last executing test programs: 5m37.948605542s ago: executing program 2 (id=56): socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x1, 0x840004, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x20000}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d00)={0x5, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x94) lgetxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000500)=""/136, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket(0x6, 0x1, 0x8000002) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000440)=@ccm_128={{0x304}, "97463c22f78af423", "5d8d56e2d23937fc6fb45f9ba0c28b6a", "c5a7f153", "4b0d245bf169fe76"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', r4, 0x7, 0x8, 0x5, 0x40, {{0x18, 0x4, 0x3, 0x1, 0x60, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @multicast2, {[@end, @timestamp_addr={0x44, 0x24, 0x95, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x702c}, {@local, 0x8000}, {@multicast2, 0x9}, {@local, 0x3}]}, @ssrr={0x89, 0x23, 0xd6, [@rand_addr=0x64010102, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @generic={0x86, 0x4, "60a5"}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfffffff8, 0x9, 0x5, 0x10002, r2, 0x6, '\x00', r4, 0xffffffffffffffff, 0x0, 0x45, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000008000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fanotify_mark(0xffffffffffffffff, 0x10, 0x8000002, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x2) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3}, 0x18) sendmmsg$inet(r3, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 5m34.920385336s ago: executing program 2 (id=65): r0 = openat$btrfs_control(0xffffff9c, &(0x7f00000001c0), 0x8200, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x2, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000010000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x27, 0x5, 0x46d, 0xb012, 0x7ff, 0x0, "0600ff0901a1018510150026ff00120895068100910085119513810091008512953f81009100c0"}}, 0x13f) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000740)={{0x2, 0x6, 0x5, 0x6000000, '\x00', 0x3}, 0x5, 0x100, 0x2, r3, 0x4, 0x9, 'syz0\x00', &(0x7f0000000340)=['/dev/uhid\x00', '+\x00', ',,-!:\x00', '-\x00'], 0x14}) write$UHID_INPUT2(r2, &(0x7f0000000700)={0xc, {0x1, "11"}}, 0x7) 5m34.761985039s ago: executing program 2 (id=67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x6, 0x80002, 0xae37) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d074200080006"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x41}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1808402, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000580)={0x50, 0x0, r7, {0x7, 0x28, 0xfffd, 0x40200880, 0xfffc, 0x0, 0x1e0, 0x2, 0x0, 0x0, 0x24522716a989086f, 0x80}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x20000000000005, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r8, 0x734, 0x20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0xa0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(r0, &(0x7f0000000040), 0x0) syz_io_uring_setup(0x5f38, &(0x7f00000003c0)={0x0, 0x2, 0x4000, 0x3, 0x7, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000040)) 5m34.44128489s ago: executing program 2 (id=68): ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000000)={0x0, 0x3, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpriority(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xff, 0x200, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x40, 0xc5a7, 0x6}}) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x5418c2, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f00000021c0)=""/204, &(0x7f0000000600)=0x7b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) 5m34.151371041s ago: executing program 2 (id=69): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000005c0)={0x1, 0xf}, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r5 = dup2(r4, r3) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='veth1_to_batadv\x00') setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000000)=0x7, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xe1, 0x0, 0x800}]}) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x3}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x7, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x10000, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0x1, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x800006, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x79c, 0x1ff4, 0x1, 0x1, 0x80000008, 0x404, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x1, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x11, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x7f, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0xb, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x1, 0x5, 0xffff4e1c, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0x1, 0x0, 0x0, 0x8, 0x2, 0x3, 0x800, 0x7, 0x8, 0x4, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x38440a4f, 0x8000, 0x4, 0x3, 0x2, 0xa, 0x6, 0x1, 0xffffff00, 0x7, 0x7f, 0x3, 0x1], [0x0, 0x2, 0x8, 0x246d, 0x6, 0x104, 0xfffff410, 0xd, 0x2, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c9, 0x3ff, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x7, 0x3000000, 0xe, 0x4000006, 0x100007, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x200003, 0x3c, 0x1000, 0x5, 0xffffffff, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x100006, 0xeff]}, 0x45c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debugfs/dri/1/Virtual-1/edid_override\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)="00ffffffffffff0031d8000000003a0005160104a51f11782ade95a3544c99260f50540000000101010101010101010101010101010164190040410026301888360030e41000001800000010000000000000000000000000000000fd00324b1e5009000a202020202020000000fc00564b4d530a2020202020202020007c", 0x80) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace(0x8, r12) connect$pppl2tp(r9, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r13, @ANYBLOB="c2002461956635446627e6d6f2b133c8c7f6b9c0c01bfa6c251e945bb4e57ab08623832bd2c5e2abbda61472e2d65e8af761055fd8e14f7726e8fb89eb9b65fef0284487a119fae88ea6290cbe7d3e5b853f5dfbf2ac33b504170d7b8413a0d24439ccc639b4bdbc12d0fc38fe5ce85d80d1"], 0x4c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) bind$alg(r1, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) 5m33.571580357s ago: executing program 2 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r3}, 0x38) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70f0e37ef45f048c3100180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) 5m22.154597283s ago: executing program 32 (id=59): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='+p', 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0088b5bbbbbbbbbbbb527bcee565f486dd6d000000000c11fffc01000000000000000000000000000000000000000000000000d9610e945a5748714e23000c907861040000"], 0xffffffffffffff8b) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000300)='0', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') 5m18.510717337s ago: executing program 33 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r3}, 0x38) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70f0e37ef45f048c3100180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) 4m36.360030382s ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death={0x40046304}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {0xe, 0x2}, {0xfff2, 0xb}}, [{0x8, 0xb, 0x57}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xe3f}, {0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x5) 4m36.260620262s ago: executing program 3 (id=367): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0xf6}, @val={0x1, 0x1, 0x0, 0xf, 0x9, 0x5}, @ipv4=@tipc={{0x34, 0x4, 0x1, 0x19, 0xfd, 0x67, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3e, 0x3, [{0x5, 0xf, "2e248e73c1b6f721f86b6af199"}, {0x5, 0x11, "95b7c4db253bd615c4f397c85f886a"}, {0x1, 0x11, "972e07c199afb29df877e979f19b9b"}, {0x6, 0x7, "4383d9d6b4"}]}, @ssrr={0x89, 0xb, 0xc1, [@multicast1, @loopback]}, @rr={0x7, 0x1b, 0x28, [@local, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xa, "d86513effc92399a"}, @end, @ssrr={0x89, 0x1f, 0xc, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x27, 0x15, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0xda, 0x0, 0x4e7745472bde88c7, 0x4, 0x4, 0x2, 0x5, 0xfff8, 0x0, 0x4e21, 0x4e24}, 0x3}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x10b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getrlimit(0x6, &(0x7f00000000c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0xff) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x400, &(0x7f0000000000)=0x1) chroot(&(0x7f0000000040)='./cgroup\x00') 4m33.969098842s ago: executing program 3 (id=377): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 4m33.491669219s ago: executing program 3 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x46800) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'lowerdir'}, {0x20, 'upperdir'}, {0x20, 'workdir'}]}, 0x25) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) open_tree(r0, &(0x7f0000000240)='./file0\x00', 0x80000) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x101082, 0x100) pread64(r1, &(0x7f0000000180)=""/154, 0x9a, 0x1000) 4m32.079866873s ago: executing program 3 (id=387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="8100ede84cfa66872f932935f09902e5b34c52ede537f79b793464450c7650a2d727e5186cf6ee5250152948cd11c7b14d573a3ec58fba839c97c8b7d655b48a06003d7868ae14b589037f57c5932061da107cdf0971fbba52ae171862f97dfa2203d3", 0x63) 4m31.758411827s ago: executing program 3 (id=388): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2140, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x2000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) pread64(r3, 0x0, 0x0, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0x4, 0x80000}) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x6, 0x3f}) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4m31.686663564s ago: executing program 34 (id=388): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2140, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x2000000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) pread64(r3, 0x0, 0x0, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff, 0x4, 0x80000}) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x6, 0x3f}) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3m3.230282865s ago: executing program 4 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 3m1.490881379s ago: executing program 4 (id=1611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2404c8d5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000023000103a5bd7002fadbdf2501"], 0x14}}, 0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x35aa, 0xc70, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0xaa, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x33}, {[@end, @lsrr={0x83, 0x7, 0xbc, [@multicast2]}]}}}}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={0x0, 0xb}, 0x8) 3m1.340665816s ago: executing program 4 (id=1616): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0xc, &(0x7f0000000540)={0x40, 0x7, 0xce, {0xce, 0x30, "eaa48a920ca5dc8832b4adef0680632e20cde02dc9e36c45fecce34cff08a97f805b3b1e6f5dcb0b3db09054b75daf0b7140fb981d10f426d33663b02f13e00dbe01464675fff5ffebab986c5cd044a7486b0b1a1a3320016b4ef46cd21dd0e1a19e238d56caddd78c1a2a4a3526b94a74bc78a206184346f19c73bb65fcde67dc967795bfc59df7787f2d88f2841275ef9af6f529d6cc82bcde14d0f78e27dc6224c9ba7f1349aecbe043009e32dd7fec5e522bb745026230a5beb1d315e645ab6b9945ed73334ffa0459fc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x24, &(0x7f00000007c0)={0x40, 0x3, 0xf1, "7a09ab9d505788e9d8b05b4b008f0d9bce12d940a930239f42e5247bfc5573b9890986ad4585613fd03dbb6b53b7e98653ba26461e3f1d861c1829832deefb7f56da7872cb664487cc478cd72549cbc404bab234569244cd7be93c2d93426092b79d416c5902e27f15db0f6bc859fe6889ffd3177098c5dea8734e9591780a790d7dadf695f011c131f30afea8953b9a9502b901e1a088a84d8aa3a1c6afcba1152a30e723e8aa81d30c16614a60d640d4445131636d621b75e3f8777650fe3afc9692442209218998c962281012c5698c5513c5174b5fed2c5acdb0e1b03f44749737b020fed2b01c1926cb12838d510c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x3, 0x90b, 0x0, 0xe, 0x0, 0x2, 0x0, 0xcc, 0x8, 0xf987, 0x2, 0xfffd}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x24) read$FUSE(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0xb, 0x0, 0x0, 0xa, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000d00)=""/228, 0x36, 0xe4, 0x0, 0xbac, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000001040)={&(0x7f0000000ec0)=""/106, 0x6a, 0x0, &(0x7f0000000f40)=""/226, 0xe2}}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x20d, "f8"}], 0x10}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/devices/namespace0.0/holder_class\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='p', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0x21, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xad}, @generic={0x7, 0x7, 0x2, 0x4, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xe, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x7, 0x52, &(0x7f0000000c40)=""/82, 0x41000, 0x1, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000e40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x8, 0x7, 0x7}, 0x10, r3, r5, 0x8, &(0x7f00000010c0), &(0x7f0000001100)=[{0x5, 0x3, 0x10, 0xa}, {0x0, 0x1, 0x3, 0x3}, {0x2, 0x3, 0x10, 0x6}, {0x3, 0x1, 0x9, 0x6}, {0xa, 0x3, 0x2, 0x5}, {0x2, 0x3, 0x0, 0x6}, {0x1, 0x4, 0x2, 0xc}, {0x4, 0x5, 0x6, 0x7}], 0x10, 0xfffffffb}, 0x94) syz_io_uring_setup(0x77, &(0x7f0000000300)={0x0, 0xdfa6, 0x0, 0x0, 0x53}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x41, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2e, 0x0, 0x23456}) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x40800) bind$phonet(r9, &(0x7f0000000100)={0x23, 0x8, 0x6b, 0x7}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0xc0) 3m0.885135137s ago: executing program 0 (id=1628): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0xf6}, @val={0x1, 0x1, 0x0, 0xf, 0x9, 0x5}, @ipv4=@tipc={{0x34, 0x4, 0x1, 0x19, 0xfd, 0x67, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3e, 0x3, [{0x5, 0xf, "2e248e73c1b6f721f86b6af199"}, {0x5, 0x11, "95b7c4db253bd615c4f397c85f886a"}, {0x1, 0x11, "972e07c199afb29df877e979f19b9b"}, {0x6, 0x7, "4383d9d6b4"}]}, @ssrr={0x89, 0xb, 0xc1, [@multicast1, @loopback]}, @rr={0x7, 0x1b, 0x28, [@local, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xa, "d86513effc92399a"}, @end, @ssrr={0x89, 0x1f, 0xc, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x27, 0x15, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0xda, 0x0, 0x4e7745472bde88c7, 0x4, 0x4, 0x2, 0x5, 0xfff8, 0x0, 0x4e21, 0x4e24}, 0x3}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x10b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getrlimit(0x6, &(0x7f00000000c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0xff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x400, &(0x7f0000000000)=0x1) chroot(&(0x7f0000000040)='./cgroup\x00') 3m0.728757183s ago: executing program 4 (id=1621): openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0xf6}, @val={0x1, 0x1, 0x0, 0xf, 0x9, 0x5}, @ipv4=@tipc={{0x34, 0x4, 0x1, 0x19, 0xfd, 0x67, 0x0, 0x9, 0x6, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3e, 0x3, [{0x5, 0xf, "2e248e73c1b6f721f86b6af199"}, {0x5, 0x11, "95b7c4db253bd615c4f397c85f886a"}, {0x1, 0x11, "972e07c199afb29df877e979f19b9b"}, {0x6, 0x7, "4383d9d6b4"}]}, @ssrr={0x89, 0xb, 0xc1, [@multicast1, @loopback]}, @rr={0x7, 0x1b, 0x28, [@local, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0xa, "d86513effc92399a"}, @end, @ssrr={0x89, 0x1f, 0xc, [@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x27, 0x15, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty]}, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xa, 0x3, 0x2, 0xda, 0x0, 0x4e7745472bde88c7, 0x4, 0x4, 0x2, 0x5, 0xfff8, 0x0, 0x4e21, 0x4e24}, 0x3}, 0x0, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x10b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getrlimit(0x6, &(0x7f00000000c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0xff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x400, &(0x7f0000000000)=0x1) chroot(&(0x7f0000000040)='./cgroup\x00') 2m59.187727454s ago: executing program 4 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./sys\x00', 0x80000, 0x81) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}]}}}], 0x24}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat(r0, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x487000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r5, &(0x7f0000000000)="0600000000000000010000000000000000000000000000006c733100"/104, 0x68) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f00000001c0)='1:p', 0x3) 2m58.885440693s ago: executing program 0 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x39, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x5, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0xb, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x6, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x5, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0x8001, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x20000000, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0x0, 0x9}, {0x1, 0x12, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 2m58.683236332s ago: executing program 4 (id=1633): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x69, 0x80000) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000bd001000f3030076647088a20000005c000000000000000000000000000500"/46, 0x2e}], 0x1, 0x0, 0x16}, 0x1) 2m58.411192967s ago: executing program 0 (id=1637): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) (async) inotify_init() (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x850003d1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xfa) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) (async) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) (async) socket(0x11, 0x800, 0x2e5) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x8000, 0x402e, 0x2, 0x8, 0x6, 0x2, 0x7}, 0x1c) r3 = socket(0x1e, 0x4, 0x6) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req={0x5, 0x1, 0x6, 0xe936}, 0x10) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) (async) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000440)="5905002ed8f34cb22b655385ec9c88de7425126a67f1620efdb46826c26f422754254bee414854e1061abdcef064cad374fe91adf3e6a6cdc1c872b8b1dac3001412a57fcb919ed70c42ab729d743cb4ca7d3869577ef6d8648b9e3b109b2f27a56b663c", 0x64, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000002340)={'syz', 0x0}, &(0x7f0000000880)="370c099069effa43de3e1404db09000000007bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e03000000000000007a0a972f64cf098405e8ea03da0a49b701d04ce1002b453343538c550b578cf0f696ff6e5675cd233d40a11df634a802b192c1f38af5fe74f40eef589ec06c391da69aafec401a63020d28fce380cc3d7252efcb6acf59243d4bd4dd1c64a69b0b57e5deeaf227441680de4e5b5e3b68fe04660f07cf51e7ee23fd7d25af8745855579a4dcf35f16de010aebb23402f652f83c12b15a568f6e9adc307464d80b273e629862531bd77f673c7d84f23e8574736ac255b2e97f99aa70228eae1d1703d88b8c1ea234", 0x178, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001580)={r5, r6, r6}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000340)={'wp256-generic\x00'}}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x2000) (async) pwritev(r4, &(0x7f0000000580), 0x0, 0x2, 0x9) (async) socket(0xa, 0x2, 0x20000023) 2m58.241178592s ago: executing program 0 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed737", 0x68}, {&(0x7f0000000280)}, {&(0x7f0000001540)="4db7603d6a", 0x5}], 0x3, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m58.181333474s ago: executing program 0 (id=1641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./sys\x00', 0x80000, 0x81) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}]}}}], 0x24}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat(r0, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x487000, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r5, &(0x7f0000000000)="0600000000000000010000000000000000000000000000006c733100"/104, 0x68) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f00000001c0)='1:p', 0x3) 2m58.014998121s ago: executing program 0 (id=1642): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.704169401s ago: executing program 35 (id=1642): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.690418574s ago: executing program 36 (id=1633): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x69, 0x80000) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000bd001000f3030076647088a20000005c000000000000000000000000000500"/46, 0x2e}], 0x1, 0x0, 0x16}, 0x1) 2m42.591440842s ago: executing program 6 (id=1693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m40.789871943s ago: executing program 6 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x1, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x39, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x5, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0xb, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x6, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x5, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0x8001, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x20000000, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0x0, 0x9}, {0x1, 0x12, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 2m40.651285152s ago: executing program 6 (id=1695): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mlock(&(0x7f000031c000/0x2000)=nil, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b000100000000", @ANYRES16, @ANYRES16], 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20280, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) io_uring_enter(r3, 0x3cc9, 0x9e60, 0x82, &(0x7f0000000340)={[0x4, 0x4]}, 0x8) sendfile(r3, r2, 0x0, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(r3, &(0x7f0000002900)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x40000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043003"], 0x6) landlock_restrict_self(0xffffffffffffffff, 0xe) accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1409, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x8004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) 2m39.491223154s ago: executing program 6 (id=1698): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') (async) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xa00, &(0x7f0000000080)={0x0, 0x1e58, 0x10001, 0x0, 0x2ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r4, 0x1, 0x71a0, 0x8e, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvfrom(r2, &(0x7f0000000240)=""/70, 0x46, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00'}, 0x80) 2m39.381072092s ago: executing program 6 (id=1699): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed737", 0x68}, {&(0x7f0000000280)="b80adbd823b82bb9b44f31eb661de6e892", 0x11}, {&(0x7f0000001540)="4db7603d6a", 0x5}], 0x3, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m39.111401199s ago: executing program 6 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xfff0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5, 0x80000001, 0xdcf, 0x9, 0x5, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x452f, 0x4, 0x5, 0x1, 0x80000001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m39.021828657s ago: executing program 37 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xfff0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5, 0x80000001, 0xdcf, 0x9, 0x5, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x452f, 0x4, 0x5, 0x1, 0x80000001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m31.877707742s ago: executing program 9 (id=2269): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9), 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) r1 = openat$vmci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x90000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001}) syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x0, 0x187}, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r5, &(0x7f00000011c0)=""/4137, 0x1029, 0x100005ffffbff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x60, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '+}-[!