last executing test programs: 2m39.884904502s ago: executing program 1 (id=421): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_enter(r1, 0x64f1, 0xb673, 0x1, &(0x7f0000000000)={[0x9, 0x5]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2m39.175264249s ago: executing program 1 (id=427): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xffffffffffffff77, &(0x7f0000000040)) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlinkat(&(0x7f0000002040)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000000)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x8000000000002) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x0) setregid(0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xfe) keyctl$revoke(0x3, r7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) 2m38.864534746s ago: executing program 1 (id=430): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x4, 0x12) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/53], 0x38}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r6, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r6}}, 0x120) ioctl$FIONREAD(r1, 0x541b, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r7, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2m38.380901571s ago: executing program 1 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20c000, 0x0) (fail_nth: 3) 2m38.28465716s ago: executing program 1 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x3, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000040)=0x56, 0x4) openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300000000000085000000a0000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0xd) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xbbc27f8675d5604c}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4800) 2m38.028656815s ago: executing program 1 (id=440): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='0', 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2fb9b67d9f18f8576c8c2f31f2cccfd6699e7a9999be1b63aeb58afe1076c88ae62704e479d6d323d5edf6f010c3673238355f459d4def80592bcb95b296734fd330a19fc31be730e61421e54b312e88b2872c38662ad0121983afce8856cd1402dbbc444314c8a2950e0ea5beec0727ec5fea09a5c49729957ccc81e5c29e546adc7c06d632aad4d82c35f05690fc9d677bd2ada4e31204dfd45105492f839b0dd8eac853d686fe89afbe25ec33689051c3c979cf35b0a4da25776de82f4127839051bba9b9ce6634200aca802a"], 0x0, 0x51}, 0x28) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @in=@rand_addr=0x64010101, @in=@broadcast}}, @sadb_address={0x3, 0x6, 0x32, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) sendmsg(r3, &(0x7f0000000580)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="e0cb76489826fd4286c67b98c4dd4b49d07fc7062a967ebfab3013", 0x1b}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000300)="05afd91c04890063c9f8d2d0a57562962b6d048db2747bdfcfad16f1c2830617d63bdbbfefdcee2e293a04ec21e7f8dac7ca1e291374b001e13989b536965876a46b888adcc47bac24e9b43d1b3e5e6fdac20bbef7fbee9f1efe7b3a89b53b455444f8df87ba543e500cec1475aec018a321869388b62e0cab1f89250669da45c251cf916c0afe715c73d29526772144815c48d4ec5ad589621254960be8d14fd9605b27fbbd79ed4a98a824e750a816eea49e03bb0dc3ec260fbdae7fc363c7ecb64141d1db178ff08290f3bd1504e9f1c6c8f5abe336a5a8eab5a164f2e8d6", 0xe0}], 0x3, &(0x7f0000000440)=[{0x44, 0x111, 0x6708, "8f24f48970a381286e6d3500e7dec69b082867325c871ef1ccec9f5c66054110eed9db2662ae2a0de2584c0ab3bd74656ab864a648"}, {0xd8, 0x113, 0x7fff, "fac278ba85dcd10200298694ac13ba924167c23972f288a7b5227914e2a14624328fb572423a5755fd0b001aa789f878684444b619cbd7a4dd5337e1a281cb9e0c1ce8f49a32a2e7e34c052c7176d9afbca707d2e3b71673be2faece2e6208d4e1cc130416289a933ea219528f7a273fd20a4e171908f8c309fa38f6aaa7da7229de748f1c57e3d93850d43c2852cb4e27eb2b390a42c9d7a8454fde51bfaba0d49239e4331e73bb4c961f207f3b18094d9ccaeb3ebcc3e62aca5d0a70cbff546e5cdcf3075a3a009ed1"}, {0xc, 0x182, 0x6}, {0x14, 0x29, 0x2, "81f67539cb9b"}], 0x13c}, 0x800) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x81}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) r13 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r13, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r11, @ANYRES16, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRES8=r8, @ANYRESOCT=r8, @ANYRES8=r3, @ANYBLOB="5400c3ead0a742efbdc37d9d370508728dc9d80d61281ef8a45c653e3079199106ae404bcf372c90d17c2441208a47", @ANYBLOB="9026065fb343d2983766bc2b459f5f5bcf41502bb67203e1f9c8f7d7df6eaded3346702ee5deb0b4ce732864304a977c1f7b3afbe98333eb4740e7e2366667706df5f65ddb8b7bfa133c39a5fcb39475ca6322e2888751e3ab7784fc0463dd8f5d84fbb26942cce2571905d4934ca48fd3d0dae51bc9ced13a925714d44a764485410f5d7befb5cbc6f0a3412b63ad7fe5b7af19a32aab521178104611c1edd2bded5478d57c32d4a2aa28b8cfc4a594e41a910df422970d87b8ebe6e40ff2c2535e4cd3aeb14d0925e87ab5bacb6be6182d7f7b29a031eee80a80", @ANYRES8=r10, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m37.881958763s ago: executing program 32 (id=440): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='0', 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2fb9b67d9f18f8576c8c2f31f2cccfd6699e7a9999be1b63aeb58afe1076c88ae62704e479d6d323d5edf6f010c3673238355f459d4def80592bcb95b296734fd330a19fc31be730e61421e54b312e88b2872c38662ad0121983afce8856cd1402dbbc444314c8a2950e0ea5beec0727ec5fea09a5c49729957ccc81e5c29e546adc7c06d632aad4d82c35f05690fc9d677bd2ada4e31204dfd45105492f839b0dd8eac853d686fe89afbe25ec33689051c3c979cf35b0a4da25776de82f4127839051bba9b9ce6634200aca802a"], 0x0, 0x51}, 0x28) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @in=@rand_addr=0x64010101, @in=@broadcast}}, @sadb_address={0x3, 0x6, 0x32, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) sendmsg(r3, &(0x7f0000000580)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="e0cb76489826fd4286c67b98c4dd4b49d07fc7062a967ebfab3013", 0x1b}, {&(0x7f0000000180)="682b899da53886be1edc3786dfd8fd58ed458549c724086ce0de6497d65ff1b6c2b6c00c9a2073492c8809c89fa689c7c488c21290fd81970c2a2936cbd0842c1858e2bd75c27a2bbe336e61f7a6a2ebc2d68b98c8824c935fdef58f9fa7af54d7a9b45f824d277dfd7fddb19887a05e8e5ce4b31e50f7125706e4cac9062b6369372e1887d3d53f5a851e3e4015bba67de22975da26d66be470698a5486a4312e1a1f6ff7d3b42acae9ba194f833f42e83b1664f7cb9a1e7331fc29c3016625906ff8baadff331cde590b5cb9e94f5d788e4e74e27f5e6076744c2b6f24135cb3bec618a155fd765fde48e912e354769bed58b6e8dd01a4d73ae6dfa9c2", 0xfe}, {&(0x7f0000000300)="05afd91c04890063c9f8d2d0a57562962b6d048db2747bdfcfad16f1c2830617d63bdbbfefdcee2e293a04ec21e7f8dac7ca1e291374b001e13989b536965876a46b888adcc47bac24e9b43d1b3e5e6fdac20bbef7fbee9f1efe7b3a89b53b455444f8df87ba543e500cec1475aec018a321869388b62e0cab1f89250669da45c251cf916c0afe715c73d29526772144815c48d4ec5ad589621254960be8d14fd9605b27fbbd79ed4a98a824e750a816eea49e03bb0dc3ec260fbdae7fc363c7ecb64141d1db178ff08290f3bd1504e9f1c6c8f5abe336a5a8eab5a164f2e8d6", 0xe0}], 0x3, &(0x7f0000000440)=[{0x44, 0x111, 0x6708, "8f24f48970a381286e6d3500e7dec69b082867325c871ef1ccec9f5c66054110eed9db2662ae2a0de2584c0ab3bd74656ab864a648"}, {0xd8, 0x113, 0x7fff, "fac278ba85dcd10200298694ac13ba924167c23972f288a7b5227914e2a14624328fb572423a5755fd0b001aa789f878684444b619cbd7a4dd5337e1a281cb9e0c1ce8f49a32a2e7e34c052c7176d9afbca707d2e3b71673be2faece2e6208d4e1cc130416289a933ea219528f7a273fd20a4e171908f8c309fa38f6aaa7da7229de748f1c57e3d93850d43c2852cb4e27eb2b390a42c9d7a8454fde51bfaba0d49239e4331e73bb4c961f207f3b18094d9ccaeb3ebcc3e62aca5d0a70cbff546e5cdcf3075a3a009ed1"}, {0xc, 0x182, 0x6}, {0x14, 0x29, 0x2, "81f67539cb9b"}], 0x13c}, 0x800) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000000)={0x8d, 0xfffffffd, 0xffffffff, 0xe, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x81}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r9) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) r13 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$vim2m_VIDIOC_QUERYBUF(r13, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r11, @ANYRES16, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRES8=r8, @ANYRESOCT=r8, @ANYRES8=r3, @ANYBLOB="5400c3ead0a742efbdc37d9d370508728dc9d80d61281ef8a45c653e3079199106ae404bcf372c90d17c2441208a47", @ANYBLOB="9026065fb343d2983766bc2b459f5f5bcf41502bb67203e1f9c8f7d7df6eaded3346702ee5deb0b4ce732864304a977c1f7b3afbe98333eb4740e7e2366667706df5f65ddb8b7bfa133c39a5fcb39475ca6322e2888751e3ab7784fc0463dd8f5d84fbb26942cce2571905d4934ca48fd3d0dae51bc9ced13a925714d44a764485410f5d7befb5cbc6f0a3412b63ad7fe5b7af19a32aab521178104611c1edd2bded5478d57c32d4a2aa28b8cfc4a594e41a910df422970d87b8ebe6e40ff2c2535e4cd3aeb14d0925e87ab5bacb6be6182d7f7b29a031eee80a80", @ANYRES8=r10, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m35.281013809s ago: executing program 4 (id=441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f00000000c0)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/fs/cifs/open_files\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffff, 0x0, 0xdb, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0xa, 0xa, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x8b, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfd}, {0x0, 0xffff, 0x0, 0x83, 0x1, 0x0, 0x1, 0x1}, {}, {}, 0x20, 0x0, 0x0, 0x30, 0x2, 0x1, 0xfe000000, [0x0, 0x4, 0x6]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0x800}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x4, 0x1, 0x5, 0xe, 'syz1\x00', 0x67}, 0x4, 0x40, 0x8, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) read(r2, &(0x7f0000000100)=""/256, 0x100) 2m35.132434115s ago: executing program 4 (id=460): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x100a02, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000580), 0x8040, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x2284, &(0x7f0000001800)=@type=0x3) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video(0x0, 0x7f, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x8, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000000, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x2]}) setresgid(0x0, 0x0, 0xee01) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0xffe000) 2m34.198382496s ago: executing program 4 (id=467): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setxattr$security_ima(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v1={0x2, "260187d9576db979"}, 0x9, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r2, 0x0, 0x55, 0xe9, &(0x7f0000000480)="08b81f621a20ddc5709f61ef52d99d40a1593afa1cc2d4a8097112af4b8e074328168300182fdccb4b96edd95e655136273059da81221221dc42e1ec32aa0321791ff8a3fc10669dedf949a4c1f838f2307438cea9", &(0x7f0000000600)=""/233, 0x5fc, 0x0, 0xb3, 0x1000, &(0x7f0000000700)="83d6526df4d1fa471cc7d81bf82623e57844d06faed57762fb0c09ee65f5f48858adc0e38e38607b9f88c69c052f4a8e952ead6091e697d02d7a1b8cefef15ba68769c9e830aebe9a11d57e644027b8b9b461c261b8c4573470e5d0436d1bd2aa9e5461f574cdd9e25b61edb39d0a133781fabfc03fb60ef151f536cda653e087a8b90d6251c12fb80c8fb35582a98cc679eec237d063c01022ee5c14adc8ec2668feee78b074beb71ee09de8b9d50bfce884a", &(0x7f00000007c0)="85546ec6dadaa9e29b16780d0c04e707848ae3db95adc70a52181f4e30088e0a7fcf695003b7d7c34e47fea94a8f42d19b142cdf3b0473f8ba57a4b7eaea3c00bfd45fb07b178a91e52a9bd93880a1487be615f68aa3cbe35bf8b3694b374b9b53c1f396e50c64512c99adce86ff65f57b7547d5e9cc44c955b4d7895e18dd55fbec02eb4ca0e57f01ee62daa74f904025a9b2ab64bd8af0271e24c058ec651c5aa56b29fb176d506fba90499412df8821f60502d3fe5fc71a675564e14b5f728ac4cc373d9f8c8fa351bf361f9b5093e0ddb27cda703f9c238814b73521742a2a7084175c0971db96b536cf238688be098dcaf98e35439fe9b1c2fef54465bb05323cc1ad1780760be9a7dfff8e3a4ac9561c250e2fd0cd2d7a5589b82ea4422e8512bc32036641d98bbb0a0ae033c707c95d5f09f5a1f68dcebf031d41b07e50b7d939ace1597cb0d9babfd7c7afad9f20c4b28919582cea1f24b89c0c28aab98d96608492e6f4fadef9cc9928029732419a52fb37428c8186732ff1992041385d627a80eceebde94d58d399c5b6cb4f4591c3e4849216f33abd0cedc83952ffa7c52088337e8ca3aaf5762d4dbd5f64776c4345f33d9035e7fe61b843e757ea1d020ff139f45450721516476f84bfed2a4d92d442cfd61e38806c97b182e8630d58ce08c96054568cffb156b82b6013cc8edbfda10bec6631fc53f63e12cd32509b28fdc50600c99296091d4d90435a2be95a9de6e822aa840853dc03899b39de766f91e8940fd6a805e560dd4bb73eae4e0ef28b2dfe0d4029a82d87e770c809f7422054d22fb8f45daeeaa949fb69c2a5e218377fa93c7e61057dde3b35010ee69f8c32fcf342632d30bc8413ad359d692c0d4c9c390c192d29d4273281669b919e09d3fb90d3802fbebe336abb56643d9e7ef3e5a8158e0543bed6c575a0aff50ddb6f1678408e14f58d8e11b439149d50c45317d985571440ae79e91121570d524faa45692ae3b685601e3863cd32f3ecdc35024a0827fc732e25c57facef169a32b9c2d1c5801228bc27f2a79116b9bc8b93b987737b4c589dbbd586057ef68af26bf17aa7f77b9165d5c734c438536f275d8c21681ff777547cbf1b07276227fa29758b7469bb28ee2c966978eb5b50dfd085b798ea5f3a07d4077627c2c5aa176366c4b4440f4c2eb646f0fe9302867863f4bbe07bf252f24f654e2ea58352fa99ae8a93e45d6193b828048b1e33f5ce5d00296e97ece55f60c64133485a9b2f738d76c4c824370908ef394bc3fa9b94aac9885f92834c006eb2bb732f9de980d7709582cf4ddd0b6e83649664617f27349b00976447b102b639cb41d07422e2aa4811b87e23ad68b0101b53bca909899236c6f09e12a71e816071c030ac73d8caf3ec9861fb9638e5f014c43eb3fa1ec5cfb60b838d00f1f57af14e573741f009205d3268f27aa55b1b39fd71c23b7e30fc2762a65933d44c2db252c74844a81bb1dc947e353ee7d83cac4655b93769ca0093c3f4d652d97015fa77d0b963193f25dc44979cb5f332341a42b69ec34c224fcdf6b197058b418478419abb004c7e64be4e77850fa08292bf7917002039e3bb580f9c3739641c5362e3018dc5de626cd6d1747d4dc2ab1805f082564c265d729bb7ed7051bef079b74343061af066da827dbc406ef6496a1b7d1912b520ff81ad14e4d4cbbb46a385727d04edb22327de64c495033516636f68aafd826e7fe4542be5a8f8d59a3277b6e45ab3dc852309471f5cd0db893cb6d5fdcf2a67bd73097a9da4b96cfd5b90c3ba4b8e6a353d0f451f791a8f02a9b406eca7fb9507e2a5b446a8a0f38f6d3c900bc312e5c39a270a192bb9510daffae445b3247aab66ba0490f26464ac58e89c5cefecf02c9bc614d61d9279cc18a710318d45f7d3c7985790ef3a70c8b939993940902f3d9df6c47142fcdb527648b19409e35dd99fcddd45efd98c5f9e9ae6dc3efb4aaf6f30c2cbc42566fb85cc4e3e516d96631a04c031af8521c92140c7b62c6daf8d2226dfc73a9f0804e1774b46c97e7ee421bbfe6f0f32be5b9898c1016c0d4ece8a149172456783e44a2fa4a672d24bb24c967651a9f564fb5797b7c3462cf6fcf5a81c4f1db200c4d47e3ab180ee5ea60e829cca6c5d3f8d45b0e673e74f02d753f5d8c77aaf27f062f1f5243a72c20636d5748cd07bd0c8cdeb847a0e8aa5dd189b24d7f4105104aac0f93a144da51c8a8ac51cc14a3ab27e702b91b98bef6e97fe1bff262a4954c11c264f570eb2c0e2a64aa2d60e87f4bd66ff47727d4f1730fa00490b94958b01b6ab5c74bec12c65ff9c1da416490904c80ff9d9b2ff0fb6344b1284d7b2c80ce4f0a013a8c54b433325981d9e967cf5fd9c07a26badbb3f5e9c5de6a2b756e464f6657a7990ff5a18d777ccc5e08c7d2211074716fde2a27033837fafb5511a12b0c122a5f00a2799b0c9acaa83d7462e30316b5135b8891e0af49e6ca07c0148190e0f6d8a6897ad968ca1dca3797c17c141cc705538298b3edd3862a7aaa9c2c9f829074e838568d9ac9236f6ca76d56ff912ed95eae59a99098f05913438369681fd7d0a8a324380cdcfcaab847b61a554edf1d2c825d1a922ed9cd47768536efabc20496377129cc0b99328a4e584d772ddc244f0d027c6c4bc651031a8c353a742088432bce441a9e9fe2303c892c16e6f5a815b536f18c8d7f623f903e90dc21e545e65c9bac43d77e9830bb1a841e08c04d461125809422a976aaf24052e2a4d993e755497ef8b97576b718f7d9d36f6a9b62df61e891a73a81756d52fb71beaa4ef9db07fb6235d0b0e54ec01eeefbd6c545f3be96475ef13a509a3946c829f01b44fbd494fb979bf36c2bcc8fe467bbffaac8f7774d12ba9e184f1c85e8bc04a5476f327fa4e10f6bd3f426ac3350578d6d89816db1f14151a41fa1a7be1cc5ea0e2805beb43fff401e9cbf0f9ddaef37900324e929e7fd08f7f02b61225424b98e04ac29c15802d2a19284ec75549bef89d5850d91770e0848a96daa911e5a0c87ac544b3963f8d2ede1c2c3e6131e8e69dcde1bc35ba3b03cec3c1ccd6bb14760ce5198cd91312a9a16a2f7ac64e0ec2f563e4baeb68c03d4428d8f798ef3fc4b7085cfadf50b28b2816234da1a89cb06f6f55e0fa202de36d273ada12f5b7d51b2d923c2e30bdb11c1ee52990cde9b3a6d1fc923bfa0fd41a38dca1029883b897926081821485909b07409c0eee4cbdf4ae59a7365b31151a27b32e78bf0cbe55c567ee41960c355fa703cfa5a1be2df7e727aa79fdc648d852f32ce6dbf682fd7249df87c998ec616f2a4ce633011629008a5089b0a0700232e4fe094a395b11adc9db337a22490b96c3f8de959884c26b899fd47727d7d3dcf146f05d97427d0632fd6b4d66abfb5f05d4bcff7a8aad145f4e429cd1c16615b3ae3cde3b7218e04eae8b0065bf7e306915bac88edd9cdd8f3b7a76e78a11f5d82936e798723a0700a5737f916523c9ff4bd55a332f95dece21b74561e333ec69ca90a92cce6d53b0ffcaf94430abffe9a9496c7713288b465b142554b7b5052ca748e42b4e7d61963a09247d1a86c379bd2e066de4caf09ca3ac197f34b4a1356aeaa82dc1128c9de43e8ec7a2a598c5ea24227539b4744e8162e9ae630b8e5e1eb94a915cdd779d4a07850c1a34d941e3e9522f56bee6d7becf9b6fa290f6dcadebe8e751d3735044c949e6622dcb302a79c945e6eb88219a07dd5ba73bd3f54eb929ea0f78e966d7afcb35671a3ea0274c683370db94e151118168a7a515dbe7a11a9f5d0b0900a34d369ebb8c560f905d2f583ca56673ec2e5b8fe4c134428e5806606e285e79a5bca7a101b25fbc2e72f5df35ca8ae1171554031cfcfe7311307622aef5d991656144733f00602bcafc798fca9b4f0fe6b905fd12f36dccc0655de283f84118206e26cef521e47ff2f656a721b2621b82a2ca62c2425fbb12ad6dcb24ec27ea7bf35ea5a74ad8eed71286589c31676c98046b7134cae072d8dfdcf7916647b07db11f9bca81f0b7efeba3fe372dd90ad944175a2653107a437b6c0bc7e81e6859d3542b0aa9d093eb9b38a5dcff2c1a87a0fb5f008ae1f9a9ea85889aab527762311413ba4e3ea39af07756e2f69f94e0d576130db90d6a860243eb30e22474691baa6eca16d062c11aa231c85e965a8a53eda7a1ed715418db978b69e96f42a76650a59a7b842c2124f08b23dab1fe4e1de37f75dea4a6ad8b0a375c3bfd874d657b00fe7b02d22f10ab01d0c25528d4023205da54b30f67a938eba8aaeafd9be61ec47b425c838788f33b7f60887d929656b0dfebfa0db5d98ec8e129b3078f013430858c42aa916ce19d6002bb48a1c15542d993b3a37f813f55c6efe1673792499c1d33b389bb4456ef201dada3c4a206d751d0ae98ffd316f27b98c41414fdc232e0eacdcea84ae851d6b784c114735289e0abdf3a7d93c9fab8689d115915679d059850cb1ecb60bf3d0efad4d94ce0771e49ac5c5de481d3345994e99c65e19047e6faf154d93299a916b9e343048b4cfec0f37e4daa02f4043baeda23d43950d56c1e9ccee2207d76f20a094a84c2f7e16e70d3e64a0fff030c4089ae1a524b99b37fcbf315be7a12f01d4f98cece22a51457ea734ab0080ddac3f8760ba0ee923064446d960174910f1ed62bf6750386b085ebdc8de96263ddda2d393a3758633fa82880abb9c4936c0aca1ce405502d83ff53db078f8f933a9421aae534944239be7ea0f8110af115ffc8203d8f5b8f8b0073ef1927d9e86235cd12eb70fcf8364fa18e567b38a5ddb447b6df5f847540a5df7c16160d3efea200b57318f9d4b89ab64d04ec652b20d53616c5879b68e60b28aafac3f12685bf7786f9e8aaf90e009c4800e2b9010d636d2db3bf08e358603e6cc1e5fa81c87e13b6973095f5ce53de1a8650dff43156357a1f343adbb666c786546abb29c9696d3b5e987c461f110bc35da1f1f6a2a1205f242d5f04a61e06cd3601ef5d3765866a433d983976761804167b7866a3344d4c64b342db03857d1f04216b5e0051c63c7c9c107e0bdda710cc180c3c15db284a1db9ac3707e655b48ae2160091f3573097e403cc2f562f6486096052e8636823dceb0ee9f6492528d8e3b9b5db139aae3e020b9eec0e87fce254a63a70e0c763699c50e7f244057b1d1f5d6158e44448eb0fe411b7ea364c5db3770ffa4744c10ab5f28d885b19388d59b2540d870dc95f61a4ce1b6fc66d01e9e30fd32884198cd0397ba7a700705ff25d52c621776af0e6a0f2b02709895512bbb10689938609211040d409d171e38008489243af4be1bd39d22b818492e613a7ca239d43b91bd6b6c5f37c6fef4531d54a8a8c3d8640b47546ff9772e0ffcfaa05171aa88bf58f3b592cf4c4c3070b80b4157d582185b588aef9a0535f3f81985e680a9c4bff747d7fefdec3f11fcc1c197d9f8a429d685260b6d2d96b7305f5071ee08c26feba8a182319ca79148e163a15e1da74c4cb7d3f4e3ab6bc294d75c8d3b13e91244188bb24d8ea15e544b884159e19029bc1ff90901bc4b034e2b3c96b2200294e3b3d68100bc63edcec47b1a31bf129f69ff82c4c07fb1149984bc754d5a74a59bbf12fcf8f5ee094dbd14644a03a6f8a88c870cb493556eb97983b070dd856ca755be09890a31f9f6251b954073f069f02f6c9db8b57d55d48ac281ec85974d27c251fdd532c7f56d83a2c899a233ca2c6d0c5c68fc5", 0x0, 0x0, 0x7bf9}, 0x4c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r6, 0x29, 0x19, 0x0, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x20, r7, 0x100, 0x70bd26, 0x25dfdbbb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x61}}}}, ["", "", "", "", "", ""]}, 0x2d}, 0x1, 0x0, 0x0, 0x4040080}, 0x4) sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSNLIST(r8, 0x8008640b, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) 2m34.038885922s ago: executing program 4 (id=469): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) (fail_nth: 3) 2m32.061897986s ago: executing program 4 (id=488): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') mprotect(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000000)=""/83, 0x53, 0x3) 