overlayfs: missing 'lowerdir' [ 219.215855][T11098] FAULT_INJECTION: forcing a failure. [ 219.215855][T11098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.215877][T11098] CPU: 3 UID: 0 PID: 11098 Comm: syz.4.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.215893][T11098] Tainted: [L]=SOFTLOCKUP [ 219.215897][T11098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.215904][T11098] Call Trace: [ 219.215907][T11098] [ 219.215912][T11098] dump_stack_lvl+0x100/0x190 [ 219.215930][T11098] should_fail_ex.cold+0x5/0xa [ 219.215945][T11098] _copy_from_user+0x2e/0xd0 [ 219.215961][T11098] get_compat_msghdr+0xb3/0x480 [ 219.215976][T11098] ? __pfx_get_compat_msghdr+0x10/0x10 [ 219.215995][T11098] ___sys_sendmsg+0x1b6/0x1e0 [ 219.216010][T11098] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.216031][T11098] ? find_held_lock+0x2b/0x80 [ 219.216054][T11098] __sys_sendmsg+0x160/0x210 [ 219.216065][T11098] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.216079][T11098] ? __pfx_ksys_write+0x10/0x10 [ 219.216096][T11098] __do_fast_syscall_32+0x13a/0x8b0 [ 219.216109][T11098] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.216128][T11098] do_fast_syscall_32+0x32/0x70 [ 219.216142][T11098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.216156][T11098] RIP: 0023:0xf703efec [ 219.216169][T11098] Code: Unable to access opcode bytes at 0xf703efc2. [ 219.216174][T11098] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 219.216185][T11098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 219.216192][T11098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.216198][T11098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.216204][T11098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.216210][T11098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.216224][T11098] [ 219.248683][T11100] FAULT_INJECTION: forcing a failure. [ 219.248683][T11100] name failslab, interval 1, probability 0, space 0, times 0 [ 219.248705][T11100] CPU: 2 UID: 0 PID: 11100 Comm: syz.4.764 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.248721][T11100] Tainted: [L]=SOFTLOCKUP [ 219.248725][T11100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.248731][T11100] Call Trace: [ 219.248736][T11100] [ 219.248741][T11100] dump_stack_lvl+0x100/0x190 [ 219.248760][T11100] should_fail_ex.cold+0x5/0xa [ 219.248780][T11100] should_failslab+0xc2/0x120 [ 219.248806][T11100] __kvmalloc_node_noprof+0x113/0x9b0 [ 219.248830][T11100] ? tun_attach.isra.0+0x97b/0x1870 [ 219.248862][T11100] tun_attach.isra.0+0x97b/0x1870 [ 219.248929][T11100] ? round_jiffies_up+0xea/0x130 [ 219.248957][T11100] ? __pfx_round_jiffies_up+0x10/0x10 [ 219.248985][T11100] ? timer_init_key+0x150/0x310 [ 219.249014][T11100] tun_net_init+0x416/0x560 [ 219.249043][T11100] ? __pfx_tun_net_init+0x10/0x10 [ 219.249068][T11100] register_netdevice+0x685/0x25a0 [ 219.249094][T11100] ? __pfx_register_netdevice+0x10/0x10 [ 219.249116][T11100] ? alloc_netdev_mqs+0x120a/0x15c0 [ 219.249141][T11100] __tun_chr_ioctl+0x1ef4/0x4880 [ 219.249168][T11100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 219.249193][T11100] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 219.249219][T11100] ? __fget_files+0x34/0x3d0 [ 219.249244][T11100] ? hook_file_ioctl_common+0x140/0x440 [ 219.249271][T11100] ? __fget_files+0x21f/0x3d0 [ 219.249298][T11100] ? __pfx_tun_chr_compat_ioctl+0x10/0x10 [ 219.249328][T11100] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 219.249352][T11100] __do_fast_syscall_32+0x13a/0x8b0 [ 219.249379][T11100] do_fast_syscall_32+0x32/0x70 [ 219.249402][T11100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.249426][T11100] RIP: 0023:0xf703efec [ 219.249446][T11100] Code: Unable to access opcode bytes at 0xf703efc2. [ 219.249455][T11100] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 219.249474][T11100] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400454ca [ 219.249486][T11100] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.249497][T11100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.249508][T11100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.249519][T11100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.249544][T11100] [ 220.387427][T11124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.785125][ T43] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 220.958175][ T43] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 220.959978][ T43] usb 9-1: config 0 has no interfaces? [ 220.960036][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.021604][ T43] usb 9-1: config 0 descriptor?? [ 221.047009][ T7449] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 221.277766][ T1479] usb 9-1: USB disconnect, device number 4 [ 221.655109][ T6889] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 221.825017][ T6889] usb 14-1: Using ep0 maxpacket: 32 [ 221.825838][ T6889] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 221.827217][ T6889] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 221.827247][ T6889] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 221.827275][ T6889] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 221.827297][ T6889] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 221.827319][ T6889] usb 14-1: config 0 interface 0 has no altsetting 0 [ 221.829285][ T6889] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 221.829304][ T6889] usb 14-1: Product: syz [ 221.829317][ T6889] usb 14-1: Manufacturer: syz [ 221.829329][ T6889] usb 14-1: SerialNumber: syz [ 221.831397][ T6889] usb 14-1: config 0 descriptor?? [ 221.833661][ T6889] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 221.835102][ T6889] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 222.177899][T11168] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 222.178220][T11180] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 222.178290][ T10] usb 14-1: USB disconnect, device number 6 [ 222.178329][ C1] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 222.195782][ T10] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 224.538528][T11216] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 224.722388][T11223] FAULT_INJECTION: forcing a failure. [ 224.722388][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.722410][T11223] CPU: 3 UID: 0 PID: 11223 Comm: syz.9.