\x00'}]}, 0x60}}, 0x488c1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 1m28.197761078s ago: executing program 9 (id=2297): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db5637", 0x86}, {&(0x7f0000000600)="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", 0xdcd}, {&(0x7f0000000280)="b80adbd823b82bb9b44f31eb661de6e892361a", 0x13}], 0x3, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m28.197193026s ago: executing program 9 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) write(r2, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902", 0x1f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r10, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x8, 0x78f4, 0xfffffff9, {{0x37, 0x4, 0x3, 0x5, 0xdc, 0x67, 0x0, 0x5, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x58, 0x2, [{0x2, 0xc, "97f5bd349de4f599765b"}, {0x0, 0x11, "d3d9026b93b255faa8c7ffb70bea02"}, {0x1, 0x11, "25d6094ee8ab9027e16980702f2864"}, {0x0, 0x7, "3d44a759c5"}, {0x983a2bf4755d4cfc, 0xf, "2fcf0f691f7e944297b5e05783"}, {0x7, 0xc, "5f3e38d768b782ce1f27"}, {0x5, 0x2}]}, @timestamp_prespec={0x44, 0x4c, 0xdf, 0x3, 0x4, [{@rand_addr=0x64010101, 0x17}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast1, 0x8}, {@empty, 0x7fff}, {@private=0xa010102, 0x2}, {@empty}, {@empty, 0x1}, {@multicast1, 0x1}]}, @rr={0x7, 0x1f, 0x64, [@local, @broadcast, @remote, @empty, @local, @private=0xa010101, @empty]}, @generic={0x89, 0x3, "f4"}]}}}}}) bind$xdp(r10, &(0x7f0000000480)={0x2c, 0xa, r12, 0x1c, r10}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0xffffffffffffff2c, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1m27.951396719s ago: executing program 9 (id=2299): listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001000), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20000000000000}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) setresgid(r4, 0x0, r4) chown(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, r4) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000280)) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xfffffe6f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 1m27.778759354s ago: executing program 9 (id=2300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 8) 1m27.41934633s ago: executing program 9 (id=2303): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'8255\x00', [0x4aa, 0xabda, 0x80000000, 0x5, 0x9, 0x9, 0x5d, 0x6a, 0x9b3, 0xa, 0xffff, 0x6, 0x5, 0xfffffffd, 0x6, 0x7, 0x2, 0x0, 0x100, 0x1, 0x4000000, 0x3, 0x1, 0x4, 0xfffffff8, 0x7, 0x3, 0xd, 0x80000000, 0xe, 0x3ff, 0x5de2]}) write(r0, &(0x7f00000000c0)='1', 0x1) (async) write(r0, &(0x7f00000000c0)='1', 0x1) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x15, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) 1m27.036909423s ago: executing program 38 (id=2303): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'8255\x00', [0x4aa, 0xabda, 0x80000000, 0x5, 0x9, 0x9, 0x5d, 0x6a, 0x9b3, 0xa, 0xffff, 0x6, 0x5, 0xfffffffd, 0x6, 0x7, 0x2, 0x0, 0x100, 0x1, 0x4000000, 0x3, 0x1, 0x4, 0xfffffff8, 0x7, 0x3, 0xd, 0x80000000, 0xe, 0x3ff, 0x5de2]}) write(r0, &(0x7f00000000c0)='1', 0x1) (async) write(r0, &(0x7f00000000c0)='1', 0x1) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x15, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) 4.065095582s ago: executing program 8 (id=2901): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4004010) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r3) open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfffc, {0x20, 0x1}, {0x46, 0x2}, @ramp={0x3, 0x10, {0x6, 0x7fff, 0x1ff, 0xe4}}}) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001f00010025bd7000ffdbdf25000000ebff0000000000000000000000000004d202003300ff0200000000000000000000000000016e030000000000000500210001"], 0x48}}, 0x8000) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r9, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6cbc, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c084}, 0xc001) 3.999233281s ago: executing program 5 (id=2903): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, 0x0}) (async) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, 0x0}) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x1, &(0x7f00000010c0)=@raw=[@generic={0x20}], &(0x7f0000001100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0xe9) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0xe9) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000100)={0x1, 0x8, 0x6960}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000180)={0x89, 0x8001, 0x6, 0xfde9, 0x3fa}) 3.800811126s ago: executing program 8 (id=2904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.80060765s ago: executing program 5 (id=2905): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = msgget$private(0x0, 0x84) msgsnd(r4, &(0x7f0000002580)={0x2}, 0x4, 0x0) 3.709305301s ago: executing program 5 (id=2906): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x103000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x10003, 0x6, 0x40004, 0x7ffffffffffffd, 0x6a6}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 3.620998528s ago: executing program 8 (id=2907): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) fcntl$getown(r0, 0x9) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x0, 0x702184c3]}, 0x8, 0x80800) capset(&(0x7f0000000000)={0x19980330}, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r3, 0x40045431, &(0x7f0000000000)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xe3d2, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd4f7, 0x4000, 0x2100, 0x2c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d99, 0x200, 0x0, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x6, 0x1ed, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587b, 0x4000, 0x1, 0x1e3}}], 0x1, &(0x7f0000000400)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 2.600756209s ago: executing program 8 (id=2911): r0 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r6, 0x0, 0x0, 0x4c881, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600eb0200ff00a3ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) read$midi(r7, &(0x7f00000001c0)=""/70, 0xffffffd8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240), 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x401}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r9, &(0x7f0000000380)=0x4) 2.563105165s ago: executing program 7 (id=2912): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r2, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/17) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) flock(r1, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r7, 0x1) flock(r1, 0x5) 1.992698337s ago: executing program 1 (id=2915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.850391812s ago: executing program 1 (id=2916): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = msgget$private(0x0, 0x84) msgsnd(r4, &(0x7f0000002580)={0x2}, 0x4, 0x0) 1.822060767s ago: executing program 1 (id=2917): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000006e40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = geteuid() quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000000)=@rnullb, r2, &(0x7f0000000040)) 1.739999536s ago: executing program 1 (id=2918): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r0, 0x0, 0x0) 1.439552588s ago: executing program 5 (id=2919): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0x13}}, 0x14}}, 0x0) prctl$PR_SET_THP_DISABLE(0x44, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$MEMREADOOB(r1, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x82, &(0x7f0000000400)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f92"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000300000095000000000000007000c01f84d37a21f7364fd967aab05d20d2e06fa3ae2d441d1eebb8f62dc3430c3496089d8c7496ab86816393279c076518869f5dffd85b4081b9b70c628809adeab44f967acfedc5aeeb510920d3e5a402ee8ff6eb738445c3406ed3a5709a1824c71f3762141ae4b1bf72b3d5ee7fd3c60ccac5a8cfabebdd303a74d946665e29a14f92b103cb2cbf6c24ccbfbee224bf64df5569a650c249cdd1ed24f696aef9ac"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 1.437554425s ago: executing program 8 (id=2927): sendmsg$key(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r0, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xf, 0x40, 0x80000000, 0x4, 0x5}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401001100000000000000020000000600d88f29c992373b8105064000030000"], 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001cc0)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.011581649s ago: executing program 7 (id=2920): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r4 = msgget$private(0x0, 0x84) msgsnd(r4, &(0x7f0000002580)={0x2, "d1e92b872b793107d1663784b3a0b6ea7e08c24eb94d99ff63dc2f3f73a05cf74ae969ba8c668c108d71f4bda43098a94d479f74ab04486d26acb45dd859da7c42e1d3952ab415bdd5b58e8068c7b8fb3e5378fc571140942bd2a9dba43bf8010db265a5905ce281d828af769dc2d939207401ebab1d9435c831ebfb865b3325f509284a69a8422e738cf145ca85a77a66a8582ba53ba9507af247dd3b522b969d47208edf2d89573d1d554f8faf70c23cd0c45a366c1e031a4c9e856a168de698a46007285c178cfd1fb167a959e6e230f23b5d347dcec0b98a549f7c3e108a0dd3cd80b74ec0d0735c55bd86919263d21003e5f11c3c47e0291b2db50ef07a4c4c87b04c78463bbfbf00495c7946a387286cb6161a44c74a014188908a31b6fe9107cca9e3cb4fbf27d12ecd8c96577a378f5427433b925b5300daf620f3e29710bb5cdaba2730c97973b2cf27da994df5bc655920004461e9f0ada9d935cdc41ad8151dbacc304a8dfbd32864cf70db12b18cc51d4ae8cca52be67903be27b454fd9802361a5aee7bcc7c11796732e5323364d60d72a3a1c60553b049f7cc94ad52513382c21353472805b17f6315488e9783f519b4cd5b641adc7261b06af52f4e79b4de9fd43de129fe255750dd6901a0449de46867d956463e3b58d51ef1e15b349352e6a41158a7e44f563b74da18b6b16edf6f7fca5573c523688e761bcc0e5419a38c7f9fc52706382a5c6d162365114da725bdf2835aca577a255d13be39754b5a49bf6eff2c0a9b181bcbe63263f34aa650f08ecaa2d76fa791cdd23f596d671fbaec3863b06f1567d6f59982bab4359f4812b1192bf8c0c9efac82787de8de8a27d2ab986ea34e60c3b3d687699163b6b9300d7acd6e74845c1a5a45cd3df2512ed75ac062d01612ad0c6f53c9a99d4aa44107a3d9a5d6ebf6aa14b9c75e19ebcb47582f466d1b6845351f0caaa9627416ede6fd22cd41aa8171c8ad3428dfd79a8df50bdbb89e4c9bd1def71bfa964914670528dcb05a597d46e6914b09eddf13dcf3ca9b11c3e3d33cc64a0c00703da261975935"}, 0x2ff, 0x0) 896.504724ms ago: executing program 1 (id=2921): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c044) 412.804002ms ago: executing program 8 (id=2922): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) rseq(&(0x7f00000002c0), 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x600c0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x37ed, 0x0, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000001780)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x5, 0x0, {0x8, 0xac3, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2}, 0x6, 0xff, 0x6}}, @val={0x72, 0x6}, @void, [{0xdd, 0xa1, "8e07377e1f037da9e31581f732e2f28b988e621e19abcfee4f81f5da8ab594b5dccba5a24ab44dd3fadf5a9257f3668cf774b0a35eb2c8a06a0000000008000000000000006f399ff072d7ef2f85446170c39d41dc134413fb2530dd9d269d037048987f05e5e3e53aaac72d1b6fa4545d8f27a075a03cda531b87a39d4c771ffe3202726900117a851a85b2e39eee97303c3e186233751947bb9093df36689c47"}, {0xdd, 0xbe, "ebb91b24ec35ef6517bfabc73d50b3a3e00baa0192579468a00240cd04dbcf58b9482ec2d42d6f3f4d741b222a63285c0d67731d85b5349e3e15746f0e99e0ec98ffd07ca0d27c8e772a3d5d59c4771708f2a9497e4b0cb0c18ee7ff4c7f346a8a2db2ed5b2a779781c019cd0a814d1cb0b3934d84ce4b4c4359cae1bf44e5015431e72516e4208e57a32d6f104f08a9cc6430e27f14a175ed353cac28f50701bcb8de23eb1c0ed46fa039d67e5ba320ec36c1f3152524dc61e74643741d"}, {0xdd, 0x5c, "ff704ec0bc118ee006e3842bd3fbe340db037912aeb7f503191c7b978015c47c6b2a8e35a7a4d3e03d354f3e49a185999d6fb7bb66c324c04e1e67a536ad1d773e3f70f0ac30b567b46f9eb591fb6a756c4a8239796e58ea5dbb59a4"}, {0xdd, 0xaf, "c17fc1a972c57fe1e61c81b47feee56307a320c7c7d59acd06d83f52a1044181a70ab457f7b884c873be8961c5b3fea88e973ab8ec22d4493fd4f8abc08e8c98a2937d3faf76bde76cb10f94fa39279c58d37db74d2950cb60ee402c1c9b1e437f1c0d39aaa6dc2d99bd9449f8ce67901239653919d4645db500e9548ff0a539e1413f0fe70985139de69602af159c1001a0c0530dad540dd7ce7a5e81f7cb3d9009b9146e5a8bbc2e34ef2156a5d7"}, {0xdd, 0x3c, "7cf93449fe223be4d212facc1fd7b3e9bf779631d55021ecbdb4eb7e714132804b06a5c8bf32587087646980c1f4d5837fdf9911812da28216e92dd7"}, {0xdd, 0xf4, "ab165a4cf70fbfbd9f338ea2323ade80f7647c652c057063b56242d501e5ce26c9c85a37d4e3988db50ad03674c96f189b59fc936d77e48254ab3931fb9698740e97abcba85be27b3b5ef3693558e961aabc26eedc88ec08ea9b35fb73316da44d940f9744df5eeaac7e1470c992e1e4879552e4bc699e3f7c106b8f44f82babf33a92eedf441b430e2da3e2d9baff90e3b6060b9662db88f35e43180607ae2b8a8bbe5af4b947a285e6e282e47f263db48e1c7d8444d6cef19b85e0ce147bf023563ee3b9a7ce15f915ae653ca62b96c36d92dd54d855c66954e3620375eb3be4cb3e8b38a6c2865e98e5a9f3802df911a43622"}, {0xdd, 0x9f, "d3924606bf0ca1ae2b97779504beede215e8c58a077c498ce3c1fad6165e85f0c6a0235e629d167bb98470772a1c2108898031f9c2ebc662395057fe02dca7c4d5c3054819d7fa630d8753146256913832a0bb5170df180ed7b47f8758fc5dc397eada148564a0cd56ac2cf6a05c34734ac4444047dc34f2ed66f707d41726c57a6b61fe02562d9985044e5d287f8a6f767eceb26fd0c6a0365f4b324b73a7"}, {0xdd, 0x9a, "70f257e0814997cb9ba329e0dfa2b0809e1ed1a49eaa41a8ca3b3517dc25f8b21ae01caa80d8f9bb6bdb45cd4fa5c50f1db820fe129498fe5d01e5c0e7418caa430e7dcdcdb965fcfd866642b28e56afbee3d3073c562d7bf3b348114b44a81c6148fa460382ceba64b1e377c174fd4df1c8fd8a4932b7e4abe6f08f7a1c1604091c2fdee226d45fba2e201580c1d498b31e2a8174ca6479fb07"}, {0xdd, 0xf5, "43f546341c78342cf9e38556fdc6c20e00345d276ec9dbccd0e78d66ec26e38334ba498ae9281fc369b9ee0ecb7f67bc1b62ca797c46c04220c4ba289122a6cc9728ac071a422caa5abcb5c12edcb8afb37b843b9773ccc64535de00e1caa0630cc322b800ad06693aaece0b16daa65622f338c0d927afc9e3f353f28a7fb1cce88c4bb69a91021143f8d6b8617f1476c6d277c68aaaae8b655f8f0e5098ae6c8f21d57aadfd192abd87d3904ce029db2a4fb94e25e738cd5d9c1c02081cc91d3a81b4f2d6e9dbb567e0b8394da80158eec98fffe32d7a6c40365cd6e235284e8f6599d3d29711063a560e238fa0985e90162cb36f"}]}, 0x62a) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000001140)=@data_frame={@msdu=@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @broadcast, {0x9, 0x32}, @device_b, @value={0x2, 0x0, 0x2, 0x0, 0x4}, @value=@ver_80211n={0x0, 0x3011, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @random="68a9d9f014f026d5a36b96fcc9a16dba3b35ffa3271caead5c1abf14851e2fab381a552442e9eed46f6eca497d9a15abaf1090b0bbe109d395926ebaab3e142e3f4f1aa5a58d8c2cce6682f34b6be55ab7c283464b354c116c81773a70a40c81190f86d9a0903f822ae10120ab5eabb84c9fc50bf92142a774b97e1428ff06bc248d8089c6f1976a2bdac73b596cb7c345edafda0b76d5621f14d28b13a5eaeab9aef7dc44ee369a4978eccb57900860a38664d6a6819751d3397083ecf93b48237b8126a7bfac385711c440d29d5a986dd2261c5e98aa125beac781f025030195469addd8b94c89792271925eaa4e8638453886125dbb85a31e3313fdb01fe1067b353d3fcf6ba88bc3d8f5338ff2658fbc3324b759a4e2b20315995c1f34ff21d9ec465ccc768663a0bd01d2d002a67bf75512632e38f0a6c0f5b44f6e0e5a86296197f3168b83883d1091be1dfa4dccac69341b0aad84a43cb68e7f18ebcdef7171971e447d98040bcc9d25ba2fd1e938ba1fa4b2f12d92acb0d196d67e47b19b77ad48de517e01a9ca7843b7af7b4e6f44186bfbe2b3dc5ecf6c02f64015558088c61eb33da8f162ddf493f7f4786a13551f735c3a1d82150aac1f269b5018d52e408922821be4cea5a6d21e5fc44a734f173add790090eb21e0b9a68e811b0c9cac983a2317b2f5c28c4044247a1c7089a462a2f10dd91325960932e686c21186ec1b9c01d0bcac67ce629ad0b556ba2b3bf3b499cb26a8ce92af1a059088a14fee20cc9f3f9d9d1c2753ee3e2041e06a20aacf1359d4bbf7b75a5f91eb55f86c2f1f4f85ea8ca95b9f20e2595714c085bb7a7f4c52aa4eacd5ecf31f62f7a59c7e2441df50f03a387f2fedd22703ef1499b4cdf1d9b2c42052bb546568eb3f5dfd089287609c5df62d6cab822e57414c338e52b2e6116f6376b758e6efcb6914eaa5f827b11a5f521ad8e751f7d7d8c6d4fc6bc4aa2a699c4d989f790d88f0edf5afb2de65ff8336b50bcadfe8efdee12862ccc9f7d462e3cea5d8da8452cafd1608d248a5db57267a4c7069d36fcae7a8226e9d432c8480d5322b2fde28134cce93983d3a86c5df7c271292890c26e72d6db2eed5092c2f54c89de2f431d8e0d2fb9fecf1dceae8a03009b27363afbdae86cbdefa2a651e0c4d56f0d366dbbe43daf7588c7c454d5562a9e5ca308d7f7e8ddad42908c0bc584f40c460d34afec58ae627d8158243e064df58af1f2ac953d7c824915405d3959f63edf401ef3670652b53557a70c5f223befbe15f4052c02b41822d209112459c7a050857b9d9404a19d53a2422012293b2a6b29b359d2ff4527cccedd0edd133c4b541684970e5187903c9b6f706c108c8706345431091a8a0e07111b055cc8c89119084678c2a07b34bcba19fdb2786545428f496e36911ea862404abc428718c85bf54f791065b60168fa5097914cd26a499f17e33bf2aceb6bf509072fea3c362ab5f3b67704ff0cdd2a3aed2027227622d6881ef1bb075a07cdcfdcaa146be8ace7f005b56e9a9e290f0ecf15e5172d00c43f08021e5cb04329fa1dc5787482fa7dbb7799a1b8eab90d56f8e1ff320f61b1afe86f17924b14e80e315f2fa6a70e1506f18ea1f7608c12e712d2784dd832ed56b10e0407984271071272052b5a950d9cc70710fb12b0fd67c303328f5d21ac9dd7454bf976c8088d0f8ee15b3149d5837b3c171d4a36c0726501cbf06ebb9317de325b20953b58dd649c2166e305ca3a24019232f017ccf07dec1780eb769d2d09b1a7cb9995c3b0415937f6c44209208818861399ca08456c59c10c2845d971acb8d711f0b40f8415711b447332c89de74e2720933b54286467dc882ac528a4064c93d19e8a235867d77db4dacb4f86697f8edf81b7bd403781612b092f99967a87ec587ed0f1571c224898050f92090bf13ba22058af77f1e046919d23ccec2e4e74c0964b4bc05c456bcd61427f3fad1819166158d38688445fcadddd3910e1e9eb5fe7132274d7d7b7e74b1ea0993aeead79905006d5dc68aca377fdade584bfd4ce4da33cf93d58073ec55a565c7a2ff3ae76f8102ccb05dcd6e6234c8218b8a8a9665f772dabcef80adfaeda8"}, 0x605) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @broadcast, @from_mac, {0x0, 0x12}}, 0x1, 0x0, @default, @void, @void}, 0x1e) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) socket(0x10, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x900, 0xfffffffffffffffe, 0xe1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) syz_usb_connect(0x3, 0x24, &(0x7f0000001e00)=ANY=[@ANYBLOB="120100030a8a2d103d1b3b0194dafca5353153ad44ae56175aa6ca05010203010902120001ac04a001f60372ab5207002ab3c417297c15219f6cb0ae30b7873f4fc2d6cc87bb79b163f1e1937b63e67a6b14b4c30b847d857780cd556f6d30d4cc88f363385cd9b6ac7f7428dfc61441ef2e5663133869ed0dce4c463dc77d1f8f1f4993e6b32517add08cfd76c6f5feaaefde8d78a5daf0313475c9e1d748106aaeec36cf221de20ef088e97ec3b9601dd205dcbf88e1b5f7bfaba5056981642938bf2ce8fc6bcdba20d3c37a842750a0fca2381cb085ce139e8351f3d0a9a59e38b310084f87d9ea3b"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000140)={{r0}, "99ef6855d3876ebf66b434e7e6bae676a72de553268e15b5b817cc3f4d451ee202f00f3890b3aaf857b62e1201d322b886f040d9dce497855f55194cec55c2a32324c974051c9d7992d8c06f5f259995ecbba1cd57a325c02ada3bcadade4869bfc2ffb96c521b8e0def8afa08e3585d910ca2bd35f3fab18de4b4d0138d4b677f7d81127fee9d13931d7249bef47bd16d331a0706c489e820ead4f2df3e50af23650c6b6c2623ca187e6de64c189bb4ffca6a18e1e1b352f465e5740363515b0eebcaa5079d9475a939d5164f0ace83c2074037b897d34ed0bd6268285ab27f7d260f70236bf92aa8e574adf250e8ce5469947a596cd1b6d216c2d8e161a377fc01525656cce64c65eb5ad5ea3d654e512b631d41d7fc412a36686cbd6f6a035d531b657ad8903bc836a532e75d869094a890a3f838084defb69786cf74883dcb7a44df60fa8e136f273c2a6fe4bae575d1cf3e931759fe907c3d9531dcc30e60eef36e1bbdb46f174676f51f85cca31b23a2ce634913901519bdbedb0badc839941baca6c843c3cb5cb1dc05780b6a36bb3c531df1f27bd8362ba463fbd09f3c2d324fcac8f4bcaa4105f1e740114ee2fd4e1b12590f0691d7e7ce32d4f262964b6b3e85c8935e113d01ada4949d22c0b09c077272d698d19d277c00f4832f2d856eb34156dad04fa9872fd39b77a2b475b4ec3d4a9fb6912a042b1c0a12c7404cadc7870adfb1e97855e8d2f7a575b0f8de31c6a631a6f637257ce0d89231ea90557de084ec66e0426878fa6ecb60cfb298a25849cb51d59f8e9dea12b4f4bf60196af0d141944ef709695ebe7055399d0d61b2af921f3c2b4080dcfd4554d4dd26a3c601d6c0b2c563235018536a3b45421afd31736d87e485c43b3d68ce942b5b33810d426a46442bbf91fdc333b87a6df7913d4da319e5a89d31c81c2e8e002f416fbb6b845398a58ac9fc90bd5adefb8af2f0891f97e50ce0d02faad111e2b7bb6d2ee81cf51cd1f0b18a31836e3809a13280792042c50d143aeffb1c9f42c31cf60f8569b544e6e5707cc5f163488d7477cb3efaba249b676d234b9a07c1e121126015b834fe105143b7be1191aa658ea93b5dd417cfed594c2353b3617b9de5cf5a1bdae0cb4d7587af5b55392bc70d14b4d3bc2343ab90d3adee4986de22bb0d52737337494d81edd2e0095d53db72d6c18713ab10d0ebcb02356c578cf3642d99fcf80a97002abe414c977f38fb687ac24200f61a312193bb1bb0be56aabcf28e6d3ba32c166c21c1cefc7725ce546b8a5a3121decbfa33193b8faefd5acef11f51bdcb550f1781ebad91ff5e3fc259c9b9fb00912ed6668c0af0ac4d4c1647a75fa0660dda2b669cd3c5f4b3b01a0481befe35b3dbacfb5f536b1889e5b0697644457cf3a2138d455a32d7dc96e10ee88b5e9fe1e84ae0411b021e9697583d6c87e83cc01583a77f712d9856dcf47a2267a78f1ccc43253619545dfde9eb563c996e11187c91eee9461464fd831058a5f3ed7708484e690bdf88dba7df0963ee842366ab737e2b4a4fa3be3bca6006ad08059e3b75698bff9920560b1b627cb673718b01f9a2e37077e66435beb90a5f40f22f3013e10351733727d4b6dbed662923435e932c905f1bea6257f90206bee042da32ca007fd6b58d5d908fbe26ad1fa8282a482ab9a46f752cbb5e0c7e843f8de80bd6ec15c740826f260105c42f8a6cc164b57feebaf74636ee684a48ba15e785ecd21668ce6b67f050e7322746eb054261726caabe930be5858076eeb61a5d2a2491d3dba974e832071e059c796ddff7456cb24671ff75e019208a48c68c1fce48a0e5b3515083104f124a22633e5dc3600c7ece56ba878d669e1b6cd05ddc341f2db780ea06e656281a7920de0fa9315eedb8ca2ffc42d0681b56d4a2e93e470112e0a176e55764a05cddc11b653c04af8cb82149112bcbbb9ac59dd98a8b40785a45c63624d962021b8d14263920be7da59a905ea6ac62efe1ca8fc1234d67efef66d97fa8a2c9851306547a32178c28b4b7d25fdf13e138026580aec0cab9f916142cee10c6011f208ca67a7c4a24e936952d615ebfba6a8e7bc706308086f286483a0a6ab59de1ab5ad8b5f6b8139b59f4d736cbe38cbea552bc81770de30e5ca686e54d41083f5472963f73e5b33a3c12bf893b744771ca77cf56746e70251bd33e5162abc32d306831a767f22da973068186174537c16a16cbe06174109e0d07dd21c2d21172160792b015d9d0d632bbfcda1cdec3ec092862ab3caf8a19a9cefae5311bd968c058c35c8b26fe5d