2m32.006238554s ago: executing program 33 (id=488): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') mprotect(&(0x7f000007d000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000000)=""/83, 0x53, 0x3) 1m50.867906045s ago: executing program 3 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x168}}}, 0x0) 1m50.8021929s ago: executing program 3 (id=809): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_enter(r1, 0x64f1, 0xb673, 0x1, &(0x7f0000000000)={[0x9, 0x5]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4048010) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1m49.917408949s ago: executing program 3 (id=813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r3 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 1m48.836875671s ago: executing program 3 (id=822): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="26067f0c24db7efa45e87c018ab7d428f6174788586bc7"], 0x10) close(r2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x20, 0xd, 0x4, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x65, 0x0, 0x9d, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop, @generic={0x0, 0x11, "732ecbfa78a19ba036fc0ec2d88b70"}, @timestamp={0x44, 0x10, 0x46, 0x0, 0xb, [0xe, 0x100, 0x9]}]}}}}}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x10f, '\x00', r6, r7, 0x1, 0x4, 0x2}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) 1m48.482628669s ago: executing program 3 (id=827): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000100)='./file1\x00', 0x144) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) lseek(r5, 0x7, 0x1) r6 = fsmount(r1, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x1c, r0, 0x703, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040800) 1m48.087727448s ago: executing program 3 (id=828): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x4c}}, 0x20) 1m48.00217343s ago: executing program 34 (id=828): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x4c}}, 0x20) 1m12.13952576s ago: executing program 0 (id=1067): flistxattr(0xffffffffffffffff, &(0x7f0000000840)=""/251, 0xfb) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffffffffffb3, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0xe0889, &(0x7f0000000780)={[{@xino_auto}, {@redirect_dir_nofollow}, {@redirect_dir_off}, {@volatile}, {@xino_off}, {@redirect_dir_follow}, {@redirect_dir_follow}, {@nfs_export_off}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="000000633ac8ff0000000007020000c0ffffffb72300000085000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0x0}, 0x94) socket(0x25, 0x801, 0x7) openat$dir(0xffffff9c, &(0x7f00000006c0)='./bus\x00', 0x2040, 0x9b) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300), 0x2, 0x1) r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r4, 0x0, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 1m11.249691327s ago: executing program 0 (id=1073): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r4 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 1m10.370155673s ago: executing program 0 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(r5, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x9}, 0x6, 0x2, 0x49f5, 0x5d, 0xc, 'syz0\x00', "36d059535b6f7804c53d19a3003b389993d6c386e54d783611c335309039745b", "f4f3270282bebaf85cdad5aafa299eafe54ae01af586476691af354aa38fc2dd", [{0xc, 0x80, {0x2, 0x8}}, {0x4, 0xe2c9, {0x0, 0x1000}}, {0xb, 0x9, {0x1, 0xc00}}, {0x4, 0x3, {0x2, 0x7}}, {0x7, 0x3, {0x1b6cbd1ce1a6645d, 0x2}}, {0x16c5, 0x8, {0x0, 0x46af}}, {0xfffc, 0x6, {0x2, 0x4}}, {0xfc76, 0x7fff, {0x3, 0x3}}, {0x5, 0xad6a, {0x3, 0x3}}, {0x9, 0x3, {0x3, 0x2}}, {0x4, 0x1, {0x3, 0x200}}, {0x5, 0xff, {0x2, 0x8}}, {0x3, 0x69, {0x0, 0x7}}, {0x7, 0x2, {0x1, 0xac8}}, {0x1, 0x4, {0x0, 0x1}}, {0x7, 0x800, {0x0, 0x10}}, {0x5, 0xa, {0x2, 0xffff}}, {0xff, 0xa, {0x0, 0xb786}}, {0x10, 0x8, {0x0, 0x1ff}}, {0xe, 0x9, {0x3, 0x1}}, {0x1, 0x3, {0x0, 0x8}}, {0x83, 0x2, {0x3, 0x2}}, {0x200, 0x56e, {0x3, 0xfc}}, {0x635c, 0xc17, {0x1, 0xb}}, {0x4, 0x6, {0x0, 0x40000000}}, {0x9, 0x4, {0x3, 0xb88}}, {0xe, 0x5, {0x3, 0x4}}, {0xd, 0x5, {0x3, 0x5}}, {0x4, 0x4, {0x1, 0x1dd0}}, {0x3, 0xb, {0x2, 0x1}}, {0x7, 0x1, {0x2, 0xfffffffe}}, {0x0, 0xecc, {0x0, 0x4}}, {0x2, 0x9, {0x0, 0x1}}, {0xb, 0x3, {0x0, 0x6}}, {0x80, 0x7, {0x0, 0x4}}, {0x7ff, 0x3, {0x1, 0x2}}, {0x640a, 0x0, {0x3, 0x1}}, {0x3c9, 0x6, {0x0, 0x6}}, {0x7, 0x1000, {0x1, 0x76beb582}}, {0x9, 0x2, {0x1, 0x9}}]}}}]}, 0x268}}, 0x8000) 1m9.351591293s ago: executing program 0 (id=1083): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="26067f0c24db7efa45e87c018ab7d428f6174788586bc7"], 0x10) close(r2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x20, 0xd, 0x4, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x65, 0x0, 0x9d, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop, @generic={0x0, 0x11, "732ecbfa78a19ba036fc0ec2d88b70"}, @timestamp={0x44, 0x10, 0x46, 0x0, 0xb, [0xe, 0x100, 0x9]}]}}}}}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x10f, '\x00', r6, r7, 0x1, 0x4, 0x2}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) 1m9.123087215s ago: executing program 0 (id=1085): r0 = socket(0x11, 0x4, 0x4dd) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) utime(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000400)={0xf, 0x5}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$CDROMVOLCTRL(r1, 0x5392, &(0x7f0000000100)={0xa, 0x6, 0x3a, 0x8}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) 1m8.299933066s ago: executing program 0 (id=1088): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f00000009c0), 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000a80), 0x100) 1m8.261484696s ago: executing program 35 (id=1088): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f00000009c0), 0x100) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000a80), 0x100) 4.763640158s ago: executing program 7 (id=1552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x1ff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2a060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 4.553481434s ago: executing program 2 (id=1553): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8e) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf23d56be12069408}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200007bd00050092002b0000000500920003000000822b0e456100000005009208000000000400cc000400cc000400cc0008000100600000000400cc00"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0xfffffffffffffc2d, &(0x7f0000000200)}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@initdev, @in=@private}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0x3, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xb000200}) 3.869692803s ago: executing program 2 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2020800, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) socket(0x9, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) keyctl$instantiate(0xc, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a747275737465603a20303030813030303020004f4a3a6ffb8603f2d0ec0906e0ba99970f"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @broadcast}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x4, 0x10}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 3.773052855s ago: executing program 7 (id=1560): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)='\a', 0x1}], 0x1}}], 0x1, 0x2006c0c0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8, 0x400}, 0x20) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 3) 3.77264932s ago: executing program 7 (id=1561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r4 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 3.630520701s ago: executing program 2 (id=1562): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x525, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x36, 0xf, 0x2f, 0x8, 0x293c, 0x5702, 0x586c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x513, 0x3, 0x80, 0x7, 0x90, 0x6, "", [{{0x9, 0x4, 0x80, 0x8, 0x6, 0xe3, 0xe4, 0xea, 0x2, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xb, "0e", '`'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xc, '5', "2aa3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x1, 0xcf, 0x7}]}], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x36, 0xeb, 0x0, [@generic={0xd1, 0x1, "855ce6830bfee88f986b5863aed034aeba4e73cc0498f5366ef981a2cb2783d04d932bc2fdfa0da84b33dc3e45171de3eee38e8cef3173c898b0a6fd04b3b403b9613d4e311db65ad04de81e9c4b168f35836586cefebb8644f4827aa07f837b6e7a75208aa32d713eea7c48b0f8db135f1c504dc7b045c4a3d48a5f13117783eaee9bb54ce06c3ab6f16892a9d764779ff00f1df4423fd28aff1ac3b7fa8a54cb51be6ceb9c44bc1fc4c27672a22e6478e09315707dc0f58aa7445d641ecda1635f31a22f5c71e552992508323015"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0x0, [@generic={0x83, 0x23, "773cd99ee4d58169ae808ab907890e8ddea66b71a08c70db5ca401814fd2c091f5a0659b841c62fa352c986a6efa15f2ef6fda125f9ef3acb1f5aa25c474cb786d83446c501c3d758b2a951bff92f17c486df09cd61c8f3c4dc79caf88bf7036ea56c84252bd55d592eb67b182bcf20448a679c38c3a6f7231c5e8b0fd0d61abef"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x5d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x39f, 0x3, 0x2, 0xfe, [@generic={0xf, 0x23, "8657808fcc8a5b6d74d31f59a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x74, 0x4, [@generic={0x2, 0x7d}, @generic={0x16, 0x1c, "98a1e9ba1de11961f8c913892e685216e4b35a1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x4, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x800}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x0, 0xf9, [@generic={0xf7, 0x2, "79858a1f5c52aef325d6c715bab79693d2685c380001210b0d08069eed9b39de8db0ca52ae1cf026aaaa44398834766a669d413dd90ef161d89f05b6b451c11ddbf36267db86fefc6cd5e78ce6100b9a454718f6d0fc648e7605ab26154c9679992f9f1a7baf94bd8b407593a1b9907ee79bcb569dc00f84157350fdb0a252a3ab14af3a41b0fad391741038dab78da027d7f1a83877dffd04500c5a0a98ad959906f0ad15ea56aabab835f03517db26ddf112861a9db1e71ae260428d1ea5c85f95d391e5b958152bedd3b2893b454f58de19d701133d63f052560717b7aefd18bbd9e17a694c683d849a708cbe4f34e6dbdd4df1"}, @generic={0x2f, 0x23, "a5340737d60746a07880017f677be81a5aaf1f6f9a9a0f5213124266bd9106a16bb8b5aff2bfe823926488956a"}]}}]}}, {{0x9, 0x4, 0x48, 0xf, 0x1, 0xe0, 0x99, 0x1f, 0x2, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0xfe, "428816c51f1b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe3, 0x5f}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x9, 0xe, [@generic={0x38, 0x30, "9e79f38dcd56557dc4cc300496db9c5c7b89e2b34f20f61ead6b97ce454271ec1bd419cfe18ecc7a70dde5162b150f1eebee9e048931"}]}}]}}, {{0x9, 0x4, 0xb7, 0x6, 0x4, 0xf1, 0x28, 0x3a, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff3c, 0x40}}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x39, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x7, 0x0, [@generic={0xd0, 0xd, "da8bcf0faaf3edb3a291afc7dccafcbdbf23ca18e647a0487d33acc4eb138c598a08d7eb750e5874af0e1cd068187220664a6a64f9865b3da675791444fa13920238192d681f89a2c850f2dc69ae100cb1e8b9a0839fe9b04564dac10271f849469b42764b60996ac51d419aba2edd1e74f796bec73f6968d87257ede5de7f592f296c6bbab20cd194cf827e6a41cfab6531c45025a67f3e2cdedb8aa785b2c90d872b20e76ff6a8e27b2187d8f995270e72236d7bf877e54fa15ba2b66ed96ea72c125c8364a6d74207bc5f22d0"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x19, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x24, 0xb1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x9, 0x4, [@generic={0x6, 0x21, "289cfede"}, @generic={0x6f, 0x2, "f5f74f7b918696d6945d49450640137fd2700f80464aa7d468747fb562ee940a8f3390a9b5a77990bfe9d0a68d1cffed79b2ff56b138987a241a1be6ec2e82637afd1595ad2773f5fb91e802ecb2a0b1e5c149ea0ac5314177d896c8a79001c30706d7dd1a86770b6ea04ebfe5"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x18, &(0x7f0000000ec0)={0x40, 0xa, 0x7e, {0x7e, 0x10, "20cac59cd5d08ce49a55bb799a96caf85c0ee0b6dd4dada3fc9e01c0c7303e64e6e47afedeb024ad6eeb7f7edd621e3d070352ddd4d539c45d676556238d94c571a7d1ba3d9b6b9dfd6cd980058a735bb2babd558906ceb6d3746fa1d78b53b8c468d656da70fd1355397ccf9a6b359b904de9bc5d689991a32e4805"}}, &(0x7f0000000f80)={0x0, 0x3, 0x71, @string={0x71, 0x3, "b3c2cdce06bb932a1990cba32077f0c9a30612555283c8678863b73254b0dc377b1491073562d3df734ae62465f0a646158eb93f94cc475dafb238a46831304a0ab6aa24d48d75f11260b0157553e71847d733d250c87343127a96898ed6bb4b21422314e23052318b65620da7871c"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x0, 0xfb, "12e269af", "adc8862c"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x4, 0x5, 0x2, 0x3, 0x5}}}, &(0x7f0000001600)={0x44, &(0x7f0000001200)={0x0, 0x14, 0x18, "48d42213fc440a749b562125650a65ad82a96a46bac83bba"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x73}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000013c0)={0x40, 0xb, 0x2, 'H%'}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001440)={0x40, 0x13, 0x6, @local}, &(0x7f0000001480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "fad6"}, &(0x7f0000001500)={0x40, 0x1a, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001580)={0x40, 0x1e, 0x1}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x6}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/89, 0x59, 0x1, &(0x7f0000000340)=""/79, 0x4f}, &(0x7f0000000480)=0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100020, 0x0) 3.503501851s ago: executing program 5 (id=1563): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.31329052s ago: executing program 5 (id=1564): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x100a02, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000580), 0x8040, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x2284, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video(0x0, 0x7f, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x8, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000000, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x2]}) setresgid(0x0, 0x0, 0xee01) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0xffe000) 2.842408538s ago: executing program 7 (id=1566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000028c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x12, 0x60a, 0x1d4, 0x202, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1a4, 0x1d4, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@set3={{0x40}, {{0x0, 0x3, 0x4}, {0x1}, {0x81, 0x8000}, 0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xffbe, 0x0, 0x372, 'netbios-ns\x00', 'syz1\x00', {0x40}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x404) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DVD_WRITE_STRUCT(r4, 0x5390, &(0x7f0000000040)=@bca={0x3, 0xbc, "59e03b458d5cfb16fc6c37c29d22d6054fe5529e5179efdbd3ce1d3d92c3b8f4734e94f26fd962cd4fcaf9f0380272fd04e3fe012c5887cdd46d1d9930c7fc1d10d11f5fe1ef815768117063f9e6eb77a05ed90ebdb2aff8f6a337a9d290c85fcc146bf458c89bcc62f2fdc6d6bc312032000a6421c020dcbdb1665de6439d5b3abee82e9466fb5468d812b21c4e8c87d45faaf2cad6ced9283ae19660a9c7a7c0d3babf45d5586040ca0c085c6f1db8b5e5f41b15982ab3802ca62a"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r7, 0x0, r7, 0x0, 0x9, 0x0) connect$rds(r7, &(0x7f0000000880)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r8) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500030090"], 0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250400000014000300fe88000000000000000000000000000114000200fe880000000000000000000000000101140006"], 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 2.553645516s ago: executing program 2 (id=1569): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_enter(r1, 0x64f1, 0xb673, 0x1, &(0x7f0000000000)={[0x9, 0x5]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x4048010) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2.382299879s ago: executing program 5 (id=1570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r4 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 1.614949481s ago: executing program 2 (id=1572): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8e) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf23d56be12069408}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200007bd00050092002b0000000500920003000000822b0e456100000005009208000000000400cc000400cc000400cc0008000100600000000400cc00"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0xfffffffffffffc2d, &(0x7f0000000200)}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000440)=0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000e0301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0x3, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xb000200}) 1.394315524s ago: executing program 5 (id=1574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x400, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x158}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) open(0x0, 0xc100, 0x29) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}], 0x10, 0x40040}], 0x1, 0x8040) r4 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff91, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xd55, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x88}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x2}, 0x8) 1.031976495s ago: executing program 6 (id=1577): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f00000009c0), 0x100) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000a80), 0x100) 972.77667ms ago: executing program 7 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x525, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x36, 0xf, 0x2f, 0x8, 0x293c, 0x5702, 0x586c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x513, 0x3, 0x80, 0x7, 0x90, 0x6, "", [{{0x9, 0x4, 0x80, 0x8, 0x6, 0xe3, 0xe4, 0xea, 0x2, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xb, "0e", '`'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xc, '5', "2aa3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x1, 0xcf, 0x7}]}], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x36, 0xeb, 0x0, [@generic={0xd1, 0x1, "855ce6830bfee88f986b5863aed034aeba4e73cc0498f5366ef981a2cb2783d04d932bc2fdfa0da84b33dc3e45171de3eee38e8cef3173c898b0a6fd04b3b403b9613d4e311db65ad04de81e9c4b168f35836586cefebb8644f4827aa07f837b6e7a75208aa32d713eea7c48b0f8db135f1c504dc7b045c4a3d48a5f13117783eaee9bb54ce06c3ab6f16892a9d764779ff00f1df4423fd28aff1ac3b7fa8a54cb51be6ceb9c44bc1fc4c27672a22e6478e09315707dc0f58aa7445d641ecda1635f31a22f5c71e552992508323015"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0x0, [@generic={0x83, 0x23, "773cd99ee4d58169ae808ab907890e8ddea66b71a08c70db5ca401814fd2c091f5a0659b841c62fa352c986a6efa15f2ef6fda125f9ef3acb1f5aa25c474cb786d83446c501c3d758b2a951bff92f17c486df09cd61c8f3c4dc79caf88bf7036ea56c84252bd55d592eb67b182bcf20448a679c38c3a6f7231c5e8b0fd0d61abef"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x5d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x39f, 0x3, 0x2, 0xfe, [@generic={0xf, 0x23, "8657808fcc8a5b6d74d31f59a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x74, 0x4, [@generic={0x2, 0x7d}, @generic={0x16, 0x1c, "98a1e9ba1de11961f8c913892e685216e4b35a1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x4, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x800}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x0, 0xf9, [@generic={0xf7, 0x2, "79858a1f5c52aef325d6c715bab79693d2685c380001210b0d08069eed9b39de8db0ca52ae1cf026aaaa44398834766a669d413dd90ef161d89f05b6b451c11ddbf36267db86fefc6cd5e78ce6100b9a454718f6d0fc648e7605ab26154c9679992f9f1a7baf94bd8b407593a1b9907ee79bcb569dc00f84157350fdb0a252a3ab14af3a41b0fad391741038dab78da027d7f1a83877dffd04500c5a0a98ad959906f0ad15ea56aabab835f03517db26ddf112861a9db1e71ae260428d1ea5c85f95d391e5b958152bedd3b2893b454f58de19d701133d63f052560717b7aefd18bbd9e17a694c683d849a708cbe4f34e6dbdd4df1"}, @generic={0x2f, 0x23, "a5340737d60746a07880017f677be81a5aaf1f6f9a9a0f5213124266bd9106a16bb8b5aff2bfe823926488956a"}]}}]}}, {{0x9, 0x4, 0x48, 0xf, 0x1, 0xe0, 0x99, 0x1f, 