last executing test programs: 6m32.691715802s ago: executing program 32 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@fallback, r0, 0x2f, 0x2030, 0x4}, 0x20) 5m57.7761518s ago: executing program 2 (id=801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3a}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 5m57.471365164s ago: executing program 2 (id=803): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) fchdir(r1) r3 = open(&(0x7f0000000000)='.\x00', 0x311480, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpgrp(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="3400000003"], 0x34) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x36, 0x0, 0x53) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000018c0)={r6, 0x0, 0x0, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000400000008080000c00b0006010000007a8c4887cc5122f4ab51e60703", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r11, 0x4}, 0x38) 5m57.194611538s ago: executing program 2 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xb4, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@nested={0x4c, 0xf6, 0x0, 0x1, [@typed={0x14, 0x148, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @typed={0x31, 0xdd, 0x0, 0x0, @binary="f8b54f5e41ec3a5a6666466ef0dac8319ca1ce530435bdf6cb13159c1c87836ae2c9562b67b80e35207c015679"}]}]}, @nested={0x4d, 0x12, 0x0, 0x1, [@generic="3b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71d2273b51a237f2"]}]}, 0xb4}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0x560c89bb) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) write(r0, &(0x7f0000000180)='0', 0x1) 5m55.835178048s ago: executing program 2 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02a412fe39b2ec"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r14, r13, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r7}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 5m39.994820146s ago: executing program 33 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02a412fe39b2ec"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) syz_ublk_setup_queues(r14, r13, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r7}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 4m9.438450023s ago: executing program 34 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x86a0, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd27, 0x25dfdbfe, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x814) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m6.905301083s ago: executing program 35 (id=1316): mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000100)='./file0\x00') 4m4.394982031s ago: executing program 36 (id=1330): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@jmp={0x5, 0x0, 0xa, 0xa, 0x4, 0xfffffffffffffff4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x4b, &(0x7f0000000140)=""/75, 0x1e00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x9, 0x710b, 0xa7}, 0x10, 0x4406, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x4, 0x9, 0x6}], 0x10, 0xe56}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 3m45.063735065s ago: executing program 37 (id=1381): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x10, 0x7}}}, 0x24}}, 0x4008000) write(r2, &(0x7f0000000000)='3', 0x4e) semget$private(0x0, 0x1, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m31.380991182s ago: executing program 7 (id=1880): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 2m31.299256445s ago: executing program 7 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r13, r12, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r13, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r11, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 2m30.33827897s ago: executing program 7 (id=1889): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r0, &(0x7f0000000000)="41000200010007", 0x7) (fail_nth: 10) 2m30.260898499s ago: executing program 7 (id=1891): r0 = syz_open_dev$video(&(0x7f00000017c0), 0x7, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x25dfdbfe, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}}, 0x20000040) socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr=0xac141401, 0x50, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) userfaultfd(0x80000) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.163274497s ago: executing program 7 (id=1895): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008000) write(r2, &(0x7f0000000000)='3', 0x4e) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m29.913379853s ago: executing program 7 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r8 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES16=r8, @ANYRES32=r6, @ANYRESDEC, @ANYRES8=r7, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) connect$unix(r8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 2m29.186752245s ago: executing program 6 (id=1899): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0105865, &(0x7f0000000c40)={&(0x7f0000000040)=0x401, 0xffffffff, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)}) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f00000003c0)={0x2, 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0xffffffff, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000003140)) write(r9, &(0x7f0000000000)='7', 0x1) 2m28.270344734s ago: executing program 6 (id=1901): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 2m28.200428043s ago: executing program 6 (id=1903): syz_io_uring_setup(0x1895, &(0x7f0000000440)={0x0, 0x854d, 0x1000, 0x1, 0x180}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3ff, 0xfffffffb, 0xfffffffd, 0xfffffffc, 0x3a5d, 0x18}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000002010102000000000500000000000006080008400000667e376320b780fd3002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x400448ca, 0x0) ioctl(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8", 0x1d}, {&(0x7f0000000140)="0400000002e877da3002473500000003467b5dc44d83fff6a74aa24d473843ef0b48859c124b73209966813b12150c1b03fb6b9123f5aa8b2f270c8e9433b4b8fa", 0x41}], 0x2) write(r3, &(0x7f0000000200)="4a00000011007f0314", 0x9) close_range(0xffffffffffffffff, r3, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc0145b0e, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x55) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '*!'}, {0x20, '#\xa1\x02'}, {0x20, '#! '}], 0xa, "b421f20bffabc90c89e75fa088b293d29b8583244d7d2cf9ac0888e04c36f0fbd3cc71358ebd5cfd333c018e39ef9eb4c7cd255636304be60d7d7c85c03c99338100000076b1f8"}, 0x5d) syz_io_uring_setup(0x5f39, 0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000004c0)) r9 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffa, 0x3, 0xffffffff, 0x7fff}, {0x6, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0xffffffff, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in6=@loopback, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4) 2m24.910141385s ago: executing program 6 (id=1913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02a412fe39b2ec"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r13, r12, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r13, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r11, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 2m23.903884376s ago: executing program 6 (id=1922): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x10, 0x7}}}, 0x24}}, 0x4008000) write(r2, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m23.842574157s ago: executing program 6 (id=1923): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='127.0.0.1', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') (fail_nth: 7) nanosleep(0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r6, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 2m15.359931968s ago: executing program 38 (id=1887): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000001c0)=0xffffffffffffffab) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000740)={r3, 0xc, 0x6, 0x0, 0x40, 0x5, 0x7, 0xe5, {r4, @in={{0x2, 0x4e22, @local}}, 0x6, 0x2, 0x9, 0x6, 0x100}}, &(0x7f0000000800)=0xb0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="2b00008858c2083d22f800"], 0x8) syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e2}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x30) 2m14.244042392s ago: executing program 39 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r8 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES16=r8, @ANYRES32=r6, @ANYRESDEC, @ANYRES8=r7, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) connect$unix(r8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 2m8.166824129s ago: executing program 40 (id=1923): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='127.0.0.1', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') (fail_nth: 7) nanosleep(0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r6, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 2m4.800586591s ago: executing program 2 (id=1931): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x10, 0x7}}}, 0x24}}, 0x4008000) write(r2, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.573539009s ago: executing program 2 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x36, 0xa]}}}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e5d, 0x80000000, @mcast1, 0xfffffffb}, 0x1c, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x8048802) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltclass={0x30, 0x29, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xffff, 0x3}, {0xfff1, 0xc}}, [@tclass_kind_options=@c_taprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40448a0}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffa) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe4) quotactl_fd$Q_QUOTAON(r11, 0xffffffff80000202, r12, &(0x7f00000005c0)='./file0\x00') 2m0.752477078s ago: executing program 1 (id=1961): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x28, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x44201, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x20000000000003, 0x1004}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x218, 0x0, 0x218, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xfd, 0x0, {}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nr0\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='2', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m59.797532842s ago: executing program 5 (id=1962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000900)={&(0x7f0000000200), &(0x7f00000006c0)=""/195, 0x0, 0x0, 0xa34d, 0xffffffffffffffff, 0x4}, 0x38) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xb8, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m59.684527305s ago: executing program 1 (id=1964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r3, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4100, 0x1004}], 0x1) readv(r3, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'user_.'}}]}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2531000000050033008000000008000200", @ANYRES32=r2, @ANYBLOB="a9539bf98815a1491f096121f884a64dbee52c314e40e84d0f6ea1a876aed59e96fb9ef7cb320d98c18a2f7dca1eb52b8191a6296556d010061dd8723366df0b7d522cb329c8f216be68c9"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x404c804) 1m59.681456024s ago: executing program 5 (id=1965): syz_io_uring_setup(0x1895, &(0x7f0000000440)={0x0, 0x854d, 0x1000, 0x1, 0x180}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3ff, 0xfffffffb, 0xfffffffd, 0xfffffffc, 0x3a5d, 0x18}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000002010102000000000500000000000006080008400000667e376320b780fd3002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x400448ca, 0x0) ioctl(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8", 0x1d}, {&(0x7f0000000140)="0400000002e877da3002473500000003467b5dc44d83fff6a74aa24d473843ef0b48859c124b73209966813b12150c1b03fb6b9123f5aa8b2f270c8e9433b4b8fa", 0x41}], 0x2) write(r3, &(0x7f0000000200)="4a00000011007f0314", 0x9) close_range(0xffffffffffffffff, r3, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x420000, 0x20) mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x55) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '*!'}, {0x20, '#\xa1\x02'}, {0x20, '#! '}], 0xa, "b421f20bffabc90c89e75fa088b293d29b8583244d7d2cf9ac0888e04c36f0fbd3cc71358ebd5cfd333c018e39ef9eb4c7cd255636304be60d7d7c85c03c99338100000076b1f8"}, 0x5d) syz_io_uring_setup(0x5f39, 0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000004c0)) r9 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffa, 0x3, 0xffffffff, 0x7fff}, {0x6, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0xffffffff, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in6=@loopback, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4) 1m59.567628355s ago: executing program 1 (id=1966): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r6, 0xc0105865, &(0x7f0000000c40)={&(0x7f0000000040)=0x401, 0xffffffff, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c00)}) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f00000003c0)={0x2, 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0xffffffff, 0x0}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000003140)) write(r9, &(0x7f0000000000)='7', 0x1) 1m59.318836921s ago: executing program 1 (id=1967): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRESHEX=r5, @ANYBLOB="835cb34893ac31afb9a1f62000aacc75c38c6c896aa383c4be347786d266d25c360be7", @ANYRESHEX=r3, @ANYRESOCT=r2], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES64=r7, @ANYRES16=r9, @ANYRESOCT=r2], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYRESHEX=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x6024) r10 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYRES16=r3, @ANYRES8=r3]) r11 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40}, 0x94) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x800008, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r13, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_io_uring_setup(0x77cc, &(0x7f0000000040)={0x0, 0x26429, 0x8000, 0x10000d, 0x242}, 0x0, 0x0, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 1m59.135367276s ago: executing program 1 (id=1968): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x10, 0x7}}}, 0x24}}, 0x4008000) write(r2, &(0x7f0000000000), 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.040353491s ago: executing program 1 (id=1969): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000380)='127.0.0.1', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') (fail_nth: 7) nanosleep(&(0x7f00000004a0)={0x0, 0x5f5e100}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r6, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 1m58.321125432s ago: executing program 5 (id=1971): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x78d4a000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x4, 0x0, r3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setns(0xc9, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x8}}, @volatile={0x4, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0x61, 0x61, 0x0]}}, &(0x7f0000000400)=""/240, 0x44, 0xf0, 0x1, 0x5}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x1d, &(0x7f0000000200)=""/29, 0x60700, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000540)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0x0, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r5], 0x0, 0x10, 0x1ff}, 0x94) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) socket$packet(0x11, 0x3, 0x300) r8 = epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m57.361322982s ago: executing program 5 (id=1975): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000400000000000000000000850000001100000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x67, 0x2], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000003, 0x0, 0x5, 0x8000000000000001, 0x9, 0x10000, 0xfffffffffffffffd, 0x1, 0x0, 0xffffbffffffffff4, 0x8e3f, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x94, 0x1, 0x800000000002a9, 0x19, 0xfffffffffffffffa, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0xa, 0x7, 0x7, 0xfffffffffffffffa, 0x80, 0x100, 0x80, 0xfffffffffffffffb, 0x101, 0x3, 0x0, 0x9, 0xffff7ffffffffffa, 0x8000001, 0x3, 0x8, 0x1, 0x5d, 0x4, 0xfffffffffffffff7, 0x538a, 0x8001, 0xda, 0x4, 0x14, 0xdd, 0x5, 0xce67, 0x4, 0x128, 0x6, 0x40000001fffff, 0x7, 0x5bc, 0x10, 0xffffffffffefffff, 0x4, 0x8000, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x1000, 0xffffffff, 0xe9, 0x800000000000002, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x4, 0xffffffff00000001, 0x6144, 0x8, 0x200000000000000, 0x6, 0x1ff, 0x9, 0x7c54, 0x4, 0x4, 0x7, 0xb, 0x1000ffff, 0x7, 0x1, 0x16d, 0xfffffffffffffffe, 0x8, 0xffffffffffff43b0, 0x8, 0x0, 0x12, 0x8000000000000, 0xaa4, 0x3, 0x0, 0xb, 0x3ff, 0x0, 0x80000000008, 0x6, 0x0, 0x100000000003, 0x42, 0x80000004, 0x7, 0xe, 0x1]}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r8, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) socketpair(0x23, 0xa, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r11, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) 1m57.060811452s ago: executing program 5 (id=1977): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x10, 0x7}}}, 0x24}}, 0x4008000) write(r2, &(0x7f0000000000), 0x0) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m56.91035977s ago: executing program 5 (id=1978): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001500010300000000000000000b008100f31e9df9138b80c64e6e12783f6045b36fe7b948f05cf7bf9894651b7e5ae05fa81ca5803f2d5ad66650662c4b398515b5cc6b5315af4128f44fac3af027420c143b5a44675f6c76ff8aaf"], 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) (async) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m48.768112933s ago: executing program 41 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x36, 0xa]}}}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e5d, 0x80000000, @mcast1, 0xfffffffb}, 0x1c, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}}, 0x8048802) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltclass={0x30, 0x29, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xffff, 0x3}, {0xfff1, 0xc}}, [@tclass_kind_options=@c_taprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40448a0}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffa) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe4) quotactl_fd$Q_QUOTAON(r11, 0xffffffff80000202, r12, &(0x7f00000005c0)='./file0\x00') 1m43.719203733s ago: executing program 42 (id=1969): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ipv4', 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000380)='127.0.0.1', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') (fail_nth: 7) nanosleep(&(0x7f00000004a0)={0x0, 0x5f5e100}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r6, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys,data_digest', 0x46) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 1m41.55603848s ago: executing program 43 (id=1978): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001500010300000000000000000b008100f31e9df9138b80c64e6e12783f6045b36fe7b948f05cf7bf9894651b7e5ae05fa81ca5803f2d5ad66650662c4b398515b5cc6b5315af4128f44fac3af027420c143b5a44675f6c76ff8aaf"], 0x14}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) (async) chdir(&(0x7f0000000080)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m7.58858228s ago: executing program 8 (id=2149): io_setup(0x401, &(0x7f0000000080)=0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xe, 0x103140) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) io_submit(r0, 0x1, &(0x7f0000002240)=[&(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000001200)="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", 0x1000, 0x7fffffffffffffff, 0x0, 0x2, r2}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x10, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x7}, @generic={0x7b, 0xa, 0x7, 0xfff0}, @generic={0x7b, 0xa, 0x7, 0xfff8}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) splice(r4, 0x0, r4, &(0x7f0000000100)=0x7, 0x4, 0x4) r5 = openat$hpet(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) readv(r5, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1) r6 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 1m7.069368617s ago: executing program 8 (id=2154): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f0000000400)=""/108, 0x6c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x123900, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1004, 0x200014a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x400, 0x10001, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x100, 0x3, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbb}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2b, 0x107, 0x70bd2d, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) 1m6.732662196s ago: executing program 8 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'pim6reg0\x00', 0x200, 0x6}) write(0xffffffffffffffff, 0x0, 0x12) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000e, 0x8010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8040) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0), 0x0, 0x4000044) close(r4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='esdfs\x00', 0x91021, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x90201, 0x0) dup(r0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m6.430729561s ago: executing program 8 (id=2160): r0 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$lock(r0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m5.777850408s ago: executing program 8 (id=2164): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000080)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (fail_nth: 6) 1m5.287904346s ago: executing program 8 (id=2167): process_vm_readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/116, 0x74}, {&(0x7f0000001240)=""/254, 0xfe}], 0x7, &(0x7f0000001640)=[{&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001540)=""/128, 0x80}, {&(0x7f00000015c0)=""/73, 0x49}], 0x4, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001680), 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f00000019c0)={&(0x7f00000016c0)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/134, 0x86}], 0x2, &(0x7f0000001900)=""/170, 0xaa}, 0x12000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000025c0)={&(0x7f0000001a80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001ac0)=""/208, 0xd0}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000001c40)=""/87, 0x57}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/243, 0xf3}, {&(0x7f0000001ec0)=""/5, 0x5}], 0x6, &(0x7f0000002380)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x84}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x6}, &(0x7f0000001f40)=0x100000001, &(0x7f0000001f80)=0x3, 0x6, 0xf90b, 0x7f, 0x100000000, 0x50, 0x9}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001fc0)=""/37, 0x25}, &(0x7f0000002000), 