85ba5f13a47dae4194d7ff28c2f558d1f3b2ee3a9e6e28b5a6f10137489ca4bd0a492f0d4a89d6e51374330813b12806cc0fa570e6815341f845b914e48af8da6e1ab1292267de94e519b35d80d05301913fb76c80361ffc9b7f1cf41f4cccb29bf984a4d575fcc0d92bece66cac7a38ca39e6a198869470457be2f12973df1a1f16a856f5cd0c96e3b219b8f7d0ebdd9bd8cb8dc428731c7dccffdc2aa0382c38154af65b79fd674cd2f7d6cd5cf0892652d9ff0baa9a48768ea659c236d225a50a8d3698989a2b777823468eecdeffbfdcd5eced07961ef3915db7e6a4d5820bb7c5702da85892e904beac0e40fe61a90d6571c34ee6e2f2a6a1cf8b33f4f6cbef3ffa5b1235f9f2081f4f7b596e9f42380bb096b5cdc08bb73a3e858655654fc108a9c22bd5c6d113c15f137cbbd2748b3335f4a1b1f05f335242b1441016bf963ea1b3b7e96f98cde8a3522c8c0bba0f91968187073a72a63518998480dfb9b289c9974cf1b9c23959a67f60c527f8622fa97d3877184dee5125062b2920d25b978d4dfb75763bd53c063e9163ce81f99550f9bf531f9c382c4bcf83f99f956e37aba0a5617682fe7ac0a7e49a4e4064045abd5d991df4f34c7420f245261e54b337bfc51429c43e95d6da4928586edf15f8eb35794686502e19ffa28737f39613a0cf7ac63c70b013d5c4c9b23228919d13b236e8ac0580443291c17a3b736996a0e50bbfb159c2fd163efc5910ca0a41a2a51e3f656224af8641a802e2a6c3be22f5ce7637d756979bb39524636c2de3cb7bd39eecce63c3d639e353ed8d71664f14b78dbb19c1df8ef23c5eb9e4ba7c70bd8c20aac75c2973c9518911c51a23351330c89c1172cff80ef2567391a8ed2737bf0198aac471a142241dcf70276f7a33541d8a8c80f764d72f31f52f78cb7e0ea13c6ebcf5e92190366bd1e93222b8b8d75339395095ad1b23848adf4ddab8e1bfa2fdf69ef29a0c73973548c508d9cfba1d7348e0d9b9209b2a105f05f54bbd54365aa5a72fbf4aba64486f17350ac6f8cb5df89f0825eaeb80230fbf24d7c843974408708d3e76fdf6ea477288f88daf9e357efc56118e824aa18d4c69a24b8053363f001bc04c1122fe1b5741d93b4049b7de856b3e7220a8c1bf7bb0ac2a8cec6ac9340d7e3f89182f1a329e1073d36688f08d0fd1173744fdfbf2e2299dfa998062ba916ac2e7332aa924b4d882f28612b2e7aba5cc38f1cb49d1cbbaebe0f054534cb0547e6357a5349a51b0530d86d2ab6b23841efef6925aa35c631be5447cbedec3a9a9e746f18c6e1a7f36f810d53ba4983c4e1d4226e17ac8a43fc011c5df6e682f319c023e3d68167104d27964374f4472fbd29a8f97786f861247d26a629a06e0e44abcfd6cf792434633ca7130e2ae6d50ad89e54104682fc91917679625ead8a9e38a1692476ac57d2aba194282303423104b364e4bcd455527cc9328cb707703d4a969f6418429675faa1874d5d7f60a756990de314f2c0fb586d0070c9f6ae1fa579c58d21b8027f0c85d1bdd0ad247f1bb40c1b74650475b7f6b0834bfa1929173b8669293c8345dabf3425fd0cf661cf8fd35ebc75af7c258e836616ded4ecf1a978f08f4c0886118c8aaebe764eaa3c6c4d31866cd83f2f955356f425c6871eb8303c0f3711ba9a05e3e9d6db5e508a12aab09dfd70b56a2d8316517628ed72e074004b0dcd4075c2337af677622870f94e72a904e31066b2328a8f1879619a20bb607f2a2da2fd25fea5affdd101540ec763776a0e483a186661a043fa4bb7f721764bc20061d5251b82cd206fb2d6e69636cff4b851f28b0b8351d3da7ba4594fc57259dff729b1574018491122ee5096eeb8c427d9eba50c0a49421b06ebdd9a8143b1525da127e6f0f328a55611e665b7caae4c4be34d0cda81b80cf3edc02b349b0d3ffe591fe675f464e23dd330104cf34de498894ebf45e1f1de0891b135576c4029a4179366ea2a0e00df791d91340b41e4d74cce1fdb86927ed02d3e1f67128d9a0e97ae9e245405994ad6fe775e5ea906bb52a0218cf08309d18324a4f5fe162c9916854bfdd0be49a7fa378d80bbf9bbdc55bb06fe804e5da792d442f39dae35bb7d8168f4b2c10858cabfcaf136b0e881fac903eae03a9c55606cd5a90b7ac99f459dd2bff57525ce6e160ede008fbe018e232bf205b04a2fe6cabd279de031efe835f00fda7180f424add0c6bdd37e5d2ddfdb07ae268dcce2c5100002ed375470fea326e11e4cf3953fede1043052f3d42a9a459e8db6ee077b0adc541270f7fd77753fedc3f901b742b4d808f06facb78b9c9d8d64a23cd46294289f89c3ef3a108c1cb5429924a19f944a4a3d4b7211180430e0c81da6593e9ac2fc1db0f15d2e7be078bb119a84394993dc16f352055831ea2e7d3eb0765d57909ae1fee17a86c62e99f6f4c9516673516b9d824217a9fb62cca5ab4b5173380cccc47fdd58d069b574cee88a13e005c95065ed5540c0e86d2a795827110aebda28486b7287dea2eab64e8b16681b2d63a67c2023ccc8a424262e52a8aed22659dbcdd033d3b1ae126977d8bb29354d662c80f098921ab07f2843e31b14e01e5fe0eb867b731c857af58f27e1cbba28976a1125717ce760537adb6a04eac6b639a304923818efad57660e309dc49db1dad11c646373090ac703b84fad6af7182731e8e7995e1ecbb4d6ae97808d6b514cfcb763af84461ad55ed05974f23c10d80bac8aecaa08090759862e3f9cbee665613859a44e59f8fda885aeff5aaf7de4910c055c61ebce365f10ab11e096aa5aee7f7a882039cca81067ff867a96bdefa1954199e58e941570cd851458f2b7335eb19bcc9b68bbf057e39f15b833571856fa648503eef54c62b3b42f1598694a833f03be12b95ba37db0101e4b1d012b89c31546b918c674e27fd64cd03c62e24397aa35fedaa03e50c72f7b9f7c28db14623c7e2a0b1f734030acbdcaefd15500c96d713486f765b581e4885e9153240233b07b0f4f9765c89099c82af994c6c96116106b44e1b317a02e275881b54fbb12fc5ca97308d54894ac644b4bcdc60aa0360569391679db646b8a459d7b543a241bd4ae377cfbe3abd3feb4e01d15186e905f07344da795006425aa979b4a87e230472bb389d6c1919766420f8776d500b8ccd80e895b9af14d8f8474bf39e4b25eb498bc4681fab99ca1261ed1081ced0752b1f9bf84ed8e73de42f3c5a3411fa2f8eb075924ab697e135f01c7232f5a4c79dd45d923b9a1743a7c7d38f42c82108e44e8d7f59a72896174ce7e7cc91c053cf0b47b832a8dcb37c018393fb6c364f316588024fd4951435b9545894101b78d3f126839fc9857cdc8b6c9f9ad7c4bf54fe771bda430a84c937c04f9a022577d43b373cd941b3948aa4143709499a4e9d209575b3af06b575"}) 289.94669ms ago: executing program 7 (id=2923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x1900, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x180, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0) 252.290622ms ago: executing program 5 (id=2924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 200.52646ms ago: executing program 1 (id=2925): timer_create(0x3, &(0x7f00000002c0)={0x0, 0x29, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000140)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216645f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c2700000000eff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ffa2c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad686fc5ef7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe822a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8001000000000000f9ffffffffffffff020000000000000002000000000000000200000000000000fc0000000000000000000000060000000600000000000000ffffffffffffffff0000000000000000ff0000000000008004000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0100000000000000000000000600000000000000370500000000000036"], 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@fowner_lt={'fowner<', r5}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'sha256\x00'}}, {@obj_user}]}}) timer_settime(r0, 0x0, &(0x7f0000000340), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) process_vm_readv(r7, &(0x7f0000000240)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1, &(0x7f000000a780)=[{&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/165, 0xa5}, {&(0x7f0000009480)=""/83, 0x53}, {&(0x7f0000009500)=""/176, 0xb0}, {&(0x7f00000095c0)=""/4096, 0x1000}, {&(0x7f000000a5c0)=""/117, 0x75}, {&(0x7f000000a640)=""/37, 0x25}, {&(0x7f000000a680)=""/197, 0xc5}], 0x8, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r8, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000480)=0x10009) read$FUSE(r8, &(0x7f000000a7c0)={0x2020}, 0x2020) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x5, 0x2, 0x1, 0x6, 0xbc, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) 199.090437ms ago: executing program 7 (id=2926): r0 = socket$inet6_udp(0xa, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) 70.969336ms ago: executing program 7 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) sigaltstack(&(0x7f00000014c0)={0x0, 0x80000000}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700030000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700030000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 283.129µs ago: executing program 5 (id=2929): r0 = io_uring_setup(0x1, &(0x7f0000000240)={0x0, 0x3, 0x800, 0x1, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x1d3a43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x2, 0xc, 0x8, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_ringparam={0x10, 0x9, 0xffffffff, 0xb389, 0xb605, 0x5, 0x10001, 0x97, 0xd2d}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, 0x0, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400)={0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x54) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@ll={0x11, 0x19, r4, 0x1, 0x2}, 0x80, &(0x7f0000000340)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) io_setup(0x1, &(0x7f0000000080)) close(0x4) 0s ago: executing program 7 (id=2936): open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x18) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) r1 = fanotify_init(0xf00, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x840, 0x100) fanotify_mark(r1, 0x1, 0x800002b, r3, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2e, 0x400, 0x23456}) io_uring_enter(r4, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = io_uring_setup(0x6f31, &(0x7f0000000580)={0x0, 0x136c, 0x2046, 0x23, 0x8000846}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/133, 0x85}], 0x1) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) kernel console output (not intermixed with test programs): ffer+0xcb/0x170 [ 347.278933][T15586] proc_fail_nth_read+0x1af/0x230 [ 347.278958][T15586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.278972][T15586] ? rw_verify_area+0xce/0x6d0 [ 347.278989][T15586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.279006][T15586] vfs_read+0x1e4/0xb40 [ 347.279018][T15586] ? lock_acquire+0x1d1/0x380 [ 347.279033][T15586] ? __fget_files+0x34/0x3d0 [ 347.279045][T15586] ? __pfx_vfs_read+0x10/0x10 [ 347.279055][T15586] ? find_held_lock+0x2b/0x80 [ 347.279067][T15586] ? __fget_files+0x215/0x3d0 [ 347.279081][T15586] ? __fget_files+0x21f/0x3d0 [ 347.279097][T15586] ksys_read+0x12a/0x250 [ 347.279108][T15586] ? __pfx_ksys_read+0x10/0x10 [ 347.279123][T15586] do_int80_emulation+0x166/0x650 [ 347.279142][T15586] asm_int80_emulation+0x1a/0x20 [ 347.279154][T15586] RIP: 0023:0xf71675ab [ 347.279164][T15586] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 347.279175][T15586] RSP: 002b:00000000f53994bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 347.279187][T15586] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53995d0 [ 347.279194][T15586] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 347.279201][T15586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.279207][T15586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.279214][T15586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.279228][T15586] [ 348.934612][T15553] bond2: entered promiscuous mode [ 348.934878][T15553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.945991][T15577] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 349.012561][T15590] syzkaller0: entered promiscuous mode [ 349.012576][T15590] syzkaller0: entered allmulticast mode [ 349.024874][T15590] tipc: Enabled bearer , priority 0 [ 349.029323][T15590] tipc: Resetting bearer [ 349.030927][T15589] tipc: Resetting bearer [ 349.047236][T15589] tipc: Disabling bearer [ 349.076470][ T5880] usb 13-1: USB disconnect, device number 12 [ 349.259970][T15597] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 349.380067][T15599] ipvlan0: left promiscuous mode [ 349.631360][T15605] FAULT_INJECTION: forcing a failure. [ 349.631360][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 349.631392][T15605] CPU: 3 UID: 0 PID: 15605 Comm: syz.5.2662 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.631416][T15605] Tainted: [L]=SOFTLOCKUP [ 349.631423][T15605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 349.631432][T15605] Call Trace: [ 349.631436][T15605] [ 349.631443][T15605] dump_stack_lvl+0x100/0x190 [ 349.631470][T15605] should_fail_ex.cold+0x5/0xa [ 349.631493][T15605] should_failslab+0xc2/0x120 [ 349.631516][T15605] __kmalloc_cache_noprof+0x91/0x6d0 [ 349.631542][T15605] ? raw_open+0x89/0x490 [ 349.631562][T15605] raw_open+0x89/0x490 [ 349.631580][T15605] ? __pfx_raw_open+0x10/0x10 [ 349.631596][T15605] misc_open+0x26d/0x450 [ 349.631616][T15605] ? __pfx_misc_open+0x10/0x10 [ 349.631635][T15605] chrdev_open+0x234/0x6a0 [ 349.631655][T15605] ? __pfx_apparmor_file_open+0x10/0x10 [ 349.631682][T15605] ? __pfx_chrdev_open+0x10/0x10 [ 349.631699][T15605] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 349.631727][T15605] do_dentry_open+0x6ab/0x14d0 [ 349.631746][T15605] ? __pfx_chrdev_open+0x10/0x10 [ 349.631773][T15605] vfs_open+0x82/0x3f0 [ 349.631811][T15605] path_openat+0x19fa/0x2440 [ 349.631836][T15605] ? __pfx_path_openat+0x10/0x10 [ 349.631863][T15605] do_file_open+0x20e/0x430 [ 349.631885][T15605] ? __pfx_do_file_open+0x10/0x10 [ 349.631921][T15605] ? _raw_spin_unlock+0x28/0x50 [ 349.631940][T15605] ? alloc_fd+0x471/0x7a0 [ 349.631967][T15605] do_sys_openat2+0x10f/0x1e0 [ 349.631990][T15605] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.632017][T15605] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 349.632040][T15605] __ia32_compat_sys_openat+0x12d/0x210 [ 349.632065][T15605] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 349.632101][T15605] do_int80_emulation+0x166/0x650 [ 349.632124][T15605] asm_int80_emulation+0x1a/0x20 [ 349.632141][T15605] RIP: 0023:0xf71f75ab [ 349.632156][T15605] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 349.632172][T15605] RSP: 002b:00000000f54ab38c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 349.632190][T15605] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72c15f1 [ 349.632201][T15605] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.632208][T15605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.632217][T15605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.632227][T15605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.632251][T15605] [ 349.897539][ T1034] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 350.047500][ T1034] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 350.048339][ T1034] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 350.048357][ T1034] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.049961][ T1034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.049981][ T1034] usb 6-1: Product: syz [ 350.049998][ T1034] usb 6-1: Manufacturer: syz [ 350.050010][ T1034] usb 6-1: SerialNumber: syz [ 350.051393][ T1034] usb 6-1: config 0 descriptor?? [ 350.281454][T15636] usb 6-1: USB disconnect, device number 10 [ 350.294574][T15662] fuse: Bad value for 'user_id' [ 350.294592][T15662] fuse: Bad value for 'user_id' [ 353.070696][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2666'. [ 353.098576][T15668] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 353.100004][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 353.115504][T15671] bridge0: port 3(netdevsim0) entered blocking state [ 353.117850][T15671] bridge0: port 3(netdevsim0) entered disabled state [ 353.118030][T15671] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 353.122087][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 353.122099][ T42] audit: type=1800 audit(1789800892.002:3950): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 353.139358][T15671] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 353.155830][T15671] bridge0: port 3(netdevsim0) entered blocking state [ 353.155937][T15671] bridge0: port 3(netdevsim0) entered forwarding state [ 353.213600][ T42] audit: type=1800 audit(1789800892.092:3951): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 353.232432][ T42] audit: type=1800 audit(1789800892.112:3952): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 353.264189][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2672'. [ 353.269091][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.277673][T15677] bridge_slave_1 (unregistering): left allmulticast mode [ 353.277700][T15677] bridge_slave_1 (unregistering): left promiscuous mode [ 353.277770][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.309530][ T42] audit: type=1800 audit(1789800892.192:3953): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2671" name="local" dev="configfs" ino=53241 res=0 errno=0 [ 353.310412][ T42] audit: type=1800 audit(1789800892.192:3954): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2671" name="addr" dev="configfs" ino=53242 res=0 errno=0 [ 353.312731][ T42] audit: type=1800 audit(1789800892.192:3955): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2671" name="addr" dev="configfs" ino=53243 res=0 errno=0 [ 353.318150][T15683] tipc: Enabled bearer , priority 0 [ 353.319511][T15683] syzkaller0: entered promiscuous mode [ 353.319530][T15683] syzkaller0: entered allmulticast mode [ 353.326096][T15683] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 353.368484][T15683] tipc: Resetting bearer [ 353.373644][T15682] tipc: Resetting bearer [ 353.374963][ T42] audit: type=1800 audit(1789800892.252:3956): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 353.419252][T15682] tipc: Disabling bearer [ 353.434409][T15688] nvmet: adding nsid 1 to subsystem test_subsys [ 353.446788][T15687] syz.8.2673 invoked oom-killer: gfp_mask=0x502dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 353.446826][T15687] CPU: 2 UID: 0 PID: 15687 Comm: syz.8.2673 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.446842][T15687] Tainted: [L]=SOFTLOCKUP [ 353.446846][T15687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.446853][T15687] Call Trace: [ 353.446858][T15687] [ 353.446863][T15687] dump_stack_lvl+0x100/0x190 [ 353.446881][T15687] dump_header+0xfb/0x606 [ 353.446895][T15687] oom_kill_process.cold+0xd/0x380 [ 353.446909][T15687] out_of_memory+0x340/0x14f0 [ 353.446927][T15687] ? __pfx_out_of_memory+0x10/0x10 [ 353.446945][T15687] mem_cgroup_out_of_memory+0xc6/0x130 [ 353.446959][T15687] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 353.446971][T15687] ? find_held_lock+0x2b/0x80 [ 353.446991][T15687] ? do_raw_spin_unlock+0x145/0x1e0 [ 353.447002][T15687] ? _raw_spin_unlock+0x28/0x50 [ 353.447018][T15687] try_charge_memcg+0x783/0xf60 [ 353.447038][T15687] ? __pfx_try_charge_memcg+0x10/0x10 [ 353.447055][T15687] ? find_held_lock+0x2b/0x80 [ 353.447066][T15687] ? rcu_read_unlock+0x17/0x60 [ 353.447082][T15687] ? rcu_read_unlock+0x17/0x60 [ 353.447103][T15687] obj_cgroup_charge_pages+0x22/0x1d0 [ 353.447121][T15687] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 353.447141][T15687] __alloc_frozen_pages_noprof+0x534/0x3300 [ 353.447156][T15687] ? lock_acquire+0x1d1/0x380 [ 353.447171][T15687] ? is_bpf_text_address+0x25/0x1a0 [ 353.447187][T15687] ? find_held_lock+0x2b/0x80 [ 353.447199][T15687] ? is_bpf_text_address+0x8a/0x1a0 [ 353.447214][T15687] ? is_bpf_text_address+0x8a/0x1a0 [ 353.447229][T15687] ? bpf_ksym_find+0x124/0x1c0 [ 353.447241][T15687] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 353.447254][T15687] ? kernel_text_address+0x8d/0x100 [ 353.447269][T15687] ? __kernel_text_address+0xd/0x30 [ 353.447282][T15687] ? unwind_get_return_address+0x59/0xa0 [ 353.447297][T15687] ? arch_stack_walk+0xa6/0xf0 [ 353.447314][T15687] ? stack_trace_save+0x8e/0xc0 [ 353.447327][T15687] ? __pfx_stack_trace_save+0x10/0x10 [ 353.447341][T15687] ? stack_depot_save_flags+0x27/0x9f0 [ 353.447358][T15687] ? find_held_lock+0x2b/0x80 [ 353.447371][T15687] ? kasan_save_stack+0x3f/0x50 [ 353.447384][T15687] ? kasan_save_stack+0x30/0x50 [ 353.447398][T15687] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 353.447409][T15687] ? bpf_prog_load+0x49e/0x2a80 [ 353.447423][T15687] ? __sys_bpf+0x1f46/0x4a30 [ 353.447434][T15687] ? __ia32_sys_bpf+0xcc/0x170 [ 353.447445][T15687] ? __do_fast_syscall_32+0x13a/0x8b0 [ 353.447462][T15687] ? do_fast_syscall_32+0x32/0x70 [ 353.447485][T15687] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 353.447501][T15687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.447517][T15687] ? policy_nodemask+0xed/0x4f0 [ 353.447533][T15687] alloc_pages_bulk_mempolicy_noprof+0x1a6/0x12a0 [ 353.447553][T15687] ? rcu_is_watching+0x13/0xc0 [ 353.447565][T15687] ? trace_kmalloc+0xeb/0x110 [ 353.447580][T15687] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 353.447600][T15687] ? __get_vm_area_node+0x22b/0x350 [ 353.447614][T15687] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 353.447632][T15687] __vmalloc_node_range_noprof+0x86e/0x1420 [ 353.447653][T15687] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 353.447670][T15687] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 353.447687][T15687] ? rcu_is_watching+0x13/0xc0 [ 353.447697][T15687] ? trace_hrtimer_start+0x77/0x220 [ 353.447711][T15687] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 353.447725][T15687] __vmalloc_node_noprof+0xad/0xf0 [ 353.447740][T15687] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 353.447757][T15687] __vmalloc_noprof+0xa3/0x120 [ 353.447772][T15687] ? __pfx___vmalloc_noprof+0x10/0x10 [ 353.447786][T15687] ? rcu_is_watching+0x13/0xc0 [ 353.447798][T15687] ? rcu_is_watching+0x13/0xc0 [ 353.447809][T15687] ? apparmor_capable+0x1d7/0x4d0 [ 353.447825][T15687] bpf_prog_alloc_no_stats+0x58/0x690 [ 353.447839][T15687] ? security_capable+0x80/0x260 [ 353.447854][T15687] bpf_prog_alloc+0x3b/0x200 [ 353.447868][T15687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.447889][T15687] bpf_prog_load+0x49e/0x2a80 [ 353.447910][T15687] ? __lock_acquire+0x5c0/0x1f40 [ 353.447939][T15687] ? __pfx_bpf_prog_load+0x10/0x10 [ 353.447961][T15687] ? lock_acquire+0x1d1/0x380 [ 353.448011][T15687] __sys_bpf+0x1f46/0x4a30 [ 353.448032][T15687] ? __pfx___sys_bpf+0x10/0x10 [ 353.448042][T15687] ? __pfx_futex_hash+0x10/0x10 [ 353.448069][T15687] ? percpu_counter_add_batch+0xb9/0x230 [ 353.448084][T15687] ? errseq_sample+0x51/0x70 [ 353.448097][T15687] ? file_init_path+0x48e/0x670 [ 353.448120][T15687] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 353.448134][T15687] ? xfd_validate_state+0x129/0x190 [ 353.448153][T15687] ? __ia32_sys_bpf+0xcc/0x170 [ 353.448164][T15687] __ia32_sys_bpf+0xcc/0x170 [ 353.448176][T15687] ? __do_fast_syscall_32+0xb3/0x8b0 [ 353.448193][T15687] __do_fast_syscall_32+0x13a/0x8b0 [ 353.448212][T15687] do_fast_syscall_32+0x32/0x70 [ 353.448230][T15687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.448244][T15687] RIP: 0023:0xf7fe3fec [ 353.448257][T15687] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 353.448262][T15687] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 353.448273][T15687] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 353.448280][T15687] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.448287][T15687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.448293][T15687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 353.448299][T15687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.448313][T15687] [ 353.448317][T15687] memory: usage 8kB, limit 8kB, failcnt 37 [ 353.448324][T15687] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 353.448331][T15687] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 353.448337][T15687] Memory cgroup stats for /syz8/test: [ 353.448796][T15687] cache 0 [ 353.448801][T15687] rss 0 [ 353.448804][T15687] rss_huge 0 [ 353.448808][T15687] shmem 0 [ 353.448812][T15687] mapped_file 0 [ 353.448816][T15687] dirty 0 [ 353.448819][T15687] writeback 