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.722426][T11223] Tainted: [L]=SOFTLOCKUP [ 224.722430][T11223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.722436][T11223] Call Trace: [ 224.722441][T11223] [ 224.722446][T11223] dump_stack_lvl+0x100/0x190 [ 224.722465][T11223] should_fail_ex.cold+0x5/0xa [ 224.722481][T11223] _copy_to_user+0x32/0xd0 [ 224.722499][T11223] simple_read_from_buffer+0xcb/0x170 [ 224.722516][T11223] proc_fail_nth_read+0x1af/0x230 [ 224.722530][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.722545][T11223] ? rw_verify_area+0xce/0x6d0 [ 224.722557][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.722570][T11223] vfs_read+0x1e4/0xb40 [ 224.722583][T11223] ? lock_acquire+0x1d1/0x380 [ 224.722605][T11223] ? __fget_files+0x34/0x3d0 [ 224.722619][T11223] ? __pfx_vfs_read+0x10/0x10 [ 224.722631][T11223] ? find_held_lock+0x2b/0x80 [ 224.722645][T11223] ? __fget_files+0x215/0x3d0 [ 224.722661][T11223] ? __fget_files+0x21f/0x3d0 [ 224.722679][T11223] ksys_read+0x12a/0x250 [ 224.722692][T11223] ? __pfx_ksys_read+0x10/0x10 [ 224.722710][T11223] do_int80_emulation+0x166/0x650 [ 224.722739][T11223] asm_int80_emulation+0x1a/0x20 [ 224.722751][T11223] RIP: 0023:0xf71575ab [ 224.722761][T11223] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 224.722772][T11223] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 224.722784][T11223] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 224.722791][T11223] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 224.722798][T11223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.722804][T11223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.722811][T11223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.722826][T11223] [ 225.887081][T11239] syzkaller0: entered promiscuous mode [ 225.887095][T11239] syzkaller0: entered allmulticast mode [ 226.395499][ T6876] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 226.574971][ T6876] usb 6-1: Using ep0 maxpacket: 32 [ 226.575487][ T6876] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 226.577935][ T6876] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 226.577954][ T6876] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 226.577973][ T6876] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 226.577986][ T6876] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 226.577999][ T6876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 226.582342][ T6876] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 226.582356][ T6876] usb 6-1: Product: syz [ 226.582370][ T6876] usb 6-1: Manufacturer: syz [ 226.582378][ T6876] usb 6-1: SerialNumber: syz [ 226.588967][ T6876] usb 6-1: config 0 descriptor?? [ 226.591676][ T6876] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 226.602641][ T6876] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 226.918131][T11249] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 226.918207][ T7448] usb 6-1: USB disconnect, device number 14 [ 226.918236][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 226.920375][T11258] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 226.922945][ T7448] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 227.445043][ T7448] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 227.575250][ T5979] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.597447][ T7448] usb 9-1: unable to get BOS descriptor or descriptor too short [ 227.597473][ T7448] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 227.598271][ T7448] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 227.598284][ T7448] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 227.598294][ T7448] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 227.598305][ T7448] usb 9-1: config 129 has no interface number 0 [ 227.598313][ T7448] usb 9-1: config 129 has no interface number 1 [ 227.598334][ T7448] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 227.598347][ T7448] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 227.598363][ T7448] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 227.598376][ T7448] usb 9-1: config 129 interface 135 has no altsetting 0 [ 227.598385][ T7448] usb 9-1: config 129 interface 5 has no altsetting 0 [ 227.600612][ T7448] usb 9-1: string descriptor 0 read error: -22 [ 227.600669][ T7448] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.616134][ T7448] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.616160][ T7448] usb 9-1: MIDIStreaming interface descriptor not found [ 227.934647][ T5979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.934680][ T5979] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 228.014961][ T5979] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 228.014981][ T5979] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 228.014994][ T5979] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 228.015006][ T5979] usb 5-1: config 129 has no interface number 0 [ 228.015015][ T5979] usb 5-1: config 129 has no interface number 1 [ 228.015039][ T5979] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 228.015054][ T5979] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 228.015071][ T5979] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 228.015086][ T5979] usb 5-1: config 129 interface 135 has no altsetting 0 [ 228.015096][ T5979] usb 5-1: config 129 interface 5 has no altsetting 0 [ 228.241043][ T7448] usb 9-1: USB disconnect, device number 5 [ 228.461984][ T5979] usb 5-1: string descriptor 0 read error: -22 [ 228.462094][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.473867][ T5979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.473895][ T5979] usb 5-1: MIDIStreaming interface descriptor not found [ 228.670860][T11265] FAULT_INJECTION: forcing a failure. [ 228.670860][T11265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.670883][T11265] CPU: 2 UID: 0 PID: 11265 Comm: syz.0.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.670899][T11265] Tainted: [L]=SOFTLOCKUP [ 228.670903][T11265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.670910][T11265] Call Trace: [ 228.670914][T11265] [ 228.670919][T11265] dump_stack_lvl+0x100/0x190 [ 228.670938][T11265] should_fail_ex.cold+0x5/0xa [ 228.670953][T11265] strncpy_from_user+0x3b/0x2d0 [ 228.670973][T11265] do_getname+0x78/0x390 [ 228.670985][T11265] do_sys_openat2+0xc7/0x1e0 [ 228.671002][T11265] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.671020][T11265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.671035][T11265] ? __fget_files+0x21f/0x3d0 [ 228.671052][T11265] __ia32_compat_sys_openat+0x12d/0x210 [ 228.671065][T11265] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 228.671076][T11265] ? ksys_write+0x1ac/0x250 [ 228.671093][T11265] do_int80_emulation+0x166/0x650 [ 228.671110][T11265] asm_int80_emulation+0x1a/0x20 [ 228.671122][T11265] RIP: 0023:0xf72075ab [ 228.671131][T11265] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 228.671143][T11265] RSP: 002b:00000000f54bd03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.671154][T11265] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54bd100 [ 228.671162][T11265] RDX: 0000000000002981 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.671168][T11265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.671175][T11265] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.671182][T11265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.671195][T11265] [ 228.678050][ T7448] usb 5-1: USB disconnect, device number 9 [ 229.072637][T11294] pim6reg: entered allmulticast mode [ 229.161578][T11300] pim6reg: left allmulticast mode [ 229.223924][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 229.256002][T11303] hsr_slave_1 (unregistering): left promiscuous mode [ 230.363072][T11312] IPVS: length: 191 != 8 [ 230.745617][ T6876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.935052][ T7448] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 230.937579][ T6876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.944633][ T6876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.953523][ T6876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.957567][ T6876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.957728][ T6876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.973538][ T6876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.973721][ T6876] usb 5-1: Product: syz [ 230.974333][ T6876] usb 5-1: Manufacturer: syz [ 231.053884][ T6876] cdc_wdm 5-1:1.0: skipping garbage [ 231.054077][ T6876] cdc_wdm 5-1:1.0: skipping garbage [ 231.119393][ T6876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 231.119408][ T6876] cdc_wdm 5-1:1.0: Unknown control protocol [ 231.314969][ T6876] usb 5-1: USB disconnect, device number 10 [ 231.819209][T11333] netlink: 'syz.9.820': attribute type 1 has an invalid length. [ 231.832035][T11333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.864173][T11333] bond1: (slave gretap1): making interface the new active one [ 231.870742][T11333] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.876461][ T6876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.036000][ T6876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.038490][ T6876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.038518][ T6876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.038536][ T6876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.038574][ T6876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.040432][ T6876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.040456][ T6876] usb 5-1: Product: syz [ 232.040471][ T6876] usb 5-1: Manufacturer: syz [ 232.081854][ T6876] cdc_wdm 5-1:1.0: skipping garbage [ 232.081876][ T6876] cdc_wdm 5-1:1.0: skipping garbage [ 232.083523][ T6876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 232.083541][ T6876] cdc_wdm 5-1:1.0: Unknown control protocol [ 233.006740][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.006835][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007033][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.007044][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007225][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.007235][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007436][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.007446][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007666][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.007676][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007853][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 233.007863][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 233.007871][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 233.007886][ T6876] usb 5-1: USB disconnect, device number 11 [ 233.565137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 235.584943][ T7449] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 235.745234][ T7449] usb 14-1: Using ep0 maxpacket: 32 [ 235.745861][ T7449] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 235.746659][ T7449] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 235.746677][ T7449] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 235.746743][ T7449] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 235.746758][ T7449] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 235.746771][ T7449] usb 14-1: config 0 interface 0 has no altsetting 0 [ 235.748409][ T7449] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 235.748422][ T7449] usb 14-1: Product: syz [ 235.748430][ T7449] usb 14-1: Manufacturer: syz [ 235.748437][ T7449] usb 14-1: SerialNumber: syz [ 235.750071][ T7449] usb 14-1: config 0 descriptor?? [ 235.753027][ T7449] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 235.762396][ T7449] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 235.795035][ T1761] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.917415][T11375] jffs2: notice: (11375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.945538][ T1761] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 235.945986][ T1761] usb 5-1: config 0 has no interfaces? [ 235.946004][ T1761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.947572][ T1761] usb 5-1: config 0 descriptor?? [ 235.993553][T11377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.832'. [ 236.157050][ T7448] usb 6-1: unable to get BOS descriptor or descriptor too short [ 236.157078][ T7448] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 236.160132][ T7448] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 236.160147][ T7448] usb 6-1: chopping to 0 config(s) [ 236.160158][ T7448] usb 6-1: can't read configurations, error -32 [ 236.194012][ T7449] usb 5-1: USB disconnect, device number 12 [ 236.297338][ T7448] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 236.436260][ T7448] usb 6-1: device descriptor read/64, error -32 [ 236.499297][ T44] kauditd_printk_skb: 18 callbacks suppressed [ 236.499310][ T44] audit: type=1326 audit(1790724774.002:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.500518][ T44] audit: type=1326 audit(1790724774.002:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.502297][ T44] audit: type=1326 audit(1790724774.002:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.502403][ T44] audit: type=1326 audit(1790724774.002:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.502601][ T44] audit: type=1326 audit(1790724774.002:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.503140][ T44] audit: type=1326 audit(1790724774.002:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.504198][ T44] audit: type=1326 audit(1790724774.002:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.504358][ T44] audit: type=1326 