0x20}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x1}, {&(0x7f0000002040)=""/97, 0x61}, &(0x7f00000021c0)=[{&(0x7f00000020c0)=""/41, 0x29}, {&(0x7f0000002100)=""/103, 0x67}, {&(0x7f0000002180)=""/41, 0x29}], 0x3, 0x0, 0x8d62}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x800}, &(0x7f0000002200)=0x9, &(0x7f0000002240)=0x28b, 0x100000000, 0x3, 0x401, 0x6, 0x7b, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x68a3}, &(0x7f0000002280)=0x8000000000000001, &(0x7f00000022c0)=0xfffffffffffffffc, 0xfff, 0x0, 0xffffffff00000001, 0x2, 0x40, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000001, 0x86}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffe, 0x9}, &(0x7f0000002300)=0x7ff, &(0x7f0000002340)=0x100000000, 0x5, 0x3, 0x2, 0x8, 0x1f, 0x2}}], 0x214, 0x1}, 0x80) sched_setscheduler(0x0, 0x0, &(0x7f0000002600)=0x3) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002640)=0x0, &(0x7f0000002680)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000026c0)={r0, r2, 0x25, 0x8, @void}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002700)={0x3, 0x101, 0x6, 0x5000000, 0xa15}) r4 = openat$nmem0(0xffffff9c, &(0x7f0000002740), 0x2d7f9e26f9144850, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002780)={0x0, 0xb, 0xb5, 0x2e, 0x1, 0x7}, &(0x7f00000027c0)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000002800)={r5, 0x9, 0x2, 0x8, 0x7, 0x2}, 0x14) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000003c80)=0x0) lstat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003d80)=0x0) lstat(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000003e80)='./file0\x00', 0x800, 0x80, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000004000)={&(0x7f0000002840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000028c0)="d6c5c838c288ebd8ed2f758df38aacf7890f3219ba95ad2130ba18301452f811f368bcbd37b79d62f58104fa2d18801ea47c2a2248bf1fd59fa48d2d02c40a0c68067280", 0x44}, {&(0x7f0000002940)="bd4c4b4c9d09124f37532a149867242d4256016f2d75583fb74dad8726536ab2329296752dbf56475982271b4204d0fa363c9d648c2825a3d8e7ee8c5f998ed1076378cc0fbcf148b5035d5350f0136ff4ddf09b15a7d7c5905057d03dc8076ccd73cc2a518a541a46b05a795f1efd0481a1d0d6e9a34db7abc1939933cbdb67538308c43c3a33fcd0b1fd564de401c2ebaa6f85be111451bf0fa3798ef70257e0daa0efb12e6f03beefb89fe4f54b6208c00e09103e1b", 0xb7}, {&(0x7f0000002a00)="d2f61454ba9a41249e0c52ba28a4b01d90aae77de14ab43ddcd13a2ef233b535659263269adf1781da003ed6e4193faa4703d7478fb441dbb3751cc44600dace55f87d9769bc793419f316be86cc4c4fcc378fd8339da3a309c3070042b80849cc0ca93395a99d55351a74e6e57c4115c2e1e12249dbde86ca7464016d82e9e8bba3804992b09cc104396cbdddfcdf0dbc4f2a6788254ce64d5c7c50fbb267fee25829f9124640d71816da18831bffb951a875dad10be48a18f1723a4f5fe6c4b2497bf8c4b845cc0429482558257cec2efdbd48adb0d18a18a1f0254e8c9910eb32589dd91300f4db7954f63419774a48ace1c980d8f8bad1035c95dd64e25aaa7fb923b40c0a4cff8a8008bd648af08738ff70f53a37e9e70f895b1958ad531a7c12d4ff883fef89942218ec8af852faab2fe8df9b034a4f4a6021faae8024087cdd74308e38dd03174cfe897a3a101193419cf5ad9d4c0f5dca093ecaa2111804f917c40c8ad31996b792ac3942177be6c73fe1b6da576e652fc6dff670aad2801898c0acd15f8ac4a27c828b266512ddeb3f686850414e313b31c8e965e67f3c7df91f46729733ea658e9f330591137bc04d26549d4247468b32573a69ad4178fce08c049d7b0045b0c881a9e10edff44d4cf3faf4e33190526dc9300c6a798d974b1ab4134a56285de16d038ff6633b236c0ccef1f08ff1202cbcc56acf1b8574e8354e4cc5e5228db0b024143cd3099eb62835aedb23e82ecdc069251d89bb04dad749bd40ad244abc58ea0aaba967611397ea32af7548a53769ab999bcc89a23140bf76a33a0079cf24b89d39c4ed7128d7384f46e614556791a4b60c0626e8fb3636d13b586217f3adefe833bcff82da62784967a453c5a9c5626ea7aade0d611ef837b458ac3c14e01fa1b7ada9c7a74d028784d4a789e87c5c5a7c5e907455fce29c693565efc1fe1438311d0f15b196c2ea7c5b3aeba747a77cd29ebcae55f6c4aad25dbb2c71ae99502c8e229b46bb6b8a67f064471e4a6b919cb1603ee0fd8fbbf81d9e4e2f6aa83ec9b9a4f52071669a61a6d3785994d402724f8c3536b24da50a06690aa447bb7ebc77906046f41ad864b6575ddd0f97e8c7854f02626e6d02b2056b0d86f33c56531b4704b18ba9d3d6e19d499849f1fbf5de01043b2797df0e28c93eda51e1f6e148ad52220a387a48a696965734061347b97d112635e2854ed1671d13cb1b943e450696de356e1fb94ae2be314c5b4202afcfd48162a167d2fbc66bb233beb46852d9c7ecfd214386ffb8cd36c26143a9338b1ef83585df8b9b20a51263b76c6b109f2d6a02992eacc7006e2e8ca02551351726d9bd2196031212cc98e089bff8b865fb900bd01c18388c820c681e4322aca6bb5bf28ccb152c92e1c9aa71d0a4799da0a7484dd10a2a58d01619cf8fbd05379e1467e3fecd4c0c61178c9a6616ee0fda5b8b4f8fec50929c62dfb068c0347470ec4a9195d8aa6720df87f0a5c8bcd29cf55d6350344357d9d6b600a7d0e1b3921e659ff32afe3f7fb79cd9e75f31026e110919886f0049f6fa9fbbb01167bc96877056fd5f6a3446467b4843e7515733395ce4bda936ff35dd7cf1391ef94ae16d28f3aecdde959e161c5607eb6a11e36b6c9550dd1aa1fdd55ecd5a81f1f40b08ac73c57d877888f2ef5f9a0796a5b4f63184ccc69ff18837b619c47392f99b64a0d4d4870edff31c1d74d3e251b7f1885206893a56d8bc92fb4f306ad7c6c71a88438574c474a0622b09d6f1cc744d085d7a11a0bcb57b5e2604ee2f35eef29c89e5b7076f1a1ace2a5201adcc1ae935d6515f5a0837b4a9bf096c05d39d64d1203522eca87d044bfb2fddf7e2cfba2c58d5f9853df1866b4a198c5729fab39985195c6dd29187437ff4c96174d6d4048500009afd7798148b9f4b37ec6638205eae238fd80aed3db61e7828a2c7038aa149bbb4b7c81256dd6410c83753baa2a75e96c3144385281ad3445565fefb6c16fcca8f6b272de807184be5ed6f4c0a034ba478a7597b4fb655afa22f4317154126bc6c131dcfbcf902a65384a7ccead8b7d39e2dbc0454534a570a7928d7d1d2c08d1f69cd113f78607783b12539542abad98501c28bf051b0b783449fb2c53ccbc9852c92ab62c36fb30a7cea6c838d3d05acc062c7de159270ffcf6359f436b8927f07de48a76f50a336c4f3f4a6576c55726cd5d095327f02256bce2d70a23c4e5a782a896c693e52899d9e2badb923ea25181fbb30dd1bbd06f4c9a1fce7562386c6a3a7a0130eb2cf9912ea3be883cd4ca75f8f25aef2b53a46c6c2c470ed9b7322756cccee1fdeac9c13b44e1c3722661cd8a79946832ccc9ad3481706f792da1aee1a3c28c2a32609f81d600c0a26c9cfebdecac1ef777de75b8055238bbaa4c29d541b0a6767165fc5cb886c3f8627a05a644b053ceaf7abb8e128ce9660099d629a81458c6851545b9600c4818e6bb408e32e957f4be2959491a5ea7a97f426ff98e9bdab31a9784fa85e39014950feb5859ac25e7649af30e09d085a03a59e49997ef7d90603f86ac7f9c80a40a15efafa661c4332f4eeb67c46ade0a7ac4b2968cbe463e9d9eb33e9b5b327b013ce198cb576402f1efdeba68927cac3a7db937de235cb4af3f5e6662be19e5d92a0e171d2f214bc7fea8248c18d47ddd6845b084e2e1bf788d7ab97e2fa92da43f026c067fccb16c17c563f0c2315bd6058a243f1b2d3da56c74e6ccd306265656ba2329a31f22317fcddfca2610ca4244067ff6a690d2663e31f7cdf04461a93aeafda0a3a828f09dd62506dd127f43eefb3b041b01504214a655a88866559744d238bb55489e2ce4f4fc8adfc8f11f993e2f0eb46e1643952e29f94f08ef33e4da24e4f3f6c4e60ed9064e985f56d5c6ecd717f9d68b1faf17b1ab954dbf83162a29decc94fe4802bd03b99ba562aaa6e703972c694c6e419270ba7008666a86ed619b97b9ce62d799ef825817daddda6797c5025294aac096a6e34c62d768409a3719375a6cb19564edb9de4731d6570e988e123954b8073de289f2ee3ba4aab54f13bce30406257041c391e48ec526d7a932aa64e55b45fa803f8300e3bd57f13d2210d70d9cf20684a532354e82c09134245a9e3c1bc2ae719e4262f584c83cf8cad5c1e476d2aa6e4eccd9fba3c081a7cc92a182f2b1c92b06ca4f48d1016974cf6c5dde29ff4937c6180193f74626760b477f7afebc66cb0d4b82258e0e472adb1dabd5e4b94d337c320ab32b5dca1be58b6a683ad26b818d0290c1c0eb7d21977bb87605db2d3a4e94fb4e59693fd23e27931a038dbc2d0001b49c2dfb2529ecff212765c78abccf521987a8da707c0d765ac455f7c21fd3226caceab922c143eae9b73faddea07778ec9d215cda221696d7ba9c3831e48a3a724147c5f6b50a524568a3a37f025d580d58f0674131fd69eb80a2c9540bad061ce5cba6cfa30096ad56d539f06312bc2f4b51669fdf608ec5764cfb587942bf281e6890d7ae6355a6563ab3e73a8a72c0405dda88c1ebbc854a71e19c289de7ea7e3aa63c982789540daac825c9ed3826154e5b35a88ffcaa033a9ed6160adc3e67faa16940291a69b0facc8c20f11e05d469847e4dc16be0121426b10b23c0a3b3ee165b6acf8db45af60107725eaf81d4b0cc16714c98dc0a9abc20d5b2a4ea82932b91eb2786c5bfff087a46fcd8f2c4255c2a33de4b1564bc83e1840bd8315d7c82ff556ff43b30d32efe10a832793273c7904abb1a760966575f7a35c5387fa35b76b8feab951fbd494bfb803fad2cf83ec99de1739ea3aa4614297265ce67dfedc8dcc9b7285e583cb8e653c4d0fab0334e84b5532b48277bd0e3af7583978beb9db906baeb871bb1d9024799f10e65773965b09cba6e6d68a6712d78ae74eb03199c7eceb09b6fe2335fca7266af95124f6f328c7eaf53a548654cfe2bd37d4f9857b9570a46f531238b48401ac1288bd59daab7568573a93e2a7354039a9ca68d4913935056e4ce94ffd7fdbc47847fbe180d6110a71ccf2c0e3c9df862d62a30e5ed9a66f609d3e3e6edc448d1c8c9a1ad22a701c47c65d377827efe80c27c86f5417a20fa2e09b76db6068b6cab36aee4e0ca6c76133eb07b2338f44a1de0f927b673907bd493819e0f210381d8e32db4d091c5a89d79765bfd34cbcb281d58b68d029af47b34f2e37b8bed77325059d653248b8e462a4c8c08c061cba3e2f4926faf0a5ae5f61c485c9c12b4e4661da44fee6577bf5d96634cc9db48c46c3c33b7f5f55e01dc6af3d92ac19edc3c3516f65a4f5354c3edd055d768325664c55ff5dfe353d944085b117c397d3a0d1ef8d68edd47325daa664a606e8352003a38e3510d81496ad3c89d43945175157868f5a8edc24870e722e7b26bf6fdb107e591517ebb6f4289194662b336ce1bc2c0d287ada184efe9fec32c2c43732219cab79c57fc810896c4959843680540ba5851319c4520ef14eb2e59ca7972f6a16e62952562771ab10f2aa51db506346235c0827e2b3805694442e9a3a6ad7ade554ba641c4a117b07324fff8f127424126f1a26757885cb8febbbce96a0a31a5b9da9e555ebd344af4be7202e583342dafbce5a860b24570421d950bb6006b1f1c5fe50e22c10b491692e9e6d3879dfa1db746a9af9415f5dd699792a17ca5090ede2eb8a7800daa419536c22865a4e97aa321280acfaa37b7d0a503c568d7b625b3c205e8f91b5fe1f03b7ed3fa8b75fad5adbf6ae9efdbf1314bb88f648ea1e727b6345da47bd0a1954e5201094d104a621000c250b7a7d6076236308656638c27ecce92d2b86b323edded54df58cfb4720e21cb95cf230a18a932e01e9289ddfbb1987103b5eeecd8da914ef9310eaedf734c4221a318edad1317e3df471a4fd03788880f2bec57089bbb6c604f18010c4d6ace2a749f32f22370bb6dae3792a1229c95614fba7f0547298490a92686743704789d6dbf7e2db2cc20c68c6be4134d618cf433e37f632116e4a93e1fffae258dab9c3757465b6eb50ee0d0448710524b24e487097169571ed4f1d67b6c2359bcfed1dc99a31206f2760b5a375929ad8c1df0dbf29443e369f82b868c06141939c5369f7eacabdb84333026cf2df0dafbc14744e3a52c02da94bba9a5a84167199911925c36890d80b865de9d162a4563da165902c94240ef704da55f4a1af52400e08d1ea5a29d513f551991a3158f8f6b366997c05dbcfaa7f586fb8f76d973d0f1fad8c6af44d18efff126a0005e2ebb84bacc6f506059d5ff9207fcd77dd91d67f91aaf7334ef3e9e7a19df9d5439fbc6c13924db459b860c27f698c43d67cd74862ad8c8cfb0ac8b4207892ba9998b834e6cda233b67c25538b23c76917899826d78366916c7c45f77936b95ffea3eb34caa8c36445fdc513207462987b9c3719d85b53e42b11916a78045fa88b86a331cc1582514ec85ba3909e43ed21e3e63611e00295fa97a534a92ebeb123bfad08fb6119692af0bd13a448674aa7a9fd74d224d3ccea45739c4b873d6fa1ea9a6cbe3f16d5b25e65d5f593037425023844e00d37e56064857f3db031c20ee2d1c406f1ee111614bcadb046740d4fa794b026ac90c163c6f36a77e1335bb27285cc29c7e150155eadc103b88c001208f633c90c3d18690d03c632e2fd9a610abc5d32b598d6089be975e3e8bddbf2fdfcae9cb51de0e25aa1885f5e24a6cbe6b83637303b36a0ea9ed99f0e70c67ebbb2ea", 0x1000}, {&(0x7f0000003a00)="d3b2f37097f889263ff1987b57ec480d22483281377789fa900be14a3528f9cafb70fbd7a88c4a868c61d2b133c0c8b0c67d751b23d3e047cff0155c7e28aff0ae135b302161d1d31a05f126256e08121304442a8734a410178bdd82227c601704ba19fec25b154d8cfcf5f26e0ce8ba45b93a62db520dbdd83f8e076407ef5f85fc1314094b872edb36050ff76d254b6d84e31ded409ef2c45f624cc9af", 0x9e}, {&(0x7f0000003ac0)="554a1729a0905424c9631be3ea796dbd6aaf808dc4fcf8a4f5448baa8f9257b95b9cbb9692665de23eb36d875f5d314b106de758bbd39250db6f128e488dde6de9feec82901441b6d2a564952aa290ec8a61b3104157cbbce3da0665c3a225894f90eab0449f1353b237075eb1b8c6a37012ed9116c60103d0c8170d02e47b5c16311a22d4715f3e2fc84d5ec775ad24b3d0be5711198e5d09391a13e14d55abd045293c9c659a", 0xa7}, {&(0x7f0000003b80)="4a434bcae2a72b38afbc44293beba39e18fea8d5997e90493ca4bded030fba77114ccb40c45c017f2c1e36beaec829340fcac960cce5564ba5dbdfb1b6485ee2c0d3798940ae4e57b7a4a78f7450be1c3c21d76fbb46042917c71bff4f16830c6a472ac83ada97125dbb7108dafbcdc7d8ee08be455803de4bcb15016b998f8fb049e9a6670a18c171b02996db82e576f84e94964291b095ed2409ed96a133ac34197f369ff582a6", 0xa8}], 0x6, &(0x7f0000003fc0)=[@cred={{0x18, 0x1, 0x2, {r6, 0xee00, r7}}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}], 0x30, 0x4050}, 0x8840) r11 = add_key$keyring(&(0x7f0000004100), &(0x7f0000004140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000004040)='user\x00', &(0x7f0000004080)={'syz', 0x0}, &(0x7f00000040c0)='/dev/ubi_ctrl\x00', r11) openat$cgroup_root(0xffffff9c, &(0x7f0000004180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f00000041c0)={0x2b, {"f396d5b9d1be94d7f1bf35e4d6c203ff", "9dd9d2daab2896f3b738492c631e2cca", "721188f56e6673e004c774cd832dc3fb"}, 0x7, 0x5}) recvmsg$can_j1939(r0, &(0x7f0000007580)={&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000006540)=[{&(0x7f0000004280)=""/163, 0xa3}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/223, 0xdf}, {&(0x7f0000005440)=""/47, 0x2f}, {&(0x7f0000005480)=""/156, 0x9c}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x6, &(0x7f0000006580)=""/4096, 0x1000}, 0x20162) r12 = openat$vcs(0xffffff9c, &(0x7f00000075c0), 0x52080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000007600)={0x1b, 0x0, 0x0, 0xfffff3ac, 0x0, r4, 0x0, '\x00', r2, r12, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r12, 0x28, 0x0, &(0x7f0000007680)=0x1, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000076c0)={0x6, 0x205a, 0x0, 0x8, 0x0, [0x100, 0xb7, 0xfffffffe, 0x5545]}) 1m5.210872642s ago: executing program 44 (id=2167): process_vm_readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/116, 0x74}, {&(0x7f0000001240)=""/254, 0xfe}], 0x7, &(0x7f0000001640)=[{&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000001540)=""/128, 0x80}, {&(0x7f00000015c0)=""/73, 0x49}], 0x4, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001680), 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f00000019c0)={&(0x7f00000016c0)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001740)=""/152, 0x98}, {&(0x7f0000001800)=""/134, 0x86}], 0x2, &(0x7f0000001900)=""/170, 0xaa}, 0x12000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000025c0)={&(0x7f0000001a80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001ac0)=""/208, 0xd0}, {&(0x7f0000001bc0)=""/72, 0x48}, {&(0x7f0000001c40)=""/87, 0x57}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/243, 0xf3}, {&(0x7f0000001ec0)=""/5, 0x5}], 0x6, &(0x7f0000002380)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x84}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x6}, &(0x7f0000001f40)=0x100000001, &(0x7f0000001f80)=0x3, 0x6, 0xf90b, 0x7f, 0x100000000, 0x50, 0x9}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001fc0)=""/37, 0x25}, &(0x7f0000002000), 0x20}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x1}, {&(0x7f0000002040)=""/97, 0x61}, &(0x7f00000021c0)=[{&(0x7f00000020c0)=""/41, 0x29}, {&(0x7f0000002100)=""/103, 0x67}, {&(0x7f0000002180)=""/41, 0x29}], 0x3, 0x0, 0x8d62}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x800}, &(0x7f0000002200)=0x9, &(0x7f0000002240)=0x28b, 0x100000000, 0x3, 0x401, 0x6, 0x7b, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x68a3}, &(0x7f0000002280)=0x8000000000000001, &(0x7f00000022c0)=0xfffffffffffffffc, 0xfff, 0x0, 0xffffffff00000001, 0x2, 0x40, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x7, 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x80000001, 0x86}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffe, 0x9}, &(0x7f0000002300)=0x7ff, &(0x7f0000002340)=0x100000000, 0x5, 0x3, 0x2, 0x8, 0x1f, 0x2}}], 0x214, 0x1}, 0x80) sched_setscheduler(0x0, 0x0, &(0x7f0000002600)=0x3) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002640)=0x0, &(0x7f0000002680)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000026c0)={r0, r2, 0x25, 0x8, @void}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002700)={0x3, 0x101, 0x6, 0x5000000, 0xa15}) r4 = openat$nmem0(0xffffff9c, &(0x7f0000002740), 0x2d7f9e26f9144850, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002780)={0x0, 0xb, 0xb5, 0x2e, 0x1, 0x7}, &(0x7f00000027c0)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000002800)={r5, 0x9, 0x2, 0x8, 0x7, 0x2}, 0x14) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000003c80)=0x0) lstat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003d80)=0x0) lstat(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r4, &(0x7f0000003e80)='./file0\x00', 0x800, 0x80, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000004000)={&(0x7f0000002840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000028c0)="d6c5c838c288ebd8ed2f758df38aacf7890f3219ba95ad2130ba18301452f811f368bcbd37b79d62f58104fa2d18801ea47c2a2248bf1fd59fa48d2d02c40a0c68067280", 0x44}, {&(0x7f0000002940)="bd4c4b4c9d09124f37532a149867242d4256016f2d75583fb74dad8726536ab2329296752dbf56475982271b4204d0fa363c9d648c2825a3d8e7ee8c5f998ed1076378cc0fbcf148b5035d5350f0136ff4ddf09b15a7d7c5905057d03dc8076ccd73cc2a518a541a46b05a795f1efd0481a1d0d6e9a34db7abc1939933cbdb67538308c43c3a33fcd0b1fd564de401c2ebaa6f85be111451bf0fa3798ef70257e0daa0efb12e6f03beefb89fe4f54b6208c00e09103e1b", 0xb7}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="d3b2f37097f889263ff1987b57ec480d22483281377789fa900be14a3528f9cafb70fbd7a88c4a868c61d2b133c0c8b0c67d751b23d3e047cff0155c7e28aff0ae135b302161d1d31a05f126256e08121304442a8734a410178bdd82227c601704ba19fec25b154d8cfcf5f26e0ce8ba45b93a62db520dbdd83f8e076407ef5f85fc1314094b872edb36050ff76d254b6d84e31ded409ef2c45f624cc9af", 0x9e}, {&(0x7f0000003ac0)="554a1729a0905424c9631be3ea796dbd6aaf808dc4fcf8a4f5448baa8f9257b95b9cbb9692665de23eb36d875f5d314b106de758bbd39250db6f128e488dde6de9feec82901441b6d2a564952aa290ec8a61b3104157cbbce3da0665c3a225894f90eab0449f1353b237075eb1b8c6a37012ed9116c60103d0c8170d02e47b5c16311a22d4715f3e2fc84d5ec775ad24b3d0be5711198e5d09391a13e14d55abd045293c9c659a", 0xa7}, {&(0x7f0000003b80)="4a434bcae2a72b38afbc44293beba39e18fea8d5997e90493ca4bded030fba77114ccb40c45c017f2c1e36beaec829340fcac960cce5564ba5dbdfb1b6485ee2c0d3798940ae4e57b7a4a78f7450be1c3c21d76fbb46042917c71bff4f16830c6a472ac83ada97125dbb7108dafbcdc7d8ee08be455803de4bcb15016b998f8fb049e9a6670a18c171b02996db82e576f84e94964291b095ed2409ed96a133ac34197f369ff582a6", 0xa8}], 0x6, &(0x7f0000003fc0)=[@cred={{0x18, 0x1, 0x2, {r6, 0xee00, r7}}}, @cred={{0x18, 0x1, 0x2, {r8, r9, r10}}}], 0x30, 0x4050}, 0x8840) r11 = add_key$keyring(&(0x7f0000004100), &(0x7f0000004140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000004040)='user\x00', &(0x7f0000004080)={'syz', 0x0}, &(0x7f00000040c0)='/dev/ubi_ctrl\x00', r11) openat$cgroup_root(0xffffff9c, &(0x7f0000004180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f00000041c0)={0x2b, {"f396d5b9d1be94d7f1bf35e4d6c203ff", "9dd9d2daab2896f3b738492c631e2cca", "721188f56e6673e004c774cd832dc3fb"}, 0x7, 0x5}) recvmsg$can_j1939(r0, &(0x7f0000007580)={&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000006540)=[{&(0x7f0000004280)=""/163, 0xa3}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/223, 0xdf}, {&(0x7f0000005440)=""/47, 0x2f}, {&(0x7f0000005480)=""/156, 0x9c}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x6, &(0x7f0000006580)=""/4096, 0x1000}, 0x20162) r12 = openat$vcs(0xffffff9c, &(0x7f00000075c0), 0x52080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000007600)={0x1b, 0x0, 0x0, 0xfffff3ac, 0x0, r4, 0x0, '\x00', r2, r12, 0x4, 0x2}, 0x50) socket(0x15, 0x3, 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r12, 0x28, 0x0, &(0x7f0000007680)=0x1, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000076c0)={0x6, 0x205a, 0x0, 0x8, 0x0, [0x100, 0xb7, 0xfffffffe, 0x5545]}) 15.410259422s ago: executing program 9 (id=2408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 15.221633803s ago: executing program 9 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0020040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c000b400000000000007fff140000001100010000000000000000000100000af0f2191285c1b5"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) mkdirat(0xffffffffffffff9c, 0x0, 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x1f, 0x2030}, 0x20) read$FUSE(r3, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) fstat(r3, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000002480)={0xa0, 0x0, r4, {{0x3, 0x0, 0xffff, 0x5, 0x9c8, 0x0, {0x0, 0x7fffffffffffffff, 0xffffffff, 0x10000, 0x3, 0xfffffffffffffff7, 0x5, 0xd, 0x400, 0xa000, 0xab6, r5, r6, 0xa00, 0x3}}, {0x0, 0x8}}}, 0xa0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x1b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000a00)='.