0 [ 353.448823][T15687] workingset_refault_anon 0 [ 353.448827][T15687] workingset_refault_file 0 [ 353.448832][T15687] swap 0 [ 353.448835][T15687] swapcached 0 [ 353.448840][T15687] pgpgin 0 [ 353.448843][T15687] pgpgout 0 [ 353.448847][T15687] pgfault 0 [ 353.448851][T15687] pgmajfault 0 [ 353.448855][T15687] inactive_anon 0 [ 353.448859][T15687] active_anon 0 [ 353.448863][T15687] inactive_file 0 [ 353.448866][T15687] active_file 0 [ 353.448870][T15687] unevictable 0 [ 353.448874][T15687] hierarchical_memory_limit 8192 [ 353.448878][T15687] hierarchical_memsw_limit 9223372036854771712 [ 353.448883][T15687] total_cache 0 [ 353.448887][T15687] total_rss 0 [ 353.448891][T15687] total_rss_huge 0 [ 353.448895][T15687] total_shmem 0 [ 353.448899][T15687] total_mapped_file 0 [ 353.448903][T15687] total_dirty 0 [ 353.448907][T15687] total_writeback 0 [ 353.448911][T15687] total_workingset_refault_anon 0 [ 353.448915][T15687] total_workingset_refault_file 0 [ 353.448920][T15687] total_swap 0 [ 353.448923][T15687] total_swapcached 0 [ 353.448928][T15687] total_pgpgin 0 [ 353.448931][T15687] total_pgpgout 0 [ 353.448935][T15687] total_pgfault 0 [ 353.448939][T15687] total_pgmajfault 0 [ 353.448943][T15687] total_inactive_anon 0 [ 353.448948][T15687] total_active_anon 0 [ 353.448952][T15687] total_inactive_file 0 [ 353.448956][T15687] total_active_file 0 [ 353.448960][T15687] total_unevictable 0 [ 353.448964][T15687] anon_cost 0 [ 353.448968][T15687] file_cost 0 [ 353.448973][T15687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0-1,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.2673,pid=15685,uid=0 [ 353.453178][T15687] Memory cgroup out of memory: Killed process 15685 (syz.8.2673) total-vm:98584kB, anon-rss:844kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 353.473225][T15686] socket: no more sockets [ 353.534160][ T42] audit: type=1800 audit(1789800892.412:3957): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 353.570797][ T42] audit: type=1800 audit(1789800892.452:3958): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 353.605745][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2676'. [ 353.610787][T15698] syzkaller0: entered promiscuous mode [ 353.610801][T15698] syzkaller0: entered allmulticast mode [ 353.719130][ T42] audit: type=1800 audit(1789800892.602:3959): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 353.786748][T15702] FAULT_INJECTION: forcing a failure. [ 353.786748][T15702] name failslab, interval 1, probability 0, space 0, times 0 [ 353.786772][T15702] CPU: 3 UID: 0 PID: 15702 Comm: syz.1.2678 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.786788][T15702] Tainted: [L]=SOFTLOCKUP [ 353.786792][T15702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.786799][T15702] Call Trace: [ 353.786804][T15702] [ 353.786809][T15702] dump_stack_lvl+0x100/0x190 [ 353.786827][T15702] should_fail_ex.cold+0x5/0xa [ 353.786843][T15702] should_failslab+0xc2/0x120 [ 353.786859][T15702] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 353.786875][T15702] ? aio_alloc_inode+0x25/0x70 [ 353.786890][T15702] ? __pfx_aio_alloc_inode+0x10/0x10 [ 353.786904][T15702] aio_alloc_inode+0x25/0x70 [ 353.786916][T15702] alloc_inode+0x68/0x250 [ 353.786934][T15702] alloc_anon_inode+0x2a/0x3e0 [ 353.786952][T15702] ioctx_alloc+0x4dc/0x21a0 [ 353.786969][T15702] ? __might_fault+0xc5/0x140 [ 353.786986][T15702] ? find_held_lock+0x2b/0x80 [ 353.786999][T15702] ? __pfx_ioctx_alloc+0x10/0x10 [ 353.787017][T15702] __ia32_compat_sys_io_setup+0xc8/0x220 [ 353.787033][T15702] __do_fast_syscall_32+0x13a/0x8b0 [ 353.787052][T15702] do_fast_syscall_32+0x32/0x70 [ 353.787069][T15702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.787083][T15702] RIP: 0023:0xf7fa3fec [ 353.787096][T15702] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 353.787101][T15702] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 353.787112][T15702] RAX: ffffffffffffffda RBX: 00000000000001ff RCX: 00000000800002c0 [ 353.787119][T15702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.787125][T15702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.787131][T15702] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 353.787138][T15702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.787153][T15702] [ 353.816612][T15634] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 354.038773][T15634] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 354.041066][T15634] usb 13-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 354.041081][T15634] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.074912][T15634] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.074939][T15634] usb 13-1: Product: syz [ 354.074952][T15634] usb 13-1: Manufacturer: syz [ 354.074964][T15634] usb 13-1: SerialNumber: syz [ 354.352711][T15634] usb 13-1: config 0 descriptor?? [ 354.701739][T15634] usb 13-1: USB disconnect, device number 13 [ 354.924907][T15713] syzkaller0: entered promiscuous mode [ 354.924922][T15713] syzkaller0: entered allmulticast mode [ 354.926159][T15713] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 355.128775][T15720] tipc: Enabled bearer , priority 0 [ 355.129350][T15720] syzkaller0: entered promiscuous mode [ 355.129366][T15720] syzkaller0: entered allmulticast mode [ 355.131982][T15720] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 355.149651][T15720] tipc: Resetting bearer [ 355.153629][T15719] tipc: Resetting bearer [ 355.167560][T15719] tipc: Disabling bearer [ 355.426430][T15725] 9p: Bad value for 'wfdno' [ 355.430569][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2686'. [ 356.017261][T15748] netlink: 'syz.5.2689': attribute type 1 has an invalid length. [ 356.041774][T15748] bond1: (slave gretap1): making interface the new active one [ 356.052717][T15748] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 356.064071][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2689'. [ 356.093029][T15758] FAULT_INJECTION: forcing a failure. [ 356.093029][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.093065][T15758] CPU: 1 UID: 0 PID: 15758 Comm: syz.5.2693 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.093090][T15758] Tainted: [L]=SOFTLOCKUP [ 356.093096][T15758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.093108][T15758] Call Trace: [ 356.093114][T15758] [ 356.093121][T15758] dump_stack_lvl+0x100/0x190 [ 356.093150][T15758] should_fail_ex.cold+0x5/0xa [ 356.093174][T15758] _copy_from_user+0x2e/0xd0 [ 356.093196][T15758] get_compat_msghdr+0xb3/0x480 [ 356.093224][T15758] ? __pfx_get_compat_msghdr+0x10/0x10 [ 356.093260][T15758] ___sys_sendmsg+0x1b6/0x1e0 [ 356.093281][T15758] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.093310][T15758] ? find_held_lock+0x2b/0x80 [ 356.093344][T15758] __sys_sendmsg+0x160/0x210 [ 356.093368][T15758] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.093398][T15758] ? __pfx_ksys_write+0x10/0x10 [ 356.093478][T15758] __do_fast_syscall_32+0x13a/0x8b0 [ 356.093526][T15758] ? lockdep_hardirqs_on+0x7d/0x110 [ 356.093553][T15758] do_fast_syscall_32+0x32/0x70 [ 356.093580][T15758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.093602][T15758] RIP: 0023:0xf70befec [ 356.093620][T15758] Code: Unable to access opcode bytes at 0xf70befc2. [ 356.093628][T15758] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 356.093647][T15758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 356.093658][T15758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.093670][T15758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.093680][T15758] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 356.093690][T15758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.093713][T15758] [ 357.103377][T15784] tipc: Enabled bearer , priority 0 [ 357.103726][T15784] syzkaller0: entered promiscuous mode [ 357.103738][T15784] syzkaller0: entered allmulticast mode [ 357.105364][T15784] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 357.122287][T15784] tipc: Resetting bearer [ 357.124229][T15783] tipc: Resetting bearer [ 357.142664][T15783] tipc: Disabling bearer [ 357.250136][T15788] FAULT_INJECTION: forcing a failure. [ 357.250136][T15788] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 357.250159][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.8.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.250177][T15788] Tainted: [L]=SOFTLOCKUP [ 357.250181][T15788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.250188][T15788] Call Trace: [ 357.250193][T15788] [ 357.250198][T15788] dump_stack_lvl+0x100/0x190 [ 357.250218][T15788] should_fail_ex.cold+0x5/0xa [ 357.250231][T15788] ? prepare_alloc_pages+0x16d/0x5b0 [ 357.250248][T15788] should_fail_alloc_page+0xeb/0x140 [ 357.250265][T15788] prepare_alloc_pages+0x1f0/0x5b0 [ 357.250283][T15788] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 357.250303][T15788] ? __lock_acquire+0x5c0/0x1f40 [ 357.250320][T15788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 357.250334][T15788] ? __css_rstat_updated+0x1ce/0x590 [ 357.250353][T15788] ? lock_acquire+0x1d1/0x380 [ 357.250369][T15788] ? do_raw_spin_lock+0x128/0x260 [ 357.250387][T15788] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 357.250406][T15788] ? find_held_lock+0x2b/0x80 [ 357.250423][T15788] ? __lock_acquire+0x5c0/0x1f40 [ 357.250439][T15788] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.250456][T15788] ? policy_nodemask+0xed/0x4f0 [ 357.250473][T15788] alloc_pages_mpol+0x201/0x550 [ 357.250491][T15788] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 357.250513][T15788] folio_alloc_mpol_noprof+0x36/0x260 [ 357.250532][T15788] shmem_alloc_folio+0x135/0x160 [ 357.250549][T15788] shmem_alloc_and_add_folio+0x371/0xd40 [ 357.250570][T15788] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 357.250589][T15788] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 357.250610][T15788] shmem_get_folio_gfp+0x75b/0x1980 [ 357.250632][T15788] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 357.250651][T15788] ? filemap_map_pages+0x114a/0x2100 [ 357.250670][T15788] shmem_fault+0x1fb/0xa30 [ 357.250689][T15788] ? __pfx_shmem_fault+0x10/0x10 [ 357.250709][T15788] ? __pfx_filemap_map_pages+0x10/0x10 [ 357.250726][T15788] ? find_held_lock+0x2b/0x80 [ 357.250740][T15788] ? __pfx_filemap_map_pages+0x10/0x10 [ 357.250755][T15788] __do_fault+0x10b/0x440 [ 357.250769][T15788] do_fault+0xb3f/0x1830 [ 357.250785][T15788] ? __pfx_do_fault+0x10/0x10 [ 357.250799][T15788] ? rcu_read_unlock+0x2d/0xb0 [ 357.250816][T15788] ? rcu_read_unlock+0x2d/0xb0 [ 357.250834][T15788] ? __pte_offset_map+0x179/0x310 [ 357.250849][T15788] __handle_mm_fault+0x150b/0x2f60 [ 357.250870][T15788] ? __pfx___handle_mm_fault+0x10/0x10 [ 357.250887][T15788] ? __pfx_mt_find+0x10/0x10 [ 357.250906][T15788] ? find_vma+0xbf/0x140 [ 357.250919][T15788] ? __pfx_find_vma+0x10/0x10 [ 357.250933][T15788] handle_mm_fault+0x363/0xa20 [ 357.250954][T15788] do_user_addr_fault+0x745/0x12f0 [ 357.250972][T15788] exc_page_fault+0x6f/0xd0 [ 357.250989][T15788] asm_exc_page_fault+0x26/0x30 [ 357.251007][T15788] RIP: 0010:fault_in_readable+0xde/0x190 [ 357.251020][T15788] Code: 18 52 ad ff 4c 89 f0 48 85 c0 0f 85 bf 00 00 00 e8 27 58 ad ff 0f 01 cb 0f ae e8 4c 89 fb 4d 85 ff 75 31 eb 48 e8 12 58 ad ff <44> 8a 33 e8 0a 58 ad ff 48 81 c3 00 10 00 00 31 ff 48 81 e3 00 f0 [ 357.251032][T15788] RSP: 0018:ffffc90006f676c8 EFLAGS: 00050293 [ 357.251042][T15788] RAX: 0000000000000000 RBX: 0000000080003000 RCX: 0000000000000000 [ 357.251050][T15788] RDX: ffff888057dd4b00 RSI: ffffffff825e09be RDI: ffff888057dd4b00 [ 357.251057][T15788] RBP: 000000008000fe2f R08: 0000000000000006 R09: 000000008000fe2f [ 357.251066][T15788] R10: 0000000080003000 R11: 0000000000000000 R12: 000000000000fdef [ 357.251073][T15788] R13: 1ffff92000deceda R14: 0000000000000000 R15: 0000000080000040 [ 357.251085][T15788] ? fault_in_readable+0xde/0x190 [ 357.251099][T15788] ? fault_in_readable+0xde/0x190 [ 357.251112][T15788] ? __pfx_fault_in_readable+0x10/0x10 [ 357.251124][T15788] ? I_BDEV+0xd/0x20 [ 357.251135][T15788] ? inode_to_bdi+0x9e/0x160 [ 357.251148][T15788] fault_in_iov_iter_readable+0x101/0x2c0 [ 357.251164][T15788] iomap_file_buffered_write+0x433/0xab0 [ 357.251186][T15788] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 357.251206][T15788] ? inode_set_ctime_current+0x283/0x850 [ 357.251231][T15788] ? __pfx_down_read+0x10/0x10 [ 357.251242][T15788] ? mnt_put_write_access_file+0x4e/0x100 [ 357.251257][T15788] ? file_update_time_flags+0x38c/0x520 [ 357.251272][T15788] ? common_file_perm+0x266/0x500 [ 357.251292][T15788] blkdev_write_iter+0x575/0xd30 [ 357.251310][T15788] aio_write+0x3ba/0x920 [ 357.251326][T15788] ? __pfx_aio_write+0x10/0x10 [ 357.251350][T15788] ? __might_fault+0xc5/0x140 [ 357.251372][T15788] ? io_submit_one+0x1142/0x1fb0 [ 357.251386][T15788] io_submit_one+0x1142/0x1fb0 [ 357.251403][T15788] ? __lock_acquire+0x5c0/0x1f40 [ 357.251422][T15788] ? __pfx_io_submit_one+0x10/0x10 [ 357.251439][T15788] ? lock_acquire+0x1d1/0x380 [ 357.251457][T15788] ? __might_fault+0xc5/0x140 [ 357.251478][T15788] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 357.251495][T15788] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 357.251513][T15788] ? __fget_files+0x21f/0x3d0 [ 357.251527][T15788] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 357.251548][T15788] ? ksys_write+0x1ac/0x250 [ 357.251561][T15788] ? __pfx_ksys_write+0x10/0x10 [ 357.251576][T15788] __do_fast_syscall_32+0x13a/0x8b0 [ 357.251593][T15788] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.251611][T15788] do_fast_syscall_32+0x32/0x70 [ 357.251635][T15788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.251656][T15788] RIP: 0023:0xf7fe3fec [ 357.251672][T15788] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 357.251679][T15788] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 357.251693][T15788] RAX: ffffffffffffffda RBX: 00000000f547e000 RCX: 000000000000001f [ 357.251703][T15788] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.251712][T15788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.251721][T15788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.251730][T15788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.251751][T15788] [ 357.421058][T15793] No source specified [ 357.436996][T15634] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 357.945219][T15805] syzkaller0: entered promiscuous mode [ 357.945234][T15805] syzkaller0: entered allmulticast mode [ 358.119737][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'. [ 358.135975][T15803] 9p: Bad value for 'wfdno' [ 358.162697][T15634] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 358.182473][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 358.182485][ T42] audit: type=1800 audit(1789800897.062:3996): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 358.205373][T15634] usb 12-1: config 0 has no interfaces? [ 358.205395][T15634] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.263873][ T42] audit: type=1800 audit(1789800897.142:3997): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 358.288498][T15814] tipc: Enabled bearer , priority 0 [ 358.288913][T15814] syzkaller0: entered promiscuous mode [ 358.288925][T15814] syzkaller0: entered allmulticast mode [ 358.291127][T15814] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 358.312512][T15814] tipc: Resetting bearer [ 358.314578][T15813] tipc: Resetting bearer [ 358.334962][T15634] usb 12-1: config 0 descriptor?? [ 358.338069][ T42] audit: type=1800 audit(1789800897.212:3998): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231147 res=0 errno=0 [ 358.338102][ T42] audit: type=1800 audit(1789800897.222:3999): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231176 res=0 errno=0 [ 358.338123][ T42] audit: type=1800 audit(1789800897.222:4000): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231154 res=0 errno=0 [ 358.340924][ T42] audit: type=1800 audit(1789800897.222:4001): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=231155 res=0 errno=0 [ 358.341532][ T42] audit: type=1800 audit(1789800897.222:4002): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=231156 res=0 errno=0 [ 358.351261][T15813] tipc: Disabling bearer [ 358.490283][ T42] audit: type=1800 audit(1789800897.372:4003): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 358.530452][T15819] 9pnet_fd: Insufficient options for proto=fd [ 358.531519][T15819] overlayfs: failed to resolve './debug/dri/1/Virtual-1/edid_override/file0': -2 [ 358.536956][T15819] overlayfs: failed to resolve 'uuid=off': -2 [ 358.547612][ T5814] usb 12-1: USB disconnect, device number 16 [ 358.574468][ T42] audit: type=1800 audit(1789800897.452:4004): pid=15821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2715" name="align" dev="sysfs" ino=6116 res=0 errno=0 [ 358.591683][ T42] audit: type=1800 audit(1789800897.472:4005): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 358.630938][T15828] 9p: Bad value for 'version' [ 358.670067][T15830] netlink: 'syz.8.2720': attribute type 6 has an invalid length. [ 358.810924][T15842] tipc: Enabled bearer , priority 0 [ 358.811302][T15842] syzkaller0: entered promiscuous mode [ 358.811313][T15842] syzkaller0: entered allmulticast mode [ 358.813483][T15842] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 358.831678][T15842] tipc: Resetting bearer [ 358.834193][T15841] tipc: Resetting bearer [ 358.859043][T15841] tipc: Disabling bearer [ 359.177974][T15634] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 359.306988][T15634] usb 6-1: device descriptor read/64, error -71 [ 359.547080][T15634] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 359.639157][T15855] Invalid ELF header magic: != ELF [ 359.897022][T15634] usb 6-1: device descriptor read/64, error -71 [ 359.967166][T15644] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 360.007801][T15634] usb usb6-port1: attempt power cycle [ 360.127348][T15644] usb 10-1: Using ep0 maxpacket: 16 [ 360.506967][T15644] usb 10-1: unable to get BOS descriptor or descriptor too short [ 360.506995][T15644] usb 10-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 360.508688][T15634] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 360.527714][T15644] usb 10-1: config 1 has an invalid interface number: 232 but max is 0 [ 360.527731][T15644] usb 10-1: config 1 has no interface number 0 [ 360.527748][T15644] usb 10-1: config 1 interface 232 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.527763][T15644] usb 10-1: config 1 interface 232 has no altsetting 0 [ 360.534726][T15634] usb 6-1: device descriptor read/8, error -71 [ 360.593822][T15644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.593839][T15644] usb 10-1: Product: syz [ 360.593846][T15644] usb 10-1: Manufacturer: syz [ 360.593854][T15644] usb 10-1: SerialNumber: syz [ 360.810130][T15864] comedi: valid board names for 8255 driver are: [ 360.810145][T15864] 8255 [ 360.810150][T15864] comedi: valid board names for vmk80xx driver are: [ 360.810155][T15864] vmk80xx [ 360.810160][T15864] comedi: valid board names for usbduxsigma driver are: [ 360.810165][T15864] usbduxsigma [ 360.810169][T15864] comedi: valid board names for usbduxfast driver are: [ 360.810174][T15864] usbduxfast [ 360.810179][T15864] comedi: valid board names for usbdux driver are: [ 360.810184][T15864] usbdux [ 360.810188][T15864] comedi: valid board names for ni6501 driver are: [ 360.810193][T15864] ni6501 [ 360.810197][T15864] comedi: valid board names for dt9812 driver are: [ 360.810202][T15864] dt9812 [ 360.810206][T15864] comedi: valid board names for ni_labpc_cs driver are: [ 360.810212][T15864] ni_labpc_cs [ 360.810216][T15864] comedi: valid board names for ni_daq_700 driver are: [ 360.810221][T15864] ni_daq_700 [ 360.810225][T15864] comedi: valid board names for labpc_pci driver are: [ 360.810230][T15864] labpc_pci [ 360.810235][T15864] comedi: valid board names for adl_pci9118 driver are: [ 360.810240][T15864] pci9118dg [ 360.810244][T15864] pci9118hg [ 360.810248][T15864] pci9118hr [ 360.810252][T15864] comedi: valid board names for 8255_pci driver are: [ 360.810257][T15864] 8255_pci [ 360.810261][T15864] comedi: valid board names for s526 driver are: [ 360.810266][T15864] s526 [ 360.810269][T15864] comedi: valid board names for multiq3 driver are: [ 360.810275][T15864] multiq3 [ 360.810279][T15864] comedi: valid board names for pcmuio driver are: [ 360.810284][T15864] pcmuio48 [ 360.810288][T15864] pcmuio96 [ 360.810292][T15864] comedi: valid board names for pcmmio driver are: [ 360.810297][T15864] pcmmio [ 360.810301][T15864] comedi: valid board names for pcmda12 driver are: [ 360.810306][T15864] pcmda12 [ 360.810310][T15864] comedi: valid board names for pcmad driver are: [ 360.810316][T15864] pcmad12 [ 360.810319][T15864] pcmad16 [ 360.810324][T15864] comedi: valid board names for ni_labpc driver are: [ 360.810328][T15864] lab-pc-1200 [ 360.810333][T15864] lab-pc-1200ai [ 360.810337][T15864] lab-pc+ [ 360.810341][T15864] comedi: valid board names for atmio16 driver are: [ 360.810346][T15864] atmio16 [ 360.810350][T15864] atmio16d [ 360.810354][T15864] comedi: valid board names for ni_at_ao driver are: [ 360.810393][T15864] at-ao-6 [ 360.810398][T15864] at-ao-10 [ 360.810402][T15864] comedi: valid board names for ni_at_a2150 driver are: [ 360.810407][T15864] ni_at_a2150 [ 360.810411][T15864] comedi: valid board names for adq12b driver are: [ 360.810415][T15864] adq12b [ 360.810418][T15864] comedi: valid board names for mpc624 driver are: [ 360.810423][T15864] mpc624 [ 360.810426][T15864] comedi: valid board names for c6xdigio driver are: [ 360.810431][T15864] c6xdigio [ 360.810435][T15864] comedi: valid board names for aio_iiro_16 driver are: [ 360.810439][T15864] aio_iiro_16 [ 360.810443][T15864] comedi: valid board names for aio_aio12_8 driver are: [ 360.810449][T15864] aio_aio12_8 [ 360.810453][T15864] aio_ai12_8 [ 360.810457][T15864] aio_ao12_4 [ 360.810461][T15864] comedi: valid board names for fl512 driver are: [ 360.810466][T15864] fl512 [ 360.810469][T15864] comedi: valid board names for dmm32at driver are: [ 360.810474][T15864] dmm32at [ 360.810478][T15864] comedi: valid board names for dt282x driver are: [ 360.810483][T15864] dt2821 [ 360.810487][T15864] dt2821-f [ 360.810492][T15864] dt2821-g [ 360.810496][T15864] dt2823 [ 360.810500][T15864] dt2824-pgh [ 360.810504][T15864] dt2824-pgl [ 360.810508][T15864] dt2825 [ 360.810512][T15864] dt2827 [ 360.810515][T15864] dt2828 [ 360.810519][T15864] dt2829 [ 360.810523][T15864] dt21-ez [ 360.810527][T15864] dt23-ez [ 360.810530][T15864] dt24-ez [ 360.810534][T15864] dt24-ez-pgl [ 360.810539][T15864] comedi: valid board names for dt2817 driver are: [ 360.810544][T15864] dt2817 [ 360.810548][T15864] comedi: valid board names for dt2815 driver are: [ 360.810553][T15864] dt2815 [ 360.810557][T15864] comedi: valid board names for dt2814 driver