audit(1790724774.002:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.508694][ T44] audit: type=1326 audit(1790724774.012:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.508826][ T44] audit: type=1326 audit(1790724774.012:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 236.548847][ T7448] usb usb6-port1: attempt power cycle [ 236.865055][ T6827] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 236.905010][ T7448] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 236.925300][ T7448] usb 6-1: device descriptor read/8, error -32 [ 237.014985][ T6827] usb 9-1: Using ep0 maxpacket: 32 [ 237.015921][ T6827] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 237.017696][ T6827] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 237.017716][ T6827] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 237.017734][ T6827] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 237.017747][ T6827] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 237.017763][ T6827] usb 9-1: config 0 interface 0 has no altsetting 0 [ 237.019232][ T6827] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 237.019245][ T6827] usb 9-1: Product: syz [ 237.019253][ T6827] usb 9-1: Manufacturer: syz [ 237.019260][ T6827] usb 9-1: SerialNumber: syz [ 237.023881][ T6827] usb 9-1: config 0 descriptor?? [ 237.025434][ T6827] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.027486][ T6827] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 237.305975][ T10] usb 9-1: USB disconnect, device number 6 [ 237.354936][ T7448] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 237.422864][ T7448] usb 6-1: device descriptor read/8, error -32 [ 237.544533][ T7448] usb usb6-port1: unable to enumerate USB device [ 237.982762][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.983072][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.198065][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.213996][T11399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.525179][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.525206][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.525224][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.525241][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.631515][ T10] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 241.035317][T11363] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 241.050649][ T6827] usb 14-1: USB disconnect, device number 7 [ 241.052830][ T6827] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 241.842118][T11447] FAULT_INJECTION: forcing a failure. [ 241.842118][T11447] name failslab, interval 1, probability 0, space 0, times 0 [ 241.842140][T11447] CPU: 2 UID: 0 PID: 11447 Comm: syz.1.852 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.842155][T11447] Tainted: [L]=SOFTLOCKUP [ 241.842160][T11447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.842167][T11447] Call Trace: [ 241.842171][T11447] [ 241.842176][T11447] dump_stack_lvl+0x100/0x190 [ 241.842196][T11447] should_fail_ex.cold+0x5/0xa [ 241.842211][T11447] should_failslab+0xc2/0x120 [ 241.842229][T11447] __kmalloc_cache_noprof+0x91/0x6d0 [ 241.842254][T11447] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 241.842271][T11447] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 241.842289][T11447] tcp_sendmsg_fastopen+0x24d/0x750 [ 241.842309][T11447] tcp_sendmsg_locked+0x27da/0x4420 [ 241.842328][T11447] ? __lock_acquire+0x5c0/0x1f40 [ 241.842350][T11447] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 241.842366][T11447] ? lock_acquire+0x1d1/0x380 [ 241.842382][T11447] ? do_raw_spin_lock+0x128/0x260 [ 241.842395][T11447] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 241.842410][T11447] ? __local_bh_enable_ip+0xa5/0x120 [ 241.842429][T11447] tcp_sendmsg+0x2e/0x50 [ 241.842443][T11447] ? __pfx_tcp_sendmsg+0x10/0x10 [ 241.842457][T11447] inet_sendmsg+0xb9/0x140 [ 241.842472][T11447] __sys_sendto+0x453/0x4e0 [ 241.842489][T11447] ? __pfx_inet_sendmsg+0x10/0x10 [ 241.842504][T11447] ? __pfx___sys_sendto+0x10/0x10 [ 241.842537][T11447] ? fput+0x7c/0x100 [ 241.842552][T11447] ? ksys_write+0x1ac/0x250 [ 241.842567][T11447] __ia32_sys_sendto+0xdd/0x1b0 [ 241.842583][T11447] ? __do_fast_syscall_32+0xb3/0x8b0 [ 241.842598][T11447] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.842612][T11447] __do_fast_syscall_32+0x13a/0x8b0 [ 241.842626][T11447] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.842640][T11447] do_fast_syscall_32+0x32/0x70 [ 241.842655][T11447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.842669][T11447] RIP: 0023:0xf7f67fec [ 241.842682][T11447] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 241.842688][T11447] RSP: 002b:00000000f540550c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 241.842699][T11447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 241.842706][T11447] RDX: 0000000000000000 RSI: 00000000240007fd RDI: 0000000080e68000 [ 241.842713][T11447] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 241.842719][T11447] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.842726][T11447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.842740][T11447] [ 243.144974][ T7448] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.234955][ T61] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 243.295963][ T7448] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.297147][ T7448] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.297172][ T7448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.297197][ T7448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.297218][ T7448] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.297255][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.299269][ T7448] usb 5-1: config 0 descriptor?? [ 243.385051][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 243.388848][ T61] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 243.389909][ T61] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 243.389947][ T61] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 243.389977][ T61] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 243.389999][ T61] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 243.390022][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 243.392120][ T61] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 243.392141][ T61] usb 6-1: Product: syz [ 243.392155][ T61] usb 6-1: Manufacturer: syz [ 243.392167][ T61] usb 6-1: SerialNumber: syz [ 243.398031][ T61] usb 6-1: config 0 descriptor?? [ 243.401714][ T61] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 243.403013][ T61] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 243.754997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 