\x00', &(0x7f0000000580)='affs\x00', 0x18800, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) 14.980424272s ago: executing program 9 (id=2412): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58040}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.493845224s ago: executing program 9 (id=2413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) lseek(r0, 0x7, 0x4) 14.193595935s ago: executing program 9 (id=2416): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000003140)) write(r1, &(0x7f0000000000)='7', 0x1) 12.340334332s ago: executing program 9 (id=2424): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 6.669788879s ago: executing program 3 (id=2455): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x49) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fstatfs(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="1b144550acf59098ae28bda2fb012b296c564308fbd244d2b10214f58710a9141a1cf2d8042d4e14b13daa5568536b3130fd4b29ad4edfe544930e1fbc6fa83d76293dd108fe7ac1501979e29610400968417b3ce98793f12a662b4a654952", 0x5f}, {&(0x7f00000002c0)="8e4aaea48b368c6d43b36762686a641386fe4d440d0f8364f1d033ac4278f5c4ec05f0226c53569782bdc551e1aaadf5db537d1c34e00318dd2b7d5c36c60ee6de5ccbad2b83086d05b80bfa350a51f1dab8f32aace811576062d226fa5d93139b7d7113eff5b3ee34e9363de79c891f2f87f7e7f3b8286359396f0351386687", 0x80}], 0x2, &(0x7f0000000380)=[@dstopts={{0x44, 0x29, 0x37, {0x5c, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}]}}}, @tclass={{0x10, 0x29, 0x43, 0x8}}], 0x54}, 0x4880) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20b82, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x48, 0x0, &(0x7f00007d0000)) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) write$sequencer(r5, &(0x7f0000000940)=ANY=[@ANYRES64], 0xfffffffffffffdd0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) r9 = openat$ppp(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) ppoll(&(0x7f00000005c0)=[{r8, 0x9002}, {r1, 0x194}, {}, {r9, 0x8}, {r2, 0x75}], 0x5, &(0x7f0000000600)={0x0, 0x3938700}, &(0x7f0000000680)={[0xfffffff7, 0x79]}, 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6ce14f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f8100de08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57a4094fcc2a3709efdd7e5bf88f4cf3cb9aede83a5fb5278162883af0189dc3664d4d", 0xfffffffffffffec4, 0x4008245, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x4200}], 0x1, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000080)={0x8, r10}) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) 5.660508983s ago: executing program 3 (id=2462): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000600000005000000001000", @ANYRES32, @ANYBLOB="0000000000000000000000000001007b78163f14fecf9d68eb47a80000000015"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 5.449916764s ago: executing program 3 (id=2463): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = socket(0x10, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, 0x0, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 3.937382794s ago: executing program 4 (id=2464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0xc000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000850}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb) setpriority(0x1, 0x0, 0x80000000) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write(r4, 0x0, 0x0) futex_waitv(&(0x7f0000000a40)=[{0xfc, &(0x7f0000000080)=0x100000001, 0x2}, {0xfffffffffffffffd, &(0x7f0000000340)=0x6, 0x186}, {0x3736, &(0x7f0000000540)=0x5, 0x2}, {0xa6, &(0x7f0000000580)=0x5, 0x2}, {0x7, &(0x7f00000005c0)=0x3, 0x2}, {0xb38, &(0x7f0000000640)=0x101, 0x82}, {0x7, &(0x7f0000000680)=0x8000, 0x2}, {0x2, &(0x7f00000006c0)=0x6, 0x2}, {0x1000, &(0x7f0000000700)=0x2, 0x82}, {0x2, &(0x7f0000000740)=0x100, 0x2}, {0x33c0000000000000, &(0x7f0000000780)=0xa6, 0x2}, {0x9, &(0x7f00000007c0)=0x8, 0x82}, {0x6, &(0x7f0000000800)=0x2, 0x2}, {0x5, &(0x7f0000000880)=0x7, 0x2}, {0x7000000000000, &(0x7f00000008c0)=0xfffffffffffffff7, 0x2}, {0x200, &(0x7f0000000900)=0x52, 0x82}, {0x0, &(0x7f0000000940)=0x6b, 0x82}, {0x94, &(0x7f0000000980)=0x2d328a0f, 0x82}, {0xfffffffffffffffe, &(0x7f00000009c0)=0xb385, 0x82}, {0x6, &(0x7f0000000a00)=0x8, 0x82}], 0x14, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r5}, 0x4) 3.929803612s ago: executing program 3 (id=2472): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7f3ee5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="080000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 2.9603784s ago: executing program 0 (id=2468): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f0000003140)) write(r1, &(0x7f0000000000)='7', 0x1) 2.809954981s ago: executing program 4 (id=2469): r0 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x2000db5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0xee, @private0, 0x6}}, 0x247, 0x7}, &(0x7f0000000500)=0x88) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e23, 0x7, @local, 0xffffffff}}}, 0x84) getrandom(&(0x7f0000000340)=""/41, 0x29, 0x2) 2.676388075s ago: executing program 4 (id=2470): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0x2bd8, 0x800, 0x0, 0x326, 0x0, r0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) ioctl$TCFLSH(r2, 0x540b, 0x2) (rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3b1db000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r3 = syz_clone(0x4000000, &(0x7f0000000500)="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", 0xe50, &(0x7f0000001500), 0x0, &(0x7f0000001580)="0fabc146988f4e5e5a6f") move_pages(r3, 0x5, &(0x7f00000015c0)=[&(0x7f0000532000/0x2000)=nil, &(0x7f0000143000/0x4000)=nil, &(0x7f00006da000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c5a000/0x3000)=nil], 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mmap$panthor(&(0x7f0000479000/0x2000)=nil, 0x2000, 0x1000005, 0x4000010, r0, 0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r4, 0x0) (async) listen(r5, 0x2) (async) recvmsg$unix(r0, &(0x7f0000002a00)={&(0x7f0000000180), 0x6e, &(0x7f0000002940)=[{&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000001380)=""/214, 0xd6}, {&(0x7f0000001480)}, {&(0x7f0000001680)=""/86, 0x56}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f0000002800)=""/78, 0x4e}, {&(0x7f0000002880)=""/152, 0x98}], 0x7, &(0x7f0000002980)=[@cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x44}, 0x40000043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x2}]}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x7, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x7, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) (rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/bnep\x00') 2.675623524s ago: executing program 0 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r5, 0x4}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 2.429539445s ago: executing program 3 (id=2473): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc}, 0x10}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 2.369416405s ago: executing program 3 (id=2474): syz_io_uring_setup(0x1895, &(0x7f0000000440)={0x0, 0x854d, 0x1000, 0x1, 0x180}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3ff, 0xfffffffb, 0xfffffffd, 0xfffffffc, 0x3a5d, 0x18}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000002010102000000000500000000000006080008400000667e376320b780fd3002"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x400448ca, 0x0) ioctl(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000340)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248060000dbb8", 0x1d}, {&(0x7f0000000140)="0400000002e877da3002473500000003467b5dc44d83fff6a74aa24d473843ef0b48859c124b73209966813b12150c1b03fb6b9123f5aa8b2f270c8e9433b4b8fa", 0x41}], 0x2) write(r3, &(0x7f0000000200)="4a00000011007f0314", 0x9) close_range(0xffffffffffffffff, r3, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc0145b0e, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x420000, 0x20) mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x55) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '*!'}, {0x20, '#\xa1\x02'}, {0x20, '#! '}], 0xa, "b421f20bffabc90c89e75fa088b293d29b8583244d7d2cf9ac0888e04c36f0fbd3cc71358ebd5cfd333c018e39ef9eb4c7cd255636304be60d7d7c85c03c99338100000076b1f8"}, 0x5d) syz_io_uring_setup(0x5f39, 0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000004c0)) r9 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0x2, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffa, 0x3, 0xffffffff, 0x7fff}, {0x6, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0xffffffff, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x3c}, 0xa, @in6=@loopback, 0xfffffffe, 0x0, 0x1, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe4) 2.293875128s ago: executing program 4 (id=2475): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x78, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20000018}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e4bc0ee76f49"}, @NL80211_ATTR_IE={0x3e, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @measure_req={0x26, 0x35, {0xf4, 0x6, 0x2, "57516496a084058d9c51ad7339b2371c8b9d31454cb573e69fbad60b220e91fe260910b6cf5c9daa3e9482f09465d48a9c1a"}}]}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x41) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0xee01) r2 = socket(0x10, 0x3, 0x0) recvmsg$unix(r2, 0x0, 0x20) semctl$SEM_INFO(0x0, 0x0, 0x11, &(0x7f0000000340)=""/4096) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, 0x0, 0x0}, 0x20) 2.090385217s ago: executing program 4 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0020040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c000b400000000000007fff140000001100010000000000000000000100000af0f2191285c1b5"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) mkdirat(0xffffffffffffff9c, 0x0, 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x1f, 0x2030}, 0x20) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) fstat(r2, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000002480)={0xa0, 0x0, r3, {{0x3, 0x0, 0xffff, 0x5, 0x9c8, 0x0, {0x0, 0x7fffffffffffffff, 0xffffffff, 0x10000, 0x3, 0xfffffffffffffff7, 0x5, 0xd, 0x400, 0xa000, 0xab6, r4, r5, 0xa00, 0x3}}, {0x0, 0x8}}}, 0xa0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000a00)='.\x00', &(0x7f0000000580)='affs\x00', 0x18800, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) 1.120047857s ago: executing program 0 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02a412fe39b2ec"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r13 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) syz_ublk_setup_queues(r13, r12, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r6}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r13, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r11, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 499.827026ms ago: executing program 4 (id=2478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000101400022cbf5000fedbdf250800010001000000e269816962554d7f2ad312fc28f534eca6f4c4f4ac66e3980d3e64640ce36a67f5e15409aab2c7b0196104d191b025d898c97b6b98c119572b2a59a5d1d80799dfdfddf2643191ce214b0eab82a8fd070eb451d01580237ca7bb7dc264875a3f03b15f6063d93c70cc3193aff5f75979b3cbb37d83b7dcc382745bfeb4a7eb0e0d6014baa2d2ac97ce4182da12b0af2c4e02a412fe39b2ec"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000540)={0x0, 0x3e0e, 0x1, 0x1, 0x28e, 0x0, r5}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x20, 0x3fc, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r12, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r10, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, &(0x7f0000000280)) 398.672355ms ago: executing program 0 (id=2479): r0 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x2000db5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0xee, @private0, 0x6}}, 0x247, 0x7}, &(0x7f0000000500)=0x88) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e23, 0x7, @local, 0xffffffff}}}, 0x84) getrandom(&(0x7f0000000340)=""/41, 0x29, 0x2) 169.959556ms ago: executing program 0 (id=2480): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c00000600150003000000100016800c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x4e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x18e) mkdir(&(0x7f0000000180)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r1, 0x200000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 0s ago: executing program 0 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) kernel console output (not intermixed with test programs): 0000 R11: 0000000000000292 R12: 0000000000000000 [ 476.422422][T15410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.422436][T15410] [ 476.784156][T15416] FAULT_INJECTION: forcing a failure. [ 476.784156][T15416] name failslab, interval 1, probability 0, space 0, times 0 [ 476.784188][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.8.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.784210][T15416] Tainted: [L]=SOFTLOCKUP [ 476.784216][T15416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.784225][T15416] Call Trace: [ 476.784231][T15416] [ 476.784239][T15416] dump_stack_lvl+0x100/0x190 [ 476.784265][T15416] should_fail_ex.cold+0x5/0xa [ 476.784288][T15416] should_failslab+0xc2/0x120 [ 476.784310][T15416] __kmalloc_noprof+0xfc/0x840 [ 476.784327][T15416] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 476.784357][T15416] ovl_lookup_layers+0x13ff/0x2ac0 [ 476.784386][T15416] ? __lock_acquire+0x5c0/0x1f40 [ 476.784409][T15416] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 476.784433][T15416] ? rcu_is_watching+0x13/0xc0 [ 476.784454][T15416] ? find_held_lock+0x2b/0x80 [ 476.784468][T15416] ? d_alloc_parallel+0x46e/0x14c0 [ 476.784482][T15416] ? d_alloc_parallel+0x46e/0x14c0 [ 476.784498][T15416] ovl_lookup+0x4a8/0x6b0 [ 476.784518][T15416] ? d_alloc_parallel+0x9f6/0x14c0 [ 476.784533][T15416] ? __pfx_ovl_lookup+0x10/0x10 [ 476.784557][T15416] ? __pfx_d_alloc_parallel+0x10/0x10 [ 476.784577][T15416] ? down_read+0x13b/0x4c0 [ 476.784592][T15416] ? __pfx_down_read+0x10/0x10 [ 476.784608][T15416] __lookup_slow+0x155/0x320 [ 476.784630][T15416] lookup_slow+0x50/0x70 [ 476.784650][T15416] link_path_walk+0x1377/0x1cc0 [ 476.784672][T15416] __filename_parentat+0x213/0x740 [ 476.784690][T15416] ? __pfx___filename_parentat+0x10/0x10 [ 476.784735][T15416] ? __lock_acquire+0x5c0/0x1f40 [ 476.784760][T15416] filename_create+0xbe/0x400 [ 476.784772][T15416] ? __pfx_filename_create+0x10/0x10 [ 476.784783][T15416] ? lock_acquire+0x1d1/0x380 [ 476.784799][T15416] ? find_held_lock+0x2b/0x80 [ 476.784812][T15416] filename_mkdirat+0xb9/0x5e0 [ 476.784827][T15416] ? __pfx_filename_mkdirat+0x10/0x10 [ 476.784841][T15416] ? strncpy_from_user+0x19d/0x2d0 [ 476.784857][T15416] ? do_getname+0x191/0x390 [ 476.784874][T15416] __ia32_sys_mkdirat+0x88/0xc0 [ 476.784888][T15416] __do_fast_syscall_32+0x13a/0x8b0 [ 476.784907][T15416] do_fast_syscall_32+0x32/0x70 [ 476.784924][T15416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.784939][T15416] RIP: 0023:0xf702efec [ 476.784954][T15416] Code: Unable to access opcode bytes at 0xf702efc2. [ 476.784959][T15416] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 476.784998][T15416] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 476.785006][T15416] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 476.785026][T15416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.785034][T15416] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.785041][T15416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.785057][T15416] [ 477.204436][T15250] bond0: (slave syz_tun): Releasing backup interface [ 477.530829][ T5813] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.673068][ T5813] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.841371][ T5813] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.935099][T15430] vlan0: entered promiscuous mode [ 477.937230][T15430] netlink: 'syz.3.2168': attribute type 10 has an invalid length. [ 477.937257][T15430] veth0_vlan: entered allmulticast mode [ 477.938088][T15430] team0: Device veth0_vlan failed to register rx_handler [ 477.991263][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.009942][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.012410][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.013462][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.014025][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.111263][ T5813] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.321897][T15447] FAULT_INJECTION: forcing a failure. [ 478.321897][T15447] name failslab, interval 1, probability 0, space 0, times 0 [ 478.321942][T15447] CPU: 0 UID: 0 PID: 15447 Comm: syz.4.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.321959][T15447] Tainted: [L]=SOFTLOCKUP [ 478.321964][T15447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.321971][T15447] Call Trace: [ 478.321976][T15447] [ 478.321982][T15447] dump_stack_lvl+0x100/0x190 [ 478.322004][T15447] should_fail_ex.cold+0x5/0xa [ 478.322021][T15447] should_failslab+0xc2/0x120 [ 478.322039][T15447] __kvmalloc_node_noprof+0x113/0x9b0 [ 478.322053][T15447] ? __pfx___debug_object_init+0x10/0x10 [ 478.322072][T15447] ? bucket_table_alloc.isra.0+0x88/0x460 [ 478.322088][T15447] bucket_table_alloc.isra.0+0x88/0x460 [ 478.322103][T15447] __rhashtable_init_noprof+0x43a/0x890 [ 478.322117][T15447] __rhltable_init_noprof+0x28/0x70 [ 478.322129][T15447] ? wiphy_new_nm+0x19d7/0x21a0 [ 478.322144][T15447] sta_info_init+0x2e/0x160 [ 478.322161][T15447] ieee80211_alloc_hw_nm+0x86b/0x2310 [ 478.322183][T15447] mac80211_hwsim_new_radio+0x1de/0x6510 [ 478.322209][T15447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 478.322231][T15447] ? __nla_validate_parse+0x1e7/0x28b0 [ 478.322244][T15447] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 478.322267][T15447] hwsim_new_radio_nl+0xc6b/0x13f0 [ 478.322284][T15447] ? trace_kmalloc+0xeb/0x110 [ 478.322300][T15447] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.322321][T15447] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 478.322339][T15447] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 478.322359][T15447] genl_family_rcv_msg_doit+0x214/0x300 [ 478.322376][T15447] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.322391][T15447] ? genl_get_cmd+0x3e7/0x760 [ 478.322413][T15447] ? bpf_lsm_capable+0x9/0x10 [ 478.322431][T15447] ? security_capable+0x80/0x260 [ 478.322447][T15447] ? ns_capable+0xd2/0xf0 [ 478.322466][T15447] genl_rcv_msg+0x560/0x800 [ 478.322483][T15447] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.322499][T15447] ? __lock_acquire+0x5c0/0x1f40 [ 478.322514][T15447] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 478.322537][T15447] netlink_rcv_skb+0x159/0x420 [ 478.322551][T15447] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.322567][T15447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.322587][T15447] ? netlink_deliver_tap+0x1ae/0xcc0 [ 478.322602][T15447] genl_rcv+0x28/0x40 [ 478.322615][T15447] netlink_unicast+0x585/0x850 [ 478.322631][T15447] ? __pfx_netlink_unicast+0x10/0x10 [ 478.322649][T15447] netlink_sendmsg+0x8b0/0xda0 [ 478.322665][T15447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.322680][T15447] ? apparmor_socket_sendmsg+0x165/0x280 [ 478.322699][T15447] ____sys_sendmsg+0xa4d/0xbe0 [ 478.322710][T15447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.322724][T15447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.322742][T15447] ___sys_sendmsg+0x190/0x1e0 [ 478.322755][T15447] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.322774][T15447] ? find_held_lock+0x2b/0x80 [ 478.322795][T15447] __sys_sendmsg+0x160/0x210 [ 478.322812][T15447] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.322831][T15447] ? __pfx_ksys_write+0x10/0x10 [ 478.322847][T15447] __do_fast_syscall_32+0x13a/0x8b0 [ 478.322865][T15447] ? lockdep_hardirqs_on+0x7d/0x110 [ 478.322883][T15447] do_fast_syscall_32+0x32/0x70 [ 478.322902][T15447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.322980][T15447] RIP: 0023:0xf7fb8fec [ 478.322999][T15447] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 478.323005][T15447] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 478.323017][T15447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 478.323025][T15447] RDX: 0000000004080040 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.323032][T15447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.323039][T15447] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 478.323045][T15447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.323060][T15447] [ 478.779502][ T5813] bridge_slave_1: left allmulticast mode [ 478.779521][ T5813] bridge_slave_1: left promiscuous mode [ 478.779688][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.783700][ T5813] bridge_slave_0: left allmulticast mode [ 478.783717][ T5813] bridge_slave_0: left promiscuous mode [ 478.783821][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.960206][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.962117][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.963141][ T5813] bond0 (unregistering): Released all slaves [ 479.237621][T15458] FAULT_INJECTION: forcing a failure. [ 479.237621][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 479.237654][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.4.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.237696][T15458] Tainted: [L]=SOFTLOCKUP [ 479.237705][T15458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 479.237717][T15458] Call Trace: [ 479.237723][T15458] [ 479.237731][T15458] dump_stack_lvl+0x100/0x190 [ 479.237761][T15458] should_fail_ex.cold+0x5/0xa [ 479.237785][T15458] should_failslab+0xc2/0x120 [ 479.237811][T15458] __kmalloc_cache_noprof+0x91/0x6d0 [ 479.237839][T15458] ? find_held_lock+0x2b/0x80 [ 479.237860][T15458] ? rtnl_newlink+0x139/0x2620 [ 479.237888][T15458] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.237914][T15458] rtnl_newlink+0x139/0x2620 [ 479.237943][T15458] ? rcu_is_watching+0x13/0xc0 [ 479.237962][T15458] ? trace_sched_exit_tp+0x120/0x160 [ 479.237981][T15458] ? __schedule+0x126b/0x6920 [ 479.238011][T15458] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.238039][T15458] ? kasan_quarantine_put+0x104/0x240 [ 479.238058][T15458] ? lockdep_hardirqs_on+0x7d/0x110 [ 479.238087][T15458] ? __pfx___schedule+0x10/0x10 [ 479.238112][T15458] ? __lock_acquire+0x5c0/0x1f40 [ 479.238137][T15458] ? preempt_schedule_common+0x3c/0xb0 [ 479.238161][T15458] ? preempt_schedule_thunk+0x16/0x40 [ 479.238185][T15458] ? lock_acquire+0x1d1/0x380 [ 479.238209][T15458] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 479.238235][T15458] ? find_held_lock+0x2b/0x80 [ 479.238254][T15458] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 479.238280][T15458] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 479.238307][T15458] ? __pfx_rtnl_newlink+0x10/0x10 [ 479.238333][T15458] rtnetlink_rcv_msg+0x95e/0xe90 [ 479.238362][T15458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.238399][T15458] netlink_rcv_skb+0x159/0x420 [ 479.238422][T15458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.238449][T15458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.238477][T15458] ? rcu_is_watching+0x13/0xc0 [ 479.238517][T15458] netlink_unicast+0x585/0x850 [ 479.238543][T15458] ? __pfx_netlink_unicast+0x10/0x10 [ 479.238570][T15458] netlink_sendmsg+0x8b0/0xda0 [ 479.238595][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.238616][T15458] ? apparmor_socket_sendmsg+0x165/0x280 [ 479.238644][T15458] ____sys_sendmsg+0xa4d/0xbe0 [ 479.238662][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.238685][T15458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.238714][T15458] ___sys_sendmsg+0x190/0x1e0 [ 479.238735][T15458] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.238765][T15458] ? find_held_lock+0x2b/0x80 [ 479.238800][T15458] __sys_sendmsg+0x160/0x210 [ 479.238825][T15458] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.238863][T15458] __do_fast_syscall_32+0x13a/0x8b0 [ 479.238891][T15458] ? lockdep_hardirqs_on+0x7d/0x110 [ 479.238918][T15458] do_fast_syscall_32+0x32/0x70 [ 479.238944][T15458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.238966][T15458] RIP: 0023:0xf7fb8fec [ 479.238989][T15458] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 479.238998][T15458] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 479.239017][T15458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 479.239029][T15458] RDX: 0000000004004850 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.239040][T15458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.239051][T15458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 479.239063][T15458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.239087][T15458] [ 479.536018][T15432] ªªªªªª speed is unknown, defaulting to 1000 [ 479.616667][T15466] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 479.627924][T15466] team0: Device veth0_vlan failed to register rx_handler [ 479.635734][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 479.636154][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 479.772260][ T5813] hsr_slave_0: left promiscuous mode [ 479.773129][ T5813] hsr_slave_1: left promiscuous mode [ 479.773502][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.773514][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.774917][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.774928][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.780407][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 479.804648][ T5813] veth1_macvtap: left promiscuous mode [ 479.804700][ T5813] veth0_macvtap: left promiscuous mode [ 479.804801][ T5813] veth1_vlan: left promiscuous mode [ 479.804868][ T5813] veth0_vlan: left promiscuous mode [ 479.886574][ T7299] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 480.025225][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 480.032627][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 480.046514][ T7299] usb 5-1: Using ep0 maxpacket: 8 [ 480.047008][ T7299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.047859][ T7299] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 480.047882][ T7299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.047895][ T7299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.047908][ T7299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.047921][ T7299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.047941][ T7299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.107751][ T5749] Bluetooth: hci3: command tx timeout [ 480.132746][ T37] smbdirect: ib_dev[syz2] removed [ 480.145734][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17 [ 480.191274][T14092] ªªªªªª speed is unknown, defaulting to 1000 [ 480.191294][T14092] infiniband syz2: ib_query_port failed (-19) [ 480.266572][ T7299] usb 5-1: usb_control_msg returned -32 [ 480.266598][ T7299] usbtmc 5-1:16.0: can't read capabilities [ 480.365791][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.452568][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.452697][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.452790][T15432] bridge_slave_0: entered allmulticast mode [ 480.454040][T15432] bridge_slave_0: entered promiscuous mode [ 480.470673][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.470780][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.470880][T15432] bridge_slave_1: entered allmulticast mode [ 480.472376][T15432] bridge_slave_1: entered promiscuous mode [ 480.507374][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 480.515004][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.522665][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.568143][T15432] team0: Port device team_slave_0 added [ 480.572796][T15432] team0: Port device team_slave_1 added [ 480.622738][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.622756][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.622777][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.624249][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.624261][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.624282][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.660579][T15432] hsr_slave_0: entered promiscuous mode [ 480.661034][T15432] hsr_slave_1: entered promiscuous mode [ 480.661782][T15432] debugfs: 'hsr0' already exists in 'hsr' [ 480.661795][T15432] Cannot create hsr debugfs directory [ 480.838174][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 480.989706][T15526] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 481.081114][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 481.156360][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 481.161729][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'. [ 481.295325][T15539] FAULT_INJECTION: forcing a failure. [ 481.295325][T15539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.295358][T15539] CPU: 2 UID: 0 PID: 15539 Comm: syz.4.2189 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.295382][T15539] Tainted: [L]=SOFTLOCKUP [ 481.295389][T15539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.295400][T15539] Call Trace: [ 481.295407][T15539] [ 481.295414][T15539] dump_stack_lvl+0x100/0x190 [ 481.295446][T15539] should_fail_ex.cold+0x5/0xa [ 481.295470][T15539] _copy_from_user+0x2e/0xd0 [ 481.295493][T15539] kstrtouint_from_user+0xd6/0x1d0 [ 481.295520][T15539] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 481.295553][T15539] ? lock_acquire+0x1d1/0x380 [ 481.295583][T15539] proc_fail_nth_write+0x83/0x220 [ 481.295603][T15539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 481.295631][T15539] vfs_write+0x2aa/0x1050 [ 481.295652][T15539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 481.295672][T15539] ? lock_acquire+0x1d1/0x380 [ 481.295695][T15539] ? __fget_files+0x34/0x3d0 [ 481.295716][T15539] ? __pfx_vfs_write+0x10/0x10 [ 481.295734][T15539] ? find_held_lock+0x2b/0x80 [ 481.295756][T15539] ? __fget_files+0x215/0x3d0 [ 481.295781][T15539] ? __fget_files+0x21f/0x3d0 [ 481.295809][T15539] ksys_write+0x12a/0x250 [ 481.295829][T15539] ? __pfx_ksys_write+0x10/0x10 [ 481.295855][T15539] do_int80_emulation+0x166/0x650 [ 481.295887][T15539] asm_int80_emulation+0x1a/0x20 [ 481.295905][T15539] RIP: 0023:0xf71b75ab [ 481.295937][T15539] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 481.295956][T15539] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 481.295975][T15539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54765d0 [ 481.295988][T15539] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.296000][T15539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.296011][T15539] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.296023][T15539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.296049][T15539] [ 481.438124][T15432] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 481.459208][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.460195][T15432] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 481.476349][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.480204][T15432] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 481.483422][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.484448][T15432] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 481.487718][T15432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.079928][T15432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.179390][ T5749] Bluetooth: hci3: command tx timeout [ 482.223339][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.276333][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.276442][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.314353][T15549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.346588][T15464] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 482.939283][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.939339][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.955858][T14068] usb 5-1: USB disconnect, device number 35 [ 483.286281][T15592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.660398][T15432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.257230][ T5749] Bluetooth: hci3: command tx timeout [ 484.385752][T15432] veth0_vlan: entered promiscuous mode [ 484.405021][T15432] veth1_vlan: entered promiscuous mode [ 484.431987][T15636] /dev/sr0: Can't open blockdev [ 484.532168][T15432] veth0_macvtap: entered promiscuous mode [ 484.546075][T15432] veth1_macvtap: entered promiscuous mode [ 484.744749][T15432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.794823][T15432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.834579][ T5813] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.834917][ T5813] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.834997][ T5813] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.835333][ T5813] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.031986][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.032009][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.007457][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.007478][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.197360][T15669] device-mapper: ioctl: device name cannot contain '/' [ 486.235646][T15681] netlink: 'syz.4.2203': attribute type 10 has an invalid length. [ 486.238329][T15681] bridge0: port 3(syz_tun) entered disabled state [ 486.238519][T15681] syz_tun: left allmulticast mode [ 486.239304][T15681] bridge0: port 3(syz_tun) entered disabled state [ 486.244631][T15681] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 486.255999][ T5813] bond0: (slave bond_slave_0): interface is now down [ 486.256016][ T5813] bond0: (slave bond_slave_1): interface is now down [ 486.273128][ T8957] bond0: (slave bond_slave_0): interface is now down [ 486.273146][ T8957] bond0: (slave bond_slave_1): interface is now down [ 486.273153][ T8957] bond0: (slave syz_tun): interface is now down [ 486.284489][ T8957] bond0: now running without any active interface! [ 486.337561][ T5749] Bluetooth: hci3: command tx timeout [ 486.650663][T15700] /dev/sr0: Can't open blockdev [ 486.812776][T15703] bridge0: port 3(syz_tun) entered blocking state [ 486.812904][T15703] bridge0: port 3(syz_tun) entered disabled state [ 486.813060][T15703] syz_tun: entered allmulticast mode [ 486.814757][T15703] syz_tun: entered promiscuous mode [ 486.815183][T15703] bridge0: port 3(syz_tun) entered blocking state [ 486.815257][T15703] bridge0: port 3(syz_tun) entered forwarding state [ 487.053731][T15710] 9p: Bad value for 'rfdno' [ 488.416526][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 488.416696][T15679] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 489.202705][T15679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 489.209880][T15679] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 489.212029][T15679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 489.212097][T15679] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 489.215362][T15679] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 489.222571][T15679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 489.222717][T15679] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 489.229106][T15679] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 489.325968][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 489.337921][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 489.339381][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 489.341433][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 489.528172][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 489.609191][T15722] udc dummy_udc.0: failed to start g1: -19 [ 489.634202][T15722] UDC core: g1: couldn't find an available UDC or it's busy [ 489.835911][T15735] /dev/sr0: Can't open blockdev [ 489.866581][ T7292] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 490.026559][ T7292] usb 9-1: Using ep0 maxpacket: 8 [ 490.027650][ T7292] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 490.029599][ T7292] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 490.029639][ T7292] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.029657][ T7292] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.029676][ T7292] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 490.029696][ T7292] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.029725][ T7292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.440844][ T7292] usb 9-1: usb_control_msg returned -32 [ 490.440871][ T7292] usbtmc 9-1:16.0: can't read capabilities [ 490.497313][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.535859][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 490.659677][T15750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 490.663467][T15750] erspan1: entered allmulticast mode [ 490.711763][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 491.054739][T15760] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2220'. [ 491.216651][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 491.296739][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 491.305593][T15772] FAULT_INJECTION: forcing a failure. [ 491.305593][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 491.305618][T15772] CPU: 0 UID: 0 PID: 15772 Comm: syz.3.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.305634][T15772] Tainted: [L]=SOFTLOCKUP [ 491.305650][T15772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.305659][T15772] Call Trace: [ 491.305664][T15772] [ 491.305669][T15772] dump_stack_lvl+0x100/0x190 [ 491.305689][T15772] should_fail_ex.cold+0x5/0xa [ 491.305706][T15772] should_failslab+0xc2/0x120 [ 491.305722][T15772] __kmalloc_cache_noprof+0x91/0x6d0 [ 491.305741][T15772] ? ovl_iterate+0xa74/0x10d0 [ 491.305759][T15772] ovl_iterate+0xa74/0x10d0 [ 491.305774][T15772] ? __pfx_down_write+0x10/0x10 [ 491.305785][T15772] ? __pfx_down_read_killable+0x10/0x10 [ 491.305798][T15772] ? __pfx_ovl_iterate+0x10/0x10 [ 491.305812][T15772] wrap_directory_iterator+0xa2/0xe0 [ 491.305825][T15772] iterate_dir+0x296/0xae0 [ 491.305839][T15772] __ia32_sys_getdents64+0x13a/0x2c0 [ 491.305852][T15772] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 491.305865][T15772] ? __pfx_filldir64+0x10/0x10 [ 491.305876][T15772] ? ksys_write+0x1ac/0x250 [ 491.305889][T15772] ? __pfx_ksys_write+0x10/0x10 [ 491.305903][T15772] __do_fast_syscall_32+0x13a/0x8b0 [ 491.305921][T15772] ? lockdep_hardirqs_on+0x7d/0x110 [ 491.305938][T15772] do_fast_syscall_32+0x32/0x70 [ 491.305956][T15772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.305971][T15772] RIP: 0023:0xf701efec [ 491.305985][T15772] Code: Unable to access opcode bytes at 0xf701efc2. [ 491.305990][T15772] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 491.306002][T15772] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 491.306010][T15772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.306016][T15772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.306023][T15772] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 491.306030][T15772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.306045][T15772] [ 491.476758][T15774] /dev/sr0: Can't open blockdev [ 492.123386][T15790] FAULT_INJECTION: forcing a failure. [ 492.123386][T15790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.123410][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.3.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.123427][T15790] Tainted: [L]=SOFTLOCKUP [ 492.123432][T15790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 492.123439][T15790] Call Trace: [ 492.123444][T15790] [ 492.123449][T15790] dump_stack_lvl+0x100/0x190 [ 492.123469][T15790] should_fail_ex.cold+0x5/0xa [ 492.123488][T15790] _copy_to_user+0x32/0xd0 [ 492.123504][T15790] simple_read_from_buffer+0xcb/0x170 [ 492.123520][T15790] proc_fail_nth_read+0x1af/0x230 [ 492.123534][T15790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.123548][T15790] ? rw_verify_area+0xce/0x6d0 [ 492.123567][T15790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.123580][T15790] vfs_read+0x1e4/0xb40 [ 492.123597][T15790] ? lock_acquire+0x1d1/0x380 [ 492.123620][T15790] ? __fget_files+0x34/0x3d0 [ 492.123639][T15790] ? __pfx_vfs_read+0x10/0x10 [ 492.123656][T15790] ? find_held_lock+0x2b/0x80 [ 492.123676][T15790] ? __fget_files+0x215/0x3d0 [ 492.123702][T15790] ? __fget_files+0x21f/0x3d0 [ 492.123729][T15790] ksys_read+0x12a/0x250 [ 492.123747][T15790] ? __pfx_ksys_read+0x10/0x10 [ 492.123774][T15790] do_int80_emulation+0x166/0x650 [ 492.123808][T15790] asm_int80_emulation+0x1a/0x20 [ 492.123828][T15790] RIP: 0023:0xf71575ab [ 492.123844][T15790] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 492.123882][T15790] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 492.123903][T15790] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 492.123915][T15790] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 492.123927][T15790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.123938][T15790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 492.123949][T15790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.123979][T15790] [ 492.316799][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2236'. [ 492.498361][T15725] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 492.577697][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.622742][T14624] usb 9-1: USB disconnect, device number 17 [ 492.658850][T15802] syzkaller0: entered promiscuous mode [ 492.658876][T15802] syzkaller0: entered allmulticast mode [ 493.296486][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.387999][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.436558][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.466740][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.694985][ T7301] hid_parser_main: 23 callbacks suppressed [ 495.695000][ T7301] hid-generic 0005:046E:0007.000B: unknown main item tag 0x1 [ 495.696127][ T7301] hid-generic 0005:046E:0007.000B: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 495.696328][T15849] netlink: Conntrack attr has 4 unknown bytes [ 495.696342][T15849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.701563][T15850] netlink: Conntrack attr has 4 unknown bytes [ 495.701578][T15850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.846141][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 495.849148][T15856] FAULT_INJECTION: forcing a failure. [ 495.849148][T15856] name failslab, interval 1, probability 0, space 0, times 0 [ 495.849169][T15856] CPU: 2 UID: 0 PID: 15856 Comm: syz.4.2241 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.849185][T15856] Tainted: [L]=SOFTLOCKUP [ 495.849192][T15856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 495.849199][T15856] Call Trace: [ 495.849203][T15856] [ 495.849208][T15856] dump_stack_lvl+0x100/0x190 [ 495.849227][T15856] should_fail_ex.cold+0x5/0xa [ 495.849242][T15856] should_failslab+0xc2/0x120 [ 495.849258][T15856] __kmalloc_noprof+0xfc/0x840 [ 495.849271][T15856] ? tomoyo_encode2+0xfb/0x3c0 [ 495.849286][T15856] tomoyo_encode2+0xfb/0x3c0 [ 495.849297][T15856] ? __get_fs_type+0xe3/0x200 [ 495.849313][T15856] tomoyo_encode+0x29/0x50 [ 495.849323][T15856] tomoyo_mount_acl+0x388/0x8b0 [ 495.849339][T15856] ? is_bpf_text_address+0x8a/0x1a0 [ 495.849354][T15856] ? is_bpf_text_address+0x8a/0x1a0 [ 495.849371][T15856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 495.849387][T15856] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 495.849403][T15856] ? kernel_text_address+0x8d/0x100 [ 495.849418][T15856] ? unwind_get_return_address+0x59/0xa0 [ 495.849433][T15856] ? arch_stack_walk+0xa6/0xf0 [ 495.849446][T15856] ? __lock_acquire+0x5c0/0x1f40 [ 495.849467][T15856] ? tomoyo_mount_permission+0x1f6/0x460 [ 495.849486][T15856] ? tomoyo_domain+0xb2/0x150 [ 495.849499][T15856] ? tomoyo_profile+0x47/0x60 [ 495.849512][T15856] tomoyo_mount_permission+0x214/0x460 [ 495.849529][T15856] ? tomoyo_mount_permission+0x1f6/0x460 [ 495.849553][T15856] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 495.849578][T15856] security_sb_mount+0xdd/0x270 [ 495.849594][T15856] path_mount+0x158/0x24c0 [ 495.849611][T15856] ? __pfx_path_mount+0x10/0x10 [ 495.849625][T15856] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.849644][T15856] ? putname+0xb1/0x110 [ 495.849657][T15856] ? kmem_cache_free+0x127/0x6c0 [ 495.849678][T15856] ? __ia32_sys_mount+0x292/0x310 [ 495.849693][T15856] __ia32_sys_mount+0x292/0x310 [ 495.849708][T15856] ? __pfx___ia32_sys_mount+0x10/0x10 [ 495.849723][T15856] ? ksys_write+0x1ac/0x250 [ 495.849734][T15856] ? __pfx_ksys_write+0x10/0x10 [ 495.849748][T15856] __do_fast_syscall_32+0x13a/0x8b0 [ 495.849765][T15856] ? lockdep_hardirqs_on+0x7d/0x110 [ 495.849781][T15856] do_fast_syscall_32+0x32/0x70 [ 495.849799][T15856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.849813][T15856] RIP: 0023:0xf7fb8fec [ 495.849826][T15856] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 495.849831][T15856] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 495.849842][T15856] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 495.849850][T15856] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 00000000800000c0 [ 495.849856][T15856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.849862][T15856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 495.849869][T15856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.849882][T15856] [ 496.149248][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 496.160797][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 496.183873][T15859] fido_id[15859]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 496.305779][T15876] /dev/sr0: Can't open blockdev [ 496.398333][ T7301] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 496.546647][ T7301] usb 9-1: Using ep0 maxpacket: 8 [ 496.552571][ T7301] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 496.574079][ T7301] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 496.574126][ T7301] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.574146][ T7301] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 496.574166][ T7301] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 496.574185][ T7301] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.574219][ T7301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.852723][ T7301] usb 9-1: usb_control_msg returned -32 [ 496.852748][ T7301] usbtmc 9-1:16.0: can't read capabilities [ 496.978484][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 496.982407][T15883] device-mapper: ioctl: device name cannot contain '/' [ 498.488670][T15895] udc dummy_udc.0: failed to start g1: -19 [ 498.489627][T15895] UDC core: g1: couldn't find an available UDC or it's busy [ 498.558687][T15900] syzkaller0: entered promiscuous mode [ 498.558705][T15900] syzkaller0: entered allmulticast mode [ 498.979221][T15869] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 499.183421][T15902] udc dummy_udc.0: failed to start g1: -19 [ 499.184819][T15902] UDC core: g1: couldn't find an available UDC or it's busy [ 501.059074][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.059107][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.399415][T12164] usb 9-1: USB disconnect, device number 18 [ 501.723046][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 502.324587][T11998] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 502.639610][T11998] usb 9-1: Using ep0 maxpacket: 8 [ 502.656808][T11998] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 502.694208][T11998] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 502.694225][T11998] usb 9-1: config 0 has no interface number 0 [ 502.694246][T11998] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.694258][T11998] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 502.694271][T11998] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.694284][T11998] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 502.694304][T11998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.880808][T11998] usb 9-1: config 0 descriptor?? [ 503.256683][T11998] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 504.736966][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2262'. [ 504.979711][ T6961] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 505.136687][ T6961] usb 14-1: Using ep0 maxpacket: 8 [ 505.140978][ T6961] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.141951][ T6961] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 505.141975][ T6961] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.141986][ T6961] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.141999][ T6961] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.142011][ T6961] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.142030][ T6961] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.360134][ T6961] usb 14-1: usb_control_msg returned -32 [ 505.360160][ T6961] usbtmc 14-1:16.0: can't read capabilities [ 505.605602][ T50] usb 9-1: USB disconnect, device number 19 [ 505.605752][ C0] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 505.614858][ T50] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 506.061914][T15980] FAULT_INJECTION: forcing a failure. [ 506.061914][T15980] name failslab, interval 1, probability 0, space 0, times 0 [ 506.061937][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.4.2268 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.061952][T15980] Tainted: [L]=SOFTLOCKUP [ 506.061957][T15980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 506.061964][T15980] Call Trace: [ 506.061968][T15980] [ 506.061973][T15980] dump_stack_lvl+0x100/0x190 [ 506.061992][T15980] should_fail_ex.cold+0x5/0xa [ 506.062007][T15980] should_failslab+0xc2/0x120 [ 506.062022][T15980] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 506.062035][T15980] ? __alloc_skb+0x5b7/0x710 [ 506.062051][T15980] ? __alloc_skb+0x140/0x710 [ 506.062067][T15980] __alloc_skb+0x140/0x710 [ 506.062080][T15980] ? __alloc_skb+0x5b7/0x710 [ 506.062094][T15980] ? __pfx___alloc_skb+0x10/0x10 [ 506.062107][T15980] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 506.062122][T15980] ? sock_diag_lock_handler+0x21/0x2e0 [ 506.062136][T15980] ? find_held_lock+0x2b/0x80 [ 506.062151][T15980] netlink_ack+0x117/0xb80 [ 506.062165][T15980] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 506.062183][T15980] netlink_rcv_skb+0x333/0x420 [ 506.062196][T15980] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 506.062212][T15980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.062230][T15980] ? netlink_deliver_tap+0x1ae/0xcc0 [ 506.062245][T15980] netlink_unicast+0x585/0x850 [ 506.062260][T15980] ? __pfx_netlink_unicast+0x10/0x10 [ 506.062276][T15980] netlink_sendmsg+0x8b0/0xda0 [ 506.062292][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.062318][T15980] ? apparmor_socket_sendmsg+0x165/0x280 [ 506.062339][T15980] ____sys_sendmsg+0xa4d/0xbe0 [ 506.062349][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.062363][T15980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.062380][T15980] ___sys_sendmsg+0x190/0x1e0 [ 506.062393][T15980] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.062411][T15980] ? find_held_lock+0x2b/0x80 [ 506.062431][T15980] __sys_sendmsg+0x160/0x210 [ 506.062447][T15980] ? __pfx___sys_sendmsg+0x10/0x10 [ 506.062466][T15980] ? __pfx_ksys_write+0x10/0x10 [ 506.062481][T15980] __do_fast_syscall_32+0x13a/0x8b0 [ 506.062498][T15980] ? lockdep_hardirqs_on+0x7d/0x110 [ 506.062515][T15980] do_fast_syscall_32+0x32/0x70 [ 506.062532][T15980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.062551][T15980] RIP: 0023:0xf7fb8fec [ 506.062564][T15980] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 506.062569][T15980] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 506.062581][T15980] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 506.062588][T15980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.062594][T15980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.062601][T15980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 506.062607][T15980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.062621][T15980] [ 507.456485][T15955] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 507.666261][ T6961] usb 14-1: USB disconnect, device number 9 [ 508.371317][ C3] sd 0:0:0:0: [sda] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 508.371348][ C3] sd 0:0:0:0: [sda] tag#2 CDB: Test Unit Ready [ 508.581352][T15983] FAULT_INJECTION: forcing a failure. [ 508.581352][T15983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.581387][T15983] CPU: 2 UID: 0 PID: 15983 Comm: syz.3.2269 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.581406][T15983] Tainted: [L]=SOFTLOCKUP [ 508.581410][T15983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 508.581418][T15983] Call Trace: [ 508.581422][T15983] [ 508.581427][T15983] dump_stack_lvl+0x100/0x190 [ 508.581447][T15983] should_fail_ex.cold+0x5/0xa [ 508.581462][T15983] _copy_from_user+0x2e/0xd0 [ 508.581478][T15983] ia32_restore_sigcontext+0xc5/0x620 [ 508.581497][T15983] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 508.581517][T15983] ? rcu_is_watching+0x13/0xc0 [ 508.581529][T15983] ? _raw_spin_unlock_irq+0x23/0x50 [ 508.581543][T15983] ? lockdep_hardirqs_on+0x7d/0x110 [ 508.581560][T15983] __do_compat_sys_sigreturn+0x1b2/0x280 [ 508.581578][T15983] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 508.581599][T15983] do_int80_emulation+0x166/0x650 [ 508.581617][T15983] asm_int80_emulation+0x1a/0x20 [ 508.581629][T15983] RIP: 0023:0xf701f008 [ 508.581638][T15983] Code: 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 <0f> 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 0f 0b 90 90 90 90 90 [ 508.581649][T15983] RSP: 002b:00000000f540c734 EFLAGS: 00000292 ORIG_RAX: 0000000000000077 [ 508.581661][T15983] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 508.581668][T15983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 508.581674][T15983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.581681][T15983] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 508.581688][T15983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.581701][T15983] [ 508.953879][T15998] /dev/sr0: Can't open blockdev [ 509.089812][T16013] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth21-tx-0) [ 509.091741][T16013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2277'. [ 509.198098][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2277'. [ 509.198124][T16019] nbd: nbd64 already in use [ 509.247597][T16021] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:21 [ 509.403014][T16017] jffs2: notice: (16017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 510.110656][T16033] netlink: Setting conntrack mark requires 'commit' flag. [ 510.110673][T16033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.243863][T16038] udc dummy_udc.0: failed to start g1: -19 [ 510.247474][T16038] UDC core: g1: couldn't find an available UDC or it's busy [ 510.258308][T16018] FAULT_INJECTION: forcing a failure. [ 510.258308][T16018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.258342][T16018] CPU: 0 UID: 0 PID: 16018 Comm: syz.9.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.258368][T16018] Tainted: [L]=SOFTLOCKUP [ 510.258377][T16018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 510.258389][T16018] Call Trace: [ 510.258397][T16018] [ 510.258404][T16018] dump_stack_lvl+0x100/0x190 [ 510.258433][T16018] should_fail_ex.cold+0x5/0xa [ 510.258458][T16018] __fpu_restore_sig+0xa92/0x13b0 [ 510.258487][T16018] ? __lock_acquire+0x5c0/0x1f40 [ 510.258511][T16018] ? __pfx___fpu_restore_sig+0x10/0x10 [ 510.258537][T16018] ? __pte_offset_map+0x179/0x310 [ 510.258563][T16018] ? __might_fault+0xc5/0x140 [ 510.258593][T16018] fpu__restore_sig+0x151/0x190 [ 510.258619][T16018] ia32_restore_sigcontext+0x456/0x620 [ 510.258646][T16018] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 510.258676][T16018] ? rcu_is_watching+0x13/0xc0 [ 510.258693][T16018] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.258715][T16018] ? lockdep_hardirqs_on+0x7d/0x110 [ 510.258742][T16018] __do_compat_sys_sigreturn+0x1b2/0x280 [ 510.258769][T16018] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 510.258802][T16018] do_int80_emulation+0x166/0x650 [ 510.258831][T16018] asm_int80_emulation+0x1a/0x20 [ 510.258849][T16018] RIP: 0023:0xf706efec [ 510.258863][T16018] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 510.258880][T16018] RSP: 002b:00000000f545d50c EFLAGS: 00000292 [ 510.258896][T16018] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 510.258909][T16018] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 510.258938][T16018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 510.258952][T16018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 510.258963][T16018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 510.258986][T16018] [ 510.524485][T16048] /dev/sr0: Can't open blockdev [ 510.687707][T16054] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth21-tx-0) [ 510.690105][T16054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 510.781310][ T5749] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 510.811676][T16061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 510.811695][T16061] nbd: device at index 64 is going down [ 511.177766][T14256] udevd[14256]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 511.222584][T16060] FAULT_INJECTION: forcing a failure. [ 511.222584][T16060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.222610][T16060] CPU: 2 UID: 0 PID: 16060 Comm: syz.4.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.222628][T16060] Tainted: [L]=SOFTLOCKUP [ 511.222633][T16060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.222641][T16060] Call Trace: [ 511.222646][T16060] [ 511.222651][T16060] dump_stack_lvl+0x100/0x190 [ 511.222670][T16060] should_fail_ex.cold+0x5/0xa [ 511.222687][T16060] __fpu_restore_sig+0xa92/0x13b0 [ 511.222719][T16060] ? __lock_acquire+0x5c0/0x1f40 [ 511.222736][T16060] ? __pfx___fpu_restore_sig+0x10/0x10 [ 511.222753][T16060] ? __pte_offset_map+0x179/0x310 [ 511.222771][T16060] ? __might_fault+0xc5/0x140 [ 511.222792][T16060] fpu__restore_sig+0x151/0x190 [ 511.222809][T16060] ia32_restore_sigcontext+0x456/0x620 [ 511.222830][T16060] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 511.222852][T16060] ? rcu_is_watching+0x13/0xc0 [ 511.222864][T16060] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.222879][T16060] ? lockdep_hardirqs_on+0x7d/0x110 [ 511.222897][T16060] __do_compat_sys_sigreturn+0x1b2/0x280 [ 511.222916][T16060] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 511.222938][T16060] do_int80_emulation+0x166/0x650 [ 511.222957][T16060] asm_int80_emulation+0x1a/0x20 [ 511.222969][T16060] RIP: 0023:0xf7fb8fec [ 511.222979][T16060] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 511.222991][T16060] RSP: 002b:00000000f547650c EFLAGS: 00000292 [ 511.223002][T16060] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 511.223009][T16060] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 511.223016][T16060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.223022][T16060] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 511.223029][T16060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.223043][T16060] [ 511.366295][T16075] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 511.388831][T16075] team0 (unregistering): Port device team_slave_0 removed [ 511.433888][T16075] team0 (unregistering): Port device team_slave_1 removed [ 511.434151][T16059] FAULT_INJECTION: forcing a failure. [ 511.434151][T16059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.434174][T16059] CPU: 0 UID: 0 PID: 16059 Comm: syz.9.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.434191][T16059] Tainted: [L]=SOFTLOCKUP [ 511.434197][T16059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.434204][T16059] Call Trace: [ 511.434209][T16059] [ 511.434214][T16059] dump_stack_lvl+0x100/0x190 [ 511.434234][T16059] should_fail_ex.cold+0x5/0xa [ 511.434250][T16059] __fpu_restore_sig+0xa92/0x13b0 [ 511.434269][T16059] ? __lock_acquire+0x5c0/0x1f40 [ 511.434286][T16059] ? __pfx___fpu_restore_sig+0x10/0x10 [ 511.434303][T16059] ? __pte_offset_map+0x179/0x310 [ 511.434321][T16059] ? __might_fault+0xc5/0x140 [ 511.434340][T16059] fpu__restore_sig+0x151/0x190 [ 511.434356][T16059] ia32_restore_sigcontext+0x456/0x620 [ 511.434377][T16059] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 511.434397][T16059] ? rcu_is_watching+0x13/0xc0 [ 511.434409][T16059] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.434425][T16059] ? lockdep_hardirqs_on+0x7d/0x110 [ 511.434443][T16059] __do_compat_sys_sigreturn+0x1b2/0x280 [ 511.434461][T16059] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 511.434483][T16059] do_int80_emulation+0x166/0x650 [ 511.434501][T16059] asm_int80_emulation+0x1a/0x20 [ 511.434513][T16059] RIP: 0023:0xf706efec [ 511.434523][T16059] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 511.434534][T16059] RSP: 002b:00000000f545d50c EFLAGS: 00000292 [ 511.434544][T16059] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 511.434551][T16059] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 511.434558][T16059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.434564][T16059] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 511.434571][T16059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.434584][T16059] [ 512.925198][T16082] udc dummy_udc.0: failed to start g1: -19 [ 512.930061][T16082] UDC core: g1: couldn't find an available UDC or it's busy [ 513.728884][T16105] sch_fq: defrate 0 ignored. [ 513.962418][T16116] /dev/sr0: Can't open blockdev [ 514.184301][T16110] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2302'. [ 514.288148][T16120] udc dummy_udc.0: failed to start g1: -19 [ 514.292151][T16120] UDC core: g1: couldn't find an available UDC or it's busy [ 514.470925][T16118] FAULT_INJECTION: forcing a failure. [ 514.470925][T16118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.470955][T16118] CPU: 0 UID: 0 PID: 16118 Comm: syz.9.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.470978][T16118] Tainted: [L]=SOFTLOCKUP [ 514.470984][T16118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 514.470993][T16118] Call Trace: [ 514.470998][T16118] [ 514.471004][T16118] dump_stack_lvl+0x100/0x190 [ 514.471024][T16118] should_fail_ex.cold+0x5/0xa [ 514.471040][T16118] __fpu_restore_sig+0xa92/0x13b0 [ 514.471059][T16118] ? __lock_acquire+0x5c0/0x1f40 [ 514.471078][T16118] ? __pfx___fpu_restore_sig+0x10/0x10 [ 514.471098][T16118] ? __pte_offset_map+0x179/0x310 [ 514.471117][T16118] ? __might_fault+0xc5/0x140 [ 514.471138][T16118] fpu__restore_sig+0x151/0x190 [ 514.471156][T16118] ia32_restore_sigcontext+0x456/0x620 [ 514.471176][T16118] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 514.471199][T16118] ? rcu_is_watching+0x13/0xc0 [ 514.471212][T16118] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.471228][T16118] ? lockdep_hardirqs_on+0x7d/0x110 [ 514.471248][T16118] __do_compat_sys_sigreturn+0x1b2/0x280 [ 514.471267][T16118] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 514.471291][T16118] do_int80_emulation+0x166/0x650 [ 514.471312][T16118] asm_int80_emulation+0x1a/0x20 [ 514.471326][T16118] RIP: 0023:0xf706efec [ 514.471338][T16118] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 514.471351][T16118] RSP: 002b:00000000f545d50c EFLAGS: 00000292 [ 514.471362][T16118] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 514.471370][T16118] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 514.471378][T16118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 514.471385][T16118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 514.471393][T16118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 514.471407][T16118] [ 515.308595][T16140] FAULT_INJECTION: forcing a failure. [ 515.308595][T16140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.308626][T16140] CPU: 2 UID: 0 PID: 16140 Comm: syz.0.2311 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.308645][T16140] Tainted: [L]=SOFTLOCKUP [ 515.308651][T16140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.308659][T16140] Call Trace: [ 515.308664][T16140] [ 515.308671][T16140] dump_stack_lvl+0x100/0x190 [ 515.308692][T16140] should_fail_ex.cold+0x5/0xa [ 515.308710][T16140] __fpu_restore_sig+0xa92/0x13b0 [ 515.308729][T16140] ? __lock_acquire+0x5c0/0x1f40 [ 515.308747][T16140] ? __pfx___fpu_restore_sig+0x10/0x10 [ 515.308766][T16140] ? __pte_offset_map+0x179/0x310 [ 515.308806][T16140] ? __might_fault+0xc5/0x140 [ 515.308833][T16140] fpu__restore_sig+0x151/0x190 [ 515.308852][T16140] ia32_restore_sigcontext+0x456/0x620 [ 515.308875][T16140] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 515.308901][T16140] ? rcu_is_watching+0x13/0xc0 [ 515.308914][T16140] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.308931][T16140] ? lockdep_hardirqs_on+0x7d/0x110 [ 515.308951][T16140] __do_compat_sys_sigreturn+0x1b2/0x280 [ 515.308970][T16140] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 515.308993][T16140] do_int80_emulation+0x166/0x650 [ 515.309013][T16140] asm_int80_emulation+0x1a/0x20 [ 515.309027][T16140] RIP: 0023:0xf7f94fec [ 515.309038][T16140] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 515.309050][T16140] RSP: 002b:00000000f545650c EFLAGS: 00000292 [ 515.309061][T16140] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 515.309068][T16140] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 515.309075][T16140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.309082][T16140] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 515.309090][T16140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.309105][T16140] [ 515.445328][T16162] FAULT_INJECTION: forcing a failure. [ 515.445328][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 515.445349][T16162] CPU: 2 UID: 0 PID: 16162 Comm: syz.3.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.445365][T16162] Tainted: [L]=SOFTLOCKUP [ 515.445369][T16162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.445378][T16162] Call Trace: [ 515.445382][T16162] [ 515.445387][T16162] dump_stack_lvl+0x100/0x190 [ 515.445406][T16162] should_fail_ex.cold+0x5/0xa [ 515.445421][T16162] should_failslab+0xc2/0x120 [ 515.445436][T16162] __kmalloc_noprof+0xfc/0x840 [ 515.445448][T16162] ? rcu_is_watching+0x13/0xc0 [ 515.445460][T16162] ? tomoyo_realpath_from_path+0xb6/0x690 [ 515.445475][T16162] tomoyo_realpath_from_path+0xb6/0x690 [ 515.445490][T16162] tomoyo_path_number_perm+0x23c/0x580 [ 515.445505][T16162] ? tomoyo_path_number_perm+0x22e/0x580 [ 515.445522][T16162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 515.445539][T16162] ? get_pid_task+0x106/0x250 [ 515.445555][T16162] ? __lock_acquire+0x5c0/0x1f40 [ 515.445576][T16162] ? __fget_files+0x34/0x3d0 [ 515.445589][T16162] ? find_held_lock+0x2b/0x80 [ 515.445600][T16162] ? __fget_files+0x215/0x3d0 [ 515.445612][T16162] ? hook_file_ioctl_common+0x140/0x440 [ 515.445628][T16162] ? __fget_files+0x215/0x3d0 [ 515.445642][T16162] ? __fget_files+0x21f/0x3d0 [ 515.445656][T16162] security_file_ioctl_compat+0xd3/0x230 [ 515.445674][T16162] __ia32_compat_sys_ioctl+0xc2/0x360 [ 515.445694][T16162] __do_fast_syscall_32+0x13a/0x8b0 [ 515.445711][T16162] ? lockdep_hardirqs_on+0x7d/0x110 [ 515.445729][T16162] do_fast_syscall_32+0x32/0x70 [ 515.445746][T16162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.445760][T16162] RIP: 0023:0xf701efec [ 515.445774][T16162] Code: Unable to access opcode bytes at 0xf701efc2. [ 515.445779][T16162] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 515.445790][T16162] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000541b [ 515.445797][T16162] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.445804][T16162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.445811][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.445817][T16162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.445831][T16162] [ 515.445835][T16162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 515.642207][T16165] udc dummy_udc.0: failed to start g1: -19 [ 515.643968][T16165] UDC core: g1: couldn't find an available UDC or it's busy [ 515.956072][T16183] /dev/sr0: Can't open blockdev [ 516.106038][T16194] fuse: Bad value for 'fd' [ 516.280910][T16176] FAULT_INJECTION: forcing a failure. [ 516.280910][T16176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.280957][T16176] CPU: 0 UID: 0 PID: 16176 Comm: syz.0.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.280986][T16176] Tainted: [L]=SOFTLOCKUP [ 516.280994][T16176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.281005][T16176] Call Trace: [ 516.281013][T16176] [ 516.281022][T16176] dump_stack_lvl+0x100/0x190 [ 516.281057][T16176] should_fail_ex.cold+0x5/0xa [ 516.281082][T16176] __fpu_restore_sig+0x100/0x13b0 [ 516.281110][T16176] ? __lock_acquire+0x5c0/0x1f40 [ 516.281137][T16176] ? __pfx___fpu_restore_sig+0x10/0x10 [ 516.281165][T16176] ? __pte_offset_map+0x179/0x310 [ 516.281196][T16176] ? __might_fault+0xc5/0x140 [ 516.281228][T16176] fpu__restore_sig+0x151/0x190 [ 516.281256][T16176] ia32_restore_sigcontext+0x456/0x620 [ 516.281288][T16176] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 516.281322][T16176] ? rcu_is_watching+0x13/0xc0 [ 516.281341][T16176] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.281365][T16176] ? lockdep_hardirqs_on+0x7d/0x110 [ 516.281418][T16176] __do_compat_sys_sigreturn+0x1b2/0x280 [ 516.281448][T16176] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 516.281486][T16176] do_int80_emulation+0x166/0x650 [ 516.281517][T16176] asm_int80_emulation+0x1a/0x20 [ 516.281537][T16176] RIP: 0023:0xf7f94fec [ 516.281553][T16176] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 516.281573][T16176] RSP: 002b:00000000f545650c EFLAGS: 00000292 [ 516.281591][T16176] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 516.281603][T16176] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 516.281616][T16176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.281629][T16176] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 516.281641][T16176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 516.281665][T16176] [ 516.318323][T16201] udc dummy_udc.0: failed to start g1: -19 [ 516.320215][T16201] UDC core: g1: couldn't find an available UDC or it's busy [ 516.909102][T16219] /dev/sr0: Can't open blockdev [ 516.923288][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'. [ 517.440443][T16240] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 517.950116][T16254] tmpfs: Unknown parameter 'nosÏwap' [ 518.003638][T16252] /dev/sr0: Can't open blockdev [ 518.052512][T16256] FAULT_INJECTION: forcing a failure. [ 518.052512][T16256] name failslab, interval 1, probability 0, space 0, times 0 [ 518.052577][T16256] CPU: 0 UID: 0 PID: 16256 Comm: syz.0.