are: [ 360.810562][T15864] dt2814 [ 360.810565][T15864] comedi: valid board names for dt2811 driver are: [ 360.810570][T15864] dt2811-pgh [ 360.810574][T15864] dt2811-pgl [ 360.810578][T15864] comedi: valid board names for dt2801 driver are: [ 360.810583][T15864] dt2801 [ 360.810587][T15864] comedi: valid board names for das6402 driver are: [ 360.810592][T15864] das6402-12 [ 360.810596][T15864] das6402-16 [ 360.810600][T15864] comedi: valid board names for das1800 driver are: [ 360.810605][T15864] das-1701st [ 360.810608][T15864] das-1701st-da [ 360.810612][T15864] das-1702st [ 360.810615][T15864] das-1702st-da [ 360.810619][T15864] das-1702hr [ 360.810623][T15864] das-1702hr-da [ 360.810626][T15864] das-1701ao [ 360.810630][T15864] das-1702ao [ 360.810633][T15864] das-1801st [ 360.810637][T15864] das-1801st-da [ 360.810640][T15864] das-1802st [ 360.810644][T15864] das-1802st-da [ 360.810648][T15864] das-1802hr [ 360.810651][T15864] das-1802hr-da [ 360.810655][T15864] das-1801hc [ 360.810658][T15864] das-1802hc [ 360.810662][T15864] das-1801ao [ 360.810665][T15864] das-1802ao [ 360.810669][T15864] comedi: valid board names for das800 driver are: [ 360.810673][T15864] das-800 [ 360.810677][T15864] cio-das800 [ 360.810680][T15864] das-801 [ 360.810683][T15864] cio-das801 [ 360.810687][T15864] das-802 [ 360.810690][T15864] cio-das802 [ 360.810694][T15864] cio-das802/16 [ 360.810697][T15864] comedi: valid board names for isa-das08 driver are: [ 360.810702][T15864] isa-das08 [ 360.810706][T15864] das08-pgm [ 360.810709][T15864] das08-pgh [ 360.810713][T15864] das08-pgl [ 360.810716][T15864] das08-aoh [ 360.810720][T15864] das08-aol [ 360.810723][T15864] das08-aom [ 360.810727][T15864] das08/jr-ao [ 360.810730][T15864] das08jr-16-ao [ 360.810734][T15864] pc104-das08 [ 360.810737][T15864] das08jr/16 [ 360.810741][T15864] comedi: valid board names for das16m1 driver are: [ 360.810745][T15864] das16m1 [ 360.810749][T15864] comedi: valid board names for dac02 driver are: [ 360.810753][T15864] dac02 [ 360.810756][T15864] comedi: valid board names for rti802 driver are: [ 360.810761][T15864] rti802 [ 360.810764][T15864] comedi: valid board names for rti800 driver are: [ 360.810769][T15864] rti800 [ 360.810772][T15864] rti815 [ 360.810776][T15864] comedi: valid board names for pcm3724 driver are: [ 360.810780][T15864] pcm3724 [ 360.810783][T15864] comedi: valid board names for pcl818 driver are: [ 360.810788][T15864] pcl818l [ 360.810792][T15864] pcl818h [ 360.810795][T15864] pcl818hd [ 360.810799][T15864] pcl818hg [ 360.810802][T15864] pcl818 [ 360.810805][T15864] pcl718 [ 360.810809][T15864] pcm3718 [ 360.810812][T15864] comedi: valid board names for pcl816 driver are: [ 360.810816][T15864] pcl816 [ 360.810820][T15864] pcl814b [ 360.810823][T15864] comedi: valid board names for pcl812 driver are: [ 360.810828][T15864] pcl812 [ 360.810832][T15864] pcl812pg [ 360.810835][T15864] acl8112pg [ 360.810838][T15864] acl8112dg [ 360.810842][T15864] acl8112hg [ 360.810845][T15864] a821pgl [ 360.810849][T15864] a821pglnda [ 360.810852][T15864] a821pgh [ 360.810856][T15864] a822pgl [ 360.810859][T15864] a822pgh [ 360.810862][T15864] a823pgl [ 360.810866][T15864] a823pgh [ 360.810869][T15864] pcl813 [ 360.810873][T15864] pcl813b [ 360.810876][T15864] acl8113 [ 360.810879][T15864] iso813 [ 360.810883][T15864] acl8216 [ 360.810886][T15864] a826pg [ 360.810890][T15864] comedi: valid board names for pcl730 driver are: [ 360.810894][T15864] pcl730 [ 360.810897][T15864] iso730 [ 360.810900][T15864] acl7130 [ 360.810904][T15864] pcm3730 [ 360.810907][T15864] pcl725 [ 360.810911][T15864] p8r8dio [ 360.810914][T15864] acl7225b [ 360.810918][T15864] p16r16dio [ 360.811020][T15864] pcl733 [ 360.811027][T15864] pcl734 [ 360.811030][T15864] opmm-1616-xt [ 360.811034][T15864] pearl-mm-p [ 360.811038][T15864] ir104-pbf [ 360.811042][T15864] comedi: valid board names for pcl726 driver are: [ 360.811047][T15864] pcl726 [ 360.811051][T15864] pcl727 [ 360.811055][T15864] pcl728 [ 360.811059][T15864] acl6126 [ 360.811063][T15864] acl6128 [ 360.811067][T15864] comedi: valid board names for pcl724 driver are: [ 360.811071][T15864] pcl724 [ 360.811075][T15864] pcl722 [ 360.811079][T15864] pcl731 [ 360.811083][T15864] acl7122 [ 360.811090][T15864] acl7124 [ 360.811094][T15864] pet48dio [ 360.811097][T15864] pcmio48 [ 360.811101][T15864] onyx-mm-dio [ 360.811105][T15864] comedi: valid board names for pcl711 driver are: [ 360.811110][T15864] pcl711 [ 360.811114][T15864] pcl711b [ 360.811118][T15864] acl8112hg [ 360.811123][T15864] acl8112dg [ 360.811127][T15864] comedi: valid board names for amplc_pc263 driver are: [ 360.811132][T15864] pc263 [ 360.811135][T15864] comedi: valid board names for amplc_pc236 driver are: [ 360.811144][T15864] pc36at [ 360.811148][T15864] comedi: valid board names for amplc_dio200 driver are: [ 360.811152][T15864] pc212e [ 360.811156][T15864] pc214e [ 360.811160][T15864] pc215e [ 360.811164][T15864] pc218e [ 360.811167][T15864] pc272e [ 360.811171][T15864] comedi: valid board names for comedi_parport driver are: [ 360.811177][T15864] comedi_parport [ 360.811181][T15864] comedi: valid board names for comedi_test driver are: [ 360.811186][T15864] comedi_test [ 360.811190][T15864] comedi: valid board names for comedi_bond driver are: [ 360.811195][T15864] comedi_bond [ 360.896995][T15634] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 360.918110][T15634] usb 6-1: device descriptor read/8, error -71 [ 361.029188][T15634] usb usb6-port1: unable to enumerate USB device [ 361.035413][T15871] 9p: Bad value for 'version' [ 361.286668][T15654] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 361.366723][T15634] usb 13-1: new full-speed USB device number 14 using dummy_hcd [ 361.437380][T15654] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 361.438612][T15654] usb 12-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 361.438632][T15654] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.440395][T15654] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.440414][T15654] usb 12-1: Product: syz [ 361.440426][T15654] usb 12-1: Manufacturer: syz [ 361.440438][T15654] usb 12-1: SerialNumber: syz [ 361.441992][T15654] usb 12-1: config 0 descriptor?? [ 361.527593][T15634] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 361.528575][T15634] usb 13-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 361.528589][T15634] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.530417][T15634] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.530429][T15634] usb 13-1: Product: syz [ 361.530437][T15634] usb 13-1: Manufacturer: syz [ 361.530444][T15634] usb 13-1: SerialNumber: syz [ 361.532161][T15634] usb 13-1: config 0 descriptor?? [ 361.652830][T15654] usb 12-1: USB disconnect, device number 17 [ 361.752260][T15652] usb 13-1: USB disconnect, device number 14 [ 362.312459][T15889] tipc: Enabled bearer , priority 0 [ 362.313046][T15889] syzkaller0: entered promiscuous mode [ 362.313064][T15889] syzkaller0: entered allmulticast mode [ 362.324015][T15889] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 362.339025][T15889] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 362.340705][T15889] tipc: Resetting bearer [ 362.349593][T15888] tipc: Resetting bearer [ 362.370975][T15888] tipc: Disabling bearer [ 362.557045][T15854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.557063][T15854] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 362.559869][T15854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 362.559884][T15854] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 362.564333][T15854] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.564347][T15854] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 362.565842][T15854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.565854][T15854] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 362.621428][T15893] lo speed is unknown, defaulting to 1000 [ 362.819723][T15901] FAULT_INJECTION: forcing a failure. [ 362.819723][T15901] name failslab, interval 1, probability 0, space 0, times 0 [ 362.819746][T15901] CPU: 2 UID: 0 PID: 15901 Comm: syz.8.2740 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.819774][T15901] Tainted: [L]=SOFTLOCKUP [ 362.819779][T15901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 362.819786][T15901] Call Trace: [ 362.819790][T15901] [ 362.819795][T15901] dump_stack_lvl+0x100/0x190 [ 362.819815][T15901] should_fail_ex.cold+0x5/0xa [ 362.819830][T15901] should_failslab+0xc2/0x120 [ 362.819845][T15901] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 362.819859][T15901] ? ceph_crypto_key_decode+0x234/0x3c0 [ 362.819877][T15901] kmemdup_noprof+0x29/0x60 [ 362.819895][T15901] ceph_crypto_key_decode+0x234/0x3c0 [ 362.819911][T15901] ceph_key_preparse+0x152/0x260 [ 362.819926][T15901] ? __pfx_ceph_key_preparse+0x10/0x10 [ 362.819943][T15901] ? __pfx_ceph_key_preparse+0x10/0x10 [ 362.819958][T15901] __key_create_or_update+0x463/0xe30 [ 362.819978][T15901] ? __pfx___key_create_or_update+0x10/0x10 [ 362.819997][T15901] ? lookup_user_key+0x3f3/0x1300 [ 362.820019][T15901] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 362.820038][T15901] key_create_or_update+0x42/0x60 [ 362.820058][T15901] __do_sys_add_key+0x2e8/0x460 [ 362.820072][T15901] ? __pfx___do_sys_add_key+0x10/0x10 [ 362.820083][T15901] ? fput+0x7c/0x100 [ 362.820098][T15901] ? __pfx_ksys_write+0x10/0x10 [ 362.820113][T15901] __do_fast_syscall_32+0x13a/0x8b0 [ 362.820130][T15901] ? lockdep_hardirqs_on+0x7d/0x110 [ 362.820148][T15901] do_fast_syscall_32+0x32/0x70 [ 362.820165][T15901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.820180][T15901] RIP: 0023:0xf7fe3fec [ 362.820192][T15901] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 362.820197][T15901] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 362.820209][T15901] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 362.820216][T15901] RDX: 0000000080000000 RSI: 000000000000002c RDI: 00000000ffffffff [ 362.820223][T15901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.820229][T15901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 362.820236][T15901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.820250][T15901] [ 362.951464][T15644] hub 10-1:1.232: bad descriptor, ignoring hub [ 362.951480][T15644] hub 10-1:1.232: probe with driver hub failed with error -5 [ 362.951905][T15644] option 10-1:1.232: GSM modem (1-port) converter detected [ 362.967214][T15644] usb 10-1: USB disconnect, device number 22 [ 362.968000][T15644] option 10-1:1.232: device disconnected [ 363.171988][T15906] loop6: detected capacity change from 0 to 1 [ 363.186253][T15906] Dev loop6: unable to read RDB block 1 [ 363.186334][T15906] loop6: unable to read partition table [ 363.186434][T15906] loop6: partition table beyond EOD, truncated [ 363.186444][T15906] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 363.199935][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 363.199953][ T42] audit: type=1800 audit(1789800902.022:4055): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232575 res=0 errno=0 [ 363.199978][ T42] audit: type=1800 audit(1789800902.032:4056): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232595 res=0 errno=0 [ 363.199997][ T42] audit: type=1800 audit(1789800902.032:4057): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232607 res=0 errno=0 [ 363.200017][ T42] audit: type=1800 audit(1789800902.042:4058): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232619 res=0 errno=0 [ 363.307485][T15640] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 363.428332][T15910] ublk2: read batch cmd buffer failed [ 363.467938][T15640] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 363.468905][T15640] usb 12-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 363.468927][T15640] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.470819][T15640] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.470840][T15640] usb 12-1: Product: syz [ 363.470853][T15640] usb 12-1: Manufacturer: syz [ 363.470864][T15640] usb 12-1: SerialNumber: syz [ 363.474224][T15640] usb 12-1: config 0 descriptor?? [ 363.474980][ T42] audit: type=1800 audit(1789800902.352:4059): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232631 res=0 errno=0 [ 363.512461][ T42] audit: type=1800 audit(1789800902.392:4060): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=232663 res=0 errno=0 [ 363.512490][ T42] audit: type=1800 audit(1789800902.392:4061): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=232638 res=0 errno=0 [ 363.512836][ T42] audit: type=1800 audit(1789800902.392:4062): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=232639 res=0 errno=0 [ 363.513607][ T42] audit: type=1800 audit(1789800902.392:4063): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=232660 res=0 errno=0 [ 363.514371][ T42] audit: type=1800 audit(1789800902.392:4064): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=232661 res=0 errno=0 [ 363.729551][T15652] usb 12-1: USB disconnect, device number 18 [ 363.826816][ T5143] Dev loop6: unable to read RDB block 1 [ 363.826852][ T5143] loop6: unable to read partition table [ 363.827022][ T5143] loop6: partition table beyond EOD, truncated [ 363.839971][T15916] input: syz0 as /devices/virtual/input/input26 [ 363.934991][T15919] FAULT_INJECTION: forcing a failure. [ 363.934991][T15919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.935022][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.1.2746 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.935046][T15919] Tainted: [L]=SOFTLOCKUP [ 363.935052][T15919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.935062][T15919] Call Trace: [ 363.935067][T15919] [ 363.935076][T15919] dump_stack_lvl+0x100/0x190 [ 363.935108][T15919] should_fail_ex.cold+0x5/0xa [ 363.935131][T15919] _copy_from_user+0x2e/0xd0 [ 363.935153][T15919] ctl_ioctl+0x896/0xcc0 [ 363.935172][T15919] ? __pfx_list_devices+0x10/0x10 [ 363.935189][T15919] ? __pfx_ctl_ioctl+0x10/0x10 [ 363.935229][T15919] ? __fget_files+0x21f/0x3d0 [ 363.935253][T15919] dm_compat_ctl_ioctl+0x23/0x30 [ 363.935271][T15919] ? __pfx_dm_compat_ctl_ioctl+0x10/0x10 [ 363.935288][T15919] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 363.935317][T15919] __do_fast_syscall_32+0x13a/0x8b0 [ 363.935343][T15919] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.935368][T15919] do_fast_syscall_32+0x32/0x70 [ 363.935392][T15919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.935413][T15919] RIP: 0023:0xf7fa3fec [ 363.935432][T15919] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 363.935440][T15919] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 363.935457][T15919] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c130fd02 [ 363.935468][T15919] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.935479][T15919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.935488][T15919] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.935498][T15919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.935519][T15919] [ 363.950293][T15920] netlink: 'syz.5.2745': attribute type 1 has an invalid length. [ 363.996797][T15920] bond2: entered promiscuous mode [ 363.996963][T15920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.031777][T15920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.031964][T15920] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 364.031977][T15920] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 364.034585][T15920] bond2: (slave xfrm1): making interface the new active one [ 364.034599][T15920] xfrm1: entered promiscuous mode [ 364.055032][T15920] xfrm1: left promiscuous mode [ 364.079782][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 364.274155][T15937] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2754'. [ 364.274254][T15937] 1·: renamed from c0· (while UP) [ 364.276017][T15937] 1·: failed to rename [ 364.276092][T15937] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 364.351482][T15943] comedi comedi2: pcl812: I/O base address not correctly aligned [ 364.351871][T15943] netlink: ct family unspecified [ 364.351897][T15943] openvswitch: netlink: Actions may not be safe on all matching packets [ 364.385906][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2758'. [ 364.478895][ T5814] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 364.638281][ T5814] usb 13-1: Using ep0 maxpacket: 8 [ 364.640131][ T5814] usb 13-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 364.642728][ T5814] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.643390][ T5814] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 364.643672][ T5814] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.660227][ T5814] usb 13-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 364.660470][ T5814] usb 13-1: Product: syz [ 364.660634][ T5814] usb 13-1: Manufacturer: syz [ 364.661013][ T5814] usb 13-1: SerialNumber: syz [ 364.704953][ T5814] usb 13-1: config 0 descriptor?? [ 364.747108][T15951] binder_alloc: 15950: binder_alloc_buf, no vma [ 364.748154][T15951] tmpfs: Unknown parameter 'grpquota_boc½#Teýàôÿÿÿÿÿÿ_' [ 364.818275][ T5814] rc_core: IR keymap rc-imon-rsc not found [ 364.818325][ T5814] Registered IR keymap rc-empty [ 364.833490][ T5814] rc rc0: iMON Station as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 364.863710][ T5814] input: iMON Station as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input27 [ 365.099811][ T5814] usb 13-1: USB disconnect, device number 15 [ 365.268747][T15961] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2763'. [ 365.268812][T15961] 1·: renamed from c0· (while UP) [ 365.278158][T15961] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 365.338094][T15629] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 365.497108][T15629] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 365.497926][T15629] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 365.497940][T15629] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.499554][T15629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.499567][T15629] usb 6-1: Product: syz [ 365.499575][T15629] usb 6-1: Manufacturer: syz [ 365.499583][T15629] usb 6-1: SerialNumber: syz [ 365.500908][T15629] usb 6-1: config 0 descriptor?? [ 365.654287][T15974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.654647][T15974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.730499][T15620] usb 6-1: USB disconnect, device number 15 [ 365.899390][T15629] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 366.036719][T15629] usb 13-1: device descriptor read/64, error -71 [ 366.297165][T15629] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 366.436573][T15629] usb 13-1: device descriptor read/64, error -71 [ 366.547787][T15629] usb usb13-port1: attempt power cycle [ 366.896630][T15629] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 366.927156][T15629] usb 13-1: device descriptor read/8, error -71 [ 367.166654][T15629] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 367.187324][T15629] usb 13-1: device descriptor read/8, error -71 [ 367.307725][T15629] usb usb13-port1: unable to enumerate USB device [ 367.610342][T15997] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2774'. [ 367.610408][T15997] 0·: renamed from c1· (while UP) [ 367.615961][T15997] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 367.655151][ T1268] Bluetooth: hci2: Frame reassembly failed (-84) [ 367.947730][ T5814] usb 12-1: new full-speed USB device number 19 using dummy_hcd [ 368.100960][ T5814] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 368.102180][ T5814] usb 12-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 368.102203][ T5814] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.104276][ T5814] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.104296][ T5814] usb 12-1: Product: syz [ 368.104309][ T5814] usb 12-1: Manufacturer: syz [ 368.104322][ T5814] usb 12-1: SerialNumber: syz [ 368.111109][ T5814] usb 12-1: config 0 descriptor?? [ 368.279873][T16004] bond0: entered promiscuous mode [ 368.279891][T16004] bond_slave_0: entered promiscuous mode [ 368.280007][T16004] bond_slave_1: entered promiscuous mode [ 368.315351][ T42] kauditd_printk_skb: 2476 callbacks suppressed [ 368.315365][ T42] audit: type=1804 audit(1789800907.192:6541): pid=16000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2775" name="/newroot/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=758 res=1 errno=0 [ 368.330889][ T5814] usb 12-1: USB disconnect, device number 19 [ 368.333197][ T42] audit: type=1800 audit(1789800907.212:6542): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34665 res=0 errno=0 [ 368.335796][ T42] audit: type=1800 audit(1789800907.212:6543): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34688 res=0 errno=0 [ 368.353499][T16006] Trying to write to read-only block-device nullb0 [ 368.369672][T15957] syz.1.2760 (15957) used greatest stack depth: 18600 bytes left [ 368.599268][ T42] audit: type=1800 audit(1789800907.482:6544): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34715 res=0 errno=0 [ 368.600201][ T42] audit: type=1800 audit(1789800907.482:6545): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34738 res=0 errno=0 [ 368.668210][ T42] audit: type=1800 audit(1789800907.552:6546): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 368.684946][ T42] audit: type=1800 audit(1789800907.562:6547): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 368.718677][T16016] FAULT_INJECTION: forcing a failure. [ 368.718677][T16016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.718700][T16016] CPU: 3 UID: 0 PID: 16016 Comm: syz.8.2779 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.718715][T16016] Tainted: [L]=SOFTLOCKUP [ 368.718719][T16016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.718726][T16016] Call Trace: [ 368.718730][T16016] [ 368.718735][T16016] dump_stack_lvl+0x100/0x190 [ 368.718753][T16016] should_fail_ex.cold+0x5/0xa [ 368.718768][T16016] _copy_from_user+0x2e/0xd0 [ 368.718783][T16016] snd_seq_oss_write+0x53c/0x8b0 [ 368.718804][T16016] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 368.718826][T16016] ? bpf_lsm_file_permission+0x9/0x10 [ 368.718843][T16016] odev_write+0x51/0xa0 [ 368.718858][T16016] vfs_write+0x2aa/0x1050 [ 368.718870][T16016] ? __pfx_odev_write+0x10/0x10 [ 368.718885][T16016] ? lock_acquire+0x1d1/0x380 [ 368.718900][T16016] ? __fget_files+0x34/0x3d0 [ 368.718912][T16016] ? __pfx_vfs_write+0x10/0x10 [ 368.718922][T16016] ? find_held_lock+0x2b/0x80 [ 368.718933][T16016] ? __fget_files+0x215/0x3d0 [ 368.718945][T16016] ? __fget_files+0x215/0x3d0 [ 368.718959][T16016] ? __fget_files+0x21f/0x3d0 [ 368.718974][T16016] ksys_write+0x12a/0x250 [ 368.718985][T16016] ? __pfx_ksys_write+0x10/0x10 [ 368.718996][T16016] ? ksys_write+0x1ac/0x250 [ 368.719006][T16016] ? __pfx_ksys_write+0x10/0x10 [ 368.719020][T16016] __do_fast_syscall_32+0x13a/0x8b0 [ 368.719037][T16016] ? lockdep_hardirqs_on+0x7d/0x110 [ 368.719054][T16016] do_fast_syscall_32+0x32/0x70 [ 368.719072][T16016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 368.719086][T16016] RIP: 0023:0xf7fe3fec [ 368.719099][T16016] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 368.719104][T16016] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 368.719115][T16016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 368.719122][T16016] RDX: 0000000000000230 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.719129][T16016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.719135][T16016] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 368.719142][T16016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.719155][T16016] [ 368.749812][T16019] capability: warning: `syz.8.2780' uses deprecated v2 capabilities in a way that may be insecure [ 368.751139][ T42] audit: type=1800 audit(1789800907.632:6548): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 368.875443][T16021] netlink: 14975 bytes leftover after parsing attributes in process `syz.7.2781'. [ 368.915224][ T42] audit: type=1800 audit(1789800907.792:6549): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=233550 res=0 errno=0 [ 369.236754][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.270458][T16029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.273625][T16029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.320904][ T42] audit: type=1800 audit(1789800908.202:6550): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 369.335953][T16031] FAULT_INJECTION: forcing a failure. [ 369.335953][T16031] name failslab, interval 1, probability 0, space 0, times 0 [ 369.335976][T16031] CPU: 2 UID: 0 PID: 16031 Comm: syz.8.