243.785410][ T7448] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 244.174938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.360206][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.361361][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.310824][ T10] usb 5-1: USB disconnect, device number 13 [ 248.643604][T11466] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 248.924924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.386997][ T61] usb 6-1: USB disconnect, device number 19 [ 249.388233][ T61] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 249.764993][ T61] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 249.929164][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.964911][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.964931][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.964943][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.964963][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.966225][ T61] usb 6-1: config 0 descriptor?? [ 250.015389][T11553] netlink: 'syz.4.882': attribute type 2 has an invalid length. [ 250.015406][T11553] netlink: 'syz.4.882': attribute type 2 has an invalid length. [ 250.651730][ T61] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 253.133209][ T9] usb 6-1: USB disconnect, device number 20 [ 253.485016][ T6876] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 253.695621][ T6876] usb 14-1: Using ep0 maxpacket: 32 [ 253.696146][ T6876] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 253.696933][ T6876] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 253.696952][ T6876] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 253.696969][ T6876] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 253.696983][ T6876] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 253.696997][ T6876] usb 14-1: config 0 interface 0 has no altsetting 0 [ 253.698507][ T6876] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 253.698519][ T6876] usb 14-1: Product: syz [ 253.698527][ T6876] usb 14-1: Manufacturer: syz [ 253.698535][ T6876] usb 14-1: SerialNumber: syz [ 253.699874][ T6876] usb 14-1: config 0 descriptor?? [ 253.704249][ T6876] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 253.738649][ T6876] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 254.858470][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.858491][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.199734][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.200225][ T1438] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 257.104972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 257.382506][T11630] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 257.382506][T11630] [ 257.382523][T11630] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 257.382565][T11630] CIFS: Attempting to mount //172.20.20.170/share [ 257.614944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 257.856758][T11630] CIFS: VFS: cifs_mount failed w/return code = -112 [ 258.237651][T11644] FAULT_INJECTION: forcing a failure. [ 258.237651][T11644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.237675][T11644] CPU: 1 UID: 0 PID: 11644 Comm: syz.0.909 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.237691][T11644] Tainted: [L]=SOFTLOCKUP [ 258.237695][T11644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.237702][T11644] Call Trace: [ 258.237707][T11644] [ 258.237712][T11644] dump_stack_lvl+0x100/0x190 [ 258.237732][T11644] should_fail_ex.cold+0x5/0xa [ 258.237747][T11644] _copy_from_user+0x2e/0xd0 [ 258.237763][T11644] get_old_timespec32+0x82/0x130 [ 258.237782][T11644] ? __pfx_get_old_timespec32+0x10/0x10 [ 258.237802][T11644] __ia32_sys_clock_nanosleep_time32+0x1ce/0x480 [ 258.237821][T11644] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 258.237844][T11644] do_int80_emulation+0x166/0x650 [ 258.237861][T11644] asm_int80_emulation+0x1a/0x20 [ 258.237873][T11644] RIP: 0023:0xf70cefec [ 258.237886][T11644] Code: Unable to access opcode bytes at 0xf70cefc2. [ 258.237892][T11644] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000010b [ 258.237903][T11644] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000001 [ 258.237911][T11644] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.237918][T11644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.237924][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.237936][T11644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.237950][T11644] [ 258.268920][T11648] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 258.268920][T11648] [ 258.268935][T11648] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 258.268978][T11648] CIFS: Attempting to mount //172.20.20.170/share [ 258.739120][T11656] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 258.739120][T11656] [ 258.739144][T11656] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 258.995319][T11585] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 259.019533][T11660] syzkaller0: entered promiscuous mode [ 259.019903][T11660] syzkaller0: entered allmulticast mode [ 259.060080][T11660] tipc: Started in network mode [ 259.065396][T11660] tipc: Node identity 1a3aec3545f6, cluster identity 4711 [ 259.066721][T11660] tipc: Enabled bearer , priority 0 [ 259.131926][ T5846] usb 14-1: USB disconnect, device number 8 [ 259.146823][T11648] CIFS: VFS: Error connecting to socket. Aborting operation. [ 259.180241][T11648] CIFS: VFS: cifs_mount failed w/return code = -4 [ 259.182035][T11656] CIFS: Attempting to mount //172.20.20.170/share [ 259.222527][ T5846] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 259.285009][T11660] tipc: Resetting bearer [ 259.335671][T11660] tipc: Disabling bearer [ 259.611278][T11656] CIFS: VFS: cifs_mount failed w/return code = -112 [ 261.295019][ T6889] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 261.413428][T11697] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 261.413428][T11697] [ 261.413444][T11697] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 261.413486][T11697] CIFS: Attempting to mount //172.20.20.170/share [ 261.418512][T11697] CIFS: VFS: Error connecting to socket. Aborting operation. [ 261.418537][T11697] CIFS: VFS: cifs_mount failed w/return code = -111 [ 261.445281][ T6889] usb 9-1: Using ep0 maxpacket: 32 [ 261.445763][ T6889] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 261.446559][ T6889] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 261.446577][ T6889] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 261.446597][ T6889] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 261.446610][ T6889] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 