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.052593][T16256] Tainted: [L]=SOFTLOCKUP [ 518.052597][T16256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 518.052604][T16256] Call Trace: [ 518.052608][T16256] [ 518.052613][T16256] dump_stack_lvl+0x100/0x190 [ 518.052632][T16256] should_fail_ex.cold+0x5/0xa [ 518.052647][T16256] should_failslab+0xc2/0x120 [ 518.052663][T16256] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 518.052678][T16256] ? key_alloc+0x423/0x1310 [ 518.052697][T16256] kmemdup_noprof+0x29/0x60 [ 518.052715][T16256] key_alloc+0x423/0x1310 [ 518.052734][T16256] ? __kmalloc_noprof+0x350/0x840 [ 518.052747][T16256] ? __pfx_key_alloc+0x10/0x10 [ 518.052767][T16256] keyring_alloc+0x44/0xc0 [ 518.052801][T16256] lookup_user_key+0xcfe/0x1300 [ 518.052819][T16256] ? __pfx_lookup_user_key+0x10/0x10 [ 518.052833][T16256] ? lockdep_hardirqs_on+0x7d/0x110 [ 518.052850][T16256] ? irqentry_exit+0x24d/0xa10 [ 518.052869][T16256] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 518.052887][T16256] ? _copy_from_user+0x93/0xd0 [ 518.052903][T16256] __do_sys_add_key+0x2a6/0x460 [ 518.052916][T16256] ? __pfx___do_sys_add_key+0x10/0x10 [ 518.052928][T16256] ? fput+0x7c/0x100 [ 518.052943][T16256] ? __pfx_ksys_write+0x10/0x10 [ 518.052957][T16256] __do_fast_syscall_32+0x13a/0x8b0 [ 518.052974][T16256] ? lockdep_hardirqs_on+0x7d/0x110 [ 518.052990][T16256] do_fast_syscall_32+0x32/0x70 [ 518.053007][T16256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.053021][T16256] RIP: 0023:0xf7f94fec [ 518.053034][T16256] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 518.053039][T16256] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 518.053050][T16256] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000080000280 [ 518.053058][T16256] RDX: 0000000080000400 RSI: 00000000000fffff RDI: 00000000fffffffe [ 518.053064][T16256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.053071][T16256] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 518.053077][T16256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.053091][T16256] [ 518.292504][T16262] fuse: Bad value for 'group_id' [ 518.292518][T16262] fuse: Bad value for 'group_id' [ 519.017109][ T7298] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 519.157305][ T7298] usb 9-1: device descriptor read/64, error -71 [ 519.244014][T16273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2351'. [ 519.315671][T16279] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2353'. [ 519.384310][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2353'. [ 519.416657][ T7298] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 519.442685][T16279] bridge_slave_1: left allmulticast mode [ 519.442727][T16279] bridge_slave_1: left promiscuous mode [ 519.443467][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.443616][T16282] FAULT_INJECTION: forcing a failure. [ 519.443616][T16282] name failslab, interval 1, probability 0, space 0, times 0 [ 519.443637][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.3.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.443653][T16282] Tainted: [L]=SOFTLOCKUP [ 519.443658][T16282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.443664][T16282] Call Trace: [ 519.443668][T16282] [ 519.443673][T16282] dump_stack_lvl+0x100/0x190 [ 519.443692][T16282] should_fail_ex.cold+0x5/0xa [ 519.443707][T16282] should_failslab+0xc2/0x120 [ 519.443723][T16282] __kmalloc_noprof+0xfc/0x840 [ 519.443736][T16282] ? x509_fabricate_name.isra.0+0x5ea/0xa10 [ 519.443753][T16282] x509_fabricate_name.isra.0+0x5ea/0xa10 [ 519.443768][T16282] asn1_ber_decoder+0xd0c/0x2170 [ 519.443792][T16282] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 519.443812][T16282] ? kasan_save_track+0x14/0x30 [ 519.443826][T16282] ? __kasan_kmalloc+0xaa/0xb0 [ 519.443839][T16282] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 519.443856][T16282] ? x509_cert_parse+0x162/0x910 [ 519.443871][T16282] x509_cert_parse+0x1c9/0x910 [ 519.443885][T16282] x509_key_preparse+0x65/0x9c0 [ 519.443901][T16282] asymmetric_key_preparse+0xce/0x1d0 [ 519.443912][T16282] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 519.443923][T16282] __key_create_or_update+0x463/0xe30 [ 519.443943][T16282] ? __pfx___key_create_or_update+0x10/0x10 [ 519.443962][T16282] ? lookup_user_key+0x3f3/0x1300 [ 519.443984][T16282] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 519.444000][T16282] ? __pfx_keyring_search_iterator+0x10/0x10 [ 519.444014][T16282] key_create_or_update+0x42/0x60 [ 519.444033][T16282] __do_sys_add_key+0x2e8/0x460 [ 519.444047][T16282] ? __pfx___do_sys_add_key+0x10/0x10 [ 519.444059][T16282] ? fput+0x7c/0x100 [ 519.444074][T16282] ? __pfx_ksys_write+0x10/0x10 [ 519.444088][T16282] __do_fast_syscall_32+0x13a/0x8b0 [ 519.444106][T16282] ? lockdep_hardirqs_on+0x7d/0x110 [ 519.444122][T16282] do_fast_syscall_32+0x32/0x70 [ 519.444140][T16282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.444169][T16282] RIP: 0023:0xf701efec [ 519.444183][T16282] Code: Unable to access opcode bytes at 0xf701efc2. [ 519.444188][T16282] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 519.444199][T16282] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 519.444206][T16282] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 000000003ccf71b4 [ 519.444213][T16282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.444219][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.444226][T16282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.444240][T16282] [ 519.453464][T16281] /dev/sr0: Can't open blockdev [ 519.546644][ T7298] usb 9-1: device descriptor read/64, error -71 [ 519.615205][T16279] bridge_slave_0: left allmulticast mode [ 519.615226][T16279] bridge_slave_0: left promiscuous mode [ 519.615355][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.658252][ T7298] usb usb9-port1: attempt power cycle [ 519.795906][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 519.795920][ T43] audit: type=1326 audit(1789551989.609:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.0.2359" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94fec code=0x0 [ 519.996503][ T7298] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 520.017042][ T7298] usb 9-1: device descriptor read/8, error -71 [ 520.277835][ T7298] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 520.297880][ T7298] usb 9-1: device descriptor read/8, error -71 [ 520.417500][ T7298] usb usb9-port1: unable to enumerate USB device [ 520.727506][T16297] FAULT_INJECTION: forcing a failure. [ 520.727506][T16297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.727545][T16297] CPU: 3 UID: 0 PID: 16297 Comm: syz.3.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.727564][T16297] Tainted: [L]=SOFTLOCKUP [ 520.727569][T16297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.727576][T16297] Call Trace: [ 520.727581][T16297] [ 520.727586][T16297] dump_stack_lvl+0x100/0x190 [ 520.727605][T16297] should_fail_ex.cold+0x5/0xa [ 520.727620][T16297] _copy_from_user+0x2e/0xd0 [ 520.727635][T16297] ia32_restore_sigcontext+0xc5/0x620 [ 520.727654][T16297] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 520.727674][T16297] ? rcu_is_watching+0x13/0xc0 [ 520.727686][T16297] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.727702][T16297] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.727721][T16297] __do_compat_sys_sigreturn+0x1b2/0x280 [ 520.727739][T16297] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 520.727760][T16297] do_int80_emulation+0x166/0x650 [ 520.727778][T16297] asm_int80_emulation+0x1a/0x20 [ 520.727791][T16297] RIP: 0023:0xf701f008 [ 520.727802][T16297] Code: 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 <0f> 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 0f 0b 90 90 90 90 90 [ 520.727814][T16297] RSP: 002b:00000000f540c734 EFLAGS: 00000292 ORIG_RAX: 0000000000000077 [ 520.727826][T16297] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 520.727833][T16297] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 520.727839][T16297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.727846][T16297] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 520.727852][T16297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.727865][T16297] [ 521.834040][T16319] udc dummy_udc.0: failed to start g1: -19 [ 521.835692][T16319] UDC core: g1: couldn't find an available UDC or it's busy [ 522.545770][T16333] FAULT_INJECTION: forcing a failure. [ 522.545770][T16333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.545798][T16333] CPU: 2 UID: 0 PID: 16333 Comm: syz.3.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.545816][T16333] Tainted: [L]=SOFTLOCKUP [ 522.545821][T16333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.545829][T16333] Call Trace: [ 522.545833][T16333] [ 522.545839][T16333] dump_stack_lvl+0x100/0x190 [ 522.545859][T16333] should_fail_ex.cold+0x5/0xa [ 522.545875][T16333] _copy_from_user+0x2e/0xd0 [ 522.545892][T16333] ia32_restore_sigcontext+0xc5/0x620 [ 522.545917][T16333] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 522.545941][T16333] ? rcu_is_watching+0x13/0xc0 [ 522.545955][T16333] ? _raw_spin_unlock_irq+0x23/0x50 [ 522.545971][T16333] ? lockdep_hardirqs_on+0x7d/0x110 [ 522.545991][T16333] __do_compat_sys_sigreturn+0x1b2/0x280 [ 522.546009][T16333] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 522.546031][T16333] do_int80_emulation+0x166/0x650 [ 522.546052][T16333] asm_int80_emulation+0x1a/0x20 [ 522.546064][T16333] RIP: 0023:0xf701f008 [ 522.546073][T16333] Code: 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 <0f> 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 0f 0b 90 90 90 90 90 [ 522.546087][T16333] RSP: 002b:00000000f540c734 EFLAGS: 00000292 ORIG_RAX: 0000000000000077 [ 522.546098][T16333] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 522.546106][T16333] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 522.546113][T16333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.546119][T16333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 522.546126][T16333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.546140][T16333] [ 522.571329][T16344] 9p: Unknown Cache mode or invalid value lØTØe+±8×a(8˜ó‹3oose [ 523.116017][T16351] udc dummy_udc.0: failed to start g1: -19 [ 523.145251][T16351] UDC core: g1: couldn't find an available UDC or it's busy [ 523.828062][ T8957] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.828356][ T8957] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.828456][ T8957] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.828594][ T8957] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.634141][ T5749] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 524.670764][T16383] FAULT_INJECTION: forcing a failure. [ 524.670764][T16383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.670792][T16383] CPU: 2 UID: 0 PID: 16383 Comm: syz.9.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.670810][T16383] Tainted: [L]=SOFTLOCKUP [ 524.670816][T16383] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.670823][T16383] Call Trace: [ 524.670828][T16383] [ 524.670834][T16383] dump_stack_lvl+0x100/0x190 [ 524.670854][T16383] should_fail_ex.cold+0x5/0xa [ 524.670872][T16383] __fpu_restore_sig+0xa92/0x13b0 [ 524.670895][T16383] ? __lock_acquire+0x5c0/0x1f40 [ 524.670913][T16383] ? __pfx___fpu_restore_sig+0x10/0x10 [ 524.670944][T16383] ? __pte_offset_map+0x179/0x310 [ 524.670965][T16383] ? __might_fault+0xc5/0x140 [ 524.670988][T16383] fpu__restore_sig+0x151/0x190 [ 524.671006][T16383] ia32_restore_sigcontext+0x456/0x620 [ 524.671037][T16383] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 524.671060][T16383] ? rcu_is_watching+0x13/0xc0 [ 524.671071][T16383] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.671087][T16383] ? lockdep_hardirqs_on+0x7d/0x110 [ 524.671105][T16383] __do_compat_sys_sigreturn+0x1b2/0x280 [ 524.671123][T16383] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 524.671146][T16383] do_int80_emulation+0x166/0x650 [ 524.671165][T16383] asm_int80_emulation+0x1a/0x20 [ 524.671177][T16383] RIP: 0023:0xf706efec [ 524.671187][T16383] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 524.671199][T16383] RSP: 002b:00000000f545d50c EFLAGS: 00000292 [ 524.671209][T16383] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 524.671216][T16383] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 524.671223][T16383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.671230][T16383] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 524.671236][T16383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.671250][T16383] [ 525.513765][T16429] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2400'. [ 525.614619][T16433] LUN: removable file: (no medium) [ 525.615884][T16431] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 525.641024][T16431] bond1: entered promiscuous mode [ 525.641246][T16431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.339154][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 526.339322][T16429] bridge_slave_1: left allmulticast mode [ 526.339363][T16429] bridge_slave_1: left promiscuous mode [ 526.340648][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.392110][T16429] bridge_slave_0: left allmulticast mode [ 526.392156][T16429] bridge_slave_0: left promiscuous mode [ 526.392776][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.136607][ T25] page_pool_release_retry() stalled pool shutdown: id 141, 49 inflight 60 sec [ 527.171464][T16443] FAULT_INJECTION: forcing a failure. [ 527.171464][T16443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.171489][T16443] CPU: 0 UID: 0 PID: 16443 Comm: syz.9.2405 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.171524][T16443] Tainted: [L]=SOFTLOCKUP [ 527.171529][T16443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.171537][T16443] Call Trace: [ 527.171542][T16443] [ 527.171547][T16443] dump_stack_lvl+0x100/0x190 [ 527.171568][T16443] should_fail_ex.cold+0x5/0xa [ 527.171584][T16443] __fpu_restore_sig+0xa92/0x13b0 [ 527.171602][T16443] ? __lock_acquire+0x5c0/0x1f40 [ 527.171618][T16443] ? __pfx___fpu_restore_sig+0x10/0x10 [ 527.171635][T16443] ? __pte_offset_map+0x179/0x310 [ 527.171654][T16443] ? __might_fault+0xc5/0x140 [ 527.171673][T16443] fpu__restore_sig+0x151/0x190 [ 527.171689][T16443] ia32_restore_sigcontext+0x456/0x620 [ 527.171708][T16443] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 527.171730][T16443] ? rcu_is_watching+0x13/0xc0 [ 527.171742][T16443] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.171757][T16443] ? lockdep_hardirqs_on+0x7d/0x110 [ 527.171774][T16443] __do_compat_sys_sigreturn+0x1b2/0x280 [ 527.171792][T16443] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 527.171813][T16443] do_int80_emulation+0x166/0x650 [ 527.171831][T16443] asm_int80_emulation+0x1a/0x20 [ 527.171842][T16443] RIP: 0023:0xf706efec [ 527.171853][T16443] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 527.171865][T16443] RSP: 002b:00000000f545d50c EFLAGS: 00000292 [ 527.171874][T16443] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 527.171881][T16443] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 527.171888][T16443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.171894][T16443] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.171901][T16443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.171914][T16443] [ 527.483370][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 527.496651][T16457] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2408'. [ 527.612983][T16466] FAULT_INJECTION: forcing a failure. [ 527.612983][T16466] name failslab, interval 1, probability 0, space 0, times 0 [ 527.613005][T16466] CPU: 2 UID: 0 PID: 16466 Comm: syz.4.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.613021][T16466] Tainted: [L]=SOFTLOCKUP [ 527.613025][T16466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.613032][T16466] Call Trace: [ 527.613036][T16466] [ 527.613040][T16466] dump_stack_lvl+0x100/0x190 [ 527.613059][T16466] should_fail_ex.cold+0x5/0xa [ 527.613074][T16466] should_failslab+0xc2/0x120 [ 527.613090][T16466] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 527.613104][T16466] ? alloc_vmap_area+0x640/0x2bb0 [ 527.613120][T16466] alloc_vmap_area+0x640/0x2bb0 [ 527.613138][T16466] ? kasan_save_track+0x14/0x30 [ 527.613151][T16466] ? __kasan_kmalloc+0xaa/0xb0 [ 527.613164][T16466] ? __pfx_alloc_vmap_area+0x10/0x10 [ 527.613178][T16466] ? __get_vm_area_node+0x124/0x350 [ 527.613194][T16466] __get_vm_area_node+0x1ed/0x350 [ 527.613211][T16466] __vmalloc_node_range_noprof+0x268/0x1420 [ 527.613228][T16466] ? n_tty_open+0x1a/0x170 [ 527.613247][T16466] ? lock_acquire+0x1d1/0x380 [ 527.613271][T16466] ? n_tty_open+0x1a/0x170 [ 527.613290][T16466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.613306][T16466] ? vc_allocate+0x132/0x880 [ 527.613322][T16466] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 527.613341][T16466] ? n_tty_open+0x1a/0x170 [ 527.613357][T16466] __vmalloc_node_noprof+0xad/0xf0 [ 527.613372][T16466] ? n_tty_open+0x1a/0x170 [ 527.613388][T16466] ? __pfx_n_tty_open+0x10/0x10 [ 527.613405][T16466] n_tty_open+0x1a/0x170 [ 527.613421][T16466] tty_ldisc_open+0xa2/0x120 [ 527.613434][T16466] tty_ldisc_setup+0x40/0xf0 [ 527.613448][T16466] tty_init_dev.part.0+0x1b5/0x470 [ 527.613465][T16466] tty_open+0x953/0xe20 [ 527.613483][T16466] ? __pfx_tty_open+0x10/0x10 [ 527.613497][T16466] ? chrdev_open+0x10b/0x6a0 [ 527.613510][T16466] ? chrdev_open+0x10b/0x6a0 [ 527.613525][T16466] ? __pfx_tty_open+0x10/0x10 [ 527.613540][T16466] chrdev_open+0x234/0x6a0 [ 527.613552][T16466] ? __pfx_apparmor_file_open+0x10/0x10 [ 527.613571][T16466] ? __pfx_chrdev_open+0x10/0x10 [ 527.613585][T16466] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 527.613603][T16466] do_dentry_open+0x6ab/0x14d0 [ 527.613615][T16466] ? __pfx_chrdev_open+0x10/0x10 [ 527.613631][T16466] vfs_open+0x82/0x3f0 [ 527.613648][T16466] path_openat+0x19fa/0x2440 [ 527.613664][T16466] ? __pfx_path_openat+0x10/0x10 [ 527.613681][T16466] do_file_open+0x20e/0x430 [ 527.613695][T16466] ? __pfx_do_file_open+0x10/0x10 [ 527.613718][T16466] ? _raw_spin_unlock+0x28/0x50 [ 527.613736][T16466] ? alloc_fd+0x471/0x7a0 [ 527.613753][T16466] do_sys_openat2+0x10f/0x1e0 [ 527.613768][T16466] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.613784][T16466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.613802][T16466] ? __fget_files+0x21f/0x3d0 [ 527.613816][T16466] __ia32_compat_sys_openat+0x12d/0x210 [ 527.613834][T16466] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 527.613850][T16466] ? ksys_write+0x1ac/0x250 [ 527.613866][T16466] do_int80_emulation+0x166/0x650 [ 527.613885][T16466] asm_int80_emulation+0x1a/0x20 [ 527.613897][T16466] RIP: 0023:0xf71b75ab [ 527.613906][T16466] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 527.613917][T16466] RSP: 002b:00000000f543403c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 527.613928][T16466] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5434100 [ 527.613936][T16466] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.613942][T16466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.613948][T16466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.613955][T16466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.613969][T16466] [ 527.613984][T16466] syz.4.2407: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 527.614048][T16466] CPU: 2 UID: 0 PID: 16466 Comm: syz.4.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.614063][T16466] Tainted: [L]=SOFTLOCKUP [ 527.614067][T16466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.614073][T16466] Call Trace: [ 527.614077][T16466] [ 527.614081][T16466] dump_stack_lvl+0x100/0x190 [ 527.614096][T16466] warn_alloc.cold+0x9e/0xb2 [ 527.614109][T16466] ? __pfx_warn_alloc+0x10/0x10 [ 527.614119][T16466] ? lockdep_hardirqs_on+0x7d/0x110 [ 527.614136][T16466] ? __get_vm_area_node+0x2f0/0x350 [ 527.614153][T16466] ? __get_vm_area_node+0x22b/0x350 [ 527.614171][T16466] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 527.614188][T16466] ? lock_acquire+0x1d1/0x380 [ 527.614205][T16466] ? n_tty_open+0x1a/0x170 [ 527.614224][T16466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 527.614240][T16466] ? vc_allocate+0x132/0x880 [ 527.614258][T16466] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 527.614278][T16466] ? n_tty_open+0x1a/0x170 [ 527.614294][T16466] __vmalloc_node_noprof+0xad/0xf0 [ 527.614309][T16466] ? n_tty_open+0x1a/0x170 [ 527.614326][T16466] ? __pfx_n_tty_open+0x10/0x10 [ 527.614342][T16466] n_tty_open+0x1a/0x170 [ 527.614359][T16466] tty_ldisc_open+0xa2/0x120 [ 527.614372][T16466] tty_ldisc_setup+0x40/0xf0 [ 527.614386][T16466] tty_init_dev.part.0+0x1b5/0x470 [ 527.614403][T16466] tty_open+0x953/0xe20 [ 527.614421][T16466] ? __pfx_tty_open+0x10/0x10 [ 527.614436][T16466] ? chrdev_open+0x10b/0x6a0 [ 527.614448][T16466] ? chrdev_open+0x10b/0x6a0 [ 527.614463][T16466] ? __pfx_tty_open+0x10/0x10 [ 527.614478][T16466] chrdev_open+0x234/0x6a0 [ 527.614491][T16466] ? __pfx_apparmor_file_open+0x10/0x10 [ 527.614523][T16466] ? __pfx_chrdev_open+0x10/0x10 [ 527.614536][T16466] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 527.614555][T16466] do_dentry_open+0x6ab/0x14d0 [ 527.614567][T16466] ? __pfx_chrdev_open+0x10/0x10 [ 527.614583][T16466] vfs_open+0x82/0x3f0 [ 527.614599][T16466] path_openat+0x19fa/0x2440 [ 527.614615][T16466] ? __pfx_path_openat+0x10/0x10 [ 527.614632][T16466] do_file_open+0x20e/0x430 [ 527.614647][T16466] ? __pfx_do_file_open+0x10/0x10 [ 527.614670][T16466] ? _raw_spin_unlock+0x28/0x50 [ 527.614684][T16466] ? alloc_fd+0x471/0x7a0 [ 527.614700][T16466] do_sys_openat2+0x10f/0x1e0 [ 527.614716][T16466] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.614732][T16466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.614749][T16466] ? __fget_files+0x21f/0x3d0 [ 527.614764][T16466] __ia32_compat_sys_openat+0x12d/0x210 [ 527.614781][T16466] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 527.614798][T16466] ? ksys_write+0x1ac/0x250 [ 527.614814][T16466] do_int80_emulation+0x166/0x650 [ 527.614833][T16466] asm_int80_emulation+0x1a/0x20 [ 527.614844][T16466] RIP: 0023:0xf71b75ab [ 527.614852][T16466] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 527.614862][T16466] RSP: 002b:00000000f543403c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 527.614873][T16466] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5434100 [ 527.614879][T16466] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.614886][T16466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.614892][T16466] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.614899][T16466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.614913][T16466] [ 527.619306][T16466] Mem-Info: [ 527.619316][T16466] active_anon:3616 inactive_anon:1812 isolated_anon:0 [ 527.619316][T16466] active_file:945 inactive_file:4420 isolated_file:0 [ 527.619316][T16466] unevictable:0 dirty:24 writeback:0 [ 527.619316][T16466] slab_reclaimable:7046 slab_unreclaimable:81755 [ 527.619316][T16466] mapped:26468 shmem:3217 pagetables:2067 [ 527.619316][T16466] sec_pagetables:389 bounce:0 [ 527.619316][T16466] kernel_misc_reclaimable:0 [ 527.619316][T16466] free:24308 free_pcp:961 free_cma:0 [ 527.619343][T16466] Node 0 active_anon:528kB inactive_anon:92kB active_file:812kB inactive_file:7276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1692kB dirty:4kB writeback:0kB shmem:480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1068kB sec_pagetables:1244kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 527.619371][T16466] Node 