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.335992][T16031] Tainted: [L]=SOFTLOCKUP [ 369.335996][T16031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.336002][T16031] Call Trace: [ 369.336006][T16031] [ 369.336011][T16031] dump_stack_lvl+0x100/0x190 [ 369.336030][T16031] should_fail_ex.cold+0x5/0xa [ 369.336045][T16031] should_failslab+0xc2/0x120 [ 369.336060][T16031] kmem_cache_alloc_noprof+0x92/0x6a0 [ 369.336074][T16031] ? skb_clone+0x190/0x400 [ 369.336091][T16031] skb_clone+0x190/0x400 [ 369.336121][T16031] netlink_deliver_tap+0xaed/0xcc0 [ 369.336138][T16031] netlink_dump+0x909/0xd00 [ 369.336151][T16031] ? __pfx_netlink_dump+0x10/0x10 [ 369.336172][T16031] __netlink_dump_start+0x6d6/0x990 [ 369.336185][T16031] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 369.336200][T16031] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 369.336215][T16031] nf_tables_getflowtable+0x6d8/0x830 [ 369.336233][T16031] ? __pfx_nf_tables_getflowtable+0x10/0x10 [ 369.336249][T16031] ? net_generic+0x25/0x2a0 [ 369.336263][T16031] ? __pfx_nf_tables_dump_flowtable_start+0x10/0x10 [ 369.336275][T16031] ? __pfx_nf_tables_dump_flowtable+0x10/0x10 [ 369.336290][T16031] ? __pfx_nf_tables_dump_flowtable_done+0x10/0x10 [ 369.336310][T16031] ? __nla_parse+0x40/0x60 [ 369.336321][T16031] ? __pfx_nf_tables_getflowtable+0x10/0x10 [ 369.336338][T16031] nfnetlink_rcv_msg+0x557/0x11e0 [ 369.336359][T16031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 369.336375][T16031] ? skb_release_data+0x6ca/0x8e0 [ 369.336391][T16031] ? kfree_skbmem+0x19f/0x210 [ 369.336415][T16031] ? __pfx___dev_queue_xmit+0x10/0x10 [ 369.336429][T16031] netlink_rcv_skb+0x159/0x420 [ 369.336447][T16031] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 369.336465][T16031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.336484][T16031] ? ns_capable+0xd2/0xf0 [ 369.336502][T16031] nfnetlink_rcv+0x1b3/0x440 [ 369.336531][T16031] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 369.336547][T16031] ? netlink_deliver_tap+0x1ae/0xcc0 [ 369.336562][T16031] netlink_unicast+0x585/0x850 [ 369.336577][T16031] ? __pfx_netlink_unicast+0x10/0x10 [ 369.336594][T16031] netlink_sendmsg+0x8b0/0xda0 [ 369.336610][T16031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.336625][T16031] ? apparmor_socket_sendmsg+0x165/0x280 [ 369.336642][T16031] ____sys_sendmsg+0xa4d/0xbe0 [ 369.336652][T16031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.336666][T16031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.336683][T16031] ___sys_sendmsg+0x190/0x1e0 [ 369.336696][T16031] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.336714][T16031] ? find_held_lock+0x2b/0x80 [ 369.336734][T16031] __sys_sendmsg+0x160/0x210 [ 369.336750][T16031] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.336768][T16031] ? __pfx_ksys_write+0x10/0x10 [ 369.336783][T16031] __do_fast_syscall_32+0x13a/0x8b0 [ 369.336800][T16031] ? lockdep_hardirqs_on+0x7d/0x110 [ 369.336818][T16031] do_fast_syscall_32+0x32/0x70 [ 369.336835][T16031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.336849][T16031] RIP: 0023:0xf7fe3fec [ 369.336863][T16031] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 369.336868][T16031] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 369.336879][T16031] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 369.336886][T16031] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.336893][T16031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.336899][T16031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 369.336905][T16031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.336919][T16031] [ 369.666812][T15653] usb 13-1: new full-speed USB device number 20 using dummy_hcd [ 369.737521][ T5732] Bluetooth: hci2: command 0x1003 tx timeout [ 369.737599][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 369.827729][T15653] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 369.828834][T15653] usb 13-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 369.828855][T15653] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.831031][T15653] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.831052][T15653] usb 13-1: Product: syz [ 369.831065][T15653] usb 13-1: Manufacturer: syz [ 369.831077][T15653] usb 13-1: SerialNumber: syz [ 369.833443][T15653] usb 13-1: config 0 descriptor?? [ 370.046870][T15653] usb 13-1: USB disconnect, device number 20 [ 370.249277][T16050] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2793'. [ 370.249342][T16050] 0·: renamed from c1· (while UP) [ 370.250571][T16050] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 370.412932][T16058] syzkaller0: entered promiscuous mode [ 370.412947][T16058] syzkaller0: entered allmulticast mode [ 370.910016][T16074] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2802'. [ 370.910112][T16074] 0·: renamed from c1· (while UP) [ 370.911439][T16074] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 371.310212][T16100] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 371.310674][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 372.178330][ T57] usb 13-1: new full-speed USB device number 21 using dummy_hcd [ 372.335477][ T57] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 372.348611][ T57] usb 13-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 372.348634][ T57] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.350545][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.350565][ T57] usb 13-1: Product: syz [ 372.350576][ T57] usb 13-1: Manufacturer: syz [ 372.350588][ T57] usb 13-1: SerialNumber: syz [ 372.352751][ T57] usb 13-1: config 0 descriptor?? [ 372.363511][T16148] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2811'. [ 372.363620][T16148] 1·: renamed from c0· (while UP) [ 372.375662][T16148] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 372.406895][T16152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2813'. [ 372.561942][ T5814] usb 13-1: USB disconnect, device number 21 [ 372.612494][T16172] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 373.120281][T16184] FAULT_INJECTION: forcing a failure. [ 373.120281][T16184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.120336][T16184] CPU: 0 UID: 0 PID: 16184 Comm: syz.8.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.120374][T16184] Tainted: [L]=SOFTLOCKUP [ 373.120381][T16184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 373.120392][T16184] Call Trace: [ 373.120398][T16184] [ 373.120406][T16184] dump_stack_lvl+0x100/0x190 [ 373.120433][T16184] should_fail_ex.cold+0x5/0xa [ 373.120456][T16184] _copy_from_user+0x2e/0xd0 [ 373.120480][T16184] kstrtouint_from_user+0xd6/0x1d0 [ 373.120505][T16184] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 373.120537][T16184] ? lock_acquire+0x1d1/0x380 [ 373.120566][T16184] proc_fail_nth_write+0x83/0x220 [ 373.120586][T16184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.120612][T16184] vfs_write+0x2aa/0x1050 [ 373.120632][T16184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.120650][T16184] ? lock_acquire+0x1d1/0x380 [ 373.120672][T16184] ? __fget_files+0x34/0x3d0 [ 373.120691][T16184] ? __pfx_vfs_write+0x10/0x10 [ 373.120708][T16184] ? find_held_lock+0x2b/0x80 [ 373.120729][T16184] ? __fget_files+0x215/0x3d0 [ 373.120752][T16184] ? __fget_files+0x21f/0x3d0 [ 373.120780][T16184] ksys_write+0x12a/0x250 [ 373.120798][T16184] ? __pfx_ksys_write+0x10/0x10 [ 373.120824][T16184] do_int80_emulation+0x166/0x650 [ 373.120855][T16184] asm_int80_emulation+0x1a/0x20 [ 373.120878][T16184] RIP: 0023:0xf71e75ab [ 373.120892][T16184] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 373.120910][T16184] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 373.120927][T16184] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 373.120939][T16184] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.120949][T16184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.120959][T16184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 373.120970][T16184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.120995][T16184] [ 373.241298][T16191] tipc: Enabled bearer , priority 0 [ 373.242039][T16191] syzkaller0: entered promiscuous mode [ 373.242051][T16191] syzkaller0: entered allmulticast mode [ 373.245335][T16191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 373.278167][T16191] tipc: Resetting bearer [ 373.282487][T16189] tipc: Resetting bearer [ 373.304496][T16196] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2828'. [ 373.304513][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'. [ 373.304521][T16196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2828'. [ 373.318230][T16189] tipc: Disabling bearer [ 373.404560][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 373.404572][ T42] audit: type=1800 audit(1789800912.282:6597): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 373.428521][ T42] audit: type=1800 audit(1789800912.312:6598): pid=16199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2829" name="attach" dev="sysfs" ino=36061 res=0 errno=0 [ 373.429142][T16199] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 373.429157][T16199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.429341][T16199] vhci_hcd vhci_hcd.0: Device attached [ 373.432589][T16199] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 373.447356][T16205] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 373.447541][ T12] vhci_hcd vhci_hcd.7: stop threads [ 373.447552][ T12] vhci_hcd vhci_hcd.7: release socket [ 373.447563][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 373.557226][ T42] audit: type=1800 audit(1789800912.442:6599): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 373.569664][T16214] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2830'. [ 373.569773][T16214] 0·: renamed from c1· (while UP) [ 373.571536][T16214] 0·: failed to rename [ 373.571631][T16214] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 373.593477][ T42] audit: type=1800 audit(1789800912.472:6600): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 373.616312][T16219] FAULT_INJECTION: forcing a failure. [ 373.616312][T16219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.616334][T16219] CPU: 3 UID: 0 PID: 16219 Comm: syz.1.2835 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.616350][T16219] Tainted: [L]=SOFTLOCKUP [ 373.616354][T16219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 373.616360][T16219] Call Trace: [ 373.616364][T16219] [ 373.616369][T16219] dump_stack_lvl+0x100/0x190 [ 373.616387][T16219] should_fail_ex.cold+0x5/0xa [ 373.616403][T16219] _copy_to_user+0x32/0xd0 [ 373.616423][T16219] simple_read_from_buffer+0xcb/0x170 [ 373.616438][T16219] proc_fail_nth_read+0x1af/0x230 [ 373.616450][T16219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.616463][T16219] ? rw_verify_area+0xce/0x6d0 [ 373.616480][T16219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.616491][T16219] vfs_read+0x1e4/0xb40 [ 373.616502][T16219] ? lock_acquire+0x1d1/0x380 [ 373.616531][T16219] ? __fget_files+0x34/0x3d0 [ 373.616543][T16219] ? __pfx_vfs_read+0x10/0x10 [ 373.616553][T16219] ? find_held_lock+0x2b/0x80 [ 373.616565][T16219] ? __fget_files+0x215/0x3d0 [ 373.616579][T16219] ? __fget_files+0x21f/0x3d0 [ 373.616595][T16219] ksys_read+0x12a/0x250 [ 373.616606][T16219] ? __pfx_ksys_read+0x10/0x10 [ 373.616621][T16219] do_int80_emulation+0x166/0x650 [ 373.616640][T16219] asm_int80_emulation+0x1a/0x20 [ 373.616652][T16219] RIP: 0023:0xf71a75ab [ 373.616661][T16219] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 373.616672][T16219] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 373.616684][T16219] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54665d0 [ 373.616691][T16219] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 373.616698][T16219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.616704][T16219] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 373.616711][T16219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.616725][T16219] [ 373.638065][ T57] usb 13-1: new full-speed USB device number 22 using dummy_hcd [ 373.639677][ T42] audit: type=1800 audit(1789800912.522:6601): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 373.688505][ T42] audit: type=1800 audit(1789800912.572:6602): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 373.788364][ T57] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 373.789164][ T57] usb 13-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 373.789183][ T57] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.790755][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.790767][ T57] usb 13-1: Product: syz [ 373.790775][ T57] usb 13-1: Manufacturer: syz [ 373.790782][ T57] usb 13-1: SerialNumber: syz [ 373.792152][ T57] usb 13-1: config 0 descriptor?? [ 373.792836][ T42] audit: type=1800 audit(1789800912.672:6603): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234180 res=0 errno=0 [ 373.796208][ T42] audit: type=1800 audit(1789800912.672:6604): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=234212 res=0 errno=0 [ 373.796247][ T42] audit: type=1800 audit(1789800912.672:6605): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=234187 res=0 errno=0 [ 373.796278][ T42] audit: type=1800 audit(1789800912.672:6606): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=234188 res=0 errno=0 [ 373.987547][T16229] loop7: detected capacity change from 0 to 16384 [ 374.015832][T15653] usb 13-1: USB disconnect, device number 22 [ 374.226028][T16230] loop7: detected capacity change from 16384 to 0 [ 374.226213][ C1] I/O error, dev loop7, sector 14080 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 374.349628][T16234] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 374.437221][T16236] syzkaller0: entered promiscuous mode [ 374.437236][T16236] syzkaller0: entered allmulticast mode [ 374.607328][T16247] openvswitch: netlink: Missing key (keys=40, expected=100) [ 374.885972][T16268] FAULT_INJECTION: forcing a failure. [ 374.885972][T16268] name failslab, interval 1, probability 0, space 0, times 0 [ 374.886006][T16268] CPU: 0 UID: 0 PID: 16268 Comm: syz.8.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.886032][T16268] Tainted: [L]=SOFTLOCKUP [ 374.886039][T16268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.886052][T16268] Call Trace: [ 374.886060][T16268] [ 374.886069][T16268] dump_stack_lvl+0x100/0x190 [ 374.886101][T16268] should_fail_ex.cold+0x5/0xa [ 374.886127][T16268] should_failslab+0xc2/0x120 [ 374.886154][T16268] kmem_cache_alloc_noprof+0x92/0x6a0 [ 374.886180][T16268] ? __mt_dup+0x61e/0xce0 [ 374.886215][T16268] __mt_dup+0x61e/0xce0 [ 374.886249][T16268] ? __pfx___mt_dup+0x10/0x10 [ 374.886287][T16268] ? lock_acquire+0x1d1/0x380 [ 374.886313][T16268] ? get_mm_exe_file+0x25/0x1a0 [ 374.886357][T16268] dup_mmap+0x3d0/0x2370 [ 374.886386][T16268] ? do_raw_spin_lock+0x128/0x260 [ 374.886421][T16268] ? __pfx_dup_mmap+0x10/0x10 [ 374.886445][T16268] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 374.886475][T16268] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 374.886505][T16268] ? __lock_acquire+0x5c0/0x1f40 [ 374.886563][T16268] ? lock_acquire+0x1d1/0x380 [ 374.886589][T16268] ? copy_process+0x4806/0x8370 [ 374.886632][T16268] copy_process+0x4811/0x8370 [ 374.886681][T16268] ? __pfx_copy_process+0x10/0x10 [ 374.886713][T16268] ? futex_wake+0x4ea/0x5e0 [ 374.886749][T16268] kernel_clone+0x176/0x9d0 [ 374.886784][T16268] ? __pfx_kernel_clone+0x10/0x10 [ 374.886831][T16268] __do_compat_sys_ia32_clone+0xd4/0x120 [ 374.886863][T16268] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 374.886910][T16268] ? __pfx___ia32_sys_mount+0x10/0x10 [ 374.886945][T16268] __do_fast_syscall_32+0x13a/0x8b0 [ 374.886979][T16268] do_fast_syscall_32+0x32/0x70 [ 374.887010][T16268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.887037][T16268] RIP: 0023:0xf7fe3fec [ 374.887059][T16268] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 374.887068][T16268] RSP: 002b:00000000f54a64bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 374.887087][T16268] RAX: ffffffffffffffda RBX: 0000000021000400 RCX: 0000000000000000 [ 374.887099][T16268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.887111][T16268] RBP: 00000000f54a65ec R08: 0000000000000000 R09: 0000000000000000 [ 374.887123][T16268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.887135][T16268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.887161][T16268] [ 374.943581][T16270] FAULT_INJECTION: forcing a failure. [ 374.943581][T16270] name failslab, interval 1, probability 0, space 0, times 0 [ 374.943612][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.8.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.943637][T16270] Tainted: [L]=SOFTLOCKUP [ 374.943644][T16270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.943655][T16270] Call Trace: [ 374.943662][T16270] [ 374.943669][T16270] dump_stack_lvl+0x100/0x190 [ 374.943699][T16270] should_fail_ex.cold+0x5/0xa [ 374.943724][T16270] should_failslab+0xc2/0x120 [ 374.943750][T16270] __kmalloc_noprof+0xfc/0x840 [ 374.943770][T16270] ? rcu_is_watching+0x13/0xc0 [ 374.943788][T16270] ? tomoyo_encode2+0xfb/0x3c0 [ 374.943813][T16270] tomoyo_encode2+0xfb/0x3c0 [ 374.943835][T16270] tomoyo_encode+0x29/0x50 [ 374.943852][T16270] tomoyo_realpath_from_path+0x18c/0x690 [ 374.943878][T16270] tomoyo_check_open_permission+0x2af/0x3c0 [ 374.943906][T16270] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 374.943941][T16270] ? hook_file_open+0x248/0x8e0 [ 374.943994][T16270] tomoyo_file_open+0x6b/0x90 [ 374.944016][T16270] security_file_open+0xb5/0x1e0 [ 374.944035][T16270] do_dentry_open+0x588/0x14d0 [ 374.944063][T16270] vfs_open+0x82/0x3f0 [ 374.944090][T16270] path_openat+0x19fa/0x2440 [ 374.944117][T16270] ? __pfx_path_openat+0x10/0x10 [ 374.944146][T16270] do_file_open+0x20e/0x430 [ 374.944169][T16270] ? __pfx_do_file_open+0x10/0x10 [ 374.944201][T16270] ? __pfx_kfree_link+0x10/0x10 [ 374.944228][T16270] ? _raw_spin_unlock+0x28/0x50 [ 374.944252][T16270] ? alloc_fd+0x471/0x7a0 [ 374.944281][T16270] do_sys_openat2+0x10f/0x1e0 [ 374.944308][T16270] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.944336][T16270] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 374.944362][T16270] __ia32_compat_sys_openat+0x12d/0x210 [ 374.944388][T16270] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 374.944427][T16270] do_int80_emulation+0x166/0x650 [ 374.944458][T16270] asm_int80_emulation+0x1a/0x20 [ 374.944477][T16270] RIP: 0023:0xf71e75ab [ 374.944493][T16270] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 374.944523][T16270] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 374.944542][T16270] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72b1b71 [ 374.944554][T16270] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.944565][T16270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.944576][T16270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.944587][T16270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.944611][T16270] [ 374.944631][T16270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.944821][T16270] FAULT_INJECTION: forcing a failure. [ 374.944821][T16270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.944845][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.8.