0x2, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0xfe, "428816c51f1b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe3, 0x5f}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x9, 0xe, [@generic={0x38, 0x30, "9e79f38dcd56557dc4cc300496db9c5c7b89e2b34f20f61ead6b97ce454271ec1bd419cfe18ecc7a70dde5162b150f1eebee9e048931"}]}}]}}, {{0x9, 0x4, 0xb7, 0x6, 0x4, 0xf1, 0x28, 0x3a, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff3c, 0x40}}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x39, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x7, 0x0, [@generic={0xd0, 0xd, "da8bcf0faaf3edb3a291afc7dccafcbdbf23ca18e647a0487d33acc4eb138c598a08d7eb750e5874af0e1cd068187220664a6a64f9865b3da675791444fa13920238192d681f89a2c850f2dc69ae100cb1e8b9a0839fe9b04564dac10271f849469b42764b60996ac51d419aba2edd1e74f796bec73f6968d87257ede5de7f592f296c6bbab20cd194cf827e6a41cfab6531c45025a67f3e2cdedb8aa785b2c90d872b20e76ff6a8e27b2187d8f995270e72236d7bf877e54fa15ba2b66ed96ea72c125c8364a6d74207bc5f22d0"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x19, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x24, 0xb1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x9, 0x4, [@generic={0x6, 0x21, "289cfede"}, @generic={0x6f, 0x2, "f5f74f7b918696d6945d49450640137fd2700f80464aa7d468747fb562ee940a8f3390a9b5a77990bfe9d0a68d1cffed79b2ff56b138987a241a1be6ec2e82637afd1595ad2773f5fb91e802ecb2a0b1e5c149ea0ac5314177d896c8a79001c30706d7dd1a86770b6ea04ebfe5"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x18, &(0x7f0000000ec0)={0x40, 0xa, 0x7e, {0x7e, 0x10, "20cac59cd5d08ce49a55bb799a96caf85c0ee0b6dd4dada3fc9e01c0c7303e64e6e47afedeb024ad6eeb7f7edd621e3d070352ddd4d539c45d676556238d94c571a7d1ba3d9b6b9dfd6cd980058a735bb2babd558906ceb6d3746fa1d78b53b8c468d656da70fd1355397ccf9a6b359b904de9bc5d689991a32e4805"}}, &(0x7f0000000f80)={0x0, 0x3, 0x71, @string={0x71, 0x3, "b3c2cdce06bb932a1990cba32077f0c9a30612555283c8678863b73254b0dc377b1491073562d3df734ae62465f0a646158eb93f94cc475dafb238a46831304a0ab6aa24d48d75f11260b0157553e71847d733d250c87343127a96898ed6bb4b21422314e23052318b65620da7871c"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x0, 0xfb, "12e269af", "adc8862c"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x4, 0x5, 0x2, 0x3, 0x5}}}, &(0x7f0000001600)={0x44, &(0x7f0000001200)={0x0, 0x14, 0x18, "48d42213fc440a749b562125650a65ad82a96a46bac83bba"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x73}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000013c0)={0x40, 0xb, 0x2, 'H%'}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001440)={0x40, 0x13, 0x6, @local}, &(0x7f0000001480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "fad6"}, &(0x7f0000001500)={0x40, 0x1a, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001580)={0x40, 0x1e, 0x1}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x6}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/89, 0x59, 0x1, &(0x7f0000000340)=""/79, 0x4f}, &(0x7f0000000480)=0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100020, 0x0) 623.313277ms ago: executing program 2 (id=1579): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x100a02, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000580), 0x8040, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x2284, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$video(0x0, 0x7f, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x8, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000000, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x2]}) setresgid(0x0, 0x0, 0xee01) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0xffe000) 523.077663ms ago: executing program 5 (id=1580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xe, 0xa}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x1ff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) unshare(0x2c060000) unshare(0x2a060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) 453.435282ms ago: executing program 5 (id=1581): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0x200, 0x3, 0x95, 0x8, 0x9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0x200, 0x3, 0x95, 0x8, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080), 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) (async) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r6, 0x2) preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) syz_io_uring_setup(0x590c, &(0x7f0000000080)={0x0, 0xa4f3, 0x1000, 0x3, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_GETXATTR={0x2c, 0x40, 0x0, 0x0, 0x0, &(0x7f000000df00)="8ce480464666051c3757d25155", 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0}}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f00001b2000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x0, 0x3) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r12, &(0x7f0000003380)={0x2020}, 0x2020) (async) read$FUSE(r12, &(0x7f0000003380)={0x2020}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff80a5adc0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 353.474112ms ago: executing program 6 (id=1582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2020800, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]}) socket(0x9, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) keyctl$instantiate(0xc, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a747275737465603a20303030813030303020004f4a3a6ffb8603f2d0ec0906e0ba99970f"], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r1, 0x1, 0x6, @broadcast}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 260.39349ms ago: executing program 6 (id=1583): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x1, 0x40000000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 93.872394ms ago: executing program 6 (id=1584): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000007, 0x9e1d, 0x0, 0x5fc056ce, 0xda80, 0x6, 0x7}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.998892ms ago: executing program 7 (id=1585): socket(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r0}, 0xc) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x3, 0x4, 0x8}, 0x50) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='rdma', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)='ipv4', 0x4) 2.143605ms ago: executing program 6 (id=1586): r0 = socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) shutdown(r0, 0x2000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r2 = openat$cgroup_int(r1, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) sendfile(r2, r2, 0x0, 0x85b5) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000040)={0x1, 0x0, 0x261d, 0x1, 0x2, 0x1, 0x50, 0xb, 0x5}) 0s ago: executing program 6 (id=1587): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x5, 0x525, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x36, 0xf, 0x2f, 0x8, 0x293c, 0x5702, 0x586c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x513, 0x3, 0x80, 0x7, 0x90, 0x6, "", [{{0x9, 0x4, 0x80, 0x8, 0x6, 0xe3, 0xe4, 0xea, 0x2, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0xb, "0e", '`'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0x1, 0xc, '5', "2aa3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x69, 0x1, 0xcf, 0x7}]}], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x36, 0xeb, 0x0, [@generic={0xd1, 0x1, "855ce6830bfee88f986b5863aed034aeba4e73cc0498f5366ef981a2cb2783d04d932bc2fdfa0da84b33dc3e45171de3eee38e8cef3173c898b0a6fd04b3b403b9613d4e311db65ad04de81e9c4b168f35836586cefebb8644f4827aa07f837b6e7a75208aa32d713eea7c48b0f8db135f1c504dc7b045c4a3d48a5f13117783eaee9bb54ce06c3ab6f16892a9d764779ff00f1df4423fd28aff1ac3b7fa8a54cb51be6ceb9c44bc1fc4c27672a22e6478e09315707dc0f58aa7445d641ecda1635f31a22f5c71e552992508323015"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0x0, [@generic={0x83, 0x23, "773cd99ee4d58169ae808ab907890e8ddea66b71a08c70db5ca401814fd2c091f5a0659b841c62fa352c986a6efa15f2ef6fda125f9ef3acb1f5aa25c474cb786d83446c501c3d758b2a951bff92f17c486df09cd61c8f3c4dc79caf88bf7036ea56c84252bd55d592eb67b182bcf20448a679c38c3a6f7231c5e8b0fd0d61abef"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x5d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x39f, 0x3, 0x2, 0xfe, [@generic={0xf, 0x23, "8657808fcc8a5b6d74d31f59a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x1, 0x74, 0x4, [@generic={0x2, 0x7d}, @generic={0x16, 0x1c, "98a1e9ba1de11961f8c913892e685216e4b35a1f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x4, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x800}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x0, 0xf9, [@generic={0xf7, 0x2, "79858a1f5c52aef325d6c715bab79693d2685c380001210b0d08069eed9b39de8db0ca52ae1cf026aaaa44398834766a669d413dd90ef161d89f05b6b451c11ddbf36267db86fefc6cd5e78ce6100b9a454718f6d0fc648e7605ab26154c9679992f9f1a7baf94bd8b407593a1b9907ee79bcb569dc00f84157350fdb0a252a3ab14af3a41b0fad391741038dab78da027d7f1a83877dffd04500c5a0a98ad959906f0ad15ea56aabab835f03517db26ddf112861a9db1e71ae260428d1ea5c85f95d391e5b958152bedd3b2893b454f58de19d701133d63f052560717b7aefd18bbd9e17a694c683d849a708cbe4f34e6dbdd4df1"}, @generic={0x2f, 0x23, "a5340737d60746a07880017f677be81a5aaf1f6f9a9a0f5213124266bd9106a16bb8b5aff2bfe823926488956a"}]}}]}}, {{0x9, 0x4, 0x48, 0xf, 0x1, 0xe0, 0x99, 0x1f, 0x2, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x1, 0xfe, "428816c51f1b"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0xe3, 0x5f}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x9, 0xe, [@generic={0x38, 0x30, "9e79f38dcd56557dc4cc300496db9c5c7b89e2b34f20f61ead6b97ce454271ec1bd419cfe18ecc7a70dde5162b150f1eebee9e048931"}]}}]}}, {{0x9, 0x4, 0xb7, 0x6, 0x4, 0xf1, 0x28, 0x3a, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xff3c, 0x40}}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x39, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0x7, 0x0, [@generic={0xd0, 0xd, "da8bcf0faaf3edb3a291afc7dccafcbdbf23ca18e647a0487d33acc4eb138c598a08d7eb750e5874af0e1cd068187220664a6a64f9865b3da675791444fa13920238192d681f89a2c850f2dc69ae100cb1e8b9a0839fe9b04564dac10271f849469b42764b60996ac51d419aba2edd1e74f796bec73f6968d87257ede5de7f592f296c6bbab20cd194cf827e6a41cfab6531c45025a67f3e2cdedb8aa785b2c90d872b20e76ff6a8e27b2187d8f995270e72236d7bf877e54fa15ba2b66ed96ea72c125c8364a6d74207bc5f22d0"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x19, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x24, 0xb1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x3, 0x9, 0x4, [@generic={0x6, 0x21, "289cfede"}, @generic={0x6f, 0x2, "f5f74f7b918696d6945d49450640137fd2700f80464aa7d468747fb562ee940a8f3390a9b5a77990bfe9d0a68d1cffed79b2ff56b138987a241a1be6ec2e82637afd1595ad2773f5fb91e802ecb2a0b1e5c149ea0ac5314177d896c8a79001c30706d7dd1a86770b6ea04ebfe5"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x18, &(0x7f0000000ec0)={0x40, 0xa, 0x7e, {0x7e, 0x10, "20cac59cd5d08ce49a55bb799a96caf85c0ee0b6dd4dada3fc9e01c0c7303e64e6e47afedeb024ad6eeb7f7edd621e3d070352ddd4d539c45d676556238d94c571a7d1ba3d9b6b9dfd6cd980058a735bb2babd558906ceb6d3746fa1d78b53b8c468d656da70fd1355397ccf9a6b359b904de9bc5d689991a32e4805"}}, &(0x7f0000000f80)={0x0, 0x3, 0x71, @string={0x71, 0x3, "b3c2cdce06bb932a1990cba32077f0c9a30612555283c8678863b73254b0dc377b1491073562d3df734ae62465f0a646158eb93f94cc475dafb238a46831304a0ab6aa24d48d75f11260b0157553e71847d733d250c87343127a96898ed6bb4b21422314e23052318b65620da7871c"}}, &(0x7f0000001000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x60, 0x0, 0xfb, "12e269af", "adc8862c"}}, &(0x7f0000001180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x4, 0x5, 0x2, 0x3, 0x5}}}, &(0x7f0000001600)={0x44, &(0x7f0000001200)={0x0, 0x14, 0x18, "48d42213fc440a749b562125650a65ad82a96a46bac83bba"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0x73}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x5}, 0x0, &(0x7f0000001400)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001440)={0x40, 0x13, 0x6, @local}, &(0x7f0000001480)={0x40, 0x17, 0x6, @remote}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "fad6"}, &(0x7f0000001500)={0x40, 0x1a, 0x2}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000001580)={0x40, 0x1e, 0x1}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x6}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r4, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/89, 0x59, 0x1, &(0x7f0000000340)=""/79, 0x4f}, &(0x7f0000000480)=0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100020, 0x0) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 219.334120][ T43] audit: type=1326 audit(1787941414.732:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.2.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 219.334174][ T43] audit: type=1326 audit(1787941414.732:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.2.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 219.334228][ T43] audit: type=1326 audit(1787941414.732:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.2.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 219.334282][ T43] audit: type=1326 audit(1787941414.732:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.2.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 219.334337][ T43] audit: type=1326 audit(1787941414.732:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.2.1149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 220.453186][T10149] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1154'. [ 220.453255][T10149] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1154'. [ 220.455445][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 220.455488][T10149] bridge_slave_1: left allmulticast mode [ 220.455499][T10149] bridge_slave_1: left promiscuous mode [ 220.455622][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.460361][T10149] bridge_slave_0: left allmulticast mode [ 220.460378][T10149] bridge_slave_0: left promiscuous mode [ 220.460521][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.572777][ T58] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 220.616637][T10152] FAULT_INJECTION: forcing a failure. [ 220.616637][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 220.621717][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.2.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.621760][T10152] Tainted: [L]=SOFTLOCKUP [ 220.621767][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.621780][T10152] Call Trace: [ 220.621786][T10152] [ 220.621794][T10152] dump_stack_lvl+0x100/0x190 [ 220.621824][T10152] should_fail_ex.cold+0x5/0xa [ 220.621849][T10152] should_failslab+0xc2/0x120 [ 220.621873][T10152] __kmalloc_cache_noprof+0x91/0x6d0 [ 220.621902][T10152] ? proc_thread_self_get_link+0x1a6/0x210 [ 220.621929][T10152] proc_thread_self_get_link+0x1a6/0x210 [ 220.621953][T10152] pick_link+0xac2/0x13c0 [ 220.621979][T10152] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 220.622005][T10152] step_into_slowpath+0x9ba/0xf90 [ 220.622043][T10152] ? __pfx_step_into_slowpath+0x10/0x10 [ 220.622078][T10152] ? lookup_fast+0x2da/0x600 [ 220.622101][T10152] ? inode_permission+0x374/0x620 [ 220.622130][T10152] link_path_walk+0xf28/0x1cc0 [ 220.622168][T10152] path_openat+0x1ac/0x2440 [ 220.622193][T10152] ? __pfx_path_openat+0x10/0x10 [ 220.622235][T10152] do_file_open+0x20e/0x430 [ 220.622260][T10152] ? __pfx_do_file_open+0x10/0x10 [ 220.622298][T10152] ? _raw_spin_unlock+0x28/0x50 [ 220.622317][T10152] ? alloc_fd+0x471/0x7a0 [ 220.622344][T10152] do_sys_openat2+0x10f/0x1e0 [ 220.622370][T10152] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.622392][T10152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.622433][T10152] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 220.622459][T10152] __ia32_compat_sys_openat+0x12d/0x210 [ 220.622484][T10152] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 220.622521][T10152] do_int80_emulation+0x166/0x650 [ 220.622546][T10152] asm_int80_emulation+0x1a/0x20 [ 220.622566][T10152] RIP: 0023:0xf71e75ab [ 220.622582][T10152] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 220.622599][T10152] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 220.622619][T10152] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72b1b2e [ 220.622631][T10152] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.622642][T10152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.622654][T10152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.622664][T10152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.622688][T10152] [ 220.628206][T10152] FAULT_INJECTION: forcing a failure. [ 220.628206][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 220.628233][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.2.1155 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.628258][T10152] Tainted: [L]=SOFTLOCKUP [ 220.628264][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.628275][T10152] Call Trace: [ 220.628280][T10152] [ 220.628287][T10152] dump_stack_lvl+0x100/0x190 [ 220.628314][T10152] should_fail_ex.cold+0x5/0xa [ 220.628337][T10152] should_failslab+0xc2/0x120 [ 220.628360][T10152] kmem_cache_alloc_noprof+0x92/0x6a0 [ 220.628379][T10152] ? sk_prot_alloc+0x60/0x2a0 [ 220.628405][T10152] sk_prot_alloc+0x60/0x2a0 [ 220.628428][T10152] sk_alloc+0x36/0xe80 [ 220.628444][T10152] inet_create+0x3a0/0x1060 [ 220.628468][T10152] ? inet_create+0x94/0x1060 [ 220.628492][T10152] __sock_create+0x339/0x860 [ 220.628520][T10152] __sys_socket+0x14d/0x260 [ 220.628544][T10152] ? __pfx___sys_socket+0x10/0x10 [ 220.628566][T10152] ? fput+0x7c/0x100 [ 220.628587][T10152] ? ksys_write+0x1ac/0x250 [ 220.628600][T10152] ? __pfx_ksys_write+0x10/0x10 [ 220.628619][T10152] __ia32_sys_socket+0x72/0xb0 [ 220.628643][T10152] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.628662][T10152] __do_fast_syscall_32+0x13a/0x8b0 [ 220.628681][T10152] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.628700][T10152] do_fast_syscall_32+0x32/0x70 [ 220.628723][T10152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.628745][T10152] RIP: 0023:0xf70aefec [ 220.628764][T10152] Code: Unable to access opcode bytes at 0xf70aefc2. [ 220.628771][T10152] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 220.628803][T10152] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000002 [ 220.628813][T10152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.628823][T10152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.628833][T10152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 220.628843][T10152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.628862][T10152] [ 220.722436][ T58] usb 11-1: Using ep0 maxpacket: 8 [ 220.756570][ T58] usb 11-1: unable to get BOS descriptor or descriptor too short [ 220.756606][ T58] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 220.758116][ T58] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 220.758136][ T58] usb 11-1: can't read configurations, error -71 [ 220.761134][T10161] fuse: Bad value for 'user_id' [ 220.761187][T10161] fuse: Bad value for 'user_id' [ 221.700933][T10179] Invalid argument reading file caps for ./file0 [ 222.492444][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 222.516153][T10196] fuse: Bad value for 'user_id' [ 222.516215][T10196] fuse: Bad value for 'user_id' [ 222.804151][T10194] lo speed is unknown, defaulting to 1000 [ 222.804222][T10194] lo speed is unknown, defaulting to 1000 [ 222.804638][T10194] lo speed is unknown, defaulting to 1000 [ 222.805061][T10194] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 222.805085][T10194] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 222.805111][T10194] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 222.809152][T10194] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 222.819881][T10194] lo speed is unknown, defaulting to 1000 [ 222.820629][T10194] lo speed is unknown, defaulting to 1000 [ 222.823354][T10194] lo speed is unknown, defaulting to 1000 [ 222.824273][T10194] lo speed is unknown, defaulting to 1000 [ 222.825032][T10194] lo speed is unknown, defaulting to 1000 [ 222.825851][T10194] lo speed is unknown, defaulting to 1000 [ 223.115413][ T56] smbdirect: ib_dev[syz0] removed [ 223.120470][ T10] lo speed is unknown, defaulting to 1000 [ 223.120527][ T10] syz0: Port: 1 Link DOWN [ 223.410285][T10217] FAULT_INJECTION: forcing a failure. [ 223.410285][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.419122][T10217] CPU: 0 UID: 0 PID: 10217 Comm: syz.2.