1 active_anon:13936kB inactive_anon:7156kB active_file:2968kB inactive_file:10404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104180kB dirty:92kB writeback:0kB shmem:12388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9076kB pagetables:7200kB sec_pagetables:312kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 527.619398][T16466] Node 0 DMA free:2524kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.619428][T16466] lowmem_reserve[]: 0 277 277 277 277 [ 527.619447][T16466] Node 0 DMA32 free:25068kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:528kB inactive_anon:88kB active_file:812kB inactive_file:7276kB unevictable:0kB writepending:4kB zspages:708kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:764kB local_pcp:0kB free_cma:0kB [ 527.619476][T16466] lowmem_reserve[]: 0 0 0 0 0 [ 527.619494][T16466] Node 1 DMA32 free:69640kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:13936kB inactive_anon:7156kB active_file:2968kB inactive_file:10404kB unevictable:0kB writepending:92kB zspages:5700kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3080kB local_pcp:1392kB free_cma:0kB [ 527.619524][T16466] lowmem_reserve[]: 0 0 0 0 0 [ 527.619542][T16466] Node 0 DMA: 187*4kB (U) 54*8kB (UE) 10*16kB (U) 35*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2524kB [ 527.619642][T16466] Node 0 DMA32: 949*4kB (UE) 421*8kB (UE) 153*16kB (UME) 71*32kB (ME) 40*64kB (ME) 19*128kB (UME) 16*256kB (M) 6*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 25068kB [ 527.619719][T16466] Node 1 DMA32: 701*4kB (UME) 862*8kB (UME) 353*16kB (UME) 472*32kB (UME) 138*64kB (UME) 48*128kB (UME) 34*256kB (UME) 12*512kB (UME) 7*1024kB (UME) 1*2048kB (U) 0*4096kB = 69492kB [ 527.619799][T16466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.619808][T16466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 527.619816][T16466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.619824][T16466] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 527.619833][T16466] 10359 total pagecache pages [ 527.619837][T16466] 1719 pages in swap cache [ 527.619841][T16466] Free swap = 59396kB [ 527.619845][T16466] Total swap = 124996kB [ 527.619849][T16466] 524155 pages RAM [ 527.619853][T16466] 0 pages HighMem/MovableOnly [ 527.619857][T16466] 212121 pages reserved [ 527.619860][T16466] 0 pages cma reserved [ 527.620034][T16466] tty tty28: ldisc open failed (-12), clearing slot 27 [ 527.687320][T16471] /dev/sr0: Can't open blockdev [ 528.707103][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 528.707135][T16482] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 528.866632][T16493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2418'. [ 530.385371][T16514] syz_tun: entered allmulticast mode [ 530.424972][T16513] syz_tun: left allmulticast mode [ 530.461270][T16517] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2422'. [ 530.641918][T16519] udc dummy_udc.0: failed to start g1: -19 [ 530.643496][T16519] UDC core: g1: couldn't find an available UDC or it's busy [ 530.784189][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 531.018010][ T7296] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 531.168286][ T7296] usb 5-1: Using ep0 maxpacket: 8 [ 531.169061][ T7296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 531.170024][ T7296] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 531.170066][ T7296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.170088][ T7296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.170111][ T7296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.170132][ T7296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.170168][ T7296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.476856][ T7296] usb 5-1: usb_control_msg returned -32 [ 531.476883][ T7296] usbtmc 5-1:16.0: can't read capabilities [ 531.695131][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 531.862471][T16544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2430'. [ 532.201794][T16547] jffs2: notice: (16547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 532.310806][T16551] jffs2: notice: (16551) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 532.314017][T16551] FAULT_INJECTION: forcing a failure. [ 532.314017][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 532.314039][T16551] CPU: 0 UID: 0 PID: 16551 Comm: syz.3.2431 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.314056][T16551] Tainted: [L]=SOFTLOCKUP [ 532.314061][T16551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.314067][T16551] Call Trace: [ 532.314072][T16551] [ 532.314077][T16551] dump_stack_lvl+0x100/0x190 [ 532.314099][T16551] should_fail_ex.cold+0x5/0xa [ 532.314114][T16551] ? __pfx_jffs2_setattr+0x10/0x10 [ 532.314131][T16551] should_failslab+0xc2/0x120 [ 532.314146][T16551] ? __pfx_jffs2_setattr+0x10/0x10 [ 532.314164][T16551] kmem_cache_alloc_noprof+0x92/0x6a0 [ 532.314179][T16551] ? jffs2_do_setattr+0x170/0x1fd0 [ 532.314199][T16551] ? __pfx_jffs2_setattr+0x10/0x10 [ 532.314217][T16551] jffs2_do_setattr+0x170/0x1fd0 [ 532.314236][T16551] ? vfsgid_in_group_p+0x7f/0xc0 [ 532.314251][T16551] ? __pfx_jffs2_do_setattr+0x10/0x10 [ 532.314276][T16551] ? in_group_or_capable+0x50/0x60 [ 532.314294][T16551] ? setattr_prepare+0x1d4/0xa40 [ 532.314313][T16551] ? evm_inode_setattr+0x41/0x6d0 [ 532.314331][T16551] ? __pfx_jffs2_setattr+0x10/0x10 [ 532.314364][T16551] jffs2_setattr+0x7b/0x120 [ 532.314383][T16551] notify_change+0xb25/0x1330 [ 532.314408][T16551] chmod_common+0x245/0x4d0 [ 532.314424][T16551] ? __fget_files+0x34/0x3d0 [ 532.314438][T16551] ? __pfx_chmod_common+0x10/0x10 [ 532.314453][T16551] ? find_held_lock+0x2b/0x80 [ 532.314468][T16551] ? __fget_files+0x215/0x3d0 [ 532.314481][T16551] ? __fget_files+0x215/0x3d0 [ 532.314503][T16551] __ia32_sys_fchmod+0x10d/0x1b0 [ 532.314520][T16551] __do_fast_syscall_32+0x13a/0x8b0 [ 532.314539][T16551] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.314558][T16551] do_fast_syscall_32+0x32/0x70 [ 532.314579][T16551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.314594][T16551] RIP: 0023:0xf701efec [ 532.314609][T16551] Code: Unable to access opcode bytes at 0xf701efc2. [ 532.314614][T16551] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000005e [ 532.314627][T16551] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000101 [ 532.314635][T16551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.314642][T16551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.314649][T16551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.314656][T16551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.314672][T16551] [ 532.830129][T16564] FAULT_INJECTION: forcing a failure. [ 532.830129][T16564] name failslab, interval 1, probability 0, space 0, times 0 [ 532.830150][T16564] CPU: 0 UID: 0 PID: 16564 Comm: syz.3.2435 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.830166][T16564] Tainted: [L]=SOFTLOCKUP [ 532.830171][T16564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.830177][T16564] Call Trace: [ 532.830181][T16564] [ 532.830185][T16564] dump_stack_lvl+0x100/0x190 [ 532.830205][T16564] should_fail_ex.cold+0x5/0xa [ 532.830219][T16564] should_failslab+0xc2/0x120 [ 532.830235][T16564] __kmalloc_noprof+0xfc/0x840 [ 532.830247][T16564] ? find_held_lock+0x2b/0x80 [ 532.830259][T16564] ? alloc_pipe_info+0x1ec/0x590 [ 532.830275][T16564] alloc_pipe_info+0x1ec/0x590 [ 532.830289][T16564] splice_direct_to_actor+0x78f/0xa30 [ 532.830304][T16564] ? __lock_acquire+0x5c0/0x1f40 [ 532.830319][T16564] ? __pfx_direct_splice_actor+0x10/0x10 [ 532.830332][T16564] ? __pfx_aa_file_perm+0x10/0x10 [ 532.830345][T16564] ? lock_acquire+0x1d1/0x380 [ 532.830360][T16564] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 532.830375][T16564] ? lock_acquire+0x1d1/0x380 [ 532.830393][T16564] do_splice_direct+0x174/0x240 [ 532.830408][T16564] ? __pfx_do_splice_direct+0x10/0x10 [ 532.830422][T16564] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 532.830436][T16564] ? bpf_lsm_file_permission+0x9/0x10 [ 532.830451][T16564] ? security_file_permission+0x76/0x210 [ 532.830469][T16564] ? rw_verify_area+0xce/0x6d0 [ 532.830487][T16564] do_sendfile+0xadc/0xe20 [ 532.830500][T16564] ? __pfx_do_sendfile+0x10/0x10 [ 532.830511][T16564] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.830529][T16564] ? __fget_files+0x21f/0x3d0 [ 532.830544][T16564] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 532.830557][T16564] ? fput+0x7c/0x100 [ 532.830571][T16564] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 532.830585][T16564] ? ksys_write+0x1ac/0x250 [ 532.830595][T16564] ? __pfx_ksys_write+0x10/0x10 [ 532.830609][T16564] __do_fast_syscall_32+0x13a/0x8b0 [ 532.830626][T16564] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.830643][T16564] do_fast_syscall_32+0x32/0x70 [ 532.830660][T16564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.830674][T16564] RIP: 0023:0xf701efec [ 532.830687][T16564] Code: Unable to access opcode bytes at 0xf701efc2. [ 532.830693][T16564] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 532.830704][T16564] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 532.830711][T16564] RDX: 0000000000000000 RSI: 00000000000000f2 RDI: 0000000000000000 [ 532.830718][T16564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.830724][T16564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.830731][T16564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.830744][T16564] [ 532.911521][T16554] FAULT_INJECTION: forcing a failure. [ 532.911521][T16554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.911547][T16554] CPU: 3 UID: 0 PID: 16554 Comm: syz.4.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.911579][T16554] Tainted: [L]=SOFTLOCKUP [ 532.911585][T16554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.911593][T16554] Call Trace: [ 532.911599][T16554] [ 532.911605][T16554] dump_stack_lvl+0x100/0x190 [ 532.911626][T16554] should_fail_ex.cold+0x5/0xa [ 532.911643][T16554] save_fsave_header+0x14c/0x2f0 [ 532.911660][T16554] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.911679][T16554] ? __pfx_save_fsave_header+0x10/0x10 [ 532.911700][T16554] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 532.911717][T16554] ? __local_bh_enable_ip+0xa5/0x120 [ 532.911738][T16554] copy_fpstate_to_sigframe+0x755/0xae0 [ 532.911757][T16554] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 532.911777][T16554] ? __sigqueue_free+0xc3/0x2a0 [ 532.911793][T16554] ? collect_signal+0x271/0x550 [ 532.911808][T16554] ? x86_task_fpu+0x5f/0x90 [ 532.911823][T16554] get_sigframe+0x3fb/0x940 [ 532.911841][T16554] ? __pfx_get_sigframe+0x10/0x10 [ 532.911857][T16554] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.911873][T16554] ? siginfo_layout+0x156/0x290 [ 532.911891][T16554] ? get_signal+0x16b/0x21e0 [ 532.911911][T16554] ia32_setup_frame+0xe5/0x990 [ 532.911933][T16554] ? __pfx_ia32_setup_frame+0x10/0x10 [ 532.911953][T16554] ? __do_compat_sys_waitid+0x180/0x250 [ 532.911969][T16554] arch_do_signal_or_restart+0x571/0x7a0 [ 532.911986][T16554] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 532.912011][T16554] exit_to_user_mode_loop+0x139/0x700 [ 532.912028][T16554] ? rcu_is_watching+0x13/0xc0 [ 532.912042][T16554] __do_fast_syscall_32+0x59f/0x8b0 [ 532.912062][T16554] do_fast_syscall_32+0x32/0x70 [ 532.912081][T16554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.912096][T16554] RIP: 0023:0xf7fb8fec [ 532.912110][T16554] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 532.912116][T16554] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 000000000000011c [ 532.912128][T16554] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 532.912136][T16554] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 532.912143][T16554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.912150][T16554] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.912157][T16554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.912172][T16554] [ 533.218079][ T9281] page_pool_release_retry() stalled pool shutdown: id 143, 49 inflight 60 sec [ 533.264344][T16570] /dev/sr0: Can't open blockdev [ 533.536782][T16529] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 533.555245][T16583] lapbether: lapb_data_request error - 4 [ 533.635055][ T7296] usb 5-1: USB disconnect, device number 36 [ 533.729769][T16588] FAULT_INJECTION: forcing a failure. [ 533.729769][T16588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.729796][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.3.2442 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.729812][T16588] Tainted: [L]=SOFTLOCKUP [ 533.729816][T16588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.729823][T16588] Call Trace: [ 533.729827][T16588] [ 533.729831][T16588] dump_stack_lvl+0x100/0x190 [ 533.729849][T16588] should_fail_ex.cold+0x5/0xa [ 533.729864][T16588] _copy_from_iter+0x1f4/0x1690 [ 533.729881][T16588] ? __pfx__copy_from_iter+0x10/0x10 [ 533.729895][T16588] ? raw_sendmsg+0x14c/0x880 [ 533.729911][T16588] ? find_held_lock+0x2b/0x80 [ 533.729923][T16588] ? raw_sendmsg+0x14c/0x880 [ 533.729938][T16588] ? raw_sendmsg+0x14c/0x880 [ 533.729954][T16588] ? __local_bh_enable_ip+0xa5/0x120 [ 533.729973][T16588] raw_sendmsg+0x528/0x880 [ 533.729989][T16588] ? __pfx_raw_sendmsg+0x10/0x10 [ 533.730005][T16588] ? apparmor_socket_sendmsg+0x165/0x280 [ 533.730022][T16588] sock_write_iter+0x53a/0x5b0 [ 533.730033][T16588] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 533.730049][T16588] ? __pfx_sock_write_iter+0x10/0x10 [ 533.730063][T16588] ? bpf_lsm_file_permission+0x9/0x10 [ 533.730078][T16588] ? security_file_permission+0x76/0x210 [ 533.730095][T16588] ? rw_verify_area+0xce/0x6d0 [ 533.730127][T16588] vfs_write+0x6af/0x1050 [ 533.730139][T16588] ? __pfx_sock_write_iter+0x10/0x10 [ 533.730151][T16588] ? __pfx_vfs_write+0x10/0x10 [ 533.730162][T16588] ? find_held_lock+0x2b/0x80 [ 533.730182][T16588] ksys_write+0x1f8/0x250 [ 533.730193][T16588] ? __pfx_ksys_write+0x10/0x10 [ 533.730203][T16588] ? ksys_write+0x1ac/0x250 [ 533.730214][T16588] ? __pfx_ksys_write+0x10/0x10 [ 533.730228][T16588] __do_fast_syscall_32+0x13a/0x8b0 [ 533.730245][T16588] ? lockdep_hardirqs_on+0x7d/0x110 [ 533.730262][T16588] do_fast_syscall_32+0x32/0x70 [ 533.730280][T16588] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.730294][T16588] RIP: 0023:0xf701efec [ 533.730307][T16588] Code: Unable to access opcode bytes at 0xf701efc2. [ 533.730312][T16588] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 533.730323][T16588] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 533.730330][T16588] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.730336][T16588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.730342][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.730349][T16588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.730362][T16588] [ 533.922554][T16590] udc dummy_udc.0: failed to start g1: -19 [ 533.924914][T16590] UDC core: g1: couldn't find an available UDC or it's busy [ 534.656822][T16601] CIFS: Attempting to mount //127.0.0.1/share [ 534.855211][T16603] CIFS: VFS: Invalid response size 0 for command 0 [ 534.860065][T16601] CIFS: VFS: cifs_mount failed w/return code = -5 [ 534.912052][T16597] FAULT_INJECTION: forcing a failure. [ 534.912052][T16597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.912078][T16597] CPU: 0 UID: 0 PID: 16597 Comm: syz.0.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.912095][T16597] Tainted: [L]=SOFTLOCKUP [ 534.912101][T16597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.912109][T16597] Call Trace: [ 534.912114][T16597] [ 534.912119][T16597] dump_stack_lvl+0x100/0x190 [ 534.912139][T16597] should_fail_ex.cold+0x5/0xa [ 534.912155][T16597] __fpu_restore_sig+0xa92/0x13b0 [ 534.912174][T16597] ? __lock_acquire+0x5c0/0x1f40 [ 534.912190][T16597] ? __pfx___fpu_restore_sig+0x10/0x10 [ 534.912206][T16597] ? __pte_offset_map+0x179/0x310 [ 534.912223][T16597] ? __might_fault+0xc5/0x140 [ 534.912244][T16597] fpu__restore_sig+0x151/0x190 [ 534.912262][T16597] ia32_restore_sigcontext+0x456/0x620 [ 534.912280][T16597] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 534.912301][T16597] ? rcu_is_watching+0x13/0xc0 [ 534.912314][T16597] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.912328][T16597] ? lockdep_hardirqs_on+0x7d/0x110 [ 534.912346][T16597] __do_compat_sys_sigreturn+0x1b2/0x280 [ 534.912363][T16597] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 534.912401][T16597] do_int80_emulation+0x166/0x650 [ 534.912422][T16597] asm_int80_emulation+0x1a/0x20 [ 534.912435][T16597] RIP: 0023:0xf7f94fec [ 534.912445][T16597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 534.912457][T16597] RSP: 002b:00000000f545650c EFLAGS: 00000292 [ 534.912467][T16597] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 534.912475][T16597] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 534.912482][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.912490][T16597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 534.912497][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.912512][T16597] [ 535.154958][T16611] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2449'. [ 535.291626][T16619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.305649][T16621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2451'. [ 535.733718][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 535.966584][ T7296] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 536.137125][ T7296] usb 5-1: Using ep0 maxpacket: 8 [ 536.137736][ T7296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.138700][ T7296] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 536.138738][ T7296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.138758][ T7296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.138781][ T7296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.138802][ T7296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.138836][ T7296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.344927][ T7296] usb 5-1: usb_control_msg returned -32 [ 536.344954][ T7296] usbtmc 5-1:16.0: can't read capabilities [ 536.512433][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.692519][T16648] FAULT_INJECTION: forcing a failure. [ 536.692519][T16648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.692552][T16648] CPU: 2 UID: 0 PID: 16648 Comm: syz.4.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.692594][T16648] Tainted: [L]=SOFTLOCKUP [ 536.692603][T16648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.692615][T16648] Call Trace: [ 536.692622][T16648] [ 536.692630][T16648] dump_stack_lvl+0x100/0x190 [ 536.692658][T16648] should_fail_ex.cold+0x5/0xa [ 536.692683][T16648] __fpu_restore_sig+0x100/0x13b0 [ 536.692732][T16648] ? __lock_acquire+0x5c0/0x1f40 [ 536.692755][T16648] ? __pfx___fpu_restore_sig+0x10/0x10 [ 536.692779][T16648] ? __pte_offset_map+0x179/0x310 [ 536.692804][T16648] ? __might_fault+0xc5/0x140 [ 536.692829][T16648] fpu__restore_sig+0x151/0x190 [ 536.692850][T16648] ia32_restore_sigcontext+0x456/0x620 [ 536.692872][T16648] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 536.692898][T16648] ? rcu_is_watching+0x13/0xc0 [ 536.692912][T16648] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.692930][T16648] ? lockdep_hardirqs_on+0x7d/0x110 [ 536.692962][T16648] __do_compat_sys_sigreturn+0x1b2/0x280 [ 536.692986][T16648] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 536.693014][T16648] do_int80_emulation+0x166/0x650 [ 536.693037][T16648] asm_int80_emulation+0x1a/0x20 [ 536.693052][T16648] RIP: 0023:0xf7fb8fec [ 536.693064][T16648] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 536.693078][T16648] RSP: 002b:00000000f547650c EFLAGS: 00000292 [ 536.693093][T16648] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 536.693103][T16648] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 536.693113][T16648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.693124][T16648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.693134][T16648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.693153][T16648] [ 536.801040][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 536.801057][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 538.209966][T16654] syz.4.2461: page allocation failure: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 538.210035][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.4.2461 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.210051][T16654] Tainted: [L]=SOFTLOCKUP [ 538.210055][T16654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.210062][T16654] Call Trace: [ 538.210066][T16654] [ 538.210071][T16654] dump_stack_lvl+0x100/0x190 [ 538.210090][T16654] warn_alloc.cold+0x9e/0xb2 [ 538.210103][T16654] ? __pfx_warn_alloc+0x10/0x10 [ 538.210118][T16654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.210137][T16654] ? __pfx_get_page_from_freelist+0x10/0x10 [ 538.210153][T16654] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 538.210173][T16654] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 538.210185][T16654] ? lock_acquire+0x1d1/0x380 [ 538.210201][T16654] ? page_table_check_set+0x11d/0x580 [ 538.210217][T16654] ? find_held_lock+0x2b/0x80 [ 538.210228][T16654] ? page_table_check_set+0x30f/0x580 [ 538.210243][T16654] ? page_table_check_set+0x30f/0x580 [ 538.210261][T16654] ? page_table_check_set+0x31e/0x580 [ 538.210278][T16654] ? __page_table_check_ptes_set+0x1d5/0x530 [ 538.210296][T16654] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 538.210313][T16654] ? policy_nodemask+0xed/0x4f0 [ 538.210330][T16654] alloc_pages_mpol+0x201/0x550 [ 538.210346][T16654] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 538.210363][T16654] ? find_held_lock+0x2b/0x80 [ 538.210375][T16654] ? rcu_read_unlock+0x2d/0xb0 [ 538.210394][T16654] folio_alloc_mpol_noprof+0x36/0x260 [ 538.210412][T16654] shmem_alloc_folio+0x135/0x160 [ 538.210429][T16654] shmem_alloc_and_add_folio+0x371/0xd40 [ 538.210449][T16654] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 538.210467][T16654] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 538.210487][T16654] shmem_get_folio_gfp+0x75b/0x1980 [ 538.210508][T16654] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 538.210525][T16654] ? vm_normal_page+0x1d1/0x380 [ 538.210538][T16654] ? __pfx_vm_normal_page+0x10/0x10 [ 538.210554][T16654] shmem_write_begin+0x1a4/0x420 [ 538.210573][T16654] ? __pfx_shmem_write_begin+0x10/0x10 [ 538.210591][T16654] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 538.210614][T16654] generic_perform_write+0x292/0xa40 [ 538.210635][T16654] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 538.210659][T16654] ? __pfx_generic_perform_write+0x10/0x10 [ 538.210676][T16654] ? file_update_time_flags+0x38c/0x520 [ 538.210694][T16654] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 538.210705][T16654] shmem_file_write_iter+0x10e/0x140 [ 