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.944869][T16270] Tainted: [L]=SOFTLOCKUP [ 374.944876][T16270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.944887][T16270] Call Trace: [ 374.944893][T16270] [ 374.944901][T16270] dump_stack_lvl+0x100/0x190 [ 374.944930][T16270] should_fail_ex.cold+0x5/0xa [ 374.944953][T16270] strncpy_from_user+0x3b/0x2d0 [ 374.944981][T16270] do_getname+0x78/0x390 [ 374.945007][T16270] do_sys_openat2+0xc7/0x1e0 [ 374.945033][T16270] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.945062][T16270] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 374.945094][T16270] __ia32_compat_sys_openat+0x12d/0x210 [ 374.945122][T16270] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 374.945148][T16270] ? fput+0x7c/0x100 [ 374.945172][T16270] ? ksys_write+0x1ac/0x250 [ 374.945190][T16270] ? __pfx_ksys_write+0x10/0x10 [ 374.945213][T16270] __do_fast_syscall_32+0x13a/0x8b0 [ 374.945241][T16270] ? lockdep_hardirqs_on+0x7d/0x110 [ 374.945269][T16270] do_fast_syscall_32+0x32/0x70 [ 374.945298][T16270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 374.945321][T16270] RIP: 0023:0xf7fe3fec [ 374.945340][T16270] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 374.945350][T16270] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 374.945368][T16270] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 374.945379][T16270] RDX: 0000000000080d83 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.945390][T16270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.945401][T16270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.945412][T16270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.945437][T16270] [ 374.946290][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2856'. [ 375.040343][T15634] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 375.063971][ T57] hid-sensor-hub 0003:1234:5678.002D: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 375.202479][T15634] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 375.203337][T15634] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 375.203351][T15634] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.204869][T15634] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.204881][T15634] usb 10-1: Product: syz [ 375.204889][T15634] usb 10-1: Manufacturer: syz [ 375.204896][T15634] usb 10-1: SerialNumber: syz [ 375.213784][T15634] usb 10-1: config 0 descriptor?? [ 375.221801][T16280] FAULT_INJECTION: forcing a failure. [ 375.221801][T16280] name failslab, interval 1, probability 0, space 0, times 0 [ 375.221849][T16280] CPU: 1 UID: 0 PID: 16280 Comm: syz.1.2859 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.221869][T16280] Tainted: [L]=SOFTLOCKUP [ 375.221873][T16280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 375.221881][T16280] Call Trace: [ 375.221886][T16280] [ 375.221891][T16280] dump_stack_lvl+0x100/0x190 [ 375.221912][T16280] should_fail_ex.cold+0x5/0xa [ 375.221928][T16280] should_failslab+0xc2/0x120 [ 375.221946][T16280] __kmalloc_noprof+0xfc/0x840 [ 375.221959][T16280] ? rcu_is_watching+0x13/0xc0 [ 375.221973][T16280] ? tomoyo_encode2+0xfb/0x3c0 [ 375.221989][T16280] tomoyo_encode2+0xfb/0x3c0 [ 375.222003][T16280] tomoyo_encode+0x29/0x50 [ 375.222015][T16280] tomoyo_realpath_from_path+0x18c/0x690 [ 375.222031][T16280] tomoyo_check_open_permission+0x2af/0x3c0 [ 375.222050][T16280] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 375.222075][T16280] ? hook_file_open+0x248/0x8e0 [ 375.222104][T16280] ? path_get+0x61/0x80 [ 375.222123][T16280] tomoyo_file_open+0x6b/0x90 [ 375.222139][T16280] security_file_open+0xb5/0x1e0 [ 375.222152][T16280] do_dentry_open+0x588/0x14d0 [ 375.222169][T16280] vfs_open+0x82/0x3f0 [ 375.222187][T16280] path_openat+0x19fa/0x2440 [ 375.222205][T16280] ? __pfx_path_openat+0x10/0x10 [ 375.222224][T16280] do_file_open+0x20e/0x430 [ 375.222240][T16280] ? __pfx_do_file_open+0x10/0x10 [ 375.222264][T16280] ? _raw_spin_unlock+0x28/0x50 [ 375.222280][T16280] ? alloc_fd+0x471/0x7a0 [ 375.222319][T16280] do_sys_openat2+0x10f/0x1e0 [ 375.222346][T16280] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.222371][T16280] __ia32_compat_sys_openat+0x12d/0x210 [ 375.222394][T16280] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 375.222420][T16280] __do_fast_syscall_32+0x13a/0x8b0 [ 375.222440][T16280] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.222459][T16280] do_fast_syscall_32+0x32/0x70 [ 375.222479][T16280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.222496][T16280] RIP: 0023:0xf7fa3fec [ 375.222511][T16280] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 375.222518][T16280] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 375.222530][T16280] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 375.222538][T16280] RDX: 0000000000080d83 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.222546][T16280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.222553][T16280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 375.222561][T16280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.222576][T16280] [ 375.222619][T16280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.271834][T16278] fido_id[16278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 375.423186][T15634] usb 10-1: USB disconnect, device number 23 [ 375.905088][T16297] __nla_validate_parse: 1 callbacks suppressed [ 375.905102][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2865'. [ 375.905114][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2865'. [ 375.905123][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'. [ 375.919247][T16297] [U] ¥ [ 375.919269][T16297] [U] [ 375.919286][T16297] [U] [ 375.919307][T16297] [U] [ 375.919323][T16297] [U] [ 375.919340][T16297] [U] [ 375.919356][T16297] [U] [ 375.919372][T16297] [U] [ 375.919402][T16297] [U] [ 375.919420][T16297] [U] [ 375.919437][T16297] [U] [ 375.919454][T16297] [U] [ 375.919471][T16297] [U] [ 375.919489][T16297] [U] [ 375.919506][T16297] [U] [ 375.919524][T16297] [U] [ 375.919548][T16297] [U] [ 375.919566][T16297] [U] [ 375.919584][T16297] [U] [ 375.919600][T16297] [U] [ 375.919618][T16297] [U] [ 375.919634][T16297] [U] [ 375.919649][T16297] [U] [ 375.919664][T16297] [U] [ 375.919685][T16297] [U] [ 375.919700][T16297] [U] [ 375.919715][T16297] [U] [ 375.919730][T16297] [U] [ 375.919745][T16297] [U] [ 375.919760][T16297] [U] [ 375.919776][T16297] [U] [ 375.919790][T16297] [U] [ 375.919811][T16297] [U] [ 375.919826][T16297] [U] [ 375.919841][T16297] [U] [ 375.919857][T16297] [U] [ 375.919871][T16297] [U] [ 375.919886][T16297] [U] [ 375.919901][T16297] [U] [ 375.919916][T16297] [U] [ 375.919936][T16297] [U] [ 375.919952][T16297] [U] [ 375.919967][T16297] [U] [ 375.919982][T16297] [U] [ 375.919998][T16297] [U] [ 375.920013][T16297] [U] [ 375.920028][T16297] [U] [ 375.920042][T16297] [U] [ 375.920062][T16297] [U] [ 375.920077][T16297] [U] [ 375.920093][T16297] [U] [ 375.920108][T16297] [U] [ 375.920123][T16297] [U] [ 375.920139][T16297] [U] [ 375.920154][T16297] [U] [ 375.920169][T16297] [U] [ 375.920188][T16297] [U] [ 375.920204][T16297] [U] [ 375.920219][T16297] [U] [ 375.920234][T16297] [U] [ 375.920250][T16297] [U] [ 375.920264][T16297] [U] [ 375.920279][T16297] [U] [ 375.920294][T16297] [U] [ 375.920314][T16297] [U] [ 375.920329][T16297] [U] [ 375.920344][T16297] [U] [ 375.920359][T16297] [U] [ 375.920374][T16297] [U] [ 375.920390][T16297] [U] [ 375.920410][T16297] [U] [ 375.920427][T16297] [U] [ 375.920449][T16297] [U] [ 375.920466][T16297] [U] [ 375.920483][T16297] [U] [ 375.920500][T16297] [U] [ 375.920517][T16297] [U] [ 375.920534][T16297] [U] [ 375.920550][T16297] [U] [ 375.920567][T16297] [U] [ 375.920589][T16297] [U] [ 375.920605][T16297] [U] [ 375.920621][T16297] [U] [ 375.920637][T16297] [U] [ 375.920652][T16297] [U] [ 375.920667][T16297] [U] [ 375.920682][T16297] [U] [ 375.920697][T16297] [U] [ 375.920716][T16297] [U] [ 375.920731][T16297] [U] [ 375.920746][T16297] [U] [ 375.920762][T16297] [U] [ 375.920777][T16297] [U] [ 375.920792][T16297] [U] [ 375.920808][T16297] [U] [ 375.920823][T16297] [U] [ 375.920842][T16297] [U] [ 375.920857][T16297] [U] [ 375.920872][T16297] [U] [ 375.920887][T16297] [U] [ 375.920903][T16297] [U] [ 375.920918][T16297] [U] [ 375.920933][T16297] [U] [ 375.920948][T16297] [U] [ 375.920967][T16297] [U] [ 375.920999][T16297] [U] [ 375.921020][T16297] [U] [ 375.921036][T16297] [U] [ 375.921054][T16297] [U] [ 375.921071][T16297] [U] [ 375.921089][T16297] [U] [ 375.921106][T16297] [U] [ 375.921123][T16297] [U] [ 375.921167][T16297] [U] [ 375.921185][T16297] [U] [ 375.921200][T16297] [U] [ 375.921220][T16297] [U] [ 375.921236][T16297] [U] [ 375.921251][T16297] [U] [ 375.921267][T16297] [U] [ 375.921282][T16297] [U] [ 375.921302][T16297] [U] [ 375.921318][T16297] [U] [ 375.921333][T16297] [U] [ 375.921348][T16297] [U] [ 375.921363][T16297] [U] [ 375.921378][T16297] [U] [ 375.921397][T16297] [U] [ 376.049603][T16303] lo speed is unknown, defaulting to 1000 [ 376.143843][T16304] random: crng reseeded on system resumption [ 376.180113][T16296] [U] [ 376.750140][T16322] ALSA: seq fatal error: cannot create timer (-22) [ 376.819721][T16324] tipc: Enabled bearer , priority 0 [ 376.820094][T16324] syzkaller0: entered promiscuous mode [ 376.820105][T16324] syzkaller0: entered allmulticast mode [ 376.822155][T16324] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 376.896126][T16324] tipc: Resetting bearer [ 376.908178][T16323] tipc: Resetting bearer [ 376.974490][T16323] tipc: Disabling bearer [ 377.001223][T16329] tipc: Enabled bearer , priority 0 [ 377.002338][T16329] syzkaller0: entered promiscuous mode [ 377.002356][T16329] syzkaller0: entered allmulticast mode [ 377.007369][T16329] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 377.028814][T16329] tipc: Resetting bearer [ 377.042225][T16328] tipc: Resetting bearer [ 377.077283][T16328] tipc: Disabling bearer [ 377.120317][T16333] syzkaller0: entered promiscuous mode [ 377.120338][T16333] syzkaller0: entered allmulticast mode [ 377.129297][T16333] fuse: Unknown parameter 'r+otmode' [ 377.197622][ T57] usb 12-1: new full-speed USB device number 20 using dummy_hcd [ 377.312217][T16341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.371381][ T57] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 377.414991][ T57] usb 12-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 377.415009][ T57] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.022114][ T57] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.022134][ T57] usb 12-1: Product: syz [ 378.022144][ T57] usb 12-1: Manufacturer: syz [ 378.022152][ T57] usb 12-1: SerialNumber: syz [ 378.023781][ T57] usb 12-1: config 0 descriptor?? [ 378.063428][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.231772][T15653] usb 12-1: USB disconnect, device number 20 [ 378.754206][ T42] kauditd_printk_skb: 92 callbacks suppressed [ 378.754223][ T42] audit: type=1800 audit(1789800917.632:6699): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 380.212271][ T42] audit: type=1800 audit(1789800919.092:6700): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20219 res=0 errno=0 [ 380.256438][ T42] audit: type=1800 audit(1789800919.132:6701): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=20219 res=0 errno=0 [ 380.278382][ T42] audit: type=1800 audit(1789800919.152:6702): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 380.348476][ T42] audit: type=1800 audit(1789800919.232:6703): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15535 res=0 errno=0 [ 380.395954][T16356] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2882'. [ 380.465317][ T42] audit: type=1800 audit(1789800919.342:6704): pid=16349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2884" name="run" dev="sysfs" ino=1000 res=0 errno=0 [ 381.182035][ T42] audit: type=1800 audit(1789800920.062:6705): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22273 res=0 errno=0 [ 381.265409][ T42] audit: type=1800 audit(1789800920.142:6706): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22273 res=0 errno=0 [ 381.291490][ T42] audit: type=1800 audit(1789800920.172:6707): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 381.355794][ T42] audit: type=1800 audit(1789800920.232:6708): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 381.451909][T16385] ntfs3(sr0): Primary boot signature is not NTFS. [ 381.454385][T16385] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 381.824456][T16390] FAULT_INJECTION: forcing a failure. [ 381.824456][T16390] name failslab, interval 1, probability 0, space 0, times 0 [ 381.824488][T16390] CPU: 1 UID: 0 PID: 16390 Comm: syz.7.2891 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.824511][T16390] Tainted: [L]=SOFTLOCKUP [ 381.824516][T16390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.824526][T16390] Call Trace: [ 381.824531][T16390] [ 381.824537][T16390] dump_stack_lvl+0x100/0x190 [ 381.824565][T16390] should_fail_ex.cold+0x5/0xa [ 381.824587][T16390] should_failslab+0xc2/0x120 [ 381.824608][T16390] __kmalloc_cache_noprof+0x91/0x6d0 [ 381.824633][T16390] ? nfulnl_recv_config+0xeb6/0x1760 [ 381.824657][T16390] nfulnl_recv_config+0xeb6/0x1760 [ 381.824683][T16390] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 381.824712][T16390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.824737][T16390] ? stack_trace_save+0x8e/0xc0 [ 381.824776][T16390] ? __lock_acquire+0x5c0/0x1f40 [ 381.824801][T16390] netlink_rcv_skb+0x159/0x420 [ 381.824819][T16390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.824843][T16390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.824870][T16390] ? ns_capable+0xd2/0xf0 [ 381.824893][T16390] nfnetlink_rcv+0x1b3/0x440 [ 381.824915][T16390] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.824948][T16390] ? netlink_deliver_tap+0x1ae/0xcc0 [ 381.824970][T16390] netlink_unicast+0x585/0x850 [ 381.824990][T16390] ? __pfx_netlink_unicast+0x10/0x10 [ 381.825013][T16390] netlink_sendmsg+0x8b0/0xda0 [ 381.825057][T16390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.825080][T16390] ? apparmor_socket_sendmsg+0x165/0x280 [ 381.825109][T16390] ____sys_sendmsg+0xa4d/0xbe0 [ 381.825126][T16390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.825146][T16390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.825169][T16390] ___sys_sendmsg+0x190/0x1e0 [ 381.825186][T16390] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.825201][T16390] ? futex_wait+0x11e/0x370 [ 381.825227][T16390] ? find_held_lock+0x2b/0x80 [ 381.825256][T16390] __sys_sendmsg+0x160/0x210 [ 381.825277][T16390] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.825309][T16390] __do_fast_syscall_32+0x13a/0x8b0 [ 381.825335][T16390] do_fast_syscall_32+0x32/0x70 [ 381.825363][T16390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.825383][T16390] RIP: 0023:0xf702efec [ 381.825401][T16390] Code: Unable to access opcode bytes at 0xf702efc2. [ 381.825409][T16390] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 381.825427][T16390] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 381.825439][T16390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.825448][T16390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.825457][T16390] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 381.825466][T16390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.825488][T16390] [ 382.792624][T16356] 1·: renamed from c0· (while UP) [ 382.794453][T16356] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 382.794811][T16360] tipc: Enabling of bearer rejected, failed to enable media [ 382.913821][T16402] FAULT_INJECTION: forcing a failure. [ 382.913821][T16402] name failslab, interval 1, probability 0, space 0, times 0 [ 382.913844][T16402] CPU: 0 UID: 0 PID: 16402 Comm: syz.5.2895 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.913860][T16402] Tainted: [L]=SOFTLOCKUP [ 382.913864][T16402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.913871][T16402] Call Trace: [ 382.913875][T16402] [ 382.913880][T16402] dump_stack_lvl+0x100/0x190 [ 382.913898][T16402] should_fail_ex.cold+0x5/0xa [ 382.913911][T16402] ? __netlink_lookup+0x652/0x900 [ 382.913925][T16402] should_failslab+0xc2/0x120 [ 382.913940][T16402] kmem_cache_alloc_noprof+0x92/0x6a0 [ 382.913953][T16402] ? skb_clone+0x190/0x400 [ 382.913970][T16402] skb_clone+0x190/0x400 [ 382.913985][T16402] netlink_deliver_tap+0xaed/0xcc0 [ 382.914000][T16402] netlink_unicast+0x62b/0x850 [ 382.914015][T16402] ? __pfx_netlink_unicast+0x10/0x10 [ 382.914032][T16402] netlink_sendmsg+0x8b0/0xda0 [ 382.914047][T16402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.914061][T16402] ? apparmor_socket_sendmsg+0x165/0x280 [ 382.914078][T16402] sock_write_iter+0x53a/0x5b0 [ 382.914088][T16402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.914102][T16402] ? __pfx_sock_write_iter+0x10/0x10 [ 382.914116][T16402] ? bpf_lsm_file_permission+0x9/0x10 [ 382.914134][T16402] ? security_file_permission+0x76/0x210 [ 382.914151][T16402] ? rw_verify_area+0xce/0x6d0 [ 382.914173][T16402] vfs_write+0x6af/0x1050 [ 382.914184][T16402] ? __pfx_sock_write_iter+0x10/0x10 [ 382.914196][T16402] ? __pfx_vfs_write+0x10/0x10 [ 382.914206][T16402] ? find_held_lock+0x2b/0x80 [ 382.914227][T16402] ksys_write+0x1f8/0x250 [ 382.914238][T16402] ? __pfx_ksys_write+0x10/0x10 [ 382.914249][T16402] ? ksys_write+0x1ac/0x250 [ 382.914259][T16402] ? __pfx_ksys_write+0x10/0x10 [ 382.914273][T16402] __do_fast_syscall_32+0x13a/0x8b0 [ 382.914291][T16402] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.914308][T16402] do_fast_syscall_32+0x32/0x70 [ 382.914325][T16402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.914343][T16402] RIP: 0023:0xf70befec [ 382.914357][T16402] Code: Unable to access opcode bytes at 0xf70befc2. [ 382.914362][T16402] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 382.914373][T16402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 382.914380][T16402] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.914387][T16402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.914393][T16402] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 382.914400][T16402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.914414][T16402] [ 382.914487][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 383.029238][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2894'. [ 383.029309][T16405] bridge_slave_1: left allmulticast mode [ 383.029327][T16405] bridge_slave_1: left promiscuous mode [ 383.029516][T16405] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.033311][T16405] bridge_slave_0: left allmulticast mode [ 383.033394][T16405] bridge_slave_0: left promiscuous mode [ 383.033626][T16405] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.259118][T16413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.531266][T16419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.674908][T16419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.730817][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2897'. [ 383.751540][T16406] ip6gretap1: entered allmulticast mode [ 383.759823][T16406] batman_adv: batadv0: Adding interface: ip6gretap1 [ 383.759835][T16406] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.759854][T16406] batman_adv: batadv0: Interface activated: ip6gretap1 [ 383.778159][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 383.778171][ T42] audit: type=1800 audit(1789800922.662:6716): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 383.778912][ T42] audit: type=1800 audit(1789800922.662:6717): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34365 res=0 errno=0 [ 383.780700][ T42] audit: type=1800 audit(1789800922.662:6718): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34388 res=0 errno=0 [ 383.829225][ T42] audit: type=1800 audit(1789800922.712:6719): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2898" name="comp_algorithm" dev="sysfs" ino=21774 res=0 errno=0 [ 383.830482][ T42] audit: type=1800 audit(1789800922.712:6720): pid=16421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2898" name="disksize" dev="sysfs" ino=21767 res=0 errno=0 [ 383.837132][T16421] zram0: detected capacity change from 0 to 8 [ 383.842323][T16421] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2898'. [ 383.842338][T16421] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2898'. [ 383.925201][ T42] audit: type=1800 audit(1789800922.802:6721): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 383.948469][ T42] audit: type=1800 audit(1789800922.832:6722): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=236428 res=0 errno=0 [ 384.006692][T15629] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 384.041337][T16428] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 384.151834][ T42] audit: type=1800 audit(1789800923.032:6723): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 384.164849][T16435] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2901'. [ 384.164932][T16435] 1·: renamed from c0· (while UP) [ 384.171215][T16435] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 384.179047][T15629] usb 6-1: Using ep0 maxpacket: 16 [ 384.181554][T15629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 384.181594][T15629] usb 6-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 384.181625][T15629] usb 6-1: too many configurations: 49, using maximum allowed: 8 [ 384.183203][T15629] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 384.183231][T15629] usb 6-1: can't read configurations, error -61 [ 384.219607][ T42] audit: type=1800 audit(1789800923.102:6724): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 384.259834][T16440] tipc: Enabled bearer , priority 0 [ 384.260434][T16440] syzkaller0: entered promiscuous mode [ 384.260452][T16440] syzkaller0: entered allmulticast mode [ 384.263222][T16440] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 384.283441][T16440] tipc: Resetting bearer [ 384.285668][T16439] tipc: Resetting bearer [ 384.309091][T16439] tipc: Disabling bearer [ 384.326646][T15629] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 384.404965][ T42] audit: type=1800 audit(1789800923.282:6725): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16438 res=0 errno=0 [ 384.477427][T15629] usb 6-1: Using ep0 maxpacket: 16 [ 384.479588][T15629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 384.479613][T15629] usb 6-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 384.479632][T15629] usb 6-1: too many configurations: 49, using maximum allowed: 8 [ 384.480740][T15629] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 384.480757][T15629] usb 6-1: can't read configurations, error -61 [ 384.480965][T15629] usb usb6-port1: attempt power cycle [ 384.646603][T15627] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 384.735824][T16451] zram: Can't change algorithm for initialized device [ 384.739653][T16451] zram: Cannot change disksize for initialized device [ 384.744089][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2908'. [ 384.744111][T16451] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2908'. [ 384.796738][T15627] usb 10-1: Using ep0 maxpacket: 32 [ 384.799078][T15627] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.800565][T15627] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.800587][T15627] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.800602][T15627] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.800635][T15627] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.800651][T15627] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.800670][T15627] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.800700][T15627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.802995][T15627] usb 10-1: config 0 descriptor?? [ 384.836612][T15629] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 384.864486][T15629] usb 6-1: Using ep0 maxpacket: 16 [ 384.867415][T15629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 384.867451][T15629] usb 6-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 384.867481][T15629] usb 6-1: too many configurations: 49, using maximum allowed: 8 [ 384.868924][T15629] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 384.868942][T15629] usb 6-1: can't read configurations, error -61 [ 385.007522][T15629] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 385.019411][T15627] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.027751][T15627] usb 10-1: USB disconnect, device number 24 [ 385.035083][T15629] usb 6-1: Using ep0 maxpacket: 16 [ 385.039310][T15629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.039349][T15629] usb 6-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 385.039387][T15629] usb 6-1: too many configurations: 