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.419166][T10217] Tainted: [L]=SOFTLOCKUP [ 223.419173][T10217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.419185][T10217] Call Trace: [ 223.419191][T10217] [ 223.419199][T10217] dump_stack_lvl+0x100/0x190 [ 223.419229][T10217] should_fail_ex.cold+0x5/0xa [ 223.419254][T10217] _copy_to_user+0x32/0xd0 [ 223.419285][T10217] simple_read_from_buffer+0xcb/0x170 [ 223.419308][T10217] proc_fail_nth_read+0x1af/0x230 [ 223.419337][T10217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.419367][T10217] ? rw_verify_area+0xce/0x6d0 [ 223.419393][T10217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.419427][T10217] vfs_read+0x1e4/0xb40 [ 223.419456][T10217] ? lock_acquire+0x1d1/0x380 [ 223.419481][T10217] ? __fget_files+0x34/0x3d0 [ 223.419499][T10217] ? __pfx_vfs_read+0x10/0x10 [ 223.419525][T10217] ? find_held_lock+0x2b/0x80 [ 223.419544][T10217] ? __fget_files+0x215/0x3d0 [ 223.419564][T10217] ? __fget_files+0x21f/0x3d0 [ 223.419587][T10217] ksys_read+0x12a/0x250 [ 223.419605][T10217] ? __pfx_ksys_read+0x10/0x10 [ 223.419629][T10217] do_int80_emulation+0x166/0x650 [ 223.419655][T10217] asm_int80_emulation+0x1a/0x20 [ 223.419674][T10217] RIP: 0023:0xf71e75ab [ 223.419690][T10217] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 223.419707][T10217] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 223.419725][T10217] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 223.419738][T10217] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 223.419749][T10217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.419760][T10217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.419772][T10217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.419795][T10217] [ 223.939542][T10234] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 223.939610][T10234] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 223.939859][T10234] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 223.941526][T10234] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 224.113958][T10239] input: syz1 as /devices/virtual/input/input39 [ 224.273659][T10248] FAULT_INJECTION: forcing a failure. [ 224.273659][T10248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.273716][T10248] CPU: 3 UID: 0 PID: 10248 Comm: syz.7.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.273743][T10248] Tainted: [L]=SOFTLOCKUP [ 224.273748][T10248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.273756][T10248] Call Trace: [ 224.273760][T10248] [ 224.273765][T10248] dump_stack_lvl+0x100/0x190 [ 224.273784][T10248] should_fail_ex.cold+0x5/0xa [ 224.273798][T10248] _copy_from_user+0x2e/0xd0 [ 224.273817][T10248] bpf_test_init.isra.0+0xaf/0x100 [ 224.273834][T10248] bpf_prog_test_run_xdp+0x587/0x1670 [ 224.273855][T10248] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.273876][T10248] ? fput+0x7c/0x100 [ 224.273889][T10248] ? __bpf_prog_get+0x97/0x290 [ 224.273904][T10248] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.273921][T10248] __sys_bpf+0x2265/0x4a30 [ 224.273935][T10248] ? __pfx___sys_bpf+0x10/0x10 [ 224.273944][T10248] ? lock_acquire+0x1d1/0x380 [ 224.273959][T10248] ? get_pid_task+0x2a/0x250 [ 224.273970][T10248] ? find_held_lock+0x2b/0x80 [ 224.273981][T10248] ? get_pid_task+0xfc/0x250 [ 224.273991][T10248] ? get_pid_task+0xfc/0x250 [ 224.274005][T10248] ? proc_fail_nth_write+0x9f/0x220 [ 224.274029][T10248] ? find_held_lock+0x2b/0x80 [ 224.274043][T10248] ? rcu_read_lock_any_held+0x6a/0x90 [ 224.274055][T10248] ? find_held_lock+0x2b/0x80 [ 224.274066][T10248] ? ksys_write+0x190/0x250 [ 224.274075][T10248] ? ksys_write+0x190/0x250 [ 224.274085][T10248] ? lock_acquire+0x1d1/0x380 [ 224.274108][T10248] ? fput+0x7c/0x100 [ 224.274122][T10248] ? __ia32_sys_bpf+0xcc/0x170 [ 224.274132][T10248] __ia32_sys_bpf+0xcc/0x170 [ 224.274143][T10248] ? __do_fast_syscall_32+0xb3/0x8b0 [ 224.274158][T10248] __do_fast_syscall_32+0x13a/0x8b0 [ 224.274171][T10248] ? lockdep_hardirqs_on+0x7d/0x110 [ 224.274198][T10248] do_fast_syscall_32+0x32/0x70 [ 224.274212][T10248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.274226][T10248] RIP: 0023:0xf6fdefec [ 224.274239][T10248] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 224.274244][T10248] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 224.274256][T10248] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 224.274263][T10248] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.274269][T10248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.274275][T10248] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.274282][T10248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.274295][T10248] [ 224.621603][T10256] fuse: Bad value for 'user_id' [ 224.621674][T10256] fuse: Bad value for 'user_id' [ 224.747928][T10260] FAULT_INJECTION: forcing a failure. [ 224.747928][T10260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.753243][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.2.1189 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.753280][T10260] Tainted: [L]=SOFTLOCKUP [ 224.753288][T10260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.753298][T10260] Call Trace: [ 224.753317][T10260] [ 224.753325][T10260] dump_stack_lvl+0x100/0x190 [ 224.753352][T10260] should_fail_ex.cold+0x5/0xa [ 224.753369][T10260] _copy_from_user+0x2e/0xd0 [ 224.753396][T10260] map_update_elem+0x922/0xb00 [ 224.753424][T10260] ? __pfx_map_update_elem+0x10/0x10 [ 224.753452][T10260] __sys_bpf+0x1f8a/0x4a30 [ 224.753468][T10260] ? __pfx___sys_bpf+0x10/0x10 [ 224.753483][T10260] ? lock_acquire+0x1d1/0x380 [ 224.753504][T10260] ? get_pid_task+0x2a/0x250 [ 224.753520][T10260] ? find_held_lock+0x2b/0x80 [ 224.753541][T10260] ? get_pid_task+0xfc/0x250 [ 224.753557][T10260] ? get_pid_task+0xfc/0x250 [ 224.753573][T10260] ? proc_fail_nth_write+0x9f/0x220 [ 224.753599][T10260] ? find_held_lock+0x2b/0x80 [ 224.753620][T10260] ? rcu_read_lock_any_held+0x6a/0x90 [ 224.753639][T10260] ? find_held_lock+0x2b/0x80 [ 224.753654][T10260] ? ksys_write+0x190/0x250 [ 224.753668][T10260] ? ksys_write+0x190/0x250 [ 224.753679][T10260] ? lock_acquire+0x1d1/0x380 [ 224.753715][T10260] ? fput+0x7c/0x100 [ 224.753737][T10260] ? __ia32_sys_bpf+0xcc/0x170 [ 224.753752][T10260] __ia32_sys_bpf+0xcc/0x170 [ 224.753768][T10260] ? __do_fast_syscall_32+0xb3/0x8b0 [ 224.753787][T10260] __do_fast_syscall_32+0x13a/0x8b0 [ 224.753806][T10260] ? lockdep_hardirqs_on+0x7d/0x110 [ 224.753826][T10260] do_fast_syscall_32+0x32/0x70 [ 224.753847][T10260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.753867][T10260] RIP: 0023:0xf70aefec [ 224.753882][T10260] Code: Unable to access opcode bytes at 0xf70aefc2. [ 224.753890][T10260] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 224.753907][T10260] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080000580 [ 224.753918][T10260] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.753928][T10260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.753937][T10260] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.753948][T10260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.753969][T10260] [ 224.918410][T10266] fuse: Bad value for 'user_id' [ 224.918460][T10266] fuse: Bad value for 'user_id' [ 224.992366][ T76] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 225.142073][ T76] usb 11-1: Using ep0 maxpacket: 8 [ 225.164902][ T76] usb 11-1: unable to get BOS descriptor or descriptor too short [ 225.164972][ T76] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 225.166984][ T76] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 225.167004][ T76] usb 11-1: can't read configurations, error -71 [ 225.851641][ T42] hid (null): unknown global tag 0xe1 [ 225.858404][ T42] hid-generic 0001:1001:0002.0005: unknown main item tag 0x0 [ 225.867236][ T42] hid-generic 0001:1001:0002.0005: unknown main item tag 0x0 [ 225.870676][ T42] hid-generic 0001:1001:0002.0005: unknown main item tag 0x0 [ 225.873718][ T42] hid-generic 0001:1001:0002.0005: unexpected long global item [ 225.881137][ T42] hid-generic 0001:1001:0002.0005: probe with driver hid-generic failed with error -22 [ 226.078616][T10301] FAULT_INJECTION: forcing a failure. [ 226.078616][T10301] name failslab, interval 1, probability 0, space 0, times 0 [ 226.078685][T10301] CPU: 1 UID: 0 PID: 10301 Comm: syz.7.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.078714][T10301] Tainted: [L]=SOFTLOCKUP [ 226.078720][T10301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.078727][T10301] Call Trace: [ 226.078731][T10301] [ 226.078736][T10301] dump_stack_lvl+0x100/0x190 [ 226.078756][T10301] should_fail_ex.cold+0x5/0xa [ 226.078772][T10301] should_failslab+0xc2/0x120 [ 226.078787][T10301] __kmalloc_cache_noprof+0x91/0x6d0 [ 226.078805][T10301] ? create_filter_start.constprop.0+0x81/0x310 [ 226.078824][T10301] create_filter_start.constprop.0+0x81/0x310 [ 226.078842][T10301] apply_subsystem_event_filter+0x188/0x17a0 [ 226.078858][T10301] ? __might_fault+0xc5/0x140 [ 226.078881][T10301] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 226.078901][T10301] ? _copy_from_user+0x59/0xd0 [ 226.078922][T10301] subsystem_filter_write+0x95/0x120 [ 226.078939][T10301] vfs_write+0x2aa/0x1050 [ 226.078951][T10301] ? __pfx_subsystem_filter_write+0x10/0x10 [ 226.078966][T10301] ? lock_acquire+0x1d1/0x380 [ 226.078981][T10301] ? __fget_files+0x34/0x3d0 [ 226.078993][T10301] ? __pfx_vfs_write+0x10/0x10 [ 226.079003][T10301] ? find_held_lock+0x2b/0x80 [ 226.079015][T10301] ? __fget_files+0x215/0x3d0 [ 226.079029][T10301] ? __fget_files+0x21f/0x3d0 [ 226.079045][T10301] ksys_write+0x12a/0x250 [ 226.079055][T10301] ? __pfx_ksys_write+0x10/0x10 [ 226.079065][T10301] ? ksys_write+0x1ac/0x250 [ 226.079075][T10301] ? __pfx_ksys_write+0x10/0x10 [ 226.079089][T10301] __do_fast_syscall_32+0x13a/0x8b0 [ 226.079104][T10301] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.079164][T10301] do_fast_syscall_32+0x32/0x70 [ 226.079185][T10301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.079200][T10301] RIP: 0023:0xf6fdefec [ 226.079214][T10301] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 226.079220][T10301] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 226.079232][T10301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 226.079239][T10301] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 226.079246][T10301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.079252][T10301] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.079259][T10301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.079274][T10301] [ 226.209197][T10306] netlink: 'syz.7.1206': attribute type 21 has an invalid length. [ 226.452151][ T76] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 226.613737][ T76] usb 11-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 226.614860][ T76] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.614894][ T76] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.831041][ T76] qmi_wwan 11-1:1.0: cdc-wdm0: USB WDM device [ 226.862942][ T76] wwan wwan0: port wwan0qmi0 attached [ 226.897810][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1204'. [ 226.915861][T10312] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 227.054112][ T76] qmi_wwan 11-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, d6:7d:8d:d6:a6:cc [ 227.322870][T10333] FAULT_INJECTION: forcing a failure. [ 227.322870][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 227.322925][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.2.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.322943][T10333] Tainted: [L]=SOFTLOCKUP [ 227.322947][T10333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.322954][T10333] Call Trace: [ 227.322958][T10333] [ 227.322963][T10333] dump_stack_lvl+0x100/0x190 [ 227.322982][T10333] should_fail_ex.cold+0x5/0xa [ 227.322997][T10333] should_failslab+0xc2/0x120 [ 227.323011][T10333] __kmalloc_noprof+0xfc/0x840 [ 227.323023][T10333] ? rcu_is_watching+0x13/0xc0 [ 227.323036][T10333] ? tomoyo_realpath_from_path+0xb6/0x690 [ 227.323056][T10333] tomoyo_realpath_from_path+0xb6/0x690 [ 227.323075][T10333] tomoyo_path_number_perm+0x23c/0x580 [ 227.323089][T10333] ? tomoyo_path_number_perm+0x22e/0x580 [ 227.323103][T10333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.323117][T10333] ? __lock_acquire+0x4c5/0x1ec0 [ 227.323136][T10333] ? lock_acquire+0x1d1/0x380 [ 227.323162][T10333] ? from_kuid+0x8d/0xd0 [ 227.323177][T10333] ? __pfx_from_kuid+0x10/0x10 [ 227.323194][T10333] tomoyo_path_chown+0x173/0x1b0 [ 227.323212][T10333] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 227.323231][T10333] ? from_vfsuid+0xea/0x140 [ 227.323247][T10333] ? __pfx_from_vfsuid+0x10/0x10 [ 227.323265][T10333] security_path_chown+0x12a/0x2d0 [ 227.323279][T10333] chown_common+0x3da/0x6e0 [ 227.323295][T10333] ? __pfx_chown_common+0x10/0x10 [ 227.323308][T10333] ? mnt_get_write_access+0x52/0x2f0 [ 227.323325][T10333] ? mnt_get_write_access+0x52/0x2f0 [ 227.323343][T10333] ? mnt_get_write_access+0x1ec/0x2f0 [ 227.323362][T10333] do_fchownat+0x18e/0x1f0 [ 227.323376][T10333] ? __pfx_do_fchownat+0x10/0x10 [ 227.323390][T10333] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 227.323405][T10333] __ia32_sys_lchown16+0xe6/0x120 [ 227.323422][T10333] __do_fast_syscall_32+0x13a/0x8b0 [ 227.323437][T10333] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.323451][T10333] do_fast_syscall_32+0x32/0x70 [ 227.323465][T10333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.323479][T10333] RIP: 0023:0xf70aefec [ 227.323493][T10333] Code: Unable to access opcode bytes at 0xf70aefc2. [ 227.323499][T10333] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000010 [ 227.323511][T10333] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 000000000000ee00 [ 227.323518][T10333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.323525][T10333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.323531][T10333] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 227.323538][T10333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.323552][T10333] [ 227.323557][T10333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.972513][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 228.108866][T10365] FAULT_INJECTION: forcing a failure. [ 228.108866][T10365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.108933][T10365] CPU: 1 UID: 0 PID: 10365 Comm: syz.5.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.108954][T10365] Tainted: [L]=SOFTLOCKUP [ 228.108961][T10365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.108971][T10365] Call Trace: [ 228.108977][T10365] [ 228.108984][T10365] dump_stack_lvl+0x100/0x190 [ 228.109010][T10365] should_fail_ex.cold+0x5/0xa [ 228.109032][T10365] _copy_to_user+0x32/0xd0 [ 228.109056][T10365] simple_read_from_buffer+0xcb/0x170 [ 228.109077][T10365] proc_fail_nth_read+0x1af/0x230 [ 228.109104][T10365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.109132][T10365] ? rw_verify_area+0xce/0x6d0 [ 228.109154][T10365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.109176][T10365] vfs_read+0x1e4/0xb40 [ 228.109201][T10365] ? lock_acquire+0x1d1/0x380 [ 228.109224][T10365] ? __fget_files+0x34/0x3d0 [ 228.109240][T10365] ? __pfx_vfs_read+0x10/0x10 [ 228.109259][T10365] ? find_held_lock+0x2b/0x80 [ 228.109276][T10365] ? __fget_files+0x215/0x3d0 [ 228.109297][T10365] ? __fget_files+0x21f/0x3d0 [ 228.109321][T10365] ksys_read+0x12a/0x250 [ 228.109336][T10365] ? __pfx_ksys_read+0x10/0x10 [ 228.109353][T10365] do_int80_emulation+0x166/0x650 [ 228.109377][T10365] asm_int80_emulation+0x1a/0x20 [ 228.109394][T10365] RIP: 0023:0xf71a75ab [ 228.109408][T10365] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 228.109424][T10365] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 228.109440][T10365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0 [ 228.109448][T10365] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 228.109458][T10365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.109468][T10365] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.109477][T10365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.109501][T10365] [ 228.159259][T10367] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 228.185243][T10367] /dev/sr0: Can't open blockdev [ 228.222330][T10369] FAULT_INJECTION: forcing a failure. [ 228.222330][T10369] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.222461][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.5.