538.210718][T16654] __kernel_write_iter+0x2ac/0x930 [ 538.210731][T16654] ? __pfx___kernel_write_iter+0x10/0x10 [ 538.210743][T16654] ? __up_read+0x333/0x980 [ 538.210762][T16654] ? dump_user_range+0x65e/0xad0 [ 538.210781][T16654] dump_user_range+0x3f9/0xad0 [ 538.210800][T16654] ? __pfx_dump_user_range+0x10/0x10 [ 538.210821][T16654] ? __pfx_writenote+0x10/0x10 [ 538.210838][T16654] ? elf_core_dump+0x2276/0x42f0 [ 538.210856][T16654] elf_core_dump+0x31f8/0x42f0 [ 538.210874][T16654] ? __pfx_elf_core_dump+0x10/0x10 [ 538.210891][T16654] ? __kvmalloc_node_noprof+0x35b/0x9b0 [ 538.210903][T16654] ? get_signal+0x1f2a/0x21e0 [ 538.210920][T16654] ? arch_do_signal_or_restart+0x91/0x7a0 [ 538.210934][T16654] ? exit_to_user_mode_loop+0x139/0x700 [ 538.210951][T16654] ? do_fast_syscall_32+0x32/0x70 [ 538.210968][T16654] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.211001][T16654] ? lock_acquire+0x1d1/0x380 [ 538.211015][T16654] ? get_signal+0x1f2a/0x21e0 [ 538.211036][T16654] ? vfs_coredump+0x281a/0x54a0 [ 538.211052][T16654] vfs_coredump+0x281a/0x54a0 [ 538.211073][T16654] ? __pfx_vfs_coredump+0x10/0x10 [ 538.211089][T16654] ? __lock_acquire+0x5c0/0x1f40 [ 538.211107][T16654] ? __lock_acquire+0x5c0/0x1f40 [ 538.211124][T16654] ? lock_acquire+0x1d1/0x380 [ 538.211138][T16654] ? unwind_next_frame+0xbd/0x2090 [ 538.211155][T16654] ? lock_acquire+0x1d1/0x380 [ 538.211173][T16654] ? bpf_ksym_find+0x124/0x1c0 [ 538.211186][T16654] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 538.211205][T16654] ? arch_stack_walk+0xa6/0xf0 [ 538.211221][T16654] ? __sigqueue_free+0xbe/0x2a0 [ 538.211233][T16654] ? stack_trace_save+0x8e/0xc0 [ 538.211247][T16654] ? __pfx_stack_trace_save+0x10/0x10 [ 538.211261][T16654] ? stack_depot_save_flags+0x27/0x9f0 [ 538.211277][T16654] ? __lock_acquire+0x5c0/0x1f40 [ 538.211298][T16654] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.211329][T16654] ? proc_coredump_connector+0x2d3/0x4f0 [ 538.211342][T16654] ? __pfx_proc_coredump_connector+0x10/0x10 [ 538.211357][T16654] ? rcu_is_watching+0x13/0xc0 [ 538.211371][T16654] get_signal+0x1f2a/0x21e0 [ 538.211393][T16654] ? __pfx_get_signal+0x10/0x10 [ 538.211410][T16654] ? send_signal_locked+0x15e/0xa00 [ 538.211428][T16654] arch_do_signal_or_restart+0x91/0x7a0 [ 538.211442][T16654] ? find_held_lock+0x2b/0x80 [ 538.211455][T16654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 538.211473][T16654] ? force_sig_info_to_task+0x4d2/0x660 [ 538.211493][T16654] exit_to_user_mode_loop+0x139/0x700 [ 538.211509][T16654] ? rcu_is_watching+0x13/0xc0 [ 538.211521][T16654] __do_fast_syscall_32+0x59f/0x8b0 [ 538.211539][T16654] ? lockdep_hardirqs_on+0x7d/0x110 [ 538.211556][T16654] do_fast_syscall_32+0x32/0x70 [ 538.211573][T16654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.211587][T16654] RIP: 0023:0xf7fb8fec [ 538.211606][T16654] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 538.211611][T16654] RSP: 002b:00000000f54765cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 538.211622][T16654] RAX: 00000000000000f0 RBX: 00000000f7474f8c RCX: 0000000000000081 [ 538.211630][T16654] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 538.211637][T16654] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 538.211643][T16654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 538.211650][T16654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.211664][T16654] [ 538.211668][T16654] Mem-Info: [ 538.211673][T16654] active_anon:4991 inactive_anon:5285 isolated_anon:0 [ 538.211673][T16654] active_file:379 inactive_file:3553 isolated_file:0 [ 538.211673][T16654] unevictable:0 dirty:11 writeback:0 [ 538.211673][T16654] slab_reclaimable:7043 slab_unreclaimable:82777 [ 538.211673][T16654] mapped:27208 shmem:8441 pagetables:2048 [ 538.211673][T16654] sec_pagetables:395 bounce:0 [ 538.211673][T16654] kernel_misc_reclaimable:0 [ 538.211673][T16654] free:20066 free_pcp:28 free_cma:0 [ 538.211700][T16654] Node 0 active_anon:8kB inactive_anon:180kB active_file:1008kB inactive_file:10976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1880kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8256kB pagetables:1068kB sec_pagetables:1264kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 538.211728][T16654] Node 1 active_anon:19956kB inactive_anon:20960kB active_file:508kB inactive_file:3236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106952kB dirty:24kB writeback:0kB shmem:33764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9004kB pagetables:7124kB sec_pagetables:316kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 538.211756][T16654] Node 0 DMA free:2540kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.211787][T16654] lowmem_reserve[]: 0 277 277 277 277 [ 538.211806][T16654] Node 0 DMA32 free:24884kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:176kB active_file:1008kB inactive_file:10976kB unevictable:0kB writepending:20kB zspages:732kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.211836][T16654] lowmem_reserve[]: 0 0 0 0 0 [ 538.211860][T16654] Node 1 DMA32 free:52840kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19956kB inactive_anon:20960kB active_file:508kB inactive_file:3236kB unevictable:0kB writepending:24kB zspages:6136kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 538.211890][T16654] lowmem_reserve[]: 0 0 0 0 0 [ 538.211908][T16654] Node 0 DMA: 187*4kB (U) 54*8kB (UE) 9*16kB (U) 36*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2540kB [ 538.211976][T16654] Node 0 DMA32: 1072*4kB (UME) 550*8kB (UME) 181*16kB (UME) 132*32kB (UME) 44*64kB (UME) 21*128kB (UME) 14*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24896kB [ 538.212049][T16654] Node 1 DMA32: 607*4kB (UME) 712*8kB (UME) 98*16kB (UME) 178*32kB (UE) 84*64kB (UME) 48*128kB (UME) 39*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 2*2048kB (U) 0*4096kB = 52764kB [ 538.212131][T16654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.212139][T16654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 538.212148][T16654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.212160][T16654] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 538.212173][T16654] 14214 total pagecache pages [ 538.212177][T16654] 1845 pages in swap cache [ 538.212183][T16654] Free swap = 0kB [ 538.212189][T16654] Total swap = 124996kB [ 538.212195][T16654] 524155 pages RAM [ 538.212201][T16654] 0 pages HighMem/MovableOnly [ 538.212207][T16654] 212121 pages reserved [ 538.212214][T16654] 0 pages cma reserved [ 538.417648][T16630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 538.749003][ T7298] usb 5-1: USB disconnect, device number 37 [ 539.376066][T16666] gadgetfs: bound to dummy_udc driver [ 539.706954][ T6961] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 539.709726][ C2] gadgetfs: connected [ 539.711258][ T6961] gadgetfs: disconnected [ 540.046180][T16676] FAULT_INJECTION: forcing a failure. [ 540.046180][T16676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.046207][T16676] CPU: 0 UID: 0 PID: 16676 Comm: syz.0.2468 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.046225][T16676] Tainted: [L]=SOFTLOCKUP [ 540.046230][T16676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.046237][T16676] Call Trace: [ 540.046241][T16676] [ 540.046247][T16676] dump_stack_lvl+0x100/0x190 [ 540.046273][T16676] should_fail_ex.cold+0x5/0xa [ 540.046289][T16676] __fpu_restore_sig+0x100/0x13b0 [ 540.046308][T16676] ? __lock_acquire+0x5c0/0x1f40 [ 540.046326][T16676] ? __pfx___fpu_restore_sig+0x10/0x10 [ 540.046345][T16676] ? __pte_offset_map+0x179/0x310 [ 540.046363][T16676] ? __might_fault+0xc5/0x140 [ 540.046398][T16676] fpu__restore_sig+0x151/0x190 [ 540.046417][T16676] ia32_restore_sigcontext+0x456/0x620 [ 540.046436][T16676] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 540.046458][T16676] ? rcu_is_watching+0x13/0xc0 [ 540.046469][T16676] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.046485][T16676] ? lockdep_hardirqs_on+0x7d/0x110 [ 540.046503][T16676] __do_compat_sys_sigreturn+0x1b2/0x280 [ 540.046522][T16676] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 540.046544][T16676] do_int80_emulation+0x166/0x650 [ 540.046564][T16676] asm_int80_emulation+0x1a/0x20 [ 540.046577][T16676] RIP: 0023:0xf7f94fec [ 540.046588][T16676] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 540.046601][T16676] RSP: 002b:00000000f545650c EFLAGS: 00000292 [ 540.046611][T16676] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 540.046618][T16676] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000080003140 [ 540.046625][T16676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.046632][T16676] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 540.046639][T16676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.046653][T16676] [ 540.493885][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'. [ 541.183085][T16698] /dev/sr0: Can't open blockdev [ 542.661415][T16713] jffs2: notice: (16713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 542.824083][ T113] [ 542.825164][ T113] ====================================================== [ 542.828073][ T113] WARNING: possible circular locking dependency detected [ 542.830897][ T113] syzkaller #0 Tainted: G L [ 542.833453][ T113] ------------------------------------------------------ [ 542.836284][ T113] kswapd1/113 is trying to acquire lock: [ 542.838832][ T113] ffff888043f71be0 (&f->sem){+.+.}-{4:4}, at: jffs2_do_clear_inode+0x5a/0x470 [ 542.842924][ T113] [ 542.842924][ T113] but task is already holding lock: [ 542.846029][ T113] ffffffff8efc9a20 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbce/0x1f00 [ 542.849681][ T113] [ 542.849681][ T113] which lock already depends on the new lock. [ 542.849681][ T113] [ 542.853398][ T113] [ 542.853398][ T113] the existing dependency chain (in reverse order) is: [ 542.856792][ T113] [ 542.856792][ T113] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 542.859319][ T113] lock_acquire+0x1d1/0x380 [ 542.861294][ T113] fs_reclaim_acquire+0xc4/0x100 [ 542.863666][ T113] kmem_cache_alloc_noprof+0x63/0x6a0 [ 542.866152][ T113] jffs2_do_read_inode+0x307/0x520 [ 542.868542][ T113] jffs2_iget+0x32b/0xe30 [ 542.870617][ T113] jffs2_do_fill_super+0x44b/0xa50 [ 542.873012][ T113] jffs2_fill_super+0x283/0x370 [ 542.875264][ T113] mtd_get_sb+0x2f0/0x4c0 [ 542.877327][ T113] get_tree_mtd+0x6f9/0x8a0 [ 542.879451][ T113] vfs_get_tree+0x92/0x320 [ 542.881527][ T113] path_mount+0x7d0/0x24c0 [ 542.883635][ T113] __ia32_sys_mount+0x292/0x310 [ 542.886050][ T113] __do_fast_syscall_32+0x13a/0x8b0 [ 542.888636][ T113] do_fast_syscall_32+0x32/0x70 [ 542.891090][ T113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.894132][ T113] [ 542.894132][ T113] -> #0 (&f->sem){+.+.}-{4:4}: [ 542.897136][ T113] check_prev_add+0xeb/0xe60 [ 542.899358][ T113] __lock_acquire+0x1528/0x1f40 [ 542.901677][ T113] lock_acquire+0x1d1/0x380 [ 542.903836][ T113] __mutex_lock+0x1a4/0x1bd0 [ 542.906014][ T113] jffs2_do_clear_inode+0x5a/0x470 [ 542.908550][ T113] evict+0x3c2/0xad0 [ 542.910460][ T113] dispose_list+0x117/0x1e0 [ 542.912587][ T113] prune_icache_sb+0xea/0x150 [ 542.914811][ T113] super_cache_scan+0x3ac/0x5c0 [ 542.917206][ T113] do_shrink_slab+0x416/0x1200 [ 542.919615][ T113] shrink_slab+0xa82/0x12e0 [ 542.921515][ T113] shrink_one+0x398/0x850 [ 542.923085][ T113] shrink_node+0x2b20/0x4320 [ 542.924780][ T113] balance_pgdat+0xb20/0x1f00 [ 542.926453][ T113] kswapd+0x556/0xb50 [ 542.927937][ T113] kthread+0x373/0x450 [ 542.929641][ T113] ret_from_fork+0x730/0xd60 [ 542.931299][ T113] ret_from_fork_asm+0x1a/0x30 [ 542.933047][ T113] [ 542.933047][ T113] other info that might help us debug this: [ 542.933047][ T113] [ 542.936395][ T113] Possible unsafe locking scenario: [ 542.936395][ T113] [ 542.938926][ T113] CPU0 CPU1 [ 542.940726][ T113] ---- ---- [ 542.942425][ T113] lock(fs_reclaim); [ 542.943715][ T113] lock(&f->sem); [ 542.945730][ T113] lock(fs_reclaim); [ 542.947808][ T113] lock(&f->sem); [ 542.949094][ T113] [ 542.949094][ T113] *** DEADLOCK *** [ 542.949094][ T113] [ 542.951754][ T113] locks held by kswapd1/113: 2, last CPU#2: [ 542.953676][ T113] #0: ffffffff8efc9a20 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbce/0x1f00 [ 542.956583][ T113] #1: ffff88806bf7c0e8 (&type->s_umount_key#79){++++}-{4:4}, at: super_cache_scan+0x9b/0x5c0 [ 542.959915][ T113] [ 542.959915][ T113] stack backtrace: [ 542.961810][ T113] CPU: 2 UID: 0 PID: 113 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.965174][ T113] Tainted: [L]=SOFTLOCKUP [ 542.966661][ T113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 542.970467][ T113] Call Trace: [ 542.972181][ T113] [ 542.973327][ T113] dump_stack_lvl+0x100/0x190 [ 542.974977][ T113] print_circular_bug.cold+0x178/0x1be [ 542.976821][ T113] check_noncircular+0x146/0x160 [ 542.978706][ T113] check_prev_add+0xeb/0xe60 [ 542.980205][ T113] __lock_acquire+0x1528/0x1f40 [ 542.981885][ T113] lock_acquire+0x1d1/0x380 [ 542.983405][ T113] ? jffs2_do_clear_inode+0x5a/0x470 [ 542.985165][ T113] ? __pfx___might_resched+0x10/0x10 [ 542.986917][ T113] __mutex_lock+0x1a4/0x1bd0 [ 542.988489][ T113] ? jffs2_do_clear_inode+0x5a/0x470 [ 542.990258][ T113] ? jffs2_do_clear_inode+0x5a/0x470 [ 542.991987][ T113] ? mark_held_locks+0x40/0x70 [ 542.993542][ T113] ? __pfx___mutex_lock+0x10/0x10 [ 542.995178][ T113] ? lockdep_hardirqs_on+0x7d/0x110 [ 542.996883][ T113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 542.998887][ T113] ? xa_destroy+0x227/0x390 [ 543.000548][ T113] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 543.002468][ T113] ? jffs2_do_clear_inode+0x5a/0x470 [ 543.004268][ T113] jffs2_do_clear_inode+0x5a/0x470 [ 543.005935][ T113] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 543.007716][ T113] evict+0x3c2/0xad0 [ 543.009020][ T113] ? _raw_spin_unlock+0x28/0x50 [ 543.010583][ T113] ? __list_lru_walk_one+0x26d/0x550 [ 543.012273][ T113] ? __pfx_evict+0x10/0x10 [ 543.013723][ T113] ? _raw_spin_unlock+0x28/0x50 [ 543.015285][ T113] ? dentry_kill+0x584/0xc20 [ 543.016790][ T113] dispose_list+0x117/0x1e0 [ 543.018290][ T113] prune_icache_sb+0xea/0x150 [ 543.019869][ T113] ? list_lru_count_one+0x147/0x320 [ 543.021625][ T113] ? __pfx_prune_icache_sb+0x10/0x10 [ 543.023412][ T113] super_cache_scan+0x3ac/0x5c0 [ 543.025023][ T113] do_shrink_slab+0x416/0x1200 [ 543.026754][ T113] shrink_slab+0xa82/0x12e0 [ 543.028386][ T113] ? shrink_slab+0x677/0x12e0 [ 543.030347][ T113] ? __pfx_shrink_slab+0x10/0x10 [ 543.032050][ T113] ? lock_acquire+0x1d1/0x380 [ 543.033549][ T113] shrink_one+0x398/0x850 [ 543.034916][ T113] ? shrink_node+0x2b00/0x4320 [ 543.036612][ T113] shrink_node+0x2b20/0x4320 [ 543.038323][ T113] ? shrink_node+0x286e/0x4320 [ 543.040099][ T113] ? __pfx_shrink_node+0x10/0x10 [ 543.041986][ T113] ? find_held_lock+0x2b/0x80 [ 543.043646][ T113] ? balance_pgdat+0xb20/0x1f00 [ 543.045305][ T113] balance_pgdat+0xb20/0x1f00 [ 543.046939][ T113] ? do_raw_spin_lock+0x128/0x260 [ 543.048633][ T113] ? __pfx_balance_pgdat+0x10/0x10 [ 543.050317][ T113] ? lockdep_hardirqs_on+0x7d/0x110 [ 543.052005][ T113] ? __lock_acquire+0x5c0/0x1f40 [ 543.053647][ T113] ? rcu_is_watching+0x13/0xc0 [ 543.055188][ T113] kswapd+0x556/0xb50 [ 543.056631][ T113] ? __pfx_kswapd+0x10/0x10 [ 543.058124][ T113] ? __rcu_read_lock+0x20/0x70 [ 543.059710][ T113] ? __pfx_autoremove_wake_function+0x10/0x10 [ 543.062201][ T113] ? __kthread_parkme+0x18f/0x230 [ 543.064324][ T113] ? kthread+0x13a/0x450 [ 543.066158][ T113] ? __pfx_kswapd+0x10/0x10 [ 543.067793][ T113] kthread+0x373/0x450 [ 543.069330][ T113] ? __pfx_kthread+0x10/0x10 [ 543.071045][ T113] ret_from_fork+0x730/0xd60 [ 543.072630][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 543.074299][ T113] ? __switch_to+0x800/0x10f0 [ 543.075902][ T113] ? __pfx_kthread+0x10/0x10 [ 543.077435][ T113] ret_from_fork_asm+0x1a/0x30 [ 543.078988][ T113] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.592341][T16690] bond0: (slave syz_tun): Releasing backup interface [ 543.651211][T16693] bond0: (slave syz_tun): Releasing backup interface [ 543.654907][T16694] bridge0: port 3(syz_tun) entered disabled state [ 543.656187][T16694] syz_tun (unregistering): left allmulticast mode [ 543.656201][T16694] syz_tun (unregistering): left promiscuous mode [ 543.656268][T16694] bridge0: port 3(syz_tun) entered disabled state [ 543.682065][ T8957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.682088][ T8957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.798277][ T8957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.798311][ T8957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.861707][ T8957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.861731][ T8957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.921402][ T8957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.921426][ T8957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.079775][ T8957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.080865][ T8957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.081588][ T8957] bond0 (unregistering): Released all slaves [ 544.082711][ T8957] bond1 (unregistering): Released all slaves [ 544.240582][ T5452] 8021q: adding VLAN 0 to HW filter on device eth22 [ 544.376790][ T5452] 8021q: adding VLAN 0 to HW filter on device eth23 [ 544.478845][ T8957] dummy0: left promiscuous mode [ 544.479826][ T8957] team0: left promiscuous mode [ 544.479837][ T8957] team_slave_0: left promiscuous mode [ 544.479898][ T8957] team_slave_1: left promiscuous mode [ 544.481506][ T8957] hsr_slave_0: left promiscuous mode [ 544.481771][ T8957] hsr_slave_1: left promiscuous mode [ 544.481991][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.482001][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.482246][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.482255][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.483987][ T8957] veth1_macvtap: left promiscuous mode [ 544.484012][ T8957] veth0_macvtap: left promiscuous mode [ 544.484066][ T8957] veth1_vlan: left promiscuous mode [ 544.484091][ T8957] veth0_vlan: left promiscuous mode [ 544.575981][ T8957] team0 (unregistering): Port device team_slave_1 removed [ 544.580107][ T8957] team0 (unregistering): Port device team_slave_0 removed [ 544.603659][ T5452] 8021q: adding VLAN 0 to HW filter on device eth24 [ 544.792277][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25 [ 544.900204][ T8957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.950085][ T8957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.983182][ T8957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.031731][ T8957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.099136][ T8957] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.142171][ T8957] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.183753][ T8957] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.220375][ T8957] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.227698][ T5452] 8021q: adding VLAN 0 to HW filter on device eth30 [ 545.358939][ T5452] 8021q: adding VLAN 0 to HW filter on device eth31 [ 545.478279][ T8957] bridge_slave_1: left allmulticast mode [ 545.478295][ T8957] bridge_slave_1: left promiscuous mode [ 545.478430][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.479238][ T8957] bridge_slave_0: left allmulticast mode [ 545.479250][ T8957] bridge_slave_0: left promiscuous mode [ 545.479308][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.501549][ T8957] bridge_slave_1: left allmulticast mode [ 545.501565][ T8957] bridge_slave_1: left promiscuous mode [ 545.501642][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.502607][ T8957] bridge_slave_0: left allmulticast mode [ 545.502618][ T8957] bridge_slave_0: left promiscuous mode [ 545.502674][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.575538][ T8957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.580019][ T8957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.581061][ T8957] bond0 (unregistering): Released all slaves [ 545.583308][ T8957] bond1 (unregistering): Released all slaves [ 545.621146][ T8957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.622243][ T8957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.623086][ T8957] bond0 (unregistering): Released all slaves [ 545.734578][ T8957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.735626][ T8957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.736137][ T8957] bond0 (unregistering): Released all slaves [ 545.745167][ T5452] 8021q: adding VLAN 0 to HW filter on device eth32 [ 545.930014][ T5452] 8021q: adding VLAN 0 to HW filter on device eth33 [ 546.081962][ T5452] 8021q: adding VLAN 0 to HW filter on device eth34 [ 546.189821][ T5452] 8021q: adding VLAN 0 to HW filter on device eth35 [ 546.214769][ T8957] hsr_slave_0: left promiscuous mode [ 546.215087][ T8957] hsr_slave_1: left promiscuous mode [ 546.215347][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.215357][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.215726][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.215737][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.233838][ T8957] hsr_slave_0: left promiscuous mode [ 546.234179][ T8957] hsr_slave_1: left promiscuous mode [ 546.234576][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.234590][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.235014][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.235026][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.240911][ T8957] hsr_slave_0: left promiscuous mode [ 546.243736][ T8957] hsr_slave_1: left promiscuous mode [ 546.244074][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.246234][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.254185][ T8957] veth1_macvtap: left promiscuous mode [ 546.254233][ T8957] veth0_macvtap: left promiscuous mode [ 546.254294][ T8957] veth1_vlan: left promiscuous mode [ 546.254331][ T8957] veth0_vlan: left promiscuous mode [ 546.264822][ T8957] veth1_macvtap: left promiscuous mode [ 546.264865][ T8957] veth0_macvtap: left promiscuous mode [ 546.264935][ T8957] veth1_vlan: left promiscuous mode [ 546.264979][ T8957] veth0_vlan: left promiscuous mode [ 546.458032][ T8957] team0 (unregistering): Port device team_slave_1 removed [ 546.462284][ T8957] team0 (unregistering): Port device team_slave_0 removed [ 546.570593][ T8957] team0 (unregistering): Port device team_slave_1 removed [ 546.574137][ T8957] team0 (unregistering): Port device team_slave_0 removed [ 546.617260][ T5452] 8021q: adding VLAN 0 to HW filter on device eth36 [ 546.792921][ T5452] 8021q: adding VLAN 0 to HW filter on device eth37 [ 546.936216][ T5452] 8021q: adding VLAN 0 to HW filter on device eth38 [ 547.134444][ T5452] 8021q: adding VLAN 0 to HW filter on device eth40 [ 547.307835][ T5452] 8021q: adding VLAN 0 to HW filter on device eth39 [ 547.457659][ T5452] 8021q: adding VLAN 0 to HW filter on device eth41