261.446623][ T6889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 261.448227][ T6889] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 261.448241][ T6889] usb 9-1: Product: syz [ 261.448248][ T6889] usb 9-1: Manufacturer: syz [ 261.448255][ T6889] usb 9-1: SerialNumber: syz [ 261.459196][ T6889] usb 9-1: config 0 descriptor?? [ 261.475367][ T6889] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 261.479288][ T6889] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 261.714159][ T61] usb 9-1: USB disconnect, device number 7 [ 261.727329][ T61] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 262.221934][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 263.044801][T11730] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 263.044801][T11730] [ 263.044817][T11730] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 263.044860][T11730] CIFS: Attempting to mount //172.20.20.170/share [ 263.068260][T11730] CIFS: VFS: Error connecting to socket. Aborting operation. [ 263.068287][T11730] CIFS: VFS: cifs_mount failed w/return code = -111 [ 263.206192][ T6889] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 263.508039][ T6876] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 263.657181][ T6876] usb 5-1: Using ep0 maxpacket: 32 [ 263.657646][ T6876] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 263.658430][ T6876] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 263.658449][ T6876] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 263.658469][ T6876] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.658484][ T6876] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 263.658500][ T6876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.660110][ T6876] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 263.660124][ T6876] usb 5-1: Product: syz [ 263.660132][ T6876] usb 5-1: Manufacturer: syz [ 263.660140][ T6876] usb 5-1: SerialNumber: syz [ 263.662040][ T6876] usb 5-1: config 0 descriptor?? [ 263.666182][ T6876] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 263.668065][ T6876] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 263.984629][T11737] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 263.984999][T11764] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 263.991361][ T5846] usb 5-1: USB disconnect, device number 14 [ 263.991374][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 264.012502][ T5846] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 273.457240][T11799] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 273.457240][T11799] [ 273.457286][T11799] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 273.457696][T11799] CIFS: Attempting to mount //172.20.20.170/share [ 274.539233][T11799] CIFS: VFS: cifs_mount failed w/return code = -112 [ 275.036886][T11818] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 275.036886][T11818] [ 275.036911][T11818] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 275.036989][T11818] CIFS: Attempting to mount //172.20.20.170/share [ 276.997264][T11818] CIFS: VFS: Error connecting to socket. Aborting operation. [ 276.997291][T11818] CIFS: VFS: cifs_mount failed w/return code = -4 [ 277.235171][ T61] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 277.395092][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 277.397736][ T61] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 277.398560][ T61] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 277.398579][ T61] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 277.398596][ T61] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 277.398610][ T61] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 277.398656][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 277.400255][ T61] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 277.400269][ T61] usb 6-1: Product: syz [ 277.400276][ T61] usb 6-1: Manufacturer: syz [ 277.400288][ T61] usb 6-1: SerialNumber: syz [ 277.406100][ T61] usb 6-1: config 0 descriptor?? [ 277.425255][ T61] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.429116][ T61] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 277.705657][ T43] usb 6-1: USB disconnect, device number 21 [ 277.710217][ T43] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 279.110291][ T43] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 279.556532][T11869] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 279.556532][T11869] [ 279.556549][T11869] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 279.556645][T11869] CIFS: Attempting to mount //172.20.20.170/share [ 279.833499][T11856] netlink: 88 bytes leftover after parsing attributes in process `syz.1.958'. [ 280.234525][T11869] CIFS: VFS: cifs_mount failed w/return code = -112 [ 281.489873][ T5846] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 281.657841][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 281.669850][ T5846] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 281.674613][ T5846] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 281.674647][ T5846] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 281.674678][ T5846] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 281.674703][ T5846] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 281.674725][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.750388][ T5846] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 281.750455][ T5846] usb 6-1: Product: syz [ 281.750464][ T5846] usb 6-1: Manufacturer: syz [ 281.750506][ T5846] usb 6-1: SerialNumber: syz [ 281.752044][ T5846] usb 6-1: config 0 descriptor?? [ 281.757898][ T5846] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 281.758967][ T5846] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 282.099048][T11899] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 282.099579][ T6876] usb 6-1: USB disconnect, device number 22 [ 282.099636][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 282.109925][ T6876] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 282.119302][T11917] ldusb: No device or device unplugged -19 [ 293.556116][ T44] kauditd_printk_skb: 19 callbacks suppressed [ 293.556129][ T44] audit: type=1326 audit(1790724831.062:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.556281][ T44] audit: type=1326 audit(1790724831.062:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.557720][ T44] audit: type=1326 audit(1790724831.062:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.557942][ T44] audit: type=1326 audit(1790724831.062:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.557965][ T44] audit: type=1326 audit(1790724831.062:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.560311][ T44] audit: type=1326 audit(1790724831.062:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.561039][ T44] audit: type=1326 audit(1790724831.062:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.561166][ T44] audit: type=1326 audit(1790724831.062:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 293.664154][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 293.671125][ T44] audit: type=1326 audit(1790724831.172:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf72075ab code=0x7ffc0000 [ 293.671402][ T44] audit: type=1326 audit(1790724831.172:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.0.983" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf72075ab code=0x7ffc0000 [ 293.677159][T11982] kAFS: No cell specified [ 295.076036][T12010] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.076036][T12010] [ 295.076105][T12010] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.077220][T12010] CIFS: Attempting to mount //172.20.20.170/share [ 296.171571][ T7034] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 296.356233][ T7034] usb 6-1: unable to get BOS descriptor or descriptor too short [ 296.357063][ T7034] usb 6-1: not running at top speed; connect to a high speed hub [ 296.357264][ T7034] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 296.363844][ T7034] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 296.363916][ T7034] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 296.363987][ T7034] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 296.364021][ T7034] usb 6-1: config 14 has no interface number 0 [ 296.364055][ T7034] usb 6-1: config 14 has no interface number 1 [ 296.364129][ T7034] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 296.364201][ T7034] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 296.364270][ T7034] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.364338][ T7034] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.364406][ T7034] usb 6-1: config 14 interface 57 has no altsetting 0 [ 296.364441][ T7034] usb 6-1: config 14 interface 228 has no altsetting 0 [ 296.419373][ T7034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.419421][ T7034] usb 6-1: Product: syz [ 296.419430][ T7034] usb 6-1: Manufacturer: syz [ 296.419466][ T7034] usb 6-1: SerialNumber: syz [ 296.716252][T12026] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 296.716252][T12026] [ 296.716293][T12026] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 297.239263][ T7034] legousbtower 6-1:14.57: interrupt endpoints not found [ 297.614525][T12010] CIFS: VFS: Error connecting to socket. Aborting operation. [ 297.614552][T12010] CIFS: VFS: cifs_mount failed w/return code = -4 [ 297.614624][T12026] CIFS: Attempting to mount //172.20.20.170/share [ 297.626478][ T7034] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 297.627642][ T7034] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 297.869256][T12026] CIFS: VFS: cifs_mount failed w/return code = -112 [ 297.869681][T12032] ------------[ cut here ]------------ [ 297.869689][T12032] current->flags & PF_MEMALLOC [ 297.869693][T12032] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#0: cifsd/12032 [ 297.879108][T12032] Modules linked in: [ 297.881286][T12032] CPU: 0 UID: 0 PID: 12032 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT(full) [ 297.884567][T12032] Tainted: [L]=SOFTLOCKUP [ 297.886022][T12032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.889205][T12032] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 297.891374][T12032] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 e2 a7 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 297.897437][T12032] RSP: 0000:ffffc90002e172d0 EFLAGS: 00010202 [ 297.899346][T12032] RAX: ffff888029380000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 297.901826][T12032] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 297.904309][T12032] RBP: ffff88802938002c R08: 0000000000008000 R09: 0000000000000001 [ 297.906828][T12032] R10: 0000000000000002 R11: 0000000000000000 R12: 00000000000cac40 [ 297.907894][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 297.912003][T12032] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920005c2e74 [ 297.914474][T12032] FS: 0000000000000000(0000) GS:ffff888096955000(0000) knlGS:0000000000000000 [ 297.917314][T12032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.919391][T12032] CR2: 000000008000a000 CR3: 00000000403b5000 CR4: 0000000000352ef0 [ 297.921858][T12032] Call Trace: [ 297.922883][T12032] [ 297.923830][T12032] ? _raw_spin_unlock_irq_enable+0x90/0x90 [ 297.925817][T12032] ? __lock_acquire+0x5c0/0x1f40 [ 297.927393][T12032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.929395][T12032] ? inet_create+0x3a0/0x1060 [ 297.930927][T12032] ? generic_ip_connect+0x826/0x1810 [ 297.932610][T12032] ? cifs_readv_from_socket+0x7c1/0xa30 [ 297.934348][T12032] ? cifs_read_from_socket+0xb8/0x100 [ 297.936136][T12032] ? cifs_demultiplex_thread+0x2db/0x2ea0 [ 297.937928][T12032] ? kthread+0x373/0x450 [ 297.939266][T12032] ? ret_from_fork+0x730/0xd60 [ 297.940778][T12032] ? lock_acquire+0x1d1/0x380 [ 297.942225][T12032] ? __refill_objects_node+0x6e5/0xab0 [ 297.943927][T12032] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.945721][T12032] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.947318][T12032] ? __refill_objects_node+0x300/0xab0 [ 297.948992][T12032] new_slab+0x1f6/0x6e0 [ 297.950258][T12032] refill_objects+0xe3/0x410 [ 297.951682][T12032] __pcs_replace_empty_main+0x35e/0x650 [ 297.953445][T12032] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 297.955181][T12032] ? ref_tracker_alloc+0x190/0x590 [ 297.956878][T12032] ref_tracker_alloc+0x190/0x590 [ 297.958446][T12032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 297.960152][T12032] ? __kmalloc_noprof+0x350/0x840 [ 297.961780][T12032] ? lockdep_init_map_type+0x5c/0x250 [ 297.963535][T12032] ? sock_lock_init+0x2cf/0x710 [ 297.965171][T12032] ? sock_lock_init+0x2d5/0x710 [ 297.966698][T12032] sk_alloc+0xcfc/0xe80 [ 297.968014][T12032] inet_create+0x3a0/0x1060 [ 297.969457][T12032] ? inet_create+0x94/0x1060 [ 297.970952][T12032] __sock_create+0x339/0x860 [ 297.972441][T12032] generic_ip_connect+0x826/0x1810 [ 297.974067][T12032] __cifs_reconnect+0x348/0xa80 [ 297.975678][T12032] cifs_readv_from_socket+0x7c1/0xa30 [ 297.977385][T12032] ? rcu_is_watching+0x13/0xc0 [ 297.978898][T12032] ? __pfx_cifs_readv_from_socket+0x10/0x10 [ 297.980773][T12032] ? __kasan_slab_alloc+0x89/0x90 [ 297.982390][T12032] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 297.984215][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 297.986149][T12032] cifs_read_from_socket+0xb8/0x100 [ 297.988036][T12032] ? __pfx_cifs_read_from_socket+0x10/0x10 [ 297.990040][T12032] ? _raw_spin_unlock_bh+0x30/0x30 [ 297.991671][T12032] ? cifs_small_buf_get+0x4a/0x70 [ 297.993267][T12032] cifs_demultiplex_thread+0x2db/0x2ea0 [ 297.995052][T12032] ? __set_cpus_allowed_ptr_locked+0x31c/0x7e0 [ 297.997045][T12032] ? find_held_lock+0x2b/0x80 [ 297.998533][T12032] ? __lock_acquire+0x5c0/0x1f40 [ 298.000099][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 298.002060][T12032] ? lock_acquire+0x1d1/0x380 [ 298.003559][T12032] ? __kthread_parkme+0xbb/0x230 [ 298.005187][T12032] ? __kthread_parkme+0x18f/0x230 [ 298.006766][T12032] ? kthread+0x13a/0x450 [ 298.008103][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 298.009997][T12032] kthread+0x373/0x450 [ 298.011341][T12032] ? __pfx_kthread+0x10/0x10 [ 298.012810][T12032] ret_from_fork+0x730/0xd60 [ 298.014274][T12032] ? __pfx_ret_from_fork+0x10/0x10 [ 298.015979][T12032] ? native_load_gs_index+0x1e/0xc0 [ 298.017637][T12032] ? __switch_to+0x800/0x10f0 [ 298.019139][T12032] ? __pfx_kthread+0x10/0x10 [ 298.020615][T12032] ret_from_fork_asm+0x1a/0x30 [ 298.022177][T12032] [ 298.023168][T12032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.025456][T12032] CPU: 0 UID: 0 PID: 12032 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT(full) [ 298.028677][T12032] Tainted: [L]=SOFTLOCKUP [ 298.030029][T12032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.033147][T12032] Call Trace: [ 298.034206][T12032] [ 298.035140][T12032] dump_stack_lvl+0x100/0x190 [ 298.036642][T12032] vpanic+0x553/0x970 [ 298.037901][T12032] ? __pfx_vpanic+0x10/0x10 [ 298.039341][T12032] panic+0xd1/0xe0 [ 298.040540][T12032] ? __pfx_panic+0x10/0x10 [ 298.041953][T12032] check_panic_on_warn.cold+0x19/0x34 [ 298.043631][T12032] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.045558][T12032] __warn.cold+0x191/0x318 [ 298.046964][T12032] __report_bug+0x30f/0x440 [ 298.048412][T12032] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.050342][T12032] ? __pfx___report_bug+0x10/0x10 [ 298.051927][T12032] ? lockdep_hardirqs_on+0x7d/0x110 [ 298.053562][T12032] ? irqentry_exit+0x24d/0xa10 [ 298.055068][T12032] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.056999][T12032] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.058921][T12032] report_bug+0xb3/0x220 [ 298.060306][T12032] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.062244][T12032] handle_bug+0x16a/0x2a0 [ 298.063615][T12032] exc_invalid_op+0x17/0x50 [ 298.065063][T12032] asm_exc_invalid_op+0x1a/0x20 [ 298.066599][T12032] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 298.068698][T12032] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 e2 a7 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 298.074608][T12032] RSP: 0000:ffffc90002e172d0 EFLAGS: 00010202 [ 298.076519][T12032] RAX: ffff888029380000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 298.078964][T12032] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 298.081447][T12032] RBP: ffff88802938002c R08: 0000000000008000 R09: 0000000000000001 [ 298.083880][T12032] R10: 0000000000000002 R11: 0000000000000000 R12: 00000000000cac40 [ 298.086334][T12032] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff920005c2e74 [ 298.088793][T12032] ? _raw_spin_unlock_irq_enable+0x90/0x90 [ 298.090619][T12032] ? __lock_acquire+0x5c0/0x1f40 [ 298.092137][T12032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.094057][T12032] ? inet_create+0x3a0/0x1060 [ 298.095492][T12032] ? generic_ip_connect+0x826/0x1810 [ 298.097158][T12032] ? cifs_readv_from_socket+0x7c1/0xa30 [ 298.098886][T12032] ? cifs_read_from_socket+0xb8/0x100 [ 298.100567][T12032] ? cifs_demultiplex_thread+0x2db/0x2ea0 [ 298.102374][T12032] ? kthread+0x373/0x450 [ 298.103705][T12032] ? ret_from_fork+0x730/0xd60 [ 298.105219][T12032] ? lock_acquire+0x1d1/0x380 [ 298.106698][T12032] ? __refill_objects_node+0x6e5/0xab0 [ 298.108404][T12032] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.110233][T12032] ? lockdep_hardirqs_on+0x7d/0x110 [ 298.111868][T12032] ? __refill_objects_node+0x300/0xab0 [ 298.113583][T12032] new_slab+0x1f6/0x6e0 [ 298.114887][T12032] refill_objects+0xe3/0x410 [ 298.116193][T12032] __pcs_replace_empty_main+0x35e/0x650 [ 298.117874][T12032] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 298.119551][T12032] ? ref_tracker_alloc+0x190/0x590 [ 298.121188][T12032] ref_tracker_alloc+0x190/0x590 [ 298.122733][T12032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 298.124443][T12032] ? __kmalloc_noprof+0x350/0x840 [ 298.126045][T12032] ? lockdep_init_map_type+0x5c/0x250 [ 298.127727][T12032] ? sock_lock_init+0x2cf/0x710 [ 298.129272][T12032] ? sock_lock_init+0x2d5/0x710 [ 298.130804][T12032] sk_alloc+0xcfc/0xe80 [ 298.132167][T12032] inet_create+0x3a0/0x1060 [ 298.133606][T12032] ? inet_create+0x94/0x1060 [ 298.135063][T12032] __sock_create+0x339/0x860 [ 298.136538][T12032] generic_ip_connect+0x826/0x1810 [ 298.138142][T12032] __cifs_reconnect+0x348/0xa80 [ 298.139675][T12032] cifs_readv_from_socket+0x7c1/0xa30 [ 298.141377][T12032] ? rcu_is_watching+0x13/0xc0 [ 298.142885][T12032] ? __pfx_cifs_readv_from_socket+0x10/0x10 [ 298.144733][T12032] ? __kasan_slab_alloc+0x89/0x90 [ 298.146314][T12032] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 298.148056][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 298.149931][T12032] cifs_read_from_socket+0xb8/0x100 [ 298.151605][T12032] ? __pfx_cifs_read_from_socket+0x10/0x10 [ 298.153430][T12032] ? _raw_spin_unlock_bh+0x30/0x30 [ 298.155035][T12032] ? cifs_small_buf_get+0x4a/0x70 [ 298.156632][T12032] cifs_demultiplex_thread+0x2db/0x2ea0 [ 298.158361][T12032] ? __set_cpus_allowed_ptr_locked+0x31c/0x7e0 [ 298.160303][T12032] ? find_held_lock+0x2b/0x80 [ 298.161808][T12032] ? __lock_acquire+0x5c0/0x1f40 [ 298.163362][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 298.165374][T12032] ? lock_acquire+0x1d1/0x380 [ 298.166857][T12032] ? __kthread_parkme+0xbb/0x230 [ 298.168411][T12032] ? __kthread_parkme+0x18f/0x230 [ 298.170000][T12032] ? kthread+0x13a/0x450 [ 298.171351][T12032] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 298.173218][T12032] kthread+0x373/0x450 [ 298.174506][T12032] ? __pfx_kthread+0x10/0x10 [ 298.175989][T12032] ret_from_fork+0x730/0xd60 [ 298.177451][T12032] ? __pfx_ret_from_fork+0x10/0x10 [ 298.179042][T12032] ? native_load_gs_index+0x1e/0xc0 [ 298.180675][T12032] ? __switch_to+0x800/0x10f0 [ 298.182155][T12032] ? __pfx_kthread+0x10/0x10 [ 298.183613][T12032] ret_from_fork_asm+0x1a/0x30 [ 298.185128][T12032] [ 298.186822][T12032] Kernel Offset: disabled [ 298.188171][T12032] Rebooting in 86400 seconds..