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.222490][T10369] Tainted: [L]=SOFTLOCKUP [ 228.222496][T10369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.222504][T10369] Call Trace: [ 228.222509][T10369] [ 228.222515][T10369] dump_stack_lvl+0x100/0x190 [ 228.222534][T10369] should_fail_ex.cold+0x5/0xa [ 228.222548][T10369] ? prepare_alloc_pages+0x16d/0x5b0 [ 228.222576][T10369] should_fail_alloc_page+0xeb/0x140 [ 228.222596][T10369] prepare_alloc_pages+0x1f0/0x5b0 [ 228.222611][T10369] ? unwind_next_frame+0xbd/0x2090 [ 228.222628][T10369] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 228.222652][T10369] ? __lock_acquire+0x4c5/0x1ec0 [ 228.222672][T10369] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.222695][T10369] ? __lock_acquire+0x4c5/0x1ec0 [ 228.222713][T10369] ? lock_acquire+0x1d1/0x380 [ 228.222728][T10369] ? unwind_next_frame+0xbd/0x2090 [ 228.222746][T10369] ? is_bpf_text_address+0x25/0x1a0 [ 228.222763][T10369] ? find_held_lock+0x2b/0x80 [ 228.222774][T10369] ? is_bpf_text_address+0x8a/0x1a0 [ 228.222790][T10369] ? is_bpf_text_address+0x8a/0x1a0 [ 228.222805][T10369] ? bpf_ksym_find+0x124/0x1c0 [ 228.222816][T10369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.222833][T10369] ? policy_nodemask+0xed/0x4f0 [ 228.222850][T10369] alloc_pages_mpol+0x201/0x550 [ 228.222867][T10369] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 228.222882][T10369] ? __lock_acquire+0x4c5/0x1ec0 [ 228.222902][T10369] folio_alloc_mpol_noprof+0x36/0x260 [ 228.222921][T10369] vma_alloc_folio_noprof+0xed/0x1d0 [ 228.222939][T10369] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 228.222961][T10369] do_anonymous_page+0xac9/0x2050 [ 228.222983][T10369] ? __pfx_do_anonymous_page+0x10/0x10 [ 228.222999][T10369] ? rcu_read_unlock+0x2d/0xb0 [ 228.223016][T10369] ? rcu_read_unlock+0x2d/0xb0 [ 228.223033][T10369] ? __pte_offset_map+0x179/0x310 [ 228.223048][T10369] __handle_mm_fault+0x1ff3/0x2f60 [ 228.223068][T10369] ? __pfx___handle_mm_fault+0x10/0x10 [ 228.223084][T10369] ? __pfx_mt_find+0x10/0x10 [ 228.223124][T10369] ? find_vma+0xbf/0x140 [ 228.223136][T10369] ? __pfx_find_vma+0x10/0x10 [ 228.223150][T10369] handle_mm_fault+0x363/0xa20 [ 228.223170][T10369] do_user_addr_fault+0x745/0x12f0 [ 228.223188][T10369] exc_page_fault+0x6f/0xd0 [ 228.223202][T10369] asm_exc_page_fault+0x26/0x30 [ 228.223214][T10369] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 228.223233][T10369] Code: 00 e8 24 88 e6 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 ec a4 58 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 228.223245][T10369] RSP: 0018:ffffc90006f9f9a8 EFLAGS: 00050246 [ 228.223256][T10369] RAX: 0000000000000001 RBX: 000000000000008c RCX: 000000000000008c [ 228.223264][T10369] RDX: 0000000000000001 RSI: ffff88802133c000 RDI: 0000000080002800 [ 228.223271][T10369] RBP: ffffc90006f9fbb0 R08: 0000000000000000 R09: ffffed1004267811 [ 228.223278][T10369] R10: ffff88802133c08b R11: 0000000000000000 R12: ffff88802133c000 [ 228.223286][T10369] R13: 0000000000000000 R14: 0000000080002800 R15: 000000000000008c [ 228.223301][T10369] ? _copy_to_iter+0x4b4/0x1720 [ 228.223322][T10369] ? __pfx__copy_to_iter+0x10/0x10 [ 228.223341][T10369] ? seq_write+0xd7/0x150 [ 228.223358][T10369] ? find_held_lock+0x2b/0x80 [ 228.223370][T10369] ? ip_vs_info_seq_stop+0x31/0xb0 [ 228.223384][T10369] ? ip_vs_info_seq_stop+0x31/0xb0 [ 228.223401][T10369] seq_read_iter+0xdab/0x1270 [ 228.223419][T10369] seq_read+0x344/0x4d0 [ 228.223430][T10369] ? __pfx_seq_read+0x10/0x10 [ 228.223451][T10369] ? lock_acquire+0x1d1/0x380 [ 228.223466][T10369] ? fdget_pos+0x2aa/0x380 [ 228.223481][T10369] ? common_file_perm+0x266/0x500 [ 228.223498][T10369] ? __pfx_seq_read+0x10/0x10 [ 228.223509][T10369] proc_reg_read+0x240/0x330 [ 228.223524][T10369] ? __pfx_proc_reg_read+0x10/0x10 [ 228.223538][T10369] vfs_read+0x1e4/0xb40 [ 228.223557][T10369] ? lock_acquire+0x1d1/0x380 [ 228.223572][T10369] ? __fget_files+0x34/0x3d0 [ 228.223584][T10369] ? __pfx_vfs_read+0x10/0x10 [ 228.223602][T10369] ? find_held_lock+0x2b/0x80 [ 228.223614][T10369] ? __fget_files+0x215/0x3d0 [ 228.223628][T10369] ? __fget_files+0x21f/0x3d0 [ 228.223644][T10369] ksys_read+0x12a/0x250 [ 228.223655][T10369] ? __pfx_ksys_read+0x10/0x10 [ 228.223665][T10369] ? ksys_write+0x1ac/0x250 [ 228.223676][T10369] ? __pfx_ksys_write+0x10/0x10 [ 228.223690][T10369] __do_fast_syscall_32+0x13a/0x8b0 [ 228.223705][T10369] ? lockdep_hardirqs_on+0x7d/0x110 [ 228.223719][T10369] do_fast_syscall_32+0x32/0x70 [ 228.223734][T10369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.223749][T10369] RIP: 0023:0xf7fa7fec [ 228.223763][T10369] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 228.223768][T10369] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 228.223779][T10369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002800 [ 228.223806][T10369] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.223813][T10369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.223820][T10369] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 228.223827][T10369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.223843][T10369] [ 228.262241][ T50] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 228.416141][ T50] usb 12-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 228.417327][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.503605][ T1138] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 228.503668][ T1138] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 228.503689][ T1138] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 228.503710][ T1138] sr 2:0:0:0: [sr0] tag#6 CDB: Rezero Unit/Rewind 01 00 00 00 00 00 00 [ 228.523581][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1224'. [ 228.561852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.689165][T10378] IPVS: ip_vs_edit_dest(): server weight less than zero [ 228.689197][ T1159] IPVS: starting estimator thread 0... [ 228.692115][T10378] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 228.692136][T10378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.692217][T10378] vhci_hcd vhci_hcd.0: Device attached [ 228.694690][T10383] usbip_core: unknown command [ 228.694700][T10383] vhci_hcd: unknown pdu 0 [ 228.694705][T10383] usbip_core: unknown command [ 228.695579][ T5591] vhci_hcd vhci_hcd.5: stop threads [ 228.695589][ T5591] vhci_hcd vhci_hcd.5: release socket [ 228.695599][ T5591] vhci_hcd vhci_hcd.5: disconnect device [ 228.752104][T10381] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 228.752148][T10381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 228.752769][T10381] vhci_hcd vhci_hcd.0: Device attached [ 228.762393][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.764869][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.811887][T10382] IPVS: using max 29 ests per chain, 69600 per kthread [ 228.889741][T10357] tipc: Started in network mode [ 228.889848][T10357] tipc: Node identity ac14140f, cluster identity 4711 [ 228.890023][T10357] tipc: New replicast peer: 172.30.0.8 [ 228.890166][T10357] tipc: Enabled bearer , priority 10 [ 228.892105][ T25] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 228.904189][ T50] usbhid 12-1:1.0: can't add hid device: -71 [ 228.904265][ T50] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 228.910778][ T50] usb 12-1: USB disconnect, device number 6 [ 229.034501][ T1354] usb 48-2: SetAddress Request (2) to port 1 [ 229.034748][ T1354] usb 48-2: new SuperSpeed USB device number 2 using vhci_hcd [ 229.042034][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 229.061281][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 229.061342][ T25] usb 7-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 229.062095][ T25] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 229.062115][ T25] usb 7-1: can't read configurations, error -71 [ 229.117463][ T5888] usb 11-1: USB disconnect, device number 10 [ 229.119043][ T5888] qmi_wwan 11-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 229.273065][ T5888] wwan wwan0: port wwan0qmi0 disconnected [ 229.295031][T10385] vhci_hcd: connection reset by peer [ 229.295330][ T13] vhci_hcd vhci_hcd.5: stop threads [ 229.297069][ T13] vhci_hcd vhci_hcd.5: release socket [ 229.297106][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 229.587029][ T5888] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 229.731955][ T5888] usb 11-1: Using ep0 maxpacket: 8 [ 229.749305][ T5888] usb 11-1: unable to get BOS descriptor or descriptor too short [ 229.749383][ T5888] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 229.750079][ T5888] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 229.750097][ T5888] usb 11-1: can't read configurations, error -71 [ 230.021786][ T10] tipc: Node number set to 2886997007 [ 230.378117][T10438] fuse: Bad value for 'user_id' [ 230.378200][T10438] fuse: Bad value for 'user_id' [ 230.696194][T10445] FAULT_INJECTION: forcing a failure. [ 230.696194][T10445] name failslab, interval 1, probability 0, space 0, times 0 [ 230.696272][T10445] CPU: 3 UID: 0 PID: 10445 Comm: syz.2.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.696298][T10445] Tainted: [L]=SOFTLOCKUP [ 230.696304][T10445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.696315][T10445] Call Trace: [ 230.696322][T10445] [ 230.696329][T10445] dump_stack_lvl+0x100/0x190 [ 230.696356][T10445] should_fail_ex.cold+0x5/0xa [ 230.696379][T10445] should_failslab+0xc2/0x120 [ 230.696401][T10445] kmem_cache_alloc_noprof+0x92/0x6a0 [ 230.696418][T10445] ? __pfx_map_id_range_down+0x10/0x10 [ 230.696441][T10445] ? security_inode_alloc+0x3b/0x2c0 [ 230.696465][T10445] security_inode_alloc+0x3b/0x2c0 [ 230.696483][T10445] inode_init_always_gfp+0xc6f/0xfb0 [ 230.696506][T10445] alloc_inode+0x8e/0x250 [ 230.696530][T10445] alloc_anon_inode+0x2a/0x3e0 [ 230.696552][T10445] anon_inode_make_secure_inode+0x2f/0x140 [ 230.696581][T10445] __anon_inode_getfile+0x1cf/0x280 [ 230.696607][T10445] new_userfaultfd+0x255/0x400 [ 230.696632][T10445] __ia32_sys_userfaultfd+0x4b/0xb0 [ 230.696650][T10445] __do_fast_syscall_32+0x13a/0x8b0 [ 230.696671][T10445] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.696692][T10445] do_fast_syscall_32+0x32/0x70 [ 230.696714][T10445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.696740][T10445] RIP: 0023:0xf70aefec [ 230.696760][T10445] Code: Unable to access opcode bytes at 0xf70aefc2. [ 230.696767][T10445] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000176 [ 230.696785][T10445] RAX: ffffffffffffffda RBX: 0000000000000801 RCX: 0000000000000000 [ 230.696812][T10445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.696822][T10445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.696833][T10445] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 230.696843][T10445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.696866][T10445] [ 230.962852][T10455] jffs2: notice: (10455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.261894][ T58] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 231.311220][T10462] misc userio: Invalid payload size [ 231.317427][T10462] bridge_slave_0: left allmulticast mode [ 231.317496][T10462] bridge_slave_0: left promiscuous mode [ 231.317854][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.328998][T10462] bridge_slave_1: left allmulticast mode [ 231.329057][T10462] bridge_slave_1: left promiscuous mode [ 231.329197][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.365261][T10462] bond0: (slave bond_slave_0): Releasing backup interface [ 231.373671][T10462] bond0: (slave bond_slave_1): Releasing backup interface [ 231.393083][T10462] team0: Port device team_slave_0 removed [ 231.400100][T10462] team0: Port device team_slave_1 removed [ 231.400624][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.400643][T10462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.409576][T10462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.409639][T10462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.413367][ T58] usb 10-1: Using ep0 maxpacket: 8 [ 231.415318][T10462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.430268][ T58] usb 10-1: unable to get BOS descriptor or descriptor too short [ 231.430352][ T58] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 231.431327][ T58] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 231.431350][ T58] usb 10-1: can't read configurations, error -71 [ 231.987633][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1244'. [ 232.185760][T10472] lo speed is unknown, defaulting to 1000 [ 232.187802][T10472] lo speed is unknown, defaulting to 1000 [ 232.193524][T10472] lo speed is unknown, defaulting to 1000 [ 232.196764][T10472] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.203579][T10472] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 232.210633][T10472] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 232.227851][T10472] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 232.248071][T10472] lo speed is unknown, defaulting to 1000 [ 232.257359][T10472] lo speed is unknown, defaulting to 1000 [ 232.259160][T10472] lo speed is unknown, defaulting to 1000 [ 232.260611][T10472] lo speed is unknown, defaulting to 1000 [ 232.262444][T10472] lo speed is unknown, defaulting to 1000 [ 232.264191][T10472] lo speed is unknown, defaulting to 1000 [ 232.479361][T10494] fuse: Bad value for 'user_id' [ 232.479411][T10494] fuse: Bad value for 'user_id' [ 232.599524][ T64] smbdirect: ib_dev[syz0] removed [ 232.603873][ T42] lo speed is unknown, defaulting to 1000 [ 232.603918][ T42] syz0: Port: 1 Link DOWN [ 233.149085][T10505] fuse: Bad value for 'user_id' [ 233.149126][T10505] fuse: Bad value for 'user_id' [ 233.477010][T10510] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 233.521296][T10510] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 233.544092][T10510] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 233.545222][T10510] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1256'. [ 233.761258][T10520] fuse: Bad value for 'user_id' [ 233.761328][T10520] fuse: Bad value for 'user_id' [ 234.061631][ T1354] usb 48-2: device descriptor read/8, error -110 [ 234.460433][ T1354] usb usb48-port2: attempt power cycle [ 234.674629][T10536] fuse: Bad value for 'user_id' [ 234.674693][T10536] fuse: Bad value for 'user_id' [ 234.839233][T10539] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 234.870147][ T1278] nvmet: Created nvm controller 70 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 234.871131][T10539] nvme nvme69: creating 4 I/O queues. [ 234.877372][T10539] nvme nvme69: new ctrl: "testsubsys" [ 235.042461][ T1354] usb usb48-port2: unable to enumerate USB device [ 235.456488][T10554] fuse: Bad value for 'user_id' [ 235.456554][T10554] fuse: Bad value for 'user_id' [ 235.585223][T10558] binder: 10557:10558 ioctl c0306201 80000480 returned -14 [ 235.627376][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 235.627710][ T43] audit: type=1326 audit(1787941431.022:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.627772][ T43] audit: type=1326 audit(1787941431.022:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.627808][ T43] audit: type=1326 audit(1787941431.022:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.627842][ T43] audit: type=1326 audit(1787941431.022:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.627876][ T43] audit: type=1326 audit(1787941431.022:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.628423][ T43] audit: type=1326 audit(1787941431.022:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.628460][ T43] audit: type=1326 audit(1787941431.022:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.628491][ T43] audit: type=1326 audit(1787941431.022:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.628524][ T43] audit: type=1326 audit(1787941431.022:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.628837][ T43] audit: type=1326 audit(1787941431.022:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.6.1271" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 235.900422][T10566] jffs2: notice: (10566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.942112][T10569] FAULT_INJECTION: forcing a failure. [ 235.942112][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.942166][T10569] CPU: 3 UID: 0 PID: 10569 Comm: syz.5.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.942193][T10569] Tainted: [L]=SOFTLOCKUP [ 235.942198][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 235.942204][T10569] Call Trace: [ 235.942209][T10569] [ 235.942214][T10569] dump_stack_lvl+0x100/0x190 [ 235.942233][T10569] should_fail_ex.cold+0x5/0xa [ 235.942248][T10569] _copy_from_user+0x2e/0xd0 [ 235.942267][T10569] snd_rawmidi_ioctl_status32+0xe7/0x2a0 [ 235.942291][T10569] ? __pfx_snd_rawmidi_ioctl_status32+0x10/0x10 [ 235.942308][T10569] ? do_vfs_ioctl+0x226/0x13e0 [ 235.942331][T10569] snd_rawmidi_ioctl_compat+0x1a3/0x3f0 [ 235.942349][T10569] ? __pfx_snd_rawmidi_ioctl_compat+0x10/0x10 [ 235.942367][T10569] ? __fget_files+0x21f/0x3d0 [ 235.942380][T10569] ? __pfx_snd_rawmidi_ioctl_compat+0x10/0x10 [ 235.942397][T10569] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 235.942416][T10569] __do_fast_syscall_32+0x13a/0x8b0 [ 235.942430][T10569] ? lockdep_hardirqs_on+0x7d/0x110 [ 235.942443][T10569] do_fast_syscall_32+0x32/0x70 [ 235.942457][T10569] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.942471][T10569] RIP: 0023:0xf7fa7fec [ 235.942483][T10569] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 235.942488][T10569] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 235.942500][T10569] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0245720 [ 235.942507][T10569] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.942513][T10569] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.942519][T10569] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 235.942525][T10569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.942539][T10569] [ 236.260391][T10578] fuse: Bad value for 'user_id' [ 236.260447][T10578] fuse: Bad value for 'user_id' [ 236.352419][T10581] fuse: Bad value for 'user_id' [ 236.352479][T10581] fuse: Bad value for 'user_id' [ 236.648359][T10586] ipvlan2: entered promiscuous mode [ 236.649525][T10586] team0: Device ipvlan2 failed to register rx_handler [ 236.760254][T10588] loop0: detected capacity change from 0 to 3904 [ 236.813056][T10588] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 236.813100][T10588] ldm_validate_privheads(): Disk read failed. [ 236.815286][T10588] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 236.815306][T10588] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 236.815314][T10588] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 236.815324][T10588] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 236.815334][T10588] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 236.815373][T10588] loop0: [ 236.815383][T10588] loop0: partition table partially beyond EOD, truncated [ 237.116692][T10591] FAULT_INJECTION: forcing a failure. [ 237.116692][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.116776][T10591] CPU: 0 UID: 0 PID: 10591 Comm: syz.5.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.116809][T10591] Tainted: [L]=SOFTLOCKUP [ 237.116815][T10591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.116824][T10591] Call Trace: [ 237.116829][T10591] [ 237.116835][T10591] dump_stack_lvl+0x100/0x190 [ 237.116857][T10591] should_fail_ex.cold+0x5/0xa [ 237.116874][T10591] _copy_from_user+0x2e/0xd0 [ 237.116896][T10591] blkdev_common_ioctl+0x6ff/0x2b80 [ 237.116911][T10591] ? tomoyo_path_number_perm+0x188/0x580 [ 237.116929][T10591] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 237.116948][T10591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.116967][T10591] ? do_vfs_ioctl+0x226/0x13e0 [ 237.116993][T10591] ? __fget_files+0x34/0x3d0 [ 237.117007][T10591] ? find_held_lock+0x2b/0x80 [ 237.117020][T10591] ? __fget_files+0x215/0x3d0 [ 237.117034][T10591] compat_blkdev_ioctl+0x1e6/0x7b0 [ 237.117050][T10591] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 237.117068][T10591] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 237.117082][T10591] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 237.117104][T10591] __do_fast_syscall_32+0x13a/0x8b0 [ 237.117122][T10591] ? lockdep_hardirqs_on+0x7d/0x110 [ 237.117138][T10591] do_fast_syscall_32+0x32/0x70 [ 237.117154][T10591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.117172][T10591] RIP: 0023:0xf7fa7fec [ 237.117187][T10591] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 237.117194][T10591] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 237.117207][T10591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001277 [ 237.117216][T10591] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.117224][T10591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.117231][T10591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 237.117239][T10591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.117255][T10591] [ 237.349798][ T5149] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 237.349879][ T5149] ldm_validate_privheads(): Disk read failed. [ 237.350228][ T5149] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 237.350247][ T5149] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 237.350259][ T5149] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 237.350273][ T5149] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 237.350285][ T5149] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 237.350329][ T5149] loop0: [ 237.350348][ T5149] loop0: partition table partially beyond EOD, truncated [ 237.451463][ T5888] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 237.541997][ T25] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 237.614159][ T5888] usb 10-1: Using ep0 maxpacket: 8 [ 237.631667][ T5888] usb 10-1: unable to get BOS descriptor or descriptor too short [ 237.631755][ T5888] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 237.632608][ T5888] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 237.632626][ T5888] usb 10-1: can't read configurations, error -71 [ 237.691590][ T25] usb 12-1: Using ep0 maxpacket: 32 [ 237.692764][ T25] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 237.693657][ T25] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 237.695463][ T25] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 237.695481][ T25] usb 12-1: Product: syz [ 237.695491][ T25] usb 12-1: Manufacturer: syz [ 237.695501][ T25] usb 12-1: SerialNumber: syz [ 237.697799][ T25] usb 12-1: config 0 descriptor?? [ 237.698548][T10599] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 237.700440][ T25] hub 12-1:0.0: bad descriptor, ignoring