49, using maximum allowed: 8 [ 385.048663][T15629] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 385.048701][T15629] usb 6-1: can't read configurations, error -61 [ 385.049048][T15629] usb usb6-port1: unable to enumerate USB device [ 385.061655][T15627] usblp0: removed [ 385.546607][T15627] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 385.708530][T15627] usb 10-1: Using ep0 maxpacket: 32 [ 385.711789][T15627] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 385.715696][T15627] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 385.715736][T15627] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 385.715777][T15627] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 385.715857][T15627] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.715893][T15627] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 385.715906][T15627] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 385.715952][T15627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.784273][T15627] usb 10-1: config 0 descriptor?? [ 386.043893][T16473] tipc: Enabled bearer , priority 0 [ 386.044267][T16473] syzkaller0: entered promiscuous mode [ 386.044280][T16473] syzkaller0: entered allmulticast mode [ 386.046385][T16473] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 386.070836][T16473] tipc: Resetting bearer [ 386.078935][T16472] tipc: Resetting bearer [ 386.099942][T16472] tipc: Disabling bearer [ 386.605906][T15627] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 386.636100][T16483] FAULT_INJECTION: forcing a failure. [ 386.636100][T16483] name failslab, interval 1, probability 0, space 0, times 0 [ 386.636124][T16483] CPU: 1 UID: 0 PID: 16483 Comm: syz.8.2927 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.636140][T16483] Tainted: [L]=SOFTLOCKUP [ 386.636144][T16483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.636152][T16483] Call Trace: [ 386.636157][T16483] [ 386.636161][T16483] dump_stack_lvl+0x100/0x190 [ 386.636180][T16483] should_fail_ex.cold+0x5/0xa [ 386.636192][T16483] ? __netlink_lookup+0x652/0x900 [ 386.636206][T16483] should_failslab+0xc2/0x120 [ 386.636220][T16483] kmem_cache_alloc_noprof+0x92/0x6a0 [ 386.636233][T16483] ? skb_clone+0x190/0x400 [ 386.636252][T16483] skb_clone+0x190/0x400 [ 386.636268][T16483] netlink_deliver_tap+0xaed/0xcc0 [ 386.636284][T16483] netlink_unicast+0x62b/0x850 [ 386.636299][T16483] ? __pfx_netlink_unicast+0x10/0x10 [ 386.636316][T16483] netlink_sendmsg+0x8b0/0xda0 [ 386.636331][T16483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.636346][T16483] ? apparmor_socket_sendmsg+0x165/0x280 [ 386.636363][T16483] ____sys_sendmsg+0xa4d/0xbe0 [ 386.636373][T16483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.636387][T16483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.636404][T16483] ___sys_sendmsg+0x190/0x1e0 [ 386.636412][T15627] usb 10-1: USB disconnect, device number 25 [ 386.636416][T16483] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.636428][T16483] ? futex_wait+0x11e/0x370 [ 386.636446][T16483] ? find_held_lock+0x2b/0x80 [ 386.636467][T16483] __sys_sendmsg+0x160/0x210 [ 386.636483][T16483] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.636529][T16483] __do_fast_syscall_32+0x13a/0x8b0 [ 386.636552][T16483] do_fast_syscall_32+0x32/0x70 [ 386.636583][T16483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.636598][T16483] RIP: 0023:0xf7fe3fec [ 386.636611][T16483] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 386.636617][T16483] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 386.636630][T16483] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 386.636637][T16483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.636643][T16483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.636649][T16483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.636656][T16483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.636669][T16483] [ 386.712118][T15627] usblp0: removed [ 386.861187][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2919'. [ 386.861232][T16487] bridge_slave_0: left allmulticast mode [ 386.861245][T16487] bridge_slave_0: left promiscuous mode [ 386.861367][T16487] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.791312][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2923'. [ 387.859183][T16503] tipc: Enabled bearer , priority 0 [ 387.859811][T16503] syzkaller0: entered promiscuous mode [ 387.859828][T16503] syzkaller0: entered allmulticast mode [ 387.862281][T16503] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 387.891824][T16497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.910176][T16503] tipc: Resetting bearer [ 387.911537][T16502] tipc: Resetting bearer [ 387.926389][T16502] tipc: Disabling bearer [ 387.959899][T16504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.963906][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'. [ 387.964405][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'. [ 388.013254][T16497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.020147][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 388.043129][T16518] ntfs3(sr0): Primary boot signature is not NTFS. [ 388.043771][T16518] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 388.200629][T16497] ip6gretap1: entered allmulticast mode [ 388.241327][T16497] batman_adv: batadv0: Adding interface: ip6gretap1 [ 388.241340][T16497] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.241357][T16497] batman_adv: batadv0: Interface activated: ip6gretap1 [ 388.498613][T15652] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 388.686739][T15652] usb 13-1: Using ep0 maxpacket: 16 [ 388.693774][T15652] usb 13-1: unable to get BOS descriptor or descriptor too short [ 388.697588][T15652] usb 13-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 388.697636][T15652] usb 13-1: too many configurations: 49, using maximum allowed: 8 [ 388.707926][T15652] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 388.708073][T15652] usb 13-1: can't read configurations, error -61 [ 388.733861][T16506] nvme nvme0: failed to connect socket: -512 [ 388.734745][T16506] [ 388.737540][T16506] ====================================================== [ 388.740401][T16506] WARNING: possible circular locking dependency detected [ 388.742982][T16506] syzkaller #0 Tainted: G L [ 388.745483][T16506] ------------------------------------------------------ [ 388.748600][T16506] syz.1.2925/16506 is trying to acquire lock: [ 388.751383][T16506] ffff888014622a80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 388.755217][T16506] [ 388.755217][T16506] but task is already holding lock: [ 388.758277][T16506] ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 388.761344][T16506] [ 388.761344][T16506] which lock already depends on the new lock. [ 388.761344][T16506] [ 388.764566][T16506] [ 388.764566][T16506] the existing dependency chain (in reverse order) is: [ 388.767445][T16506] [ 388.767445][T16506] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 388.769835][T16506] lock_acquire+0x1d1/0x380 [ 388.771433][T16506] __mutex_lock+0x1a4/0x1bd0 [ 388.773056][T16506] nvmf_dev_show+0x26/0x210 [ 388.774722][T16506] seq_read_iter+0x32f/0x1270 [ 388.776820][T16506] seq_read+0x344/0x4d0 [ 388.778445][T16506] vfs_read+0x1e4/0xb40 [ 388.779944][T16506] ksys_read+0x12a/0x250 [ 388.781454][T16506] __do_fast_syscall_32+0x13a/0x8b0 [ 388.783277][T16506] do_fast_syscall_32+0x32/0x70 [ 388.784973][T16506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.787324][T16506] [ 388.787324][T16506] -> #3 (&p->lock){+.+.}-{4:4}: [ 388.789665][T16506] lock_acquire+0x1d1/0x380 SYZFAIL: failed to recv rpc [ 388.791362][T16506] __mutex_lock+0x1a4/0x1bd0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 388.793536][T16506] seq_read_iter+0xe1/0x1270 [ 388.795615][T16506] kernfs_fop_read_iter+0x46c/0x610 [ 388.797439][T16506] __kernel_read+0x397/0xad0 [ 388.799106][T16506] integrity_kernel_read+0x7e/0xb0 [ 388.800913][T16506] ima_calc_file_hash_tfm+0x25e/0x350 [ 388.802802][T16506] ima_calc_file_hash+0x1e3/0x380 [ 388.804550][T16506] ima_collect_measurement+0x94f/0xb30 [ 388.806963][T16506] process_measurement+0xdfe/0x2350 [ 388.809315][T16506] ima_file_check+0xcc/0x120 [ 388.811480][T16506] security_file_post_open+0xc4/0x210 [ 388.813870][T16506] path_openat+0x5cd/0x2440 [ 388.816036][T16506] do_file_open+0x20e/0x430 [ 388.818049][T16506] do_sys_openat2+0x10f/0x1e0 [ 388.820277][T16506] __x64_sys_openat+0x12d/0x210 [ 388.822508][T16506] do_syscall_64+0x121/0x770 [ 388.824640][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.826938][T16506] [ 388.826938][T16506] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 388.829666][T16506] lock_acquire+0x1d1/0x380 [ 388.831294][T16506] __mutex_lock+0x1a4/0x1bd0 [ 388.832967][T16506] process_measurement+0x5ab/0x2350 [ 388.834787][T16506] ima_file_check+0xcc/0x120 [ 388.836473][T16506] security_file_post_open+0xc4/0x210 [ 388.838352][T16506] path_openat+0x5cd/0x2440 [ 388.839958][T16506] do_file_open+0x20e/0x430 [ 388.841615][T16506] file_open_name+0x1c3/0x3e0 [ 388.843523][T16506] filp_open+0x2e/0x50 [ 388.845011][T16506] kernel_read_file_from_path_initns+0xec/0x240 [ 388.846844][T15652] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 388.849910][T16506] _request_firmware+0x733/0x13c0 [ 388.851687][T16506] request_firmware+0x35/0x50 [ 388.853356][T16506] reg_reload_regdb+0x85/0x460 [ 388.855053][T16506] genl_family_rcv_msg_doit+0x214/0x300 [ 388.857093][T16506] genl_rcv_msg+0x560/0x800 [ 388.858874][T16506] netlink_rcv_skb+0x159/0x420 [ 388.860565][T16506] genl_rcv+0x28/0x40 [ 388.861972][T16506] netlink_unicast+0x585/0x850 [ 388.863635][T16506] netlink_sendmsg+0x8b0/0xda0 [ 388.865365][T16506] ____sys_sendmsg+0xa4d/0xbe0 [ 388.867615][T16506] ___sys_sendmsg+0x190/0x1e0 [ 388.869342][T16506] __sys_sendmsg+0x160/0x210 [ 388.870995][T16506] __do_fast_syscall_32+0x13a/0x8b0 [ 388.872798][T16506] do_fast_syscall_32+0x32/0x70 [ 388.874522][T16506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.876974][T16506] [ 388.876974][T16506] -> #1 (cb_lock){++++}-{4:4}: [ 388.879226][T16506] lock_acquire+0x1d1/0x380 [ 388.881159][T16506] down_read+0x99/0x4c0 [ 388.882894][T16506] genl_release+0x7e/0x1d0 [ 388.885097][T16506] netlink_release+0x105e/0x2000 [ 388.887422][T16506] __sock_release+0xb3/0x260 [ 388.889609][T16506] sock_close+0x1c/0x30 [ 388.891713][T16506] __fput+0x3ff/0xb50 [ 388.893736][T16506] fput_close_sync+0x118/0x250 [ 388.896101][T16506] __x64_sys_close+0x8b/0x120 [ 388.898228][T16506] do_syscall_64+0x121/0x770 [ 388.900286][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.902814][T16506] [ 388.902814][T16506] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 388.906307][T16506] check_prev_add+0xeb/0xe60 [ 388.908403][T16506] __lock_acquire+0x1528/0x1f40 [ 388.910637][T16506] lock_acquire+0x1d1/0x380 [ 388.912779][T16506] down_write+0x8b/0x1f0 [ 388.914652][T16506] __sock_release+0x86/0x260 [ 388.916596][T16506] sock_close+0x1c/0x30 [ 388.918335][T16506] __fput+0x3ff/0xb50 [ 388.920010][T16506] __fput_sync+0xd7/0x100 [ 388.921762][T16506] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 388.923850][T16506] nvme_tcp_configure_admin_queue+0x26/0x530 [ 388.926312][T16506] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 388.928348][T16506] nvme_tcp_create_ctrl+0x970/0xd90 [ 388.930218][T16506] nvmf_dev_write+0x4ee/0xb60 [ 388.931857][T16506] vfs_write+0x2aa/0x1050 [ 388.933407][T16506] ksys_write+0x12a/0x250 [ 388.935050][T16506] __do_fast_syscall_32+0x13a/0x8b0 [ 388.937150][T16506] do_fast_syscall_32+0x32/0x70 [ 388.939321][T16506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.941954][T16506] [ 388.941954][T16506] other info that might help us debug this: [ 388.941954][T16506] [ 388.945720][T16506] Chain exists of: [ 388.945720][T16506] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 388.945720][T16506] [ 388.950161][T16506] Possible unsafe locking scenario: [ 388.950161][T16506] [ 388.952653][T16506] CPU0 CPU1 [ 388.954516][T16506] ---- ---- [ 388.956665][T16506] lock(nvmf_dev_mutex); [ 388.958432][T16506] lock(&p->lock); [ 388.961005][T16506] lock(nvmf_dev_mutex); [ 388.963521][T16506] lock(&sb->s_type->i_mutex_key#13); [ 388.965626][T16506] [ 388.965626][T16506] *** DEADLOCK *** [ 388.965626][T16506] [ 388.968999][T16506] locks held by syz.1.2925/16506: 1, last CPU#0: [ 388.971702][T16506] #0: ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 388.975677][T16506] [ 388.975677][T16506] stack backtrace: [ 388.978111][T16506] CPU: 0 UID: 0 PID: 16506 Comm: syz.1.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.982563][T16506] Tainted: [L]=SOFTLOCKUP [ 388.984502][T16506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.989264][T16506] Call Trace: [ 388.991103][T16506] [ 388.992524][T16506] dump_stack_lvl+0x100/0x190 [ 388.994572][T16506] print_circular_bug.cold+0x178/0x1be [ 388.997281][T16506] check_noncircular+0x146/0x160 [ 388.999395][T16506] check_prev_add+0xeb/0xe60 [ 389.001432][T16506] __lock_acquire+0x1528/0x1f40 [ 389.003786][T16506] ? do_fast_syscall_32+0x32/0x70 [ 389.006014][T16506] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.008694][T16506] lock_acquire+0x1d1/0x380 [ 389.010634][T16506] ? __sock_release+0x86/0x260 [ 389.012740][T16506] ? __pfx___might_resched+0x10/0x10 [ 389.015324][T16506] down_write+0x8b/0x1f0 [ 389.016767][T15652] usb 13-1: Using ep0 maxpacket: 16 [ 389.018382][T15652] usb 13-1: unable to get BOS descriptor or descriptor too short [ 389.018400][T15652] usb 13-1: New USB device found, idVendor=1b3d, idProduct=013b, bcdDevice=da.94 [ 389.018417][T15652] usb 13-1: too many configurations: 49, using maximum allowed: 8 [ 389.019510][T15652] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 389.019532][T15652] usb 13-1: can't read configurations, error -61 [ 389.019674][T15652] usb usb13-port1: attempt power cycle [ 389.035884][T16506] ? __sock_release+0x86/0x260 [ 389.037643][T16506] ? __pfx_down_write+0x10/0x10 [ 389.039417][T16506] ? __pfx_locks_remove_file+0x10/0x10 [ 389.041258][T16506] __sock_release+0x86/0x260 [ 389.042766][T16506] ? __pfx_sock_close+0x10/0x10 [ 389.044425][T16506] sock_close+0x1c/0x30 [ 389.045919][T16506] __fput+0x3ff/0xb50 [ 389.047432][T16506] ? kfree+0x22b/0x6d0 [ 389.048865][T16506] __fput_sync+0xd7/0x100 [ 389.050426][T16506] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 389.052370][T16506] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 389.054316][T16506] nvme_tcp_configure_admin_queue+0x26/0x530 [ 389.056219][T16506] ? __wake_up+0x3f/0x60 [ 389.057582][T16506] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 389.059273][T16506] ? mark_held_locks+0x40/0x70 [ 389.060804][T16506] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 389.062601][T16506] ? lockdep_hardirqs_on+0x7d/0x110 [ 389.064322][T16506] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 389.066311][T16506] ? nvme_change_ctrl_state+0xc0/0x440 [ 389.068107][T16506] nvme_tcp_create_ctrl+0x970/0xd90 [ 389.069840][T16506] nvmf_dev_write+0x4ee/0xb60 [ 389.071397][T16506] vfs_write+0x2aa/0x1050 [ 389.072773][T16506] ? __pfx_nvmf_dev_write+0x10/0x10 [ 389.074599][T16506] ? lock_acquire+0x1d1/0x380 [ 389.076245][T16506] ? __fget_files+0x34/0x3d0 [ 389.078123][T16506] ? __pfx_vfs_write+0x10/0x10 [ 389.079772][T16506] ? find_held_lock+0x2b/0x80 [ 389.081402][T16506] ? __fget_files+0x215/0x3d0 [ 389.083071][T16506] ? __fget_files+0x215/0x3d0 [ 389.084541][T16506] ? __fget_files+0x21f/0x3d0 [ 389.086033][T16506] ksys_write+0x12a/0x250 [ 389.087589][T16506] ? __pfx_ksys_write+0x10/0x10 [ 389.089161][T16506] __do_fast_syscall_32+0x13a/0x8b0 [ 389.090862][T16506] ? lockdep_hardirqs_on+0x7d/0x110 [ 389.092527][T16506] do_fast_syscall_32+0x32/0x70 [ 389.094145][T16506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.096585][T16506] RIP: 0023:0xf7fa3fec [ 389.097949][T16506] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 389.100388][T16506] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 389.103189][T16506] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 389.105719][T16506] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.108295][T16506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.110881][T16506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 389.113496][T16506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.116353][T16506] [ 389.399173][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.416701][T15652] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 389.553488][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.568599][T15652] usb 13-1: device descriptor read/8, error -71 [ 389.592547][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.669328][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.733240][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 389.733252][ T42] audit: type=1800 audit(1789800928.612:6806): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237263 res=0 errno=0 [ 389.733995][ T42] audit: type=1800 audit(1789800928.612:6807): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=237268 res=0 errno=0 [ 389.734499][ T42] audit: type=1800 audit(1789800928.612:6808): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=237272 res=0 errno=0 [ 389.734747][ T42] audit: type=1800 audit(1789800928.612:6809): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=237271 res=0 errno=0 [ 389.735138][ T42] audit: type=1800 audit(1789800928.612:6810): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=237274 res=0 errno=0 [ 389.736471][ T42] audit: type=1800 audit(1789800928.612:6811): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237349 res=0 errno=0 [ 389.739315][ T42] audit: type=1800 audit(1789800928.622:6812): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=237354 res=0 errno=0 [ 389.740341][ T42] audit: type=1800 audit(1789800928.622:6813): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=237358 res=0 errno=0 [ 389.740792][ T42] audit: type=1800 audit(1789800928.622:6814): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=237357 res=0 errno=0 [ 389.741979][ T42] audit: type=1800 audit(1789800928.622:6815): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=237360 res=0 errno=0 [ 389.768292][ T12] bridge_slave_1: left allmulticast mode [ 389.768415][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.779789][ T12] bridge_slave_0: left allmulticast mode [ 389.779888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.869049][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.869961][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.870346][ T12] bond0 (unregistering): Released all slaves [ 389.871446][ T12] bond1 (unregistering): Released all slaves [ 389.937834][ T12] tipc: Left network mode [ 390.013715][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 390.048871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.049110][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.195630][T15329] smbdirect: ib_dev[syz2] removed [ 390.364643][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 390.423131][ T12] IPVS: stop unused estimator thread 0... [ 390.482567][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.522548][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 390.530353][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.572949][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.632160][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.665973][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 390.715031][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.776043][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.845272][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.848783][ T5445] 8021q: adding VLAN 0 to HW filter on device eth26 [ 390.923537][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.988611][ T5445] 8021q: adding VLAN 0 to HW filter on device eth27 [ 391.003439][ T12] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 391.080171][ T12] batman_adv: batadv0: Removing interface: ip6gretap1 [ 391.175823][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.180790][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.181832][ T12] bond0 (unregistering): Released all slaves [ 391.184209][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 391.185151][ T12] bond1 (unregistering): Released all slaves [ 391.188773][ T12] bond2 (unregistering): Released all slaves [ 391.281709][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 391.291278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.291566][ T12] bond_slave_0: left promiscuous mode [ 391.292864][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.293324][ T12] bond_slave_1: left promiscuous mode [ 391.293973][ T12] bond0 (unregistering): Released all slaves [ 391.296119][ T12] bond1 (unregistering): Released all slaves [ 391.302022][ T12] bond2 (unregistering): Released all slaves [ 391.374358][ T12] tipc: Left network mode [ 391.399128][ T12] tipc: Left network mode [ 391.445318][ T5445] 8021q: adding VLAN 0 to HW filter on device eth28 [ 391.571962][ T5445] 8021q: adding VLAN 0 to HW filter on device eth29 [ 391.696401][ T5445] 8021q: adding VLAN 0 to HW filter on device eth30 [ 391.760574][ T12] hsr_slave_0: left promiscuous mode [ 391.761215][ T12] hsr_slave_1: left promiscuous mode [ 391.761464][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.761474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.761800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.761812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.763663][ T12] hsr_slave_0: left promiscuous mode [ 391.763912][ T12] hsr_slave_1: left promiscuous mode [ 391.764132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.764141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.764408][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.764416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.770798][ T12] veth1_macvtap: left promiscuous mode [ 391.770828][ T12] veth0_macvtap: left promiscuous mode [ 391.770873][ T12] veth1_vlan: left promiscuous mode [ 391.770908][ T12] veth0_vlan: left promiscuous mode [ 391.779752][ T12] veth1_macvtap: left promiscuous mode [ 391.779787][ T12] veth0_macvtap: left promiscuous mode [ 391.779853][ T12] veth1_vlan: left promiscuous mode [ 391.779878][ T12] veth0_vlan: left promiscuous mode [ 391.951827][ T12] team0 (unregistering): Port device team_slave_1 removed [ 391.954864][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.060897][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.062886][ T12] team0 (unregistering): Port device team_slave_0 removed [ 392.083054][ T5445] 8021q: adding VLAN 0 to HW filter on device eth31 [ 392.189814][ T5445] 8021q: adding VLAN 0 to HW filter on device eth32 [ 392.333878][ T5445] 8021q: adding VLAN 0 to HW filter on device eth33 [ 392.401485][ T12] IPVS: stop unused estimator thread 0...