hub [ 237.700462][ T25] hub 12-1:0.0: probe with driver hub failed with error -5 [ 238.178054][T10622] fuse: Bad value for 'user_id' [ 238.178118][T10622] fuse: Bad value for 'user_id' [ 240.421386][ T42] usb 12-1: USB disconnect, device number 7 [ 240.698782][T10668] fuse: Bad value for 'user_id' [ 240.698825][T10668] fuse: Bad value for 'user_id' [ 240.817069][T10671] ipvlan2: entered promiscuous mode [ 240.820036][T10671] team0: Device ipvlan2 failed to register rx_handler [ 241.154394][T10687] FAULT_INJECTION: forcing a failure. [ 241.154394][T10687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.154457][T10687] CPU: 3 UID: 0 PID: 10687 Comm: syz.6.1314 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.154485][T10687] Tainted: [L]=SOFTLOCKUP [ 241.154490][T10687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.154497][T10687] Call Trace: [ 241.154501][T10687] [ 241.154506][T10687] dump_stack_lvl+0x100/0x190 [ 241.154525][T10687] should_fail_ex.cold+0x5/0xa [ 241.154540][T10687] _copy_from_user+0x2e/0xd0 [ 241.154558][T10687] drm_ioctl+0x520/0xc60 [ 241.154574][T10687] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 241.154587][T10687] ? __pfx_drm_ioctl+0x10/0x10 [ 241.154621][T10687] drm_compat_ioctl+0x386/0x4c0 [ 241.154639][T10687] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 241.154654][T10687] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 241.154673][T10687] __do_fast_syscall_32+0x13a/0x8b0 [ 241.154690][T10687] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.154703][T10687] do_fast_syscall_32+0x32/0x70 [ 241.154717][T10687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.154731][T10687] RIP: 0023:0xf7fc8fec [ 241.154743][T10687] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 241.154749][T10687] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 241.154760][T10687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c06864a2 [ 241.154766][T10687] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.154773][T10687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.154779][T10687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.154786][T10687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.154799][T10687] [ 241.207890][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1315'. [ 241.378089][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1316'. [ 241.662512][ T8460] udevd[8460]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 242.508008][T10725] fuse: Bad value for 'user_id' [ 242.508054][T10725] fuse: Bad value for 'user_id' [ 242.599858][T10730] nvmet: failed to open file ./file0: (-2) [ 242.602917][T10730] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 242.642572][ T74] nvmet: Created nvm controller 71 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 242.643467][T10730] nvme nvme70: creating 4 I/O queues. [ 242.650371][T10730] nvme nvme70: new ctrl: "testsubsys" [ 243.838046][T10765] fuse: Bad value for 'user_id' [ 243.838109][T10765] fuse: Bad value for 'user_id' [ 243.924789][T10767] loop5: detected capacity change from 0 to 4095 [ 243.945498][ T5745] Buffer I/O error on dev loop5, logical block 511, async page read [ 244.385350][T10782] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 244.391064][T10719] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 244.581911][T10787] nvmet: failed to open file ./file0: (-2) [ 244.583677][T10787] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 244.609960][ T1173] nvmet: Created nvm controller 72 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 244.610781][T10787] nvme nvme71: creating 4 I/O queues. [ 244.619548][T10787] nvme nvme71: new ctrl: "testsubsys" [ 244.874403][T10796] nvmet: failed to open file ./file0: (-2) [ 244.876186][T10796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 244.928536][ T1173] nvmet: Created nvm controller 73 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 244.932390][T10796] nvme nvme72: creating 4 I/O queues. [ 244.944190][T10796] nvme nvme72: new ctrl: "testsubsys" [ 245.219117][T10814] fuse: Bad value for 'user_id' [ 245.219163][T10814] fuse: Bad value for 'user_id' [ 245.390494][T10819] fuse: Bad value for 'user_id' [ 245.390537][T10819] fuse: Bad value for 'user_id' [ 246.056338][T10831] FAULT_INJECTION: forcing a failure. [ 246.056338][T10831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.060726][T10831] CPU: 2 UID: 0 PID: 10831 Comm: syz.2.1360 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.060757][T10831] Tainted: [L]=SOFTLOCKUP [ 246.060762][T10831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.060769][T10831] Call Trace: [ 246.060773][T10831] [ 246.060778][T10831] dump_stack_lvl+0x100/0x190 [ 246.060808][T10831] should_fail_ex.cold+0x5/0xa [ 246.060827][T10831] _copy_from_user+0x2e/0xd0 [ 246.060846][T10831] __do_sys_add_key+0x278/0x460 [ 246.060864][T10831] ? __pfx___do_sys_add_key+0x10/0x10 [ 246.060881][T10831] ? fput+0x7c/0x100 [ 246.060894][T10831] ? __pfx_ksys_write+0x10/0x10 [ 246.060907][T10831] __do_fast_syscall_32+0x13a/0x8b0 [ 246.060921][T10831] ? lockdep_hardirqs_on+0x7d/0x110 [ 246.060935][T10831] do_fast_syscall_32+0x32/0x70 [ 246.060948][T10831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.060962][T10831] RIP: 0023:0xf70aefec [ 246.060975][T10831] Code: Unable to access opcode bytes at 0xf70aefc2. [ 246.060980][T10831] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 246.060991][T10831] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000000000000 [ 246.060998][T10831] RDX: 0000000080000080 RSI: 0000000000000002 RDI: 0000000035ef9e4f [ 246.061005][T10831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.061011][T10831] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.061018][T10831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.061031][T10831] [ 246.148316][ T5747] Bluetooth: hci3: unexpected cc 0x0c47 length: 2 > 1 [ 246.148353][ T5747] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 246.148660][T10836] program syz.2.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.519582][T10850] FAULT_INJECTION: forcing a failure. [ 246.519582][T10850] name failslab, interval 1, probability 0, space 0, times 0 [ 246.519639][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.7.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.519666][T10850] Tainted: [L]=SOFTLOCKUP [ 246.519672][T10850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.519679][T10850] Call Trace: [ 246.519683][T10850] [ 246.519688][T10850] dump_stack_lvl+0x100/0x190 [ 246.519728][T10850] should_fail_ex.cold+0x5/0xa [ 246.519743][T10850] should_failslab+0xc2/0x120 [ 246.519757][T10850] __kmalloc_cache_noprof+0x91/0x6d0 [ 246.519775][T10850] ? vhost_iotlb_alloc+0x47/0x1d0 [ 246.519788][T10850] vhost_iotlb_alloc+0x47/0x1d0 [ 246.519799][T10850] vhost_dev_reset_owner_prepare+0x31/0x50 [ 246.519815][T10850] vhost_net_ioctl+0xde4/0x1910 [ 246.519832][T10850] ? do_vfs_ioctl+0x226/0x13e0 [ 246.519856][T10850] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 246.519870][T10850] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.519891][T10850] ? __fget_files+0x215/0x3d0 [ 246.519902][T10850] ? hook_file_ioctl_common+0x140/0x440 [ 246.519919][T10850] ? __fget_files+0x21f/0x3d0 [ 246.519932][T10850] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 246.519948][T10850] compat_ptr_ioctl+0x6e/0xa0 [ 246.519965][T10850] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 246.519981][T10850] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 246.520000][T10850] __do_fast_syscall_32+0x13a/0x8b0 [ 246.520014][T10850] ? lockdep_hardirqs_on+0x7d/0x110 [ 246.520027][T10850] do_fast_syscall_32+0x32/0x70 [ 246.520041][T10850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.520055][T10850] RIP: 0023:0xf6fdefec [ 246.520068][T10850] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 246.520073][T10850] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 246.520084][T10850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000af02 [ 246.520091][T10850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.520097][T10850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.520104][T10850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.520110][T10850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.520124][T10850] [ 246.569901][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1367'. [ 246.632100][T10861] fuse: Bad value for 'user_id' [ 246.633962][T10861] fuse: Bad value for 'user_id' [ 246.787465][T10855] lo speed is unknown, defaulting to 1000 [ 246.787559][T10855] lo speed is unknown, defaulting to 1000 [ 246.788097][T10855] lo speed is unknown, defaulting to 1000 [ 246.788546][T10855] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 246.788567][T10855] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 246.788591][T10855] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 246.793155][T10855] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.807410][T10855] lo speed is unknown, defaulting to 1000 [ 246.808150][T10855] lo speed is unknown, defaulting to 1000 [ 246.808830][T10855] lo speed is unknown, defaulting to 1000 [ 246.809632][T10855] lo speed is unknown, defaulting to 1000 [ 246.810299][T10855] lo speed is unknown, defaulting to 1000 [ 246.811753][T10855] lo speed is unknown, defaulting to 1000 [ 247.538746][T10883] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 247.624892][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1378'. [ 247.696633][ T64] smbdirect: ib_dev[syz0] removed [ 247.698914][ T10] lo speed is unknown, defaulting to 1000 [ 247.698973][ T10] syz0: Port: 1 Link DOWN [ 247.753913][T10891] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 247.753971][T10891] syzkaller0: Linktype set failed because interface is up [ 247.754028][T10891] FAULT_INJECTION: forcing a failure. [ 247.754028][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.754059][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.7.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.754076][T10891] Tainted: [L]=SOFTLOCKUP [ 247.754080][T10891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.754086][T10891] Call Trace: [ 247.754091][T10891] [ 247.754095][T10891] dump_stack_lvl+0x100/0x190 [ 247.754113][T10891] should_fail_ex.cold+0x5/0xa [ 247.754127][T10891] _copy_to_user+0x32/0xd0 [ 247.754147][T10891] simple_read_from_buffer+0xcb/0x170 [ 247.754159][T10891] proc_fail_nth_read+0x1af/0x230 [ 247.754178][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.754196][T10891] ? rw_verify_area+0xce/0x6d0 [ 247.754212][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.754230][T10891] vfs_read+0x1e4/0xb40 [ 247.754247][T10891] ? lock_acquire+0x1d1/0x380 [ 247.754262][T10891] ? __fget_files+0x34/0x3d0 [ 247.754272][T10891] ? __pfx_vfs_read+0x10/0x10 [ 247.754288][T10891] ? find_held_lock+0x2b/0x80 [ 247.754300][T10891] ? __fget_files+0x215/0x3d0 [ 247.754313][T10891] ? __fget_files+0x21f/0x3d0 [ 247.754332][T10891] ksys_read+0x12a/0x250 [ 247.754342][T10891] ? __pfx_ksys_read+0x10/0x10 [ 247.754355][T10891] do_int80_emulation+0x166/0x650 [ 247.754371][T10891] asm_int80_emulation+0x1a/0x20 [ 247.754382][T10891] RIP: 0023:0xf71175ab [ 247.754392][T10891] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 247.754404][T10891] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 247.754415][T10891] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53cd5d0 [ 247.754422][T10891] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 247.754428][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.754435][T10891] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 247.754441][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.754454][T10891] [ 247.933970][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'. [ 248.954046][T10924] fuse: Bad value for 'user_id' [ 248.954108][T10924] fuse: Bad value for 'user_id' [ 249.589217][T10913] syzkaller0: left promiscuous mode [ 249.589276][T10913] syzkaller0: left allmulticast mode [ 249.589544][T10913] tipc: Resetting bearer [ 249.959086][T10938] netlink: 'syz.6.1390': attribute type 13 has an invalid length. [ 250.192527][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1386'. [ 251.033713][T10970] fuse: Bad value for 'user_id' [ 251.034489][T10970] fuse: Bad value for 'user_id' [ 251.600656][ T25] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 251.750737][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 251.766532][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 251.766598][ T25] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 251.768552][ T25] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 251.768570][ T25] usb 10-1: can't read configurations, error -71 [ 252.162684][T10992] FAULT_INJECTION: forcing a failure. [ 252.162684][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 252.162757][T10992] CPU: 3 UID: 0 PID: 10992 Comm: syz.7.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.162796][T10992] Tainted: [L]=SOFTLOCKUP [ 252.162804][T10992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.162814][T10992] Call Trace: [ 252.162822][T10992] [ 252.162835][T10992] dump_stack_lvl+0x100/0x190 [ 252.162865][T10992] should_fail_ex.cold+0x5/0xa [ 252.162887][T10992] should_failslab+0xc2/0x120 [ 252.162911][T10992] kmem_cache_alloc_noprof+0x92/0x6a0 [ 252.162932][T10992] ? alloc_empty_file+0x5b/0x1c0 [ 252.162960][T10992] alloc_empty_file+0x5b/0x1c0 [ 252.162985][T10992] path_openat+0xdb/0x2440 [ 252.163009][T10992] ? __pfx_path_openat+0x10/0x10 [ 252.163036][T10992] do_file_open+0x20e/0x430 [ 252.163059][T10992] ? __pfx_do_file_open+0x10/0x10 [ 252.163095][T10992] ? _raw_spin_unlock+0x28/0x50 [ 252.163114][T10992] ? alloc_fd+0x471/0x7a0 [ 252.163142][T10992] do_sys_openat2+0x10f/0x1e0 [ 252.163167][T10992] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.163194][T10992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.163221][T10992] __ia32_compat_sys_openat+0x12d/0x210 [ 252.163248][T10992] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 252.163272][T10992] ? fput+0x7c/0x100 [ 252.163293][T10992] ? ksys_write+0x1ac/0x250 [ 252.163326][T10992] ? __pfx_ksys_write+0x10/0x10 [ 252.163348][T10992] __do_fast_syscall_32+0x13a/0x8b0 [ 252.163370][T10992] ? lockdep_hardirqs_on+0x7d/0x110 [ 252.163392][T10992] do_fast_syscall_32+0x32/0x70 [ 252.163416][T10992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.163439][T10992] RIP: 0023:0xf6fdefec [ 252.163461][T10992] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 252.163469][T10992] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 252.163488][T10992] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 252.163500][T10992] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 252.163513][T10992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.163523][T10992] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.163535][T10992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.163559][T10992] [ 252.165121][T10994] trusted_key: encrypted_key: insufficient parameters specified [ 252.165509][T10994] batadv_slave_1: entered promiscuous mode [ 252.181016][T10993] batadv_slave_1: left promiscuous mode [ 252.214682][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1409'. [ 252.388249][T11006] fuse: Bad value for 'user_id' [ 252.388287][T11006] fuse: Bad value for 'user_id' [ 253.174787][T11030] FAULT_INJECTION: forcing a failure. [ 253.174787][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 253.174853][T11030] CPU: 3 UID: 0 PID: 11030 Comm: syz.2.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.174880][T11030] Tainted: [L]=SOFTLOCKUP [ 253.174885][T11030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.174892][T11030] Call Trace: [ 253.174897][T11030] [ 253.174902][T11030] dump_stack_lvl+0x100/0x190 [ 253.174920][T11030] should_fail_ex.cold+0x5/0xa [ 253.174935][T11030] should_failslab+0xc2/0x120 [ 253.174950][T11030] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 253.174962][T11030] ? register_lock_class+0x3f/0x7b0 [ 253.174977][T11030] ? __d_alloc+0x35/0xa50 [ 253.174992][T11030] __d_alloc+0x35/0xa50 [ 253.175004][T11030] ? __lock_acquire+0x4c5/0x1ec0 [ 253.175020][T11030] d_alloc_parallel+0x105/0x14c0 [ 253.175039][T11030] ? lock_acquire+0x1d1/0x380 [ 253.175053][T11030] ? lookup_slow+0x42/0x70 [ 253.175067][T11030] ? __pfx_d_alloc_parallel+0x10/0x10 [ 253.175084][T11030] ? __pfx___might_resched+0x10/0x10 [ 253.175099][T11030] ? try_to_unlazy+0x296/0x910 [ 253.175118][T11030] ? down_read+0x13b/0x4c0 [ 253.175133][T11030] ? __pfx_down_read+0x10/0x10 [ 253.175149][T11030] __lookup_slow+0x98/0x320 [ 253.175166][T11030] lookup_slow+0x50/0x70 [ 253.175181][T11030] link_path_walk+0x1377/0x1cc0 [ 253.175206][T11030] path_lookupat+0x74/0xc40 [ 253.175225][T11030] filename_lookup+0x202/0x590 [ 253.175238][T11030] ? __pfx_filename_lookup+0x10/0x10 [ 253.175258][T11030] ? strncpy_from_user+0x19d/0x2d0 [ 253.175272][T11030] ? do_getname+0x191/0x390 [ 253.175287][T11030] user_path_at+0x3c/0x60 [ 253.175298][T11030] __ia32_sys_mount+0x1fb/0x310 [ 253.175313][T11030] ? __pfx___ia32_sys_mount+0x10/0x10 [ 253.175339][T11030] ? ksys_write+0x1ac/0x250 [ 253.175350][T11030] ? __pfx_ksys_write+0x10/0x10 [ 253.175363][T11030] __do_fast_syscall_32+0x13a/0x8b0 [ 253.175377][T11030] ? lockdep_hardirqs_on+0x7d/0x110 [ 253.175390][T11030] do_fast_syscall_32+0x32/0x70 [ 253.175404][T11030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.175418][T11030] RIP: 0023:0xf70aefec [ 253.175430][T11030] Code: Unable to access opcode bytes at 0xf70aefc2. [ 253.175435][T11030] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 253.175447][T11030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200 [ 253.175454][T11030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.175460][T11030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.175466][T11030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.175472][T11030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.175486][T11030] [ 253.317156][T11036] nvmet: failed to open file ./file0: (-2) [ 253.318509][T11036] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 253.333225][T11039] fuse: Bad value for 'user_id' [ 253.333311][T11039] fuse: Bad value for 'user_id' [ 253.359825][ T1173] nvmet: Created nvm controller 74 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 253.362708][T11036] nvme nvme73: creating 4 I/O queues. [ 253.368254][T11036] nvme nvme73: new ctrl: "testsubsys" [ 253.624464][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1421'. [ 253.883923][T11043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1421'. [ 254.190504][ T5888] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 254.350629][ T5888] usb 11-1: Using ep0 maxpacket: 8 [ 254.368808][ T5888] usb 11-1: unable to get BOS descriptor or descriptor too short [ 254.368857][ T5888] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 254.374776][ T5888] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 254.374816][ T5888] usb 11-1: can't read configurations, error -71 [ 254.922226][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 255.273426][T11058] lo speed is unknown, defaulting to 1000 [ 255.275602][T11058] lo speed is unknown, defaulting to 1000 [ 255.278067][T11058] lo speed is unknown, defaulting to 1000 [ 255.284097][T11058] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.289424][T11058] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.295008][T11058] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.321587][T11058] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 255.342828][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.342887][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.377163][T11058] lo speed is unknown, defaulting to 1000 [ 255.383232][T11058] lo speed is unknown, defaulting to 1000 [ 255.389981][T11058] lo speed is unknown, defaulting to 1000 [ 255.397197][T11058] lo speed is unknown, defaulting to 1000 [ 255.404397][T11058] lo speed is unknown, defaulting to 1000 [ 255.411693][T11058] lo speed is unknown, defaulting to 1000 [ 255.780471][T11070] trusted_key: encrypted_key: insufficient parameters specified [ 255.781097][T11070] batadv_slave_1: entered promiscuous mode [ 255.803882][T11069] batadv_slave_1: left promiscuous mode [ 255.938884][T11072] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 256.005928][T11072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.015766][T11081] fuse: Bad value for 'user_id' [ 256.017342][T11081] fuse: Bad value for 'user_id' [ 256.019390][ T43] kauditd_printk_skb: 82 callbacks suppressed [ 256.019449][ T43] audit: type=1326 audit(1787941451.414:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.019491][ T43] audit: type=1326 audit(1787941451.414:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031776][ T43] audit: type=1326 audit(1787941451.424:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031811][ T43] audit: type=1326 audit(1787941451.424:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031835][ T43] audit: type=1326 audit(1787941451.424:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031860][ T43] audit: type=1326 audit(1787941451.424:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031887][ T43] audit: type=1326 audit(1787941451.424:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031911][ T43] audit: type=1326 audit(1787941451.424:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031934][ T43] audit: type=1326 audit(1787941451.424:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.031960][ T43] audit: type=1326 audit(1787941451.424:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11071 comm="syz.5.1429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7fec code=0x7ffc0000 [ 256.043354][ T1159] smbdirect: ib_dev[syz0] removed [ 256.071254][ T50] lo speed is unknown, defaulting to 1000 [ 256.071271][ T50] syz0: Port: 1 Link DOWN [ 257.016011][T11105] trusted_key: encrypted_key: insufficient parameters specified [ 257.020157][T11105] batadv_slave_1: entered promiscuous mode [ 257.051410][T11104] batadv_slave_1: left promiscuous mode [ 257.080543][ T9044] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 257.200395][T11111] jffs2: notice: (11111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.208397][T11111] overlay: filesystem on ./file0 is read-only [ 257.241152][ T9044] usb 11-1: Using ep0 maxpacket: 8 [ 257.255325][ T9044] usb 11-1: unable to get BOS descriptor or descriptor too short [ 257.255401][ T9044] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 257.256091][ T9044] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 257.256111][ T9044] usb 11-1: can't read configurations, error -71 [ 257.668851][T11118] FAULT_INJECTION: forcing a failure. [ 257.668851][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 257.670271][T11118] CPU: 1 UID: 0 PID: 11118 Comm: syz.7.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.670298][T11118] Tainted: [L]=SOFTLOCKUP [ 257.670304][T11118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.670316][T11118] Call Trace: [ 257.670322][T11118] [ 257.670329][T11118] dump_stack_lvl+0x100/0x190 [ 257.670358][T11118] should_fail_ex.cold+0x5/0xa [ 257.670381][T11118] should_failslab+0xc2/0x120 [ 257.670402][T11118] __kmalloc_noprof+0xfc/0x840 [ 257.670422][T11118] ? tomoyo_encode2+0xfb/0x3c0 [ 257.670451][T11118] tomoyo_encode2+0xfb/0x3c0 [ 257.670476][T11118] tomoyo_encode+0x29/0x50 [ 257.670500][T11118] tomoyo_realpath_from_path+0x18c/0x690 [ 257.670530][T11118] tomoyo_path_number_perm+0x23c/0x580 [ 257.670551][T11118] ? tomoyo_path_number_perm+0x22e/0x580 [ 257.670574][T11118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.670596][T11118] ? get_pid_task+0x106/0x250 [ 257.670619][T11118] ? __lock_acquire+0x4c5/0x1ec0 [ 257.670653][T11118] ? __fget_files+0x34/0x3d0 [ 257.670673][T11118] ? find_held_lock+0x2b/0x80 [ 257.670688][T11118] ? __fget_files+0x215/0x3d0 [ 257.670706][T11118] ? hook_file_ioctl_common+0x140/0x440 [ 257.670725][T11118] ? __fget_files+0x215/0x3d0 [ 257.670762][T11118] ? __fget_files+0x21f/0x3d0 [ 257.670785][T11118] security_file_ioctl_compat+0xd3/0x230 [ 257.670809][T11118] __ia32_compat_sys_ioctl+0xc2/0x360 [ 257.670838][T11118] __do_fast_syscall_32+0x13a/0x8b0 [ 257.670859][T11118] ? lockdep_hardirqs_on+0x7d/0x110 [ 257.670881][T11118] do_fast_syscall_32+0x32/0x70 [ 257.670903][T11118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.670924][T11118] RIP: 0023:0xf6fdefec [ 257.670944][T11118] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 257.670951][T11118] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 257.670971][T11118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004018aee2 [ 257.670982][T11118] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.670993][T11118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.671005][T11118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.671014][T11118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.671038][T11118] [ 257.671283][T11118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.828491][T11123] fuse: Bad value for 'user_id' [ 257.828542][T11123] fuse: Bad value for 'user_id' [ 257.903247][T11126] nvmet: failed to open file ./file0: (-2) [ 257.906594][T11126] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 257.949072][ T74] nvmet: Created nvm controller 75 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 257.952617][T11126] nvme nvme74: creating 4 I/O queues. [ 257.963330][T11126] nvme nvme74: new ctrl: "testsubsys" [ 258.404755][T11135] trusted_key: encrypted_key: insufficient parameters specified [ 258.409854][T11135] batadv_slave_1: entered promiscuous mode [ 258.426248][T11135] ipvlan2: entered promiscuous mode [ 258.427928][T11134] batadv_slave_1: left promiscuous mode [ 258.788444][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1456'. [ 258.911469][ T76] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 258.950817][ T1354] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 259.081223][ T76] usb 7-1: Using ep0 maxpacket: 16 [ 259.085353][ T76] usb 7-1: unable to get BOS descriptor or descriptor too short [ 259.088800][ T76] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=28.0e [ 259.090462][ T76] usb 7-1: config 6 has an invalid interface number: 149 but max is 0 [ 259.090545][ T76] usb 7-1: config 6 has no interface number 0 [ 259.090583][ T76] usb 7-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 259.095164][ T76] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.095187][ T76] usb 7-1: Product: syz [ 259.095200][ T76] usb 7-1: Manufacturer: syz [ 259.095214][ T76] usb 7-1: SerialNumber: syz [ 259.104298][ T1354] usb 11-1: Using ep0 maxpacket: 8 [ 259.131332][ T1354] usb 11-1: unable to get BOS descriptor or descriptor too short [ 259.134512][ T1354] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 259.138936][ T1354] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 259.142104][ T1354] usb 11-1: can't read configurations, error -71 [ 259.155282][T11163] trusted_key: encrypted_key: insufficient parameters specified [ 259.159246][T11163] batadv_slave_1: entered promiscuous mode [ 259.176915][T11163] ipvlan2: entered promiscuous mode [ 259.182857][T11162] batadv_slave_1: left promiscuous mode [ 259.236581][T11165] FAULT_INJECTION: forcing a failure. [ 259.236581][T11165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.236635][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.5.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.236669][T11165] Tainted: [L]=SOFTLOCKUP [ 259.236674][T11165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.236681][T11165] Call Trace: [ 259.236685][T11165] [ 259.236689][T11165] dump_stack_lvl+0x100/0x190 [ 259.236707][T11165] should_fail_ex.cold+0x5/0xa [ 259.236719][T11165] ? prepare_alloc_pages+0x16d/0x5b0 [ 259.236737][T11165] should_fail_alloc_page+0xeb/0x140 [ 259.236755][T11165] prepare_alloc_pages+0x1f0/0x5b0 [ 259.236771][T11165] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 259.236790][T11165] ? netlink_deliver_tap+0xa4d/0xcc0 [ 259.236805][T11165] ? netlink_dump+0x631/0xd00 [ 259.236819][T11165] ? __netlink_dump_start+0x6d6/0x990 [ 259.236835][T11165] ? genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 259.236846][T11165] ? genl_rcv_msg+0x471/0x800 [ 259.236856][T11165] ? netlink_rcv_skb+0x159/0x420 [ 259.236872][T11165] ? genl_rcv+0x28/0x40 [ 259.236880][T11165] ? netlink_unicast+0x585/0x850 [ 259.236898][T11165] ? lock_acquire+0x1d1/0x380 [ 259.236913][T11165] ? clockevents_program_event+0x1bf/0x820 [ 259.236925][T11165] ? find_held_lock+0x2b/0x80 [ 259.236936][T11165] ? clockevents_program_event+0x1bf/0x820 [ 259.236947][T11165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 259.236967][T11165] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 259.236983][T11165] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 259.237002][T11165] ? clockevents_program_event+0x1ef/0x820 [ 259.237017][T11165] ? __pfx_clockevents_program_event+0x10/0x10 [ 259.237028][T11165] ? find_held_lock+0x2b/0x80 [ 259.237039][T11165] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 259.237051][T11165] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 259.237063][T11165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.237079][T11165] ? policy_nodemask+0xed/0x4f0 [ 259.237094][T11165] alloc_pages_mpol+0x201/0x550 [ 259.237109][T11165] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 259.237127][T11165] folio_alloc_mpol_noprof+0x36/0x260 [ 259.237144][T11165] vma_alloc_folio_noprof+0xed/0x1d0 [ 259.237160][T11165] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 259.237181][T11165] do_anonymous_page+0xac9/0x2050 [ 259.237201][T11165] ? __pfx_do_anonymous_page+0x10/0x10 [ 259.237215][T11165] ? rcu_read_unlock+0x2d/0xb0 [ 259.237235][T11165] ? rcu_read_unlock+0x2d/0xb0 [ 259.237251][T11165] ? __pte_offset_map+0x179/0x310 [ 259.237264][T11165] __handle_mm_fault+0x1ff3/0x2f60 [ 259.237282][T11165] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.237297][T11165] ? __pfx_mt_find+0x10/0x10 [ 259.237319][T11165] ? find_vma+0xbf/0x140 [ 259.237330][T11165] ? __pfx_find_vma+0x10/0x10 [ 259.237342][T11165] handle_mm_fault+0x363/0xa20 [ 259.237361][T11165] do_user_addr_fault+0x745/0x12f0 [ 259.237377][T11165] exc_page_fault+0x6f/0xd0 [ 259.237389][T11165] asm_exc_page_fault+0x26/0x30 [ 259.237401][T11165] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 259.237419][T11165] Code: 00 e8 24 88 e6 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 ec a4 58 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 259.237430][T11165] RSP: 0018:ffffc9000dc17660 EFLAGS: 00050246 [ 259.237439][T11165] RAX: 0000000000000001 RBX: 00000000000000d9 RCX: 0000000000000019 [ 259.237446][T11165] RDX: 0000000000000001 RSI: ffff88805372c0c0 RDI: 0000000080001000 [ 259.237453][T11165] RBP: ffffc9000dc17b80 R08: 0000000000000000 R09: ffffed100a6e581b [ 259.237459][T11165] R10: ffff88805372c0d8 R11: 0000000000000000 R12: ffff88805372c000 [ 259.237466][T11165] R13: 0000000000000000 R14: 0000000080000f40 R15: 0000000000000e7c [ 259.237483][T11165] ? __pfx__copy_to_iter+0x10/0x10 [ 259.237500][T11165] ? up_write+0x2dc/0x5b0 [ 259.237517][T11165] ? __skb_recv_datagram+0x1b2/0x220 [ 259.237537][T11165] simple_copy_to_iter+0x46/0x90 [ 259.237553][T11165] __skb_datagram_iter+0x129/0x900 [ 259.237567][T11165] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 259.237584][T11165] ? skb_recv_datagram+0x88/0xc0 [ 259.237602][T11165] skb_copy_datagram_iter+0xa1/0x250 [ 259.237619][T11165] netlink_recvmsg+0x27e/0xa90 [ 259.237636][T11165] ? __pfx_netlink_recvmsg+0x10/0x10 [ 259.237653][T11165] ? aa_sock_msg_perm+0x11e/0x200 [ 259.237672][T11165] ? __pfx_netlink_recvmsg+0x10/0x10 [ 259.237689][T11165] sock_recvmsg+0x1d5/0x220 [ 259.237703][T11165] ____sys_recvmsg+0x21e/0x670 [ 259.237720][T11165] ? __pfx_____sys_recvmsg+0x10/0x10 [ 259.237739][T11165] ? __lock_acquire+0x4c5/0x1ec0 [ 259.237756][T11165] ___sys_recvmsg+0x16a/0x1a0 [ 259.237771][T11165] ? __pfx____sys_recvmsg+0x10/0x10 [ 259.237786][T11165] ? lock_acquire+0x1d1/0x380 [ 259.237811][T11165] do_recvmmsg+0x54d/0x740 [ 259.237828][T11165] ? __pfx_do_recvmmsg+0x10/0x10 [ 259.237844][T11165] ? find_held_lock+0x2b/0x80 [ 259.237854][T11165] ? ksys_write+0x190/0x250 [ 259.237864][T11165] ? ksys_write+0x190/0x250 [ 259.237879][T11165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.237894][T11165] __sys_recvmmsg+0x21f/0x270 [ 259.237906][T11165] ? __pfx___sys_recvmmsg+0x10/0x10 [ 259.237919][T11165] ? ksys_write+0x1ac/0x250 [ 259.237931][T11165] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 259.237947][T11165] ? __do_fast_syscall_32+0xb3/0x8b0 [ 259.237960][T11165] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.237972][T11165] __do_fast_syscall_32+0x13a/0x8b0 [ 259.237985][T11165] ? lockdep_hardirqs_on+0x7d/0x110 [ 259.237998][T11165] do_fast_syscall_32+0x32/0x70 [ 259.238012][T11165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.238026][T11165] RIP: 0023:0xf7fa7fec [ 259.238037][T11165] Code: Unable to access opcode bytes at 0xf7fa7fc2. [ 259.238042][T11165] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 259.238052][T11165] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 259.238059][T11165] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.238065][T11165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.238071][T11165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.238077][T11165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.238091][T11165] [ 259.277739][T11167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1461'. [ 259.315874][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 259.315957][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 259.342217][ T76] usb 7-1: USB disconnect, device number 35 [ 259.708428][T11175] fuse: Bad value for 'user_id' [ 259.708488][T11175] fuse: Bad value for 'user_id' [ 260.037022][T11188] trusted_key: encrypted_key: insufficient parameters specified [ 260.041890][T11188] batadv_slave_1: entered promiscuous mode [ 260.064634][T11188] ipvlan3: entered promiscuous mode [ 260.066195][T11187] batadv_slave_1: left promiscuous mode [ 260.484342][ T76] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 260.592992][T11205] fuse: Bad value for 'fd' [ 260.632262][ T76] usb 10-1: Using ep0 maxpacket: 8 [ 260.652753][ T76] usb 10-1: unable to get BOS descriptor or descriptor too short [ 260.652832][ T76] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 260.653607][ T76] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 260.653634][ T76] usb 10-1: can't read configurations, error -71 [ 260.994388][T11213] trusted_key: encrypted_key: insufficient parameters specified [ 260.997399][T11213] batadv_slave_1: entered promiscuous mode [ 261.010546][T11212] batadv_slave_1: left promiscuous mode [ 261.244117][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 261.542618][T11220] lo speed is unknown, defaulting to 1000 [ 261.542723][T11220] lo speed is unknown, defaulting to 1000 [ 261.543239][T11220] lo speed is unknown, defaulting to 1000 [ 261.548111][T11220] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 261.548143][T11220] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 261.548174][T11220] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 261.573215][T11220] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.595309][T11220] lo speed is unknown, defaulting to 1000 [ 261.596826][T11220] lo speed is unknown, defaulting to 1000 [ 261.598212][T11220] lo speed is unknown, defaulting to 1000 [ 261.599542][T11220] lo speed is unknown, defaulting to 1000 [ 261.602318][T11220] lo speed is unknown, defaulting to 1000 [ 261.603685][T11220] lo speed is unknown, defaulting to 1000 [ 261.905887][ T1163] smbdirect: ib_dev[syz0] removed [ 261.910170][ T1354] lo speed is unknown, defaulting to 1000 [ 261.910505][ T1354] syz0: Port: 1 Link DOWN [ 261.970185][T11239] fuse: Bad value for 'user_id' [ 261.970245][T11239] fuse: Bad value for 'user_id' [ 262.184395][T11244] trusted_key: encrypted_key: insufficient parameters specified [ 262.188348][T11244] batadv_slave_1: entered promiscuous mode [ 262.211233][T11243] batadv_slave_1: left promiscuous mode [ 262.500143][ T1354] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 262.650253][ T5888] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 262.670023][ T1354] usb 7-1: Using ep0 maxpacket: 8 [ 262.688480][ T1354] usb 7-1: unable to get BOS descriptor or descriptor too short [ 262.688541][ T1354] usb 7-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 262.690021][ T1354] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 262.690041][ T1354] usb 7-1: can't read configurations, error -71 [ 262.830674][ T5888] usb 12-1: Using ep0 maxpacket: 8 [ 262.859095][ T5888] usb 12-1: unable to get BOS descriptor or descriptor too short [ 262.859161][ T5888] usb 12-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 262.859842][ T5888] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 262.859915][ T5888] usb 12-1: can't read configurations, error -71 [ 263.091054][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1491'. [ 263.298769][T11261] jffs2: notice: (11261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 263.301509][T11263] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 263.351526][T11263] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.358965][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 263.359037][ T43] audit: type=1326 audit(1787941458.754:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368022][ T43] audit: type=1326 audit(1787941458.754:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368056][ T43] audit: type=1326 audit(1787941458.764:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368078][ T43] audit: type=1326 audit(1787941458.764:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368100][ T43] audit: type=1326 audit(1787941458.764:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368121][ T43] audit: type=1326 audit(1787941458.764:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368141][ T43] audit: type=1326 audit(1787941458.764:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368169][ T43] audit: type=1326 audit(1787941458.764:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368194][ T43] audit: type=1326 audit(1787941458.764:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.368244][ T43] audit: type=1326 audit(1787941458.764:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.6.1492" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 263.497810][T11271] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 263.499459][T11275] trusted_key: encrypted_key: insufficient parameters specified [ 263.501024][T11275] batadv_slave_1: entered promiscuous mode [ 263.513623][T11274] batadv_slave_1: left promiscuous mode [ 263.873638][T11284] fuse: Bad value for 'user_id' [ 263.875235][T11284] fuse: Bad value for 'user_id' [ 264.289973][ T25] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 264.450006][ T25] usb 11-1: Using ep0 maxpacket: 8 [ 264.468876][ T25] usb 11-1: unable to get BOS descriptor or descriptor too short [ 264.468950][ T25] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 264.469700][ T25] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 264.469728][ T25] usb 11-1: can't read configurations, error -71 [ 264.774545][T11304] trusted_key: encrypted_key: insufficient parameters specified [ 264.778682][T11304] batadv_slave_1: entered promiscuous mode [ 264.781489][T11302] sctp: [Deprecated]: syz.7.1506 (pid 11302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.781489][T11302] Use struct sctp_sack_info instead [ 264.851283][T11309] ipvlan3: entered promiscuous mode [ 264.855439][T11303] batadv_slave_1: left promiscuous mode [ 265.832971][T11332] netlink: 'syz.7.1514': attribute type 1 has an invalid length. [ 265.960638][T11340] fuse: Bad value for 'user_id' [ 265.960683][T11340] fuse: Bad value for 'user_id' [ 266.199770][ T30] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 266.244252][T11344] trusted_key: encrypted_key: insufficient parameters specified [ 266.247578][T11344] batadv_slave_1: entered promiscuous mode [ 266.265023][T11344] ipvlan4: entered promiscuous mode [ 266.268450][T11344] team0: Device ipvlan4 failed to register rx_handler [ 266.318598][T11343] batadv_slave_1: left promiscuous mode [ 266.359738][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 266.368952][ T30] usb 11-1: unable to get BOS descriptor or descriptor too short [ 266.369034][ T30] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 266.372229][ T30] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 266.372249][ T30] usb 11-1: can't read configurations, error -71 [ 266.730334][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1520'. [ 267.049161][T11349] lo speed is unknown, defaulting to 1000 [ 267.049300][T11349] lo speed is unknown, defaulting to 1000 [ 267.054924][T11349] lo speed is unknown, defaulting to 1000 [ 267.057540][T11349] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 267.057576][T11349] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 267.057612][T11349] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 267.068859][T11349] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 267.098420][T11349] lo speed is unknown, defaulting to 1000 [ 267.099408][T11349] lo speed is unknown, defaulting to 1000 [ 267.103487][T11349] lo speed is unknown, defaulting to 1000 [ 267.104455][T11349] lo speed is unknown, defaulting to 1000 [ 267.105237][T11349] lo speed is unknown, defaulting to 1000 [ 267.106759][T11349] lo speed is unknown, defaulting to 1000 [ 267.452091][ T1173] smbdirect: ib_dev[syz0] removed [ 267.456280][ T58] lo speed is unknown, defaulting to 1000 [ 267.456333][ T58] syz0: Port: 1 Link DOWN [ 267.643169][T11378] trusted_key: encrypted_key: insufficient parameters specified [ 267.643765][T11378] batadv_slave_1: entered promiscuous mode [ 267.653041][T11378] ipvlan2: entered promiscuous mode [ 267.654670][T11378] team0: Device ipvlan2 failed to register rx_handler [ 267.725032][T11377] batadv_slave_1: left promiscuous mode [ 267.797328][T11380] fuse: Bad value for 'user_id' [ 267.797381][T11380] fuse: Bad value for 'user_id' [ 268.129766][ T50] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 268.299782][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 268.312681][ T50] usb 10-1: unable to get BOS descriptor or descriptor too short [ 268.312744][ T50] usb 10-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 268.317218][ T50] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 268.317241][ T50] usb 10-1: can't read configurations, error -71 [ 268.778441][T11401] FAULT_INJECTION: forcing a failure. [ 268.778441][T11401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.778508][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.6.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.778536][T11401] Tainted: [L]=SOFTLOCKUP [ 268.778542][T11401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.778549][T11401] Call Trace: [ 268.778554][T11401] [ 268.778559][T11401] dump_stack_lvl+0x100/0x190 [ 268.778581][T11401] should_fail_ex.cold+0x5/0xa [ 268.778595][T11401] ? prepare_alloc_pages+0x16d/0x5b0 [ 268.778611][T11401] should_fail_alloc_page+0xeb/0x140 [ 268.778627][T11401] prepare_alloc_pages+0x1f0/0x5b0 [ 268.778644][T11401] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 268.778665][T11401] ? lock_acquire+0x1d1/0x380 [ 268.778680][T11401] ? is_bpf_text_address+0x25/0x1a0 [ 268.778696][T11401] ? find_held_lock+0x2b/0x80 [ 268.778707][T11401] ? is_bpf_text_address+0x8a/0x1a0 [ 268.778721][T11401] ? is_bpf_text_address+0x8a/0x1a0 [ 268.778736][T11401] ? bpf_ksym_find+0x124/0x1c0 [ 268.778747][T11401] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.778762][T11401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.778780][T11401] ? is_bpf_text_address+0x94/0x1a0 [ 268.778796][T11401] ? __kernel_text_address+0xd/0x30 [ 268.778814][T11401] ? unwind_get_return_address+0x59/0xa0 [ 268.778831][T11401] ? arch_stack_walk+0xa6/0xf0 [ 268.778849][T11401] ? __pfx_stack_trace_save+0x10/0x10 [ 268.778865][T11401] ? stack_depot_save_flags+0x27/0x9f0 [ 268.778882][T11401] ? lock_acquire+0x1d1/0x380 [ 268.778897][T11401] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 268.778915][T11401] ? policy_nodemask+0xed/0x4f0 [ 268.778930][T11401] alloc_pages_mpol+0x201/0x550 [ 268.778946][T11401] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 268.778964][T11401] alloc_pages_noprof+0x1a/0x160 [ 268.778985][T11401] get_free_pages_noprof+0x10/0xb0 [ 268.778997][T11401] __kasan_populate_vmalloc+0xa0/0x210 [ 268.779012][T11401] alloc_vmap_area+0x95d/0x2bb0 [ 268.779030][T11401] ? kasan_save_track+0x14/0x30 [ 268.779043][T11401] ? __kasan_kmalloc+0xaa/0xb0 [ 268.779055][T11401] ? __pfx_alloc_vmap_area+0x10/0x10 [ 268.779068][T11401] ? __get_vm_area_node+0x124/0x350 [ 268.779084][T11401] __get_vm_area_node+0x1ed/0x350 [ 268.779103][T11401] __vmalloc_node_range_noprof+0x268/0x1420 [ 268.779119][T11401] ? kernel_clone+0x176/0x9d0 [ 268.779135][T11401] ? lock_acquire+0x1d1/0x380 [ 268.779149][T11401] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 268.779169][T11401] ? find_held_lock+0x2b/0x80 [ 268.779180][T11401] ? rcu_read_unlock+0x17/0x60 [ 268.779197][T11401] ? kernel_clone+0x176/0x9d0 [ 268.779217][T11401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.779234][T11401] ? rcu_is_watching+0x13/0xc0 [ 268.779245][T11401] ? trace_kmem_cache_alloc+0xdd/0x100 [ 268.779260][T11401] ? kernel_clone+0x176/0x9d0 [ 268.779276][T11401] __vmalloc_node_noprof+0xad/0xf0 [ 268.779291][T11401] ? kernel_clone+0x176/0x9d0 [ 268.779309][T11401] copy_process+0x803/0x8370 [ 268.779328][T11401] ? __lock_acquire+0x4c5/0x1ec0 [ 268.779347][T11401] ? __pfx_copy_process+0x10/0x10 [ 268.779411][T11401] ? get_pid_task+0x2a/0x250 [ 268.779427][T11401] ? get_pid_task+0xfc/0x250 [ 268.779437][T11401] ? get_pid_task+0xfc/0x250 [ 268.779451][T11401] kernel_clone+0x176/0x9d0 [ 268.779477][T11401] ? proc_fail_nth_write+0x9f/0x220 [ 268.779497][T11401] ? __pfx_kernel_clone+0x10/0x10 [ 268.779540][T11401] ? find_held_lock+0x2b/0x80 [ 268.779553][T11401] ? ksys_write+0x190/0x250 [ 268.779564][T11401] ? ksys_write+0x190/0x250 [ 268.779574][T11401] ? lock_acquire+0x1d1/0x380 [ 268.779590][T11401] __do_compat_sys_ia32_clone+0xd4/0x120 [ 268.779637][T11401] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 268.779659][T11401] ? fput+0x7c/0x100 [ 268.779672][T11401] ? ksys_write+0x1ac/0x250 [ 268.779682][T11401] ? __pfx_ksys_write+0x10/0x10 [ 268.779695][T11401] __do_fast_syscall_32+0x13a/0x8b0 [ 268.779711][T11401] ? lockdep_hardirqs_on+0x7d/0x110 [ 268.779729][T11401] do_fast_syscall_32+0x32/0x70 [ 268.779743][T11401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.779758][T11401] RIP: 0023:0xf7fc8fec [ 268.779773][T11401] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 268.779779][T11401] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 268.779791][T11401] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 268.779812][T11401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.779818][T11401] RBP: 00000000f7484f80 R08: 0000000000000000 R09: 0000000000000000 [ 268.779826][T11401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 268.779832][T11401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.779847][T11401] [ 268.783313][T11401] syz.6.1537: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.783367][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.6.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.783384][T11401] Tainted: [L]=SOFTLOCKUP [ 268.783388][T11401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.783395][T11401] Call Trace: [ 268.783400][T11401] [ 268.783405][T11401] dump_stack_lvl+0x100/0x190 [ 268.783424][T11401] warn_alloc.cold+0x9e/0xb2 [ 268.783437][T11401] ? __pfx_warn_alloc+0x10/0x10 [ 268.783454][T11401] ? lockdep_hardirqs_on+0x7d/0x110 [ 268.783469][T11401] ? __get_vm_area_node+0x2f0/0x350 [ 268.783485][T11401] ? __get_vm_area_node+0x22b/0x350 [ 268.783501][T11401] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 268.783516][T11401] ? lock_acquire+0x1d1/0x380 [ 268.783531][T11401] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 268.783550][T11401] ? find_held_lock+0x2b/0x80 [ 268.783561][T11401] ? rcu_read_unlock+0x17/0x60 [ 268.783579][T11401] ? kernel_clone+0x176/0x9d0 [ 268.783624][T11401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.783674][T11401] ? rcu_is_watching+0x13/0xc0 [ 268.783692][T11401] ? trace_kmem_cache_alloc+0xdd/0x100 [ 268.783715][T11401] ? kernel_clone+0x176/0x9d0 [ 268.783739][T11401] __vmalloc_node_noprof+0xad/0xf0 [ 268.783753][T11401] ? kernel_clone+0x176/0x9d0 [ 268.783772][T11401] copy_process+0x803/0x8370 [ 268.783790][T11401] ? __lock_acquire+0x4c5/0x1ec0 [ 268.783810][T11401] ? __pfx_copy_process+0x10/0x10 [ 268.783827][T11401] ? get_pid_task+0x2a/0x250 [ 268.783839][T11401] ? get_pid_task+0xfc/0x250 [ 268.783849][T11401] ? get_pid_task+0xfc/0x250 [ 268.783863][T11401] kernel_clone+0x176/0x9d0 [ 268.783879][T11401] ? proc_fail_nth_write+0x9f/0x220 [ 268.783898][T11401] ? __pfx_kernel_clone+0x10/0x10 [ 268.783918][T11401] ? find_held_lock+0x2b/0x80 [ 268.783929][T11401] ? ksys_write+0x190/0x250 [ 268.783939][T11401] ? ksys_write+0x190/0x250 [ 268.783949][T11401] ? lock_acquire+0x1d1/0x380 [ 268.783964][T11401] __do_compat_sys_ia32_clone+0xd4/0x120 [ 268.783982][T11401] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 268.784004][T11401] ? fput+0x7c/0x100 [ 268.784017][T11401] ? ksys_write+0x1ac/0x250 [ 268.784027][T11401] ? __pfx_ksys_write+0x10/0x10 [ 268.784040][T11401] __do_fast_syscall_32+0x13a/0x8b0 [ 268.784053][T11401] ? lockdep_hardirqs_on+0x7d/0x110 [ 268.784067][T11401] do_fast_syscall_32+0x32/0x70 [ 268.784081][T11401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.784095][T11401] RIP: 0023:0xf7fc8fec [ 268.784108][T11401] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 268.784115][T11401] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 268.784127][T11401] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 268.784134][T11401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.784141][T11401] RBP: 00000000f7484f80 R08: 0000000000000000 R09: 0000000000000000 [ 268.784147][T11401] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 268.784154][T11401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.784168][T11401] [ 268.787778][T11401] Mem-Info: [ 268.787788][T11401] active_anon:8598 inactive_anon:1006 isolated_anon:0 [ 268.787788][T11401] active_file:3353 inactive_file:33047 isolated_file:0 [ 268.787788][T11401] unevictable:1000 dirty:591 writeback:0 [ 268.787788][T11401] slab_reclaimable:8265 slab_unreclaimable:65180 [ 268.787788][T11401] mapped:24925 shmem:2880 pagetables:1617 [ 268.787788][T11401] sec_pagetables:303 bounce:0 [ 268.787788][T11401] kernel_misc_reclaimable:0 [ 268.787788][T11401] free:23646 free_pcp:16129 free_cma:0 [ 268.787816][T11401] Node 0 active_anon:4kB inactive_anon:36kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9152kB pagetables:1344kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.787845][T11401] Node 1 active_anon:34388kB inactive_anon:3988kB active_file:13276kB inactive_file:132188kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:99672kB dirty:2364kB writeback:0kB shmem:11520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6108kB pagetables:5124kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.787879][T11401] Node 0 DMA free:2008kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:676kB local_pcp:184kB free_cma:0kB [ 268.787912][T11401] lowmem_reserve[]: 0 278 278 278 278 [ 268.787932][T11401] Node 0 DMA32 free:14084kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:36kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:16kB present:1032196kB managed:284760kB mlocked:0kB bounce:0kB free_pcp:8944kB local_pcp:1856kB free_cma:0kB [ 268.788014][T11401] lowmem_reserve[]: 0 0 0 0 0 [ 268.788036][T11401] Node 1 DMA32 free:78492kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34388kB inactive_anon:3988kB active_file:13276kB inactive_file:132188kB unevictable:4000kB writepending:2364kB zspages:1720kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:54896kB local_pcp:14856kB free_cma:0kB [ 268.788069][T11401] lowmem_reserve[]: 0 0 0 0 0 [ 268.788087][T11401] Node 0 DMA: 42*4kB (U) 18*8kB (UM) 8*16kB (UM) 3*32kB (UM) 5*64kB (UM) 3*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2008kB [ 268.788162][T11401] Node 0 DMA32: 587*4kB (UME) 79*8kB (UME) 12*16kB (UME) 29*32kB (ME) 18*64kB (UME) 11*128kB (UME) 9*256kB (ME) 6*512kB (ME) 2*1024kB (M) 0*2048kB 0*4096kB = 14084kB [ 268.788245][T11401] Node 1 DMA32: 169*4kB (UME) 308*8kB (UME) 225*16kB (UME) 239*32kB (UME) 150*64kB (UME) 55*128kB (UME) 27*256kB (UME) 27*512kB (UME) 26*1024kB (UM) 0*2048kB 0*4096kB = 78388kB [ 268.788323][T11401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.788333][T11401] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.788341][T11401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.788350][T11401] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.788359][T11401] 39394 total pagecache pages [ 268.788363][T11401] 118 pages in swap cache [ 268.788368][T11401] Free swap = 110792kB [ 268.788372][T11401] Total swap = 124996kB [ 268.788377][T11401] 524155 pages RAM [ 268.788381][T11401] 0 pages HighMem/MovableOnly [ 268.788385][T11401] 212073 pages reserved [ 268.788389][T11401] 0 pages cma reserved [ 268.908774][T11403] trusted_key: encrypted_key: insufficient parameters specified [ 268.911857][T11403] batadv_slave_1: entered promiscuous mode [ 268.931277][T11403] ipvlan2: entered promiscuous mode [ 268.936144][T11403] team0: Device ipvlan2 failed to register rx_handler [ 268.994182][T11402] batadv_slave_1: left promiscuous mode [ 269.795224][T11420] nvmet: failed to open file ./file0: (-2) [ 269.798313][T11420] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 269.828753][T11421] fuse: Bad value for 'user_id' [ 269.828817][T11421] fuse: Bad value for 'user_id' [ 269.845938][ T1173] nvmet: Created nvm controller 76 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 269.846747][T11420] nvme nvme75: creating 4 I/O queues. [ 269.851130][T11420] nvme nvme75: new ctrl: "testsubsys" [ 270.000161][T11430] FAULT_INJECTION: forcing a failure. [ 270.000161][T11430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.004329][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.6.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.004358][T11430] Tainted: [L]=SOFTLOCKUP [ 270.004364][T11430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.004371][T11430] Call Trace: [ 270.004376][T11430] [ 270.004381][T11430] dump_stack_lvl+0x100/0x190 [ 270.004400][T11430] should_fail_ex.cold+0x5/0xa [ 270.004416][T11430] _copy_from_user+0x2e/0xd0 [ 270.004435][T11430] snd_seq_ioctl+0x1bf/0x410 [ 270.004449][T11430] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 270.004469][T11430] ? __fget_files+0x21f/0x3d0 [ 270.004483][T11430] snd_seq_ioctl_compat+0x13b/0x300 [ 270.004496][T11430] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 270.004509][T11430] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 270.004528][T11430] __do_fast_syscall_32+0x13a/0x8b0 [ 270.004542][T11430] ? lockdep_hardirqs_on+0x7d/0x110 [ 270.004556][T11430] do_fast_syscall_32+0x32/0x70 [ 270.004570][T11430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.004585][T11430] RIP: 0023:0xf7fc8fec [ 270.004599][T11430] Code: Unable to access opcode bytes at 0xf7fc8fc2. [ 270.004604][T11430] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 270.004616][T11430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004040534e [ 270.004623][T11430] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.004630][T11430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.004641][T11430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 270.004648][T11430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.004661][T11430] [ 270.271959][T11434] trusted_key: encrypted_key: insufficient parameters specified [ 270.272411][T11434] batadv_slave_1: entered promiscuous mode [ 270.278788][T11434] ipvlan2: entered promiscuous mode [ 270.284178][T11434] team0: Device ipvlan2 failed to register rx_handler [ 270.334743][T11433] batadv_slave_1: left promiscuous mode [ 270.359789][ T76] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 270.383205][T11436] netlink: 17528 bytes leftover after parsing attributes in process `syz.7.1550'. [ 270.520852][ T76] usb 11-1: Using ep0 maxpacket: 8 [ 270.536682][ T76] usb 11-1: unable to get BOS descriptor or descriptor too short [ 270.536744][ T76] usb 11-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 270.540730][ T76] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 270.540749][ T76] usb 11-1: can't read configurations, error -71 [ 271.233968][T11451] FAULT_INJECTION: forcing a failure. [ 271.233968][T11451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.234041][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.6.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.234080][T11451] Tainted: [L]=SOFTLOCKUP [ 271.234088][T11451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.234099][T11451] Call Trace: [ 271.234106][T11451] [ 271.234114][T11451] dump_stack_lvl+0x100/0x190 [ 271.234142][T11451] should_fail_ex.cold+0x5/0xa [ 271.234165][T11451] _copy_to_user+0x32/0xd0 [ 271.234196][T11451] simple_read_from_buffer+0xcb/0x170 [ 271.234217][T11451] proc_fail_nth_read+0x1af/0x230 [ 271.234247][T11451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.234277][T11451] ? rw_verify_area+0xce/0x6d0 [ 271.234303][T11451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.234331][T11451] vfs_read+0x1e4/0xb40 [ 271.234359][T11451] ? lock_acquire+0x1d1/0x380 [ 271.234383][T11451] ? __fget_files+0x34/0x3d0 [ 271.234413][T11451] ? __pfx_vfs_read+0x10/0x10 [ 271.234441][T11451] ? find_held_lock+0x2b/0x80 [ 271.234460][T11451] ? __fget_files+0x215/0x3d0 [ 271.234482][T11451] ? __fget_files+0x21f/0x3d0 [ 271.234506][T11451] ksys_read+0x12a/0x250 [ 271.234522][T11451] ? __pfx_ksys_read+0x10/0x10 [ 271.234545][T11451] do_int80_emulation+0x166/0x650 [ 271.234570][T11451] asm_int80_emulation+0x1a/0x20 [ 271.234588][T11451] RIP: 0023:0xf71c75ab [ 271.234602][T11451] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 271.234618][T11451] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 271.234641][T11451] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54865d0 [ 271.234655][T11451] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 271.234665][T11451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.234675][T11451] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.234685][T11451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.234708][T11451] [ 271.409297][T11458] trusted_key: encrypted_key: insufficient parameters specified [ 271.426010][T11458] batadv_slave_1: entered promiscuous mode [ 271.441182][T11458] ipvlan4: entered promiscuous mode [ 271.442471][T11458] team0: Device ipvlan4 failed to register rx_handler [ 271.453316][T11462] FAULT_INJECTION: forcing a failure. [ 271.453316][T11462] name failslab, interval 1, probability 0, space 0, times 0 [ 271.453442][T11462] CPU: 3 UID: 0 PID: 11462 Comm: syz.7.1560 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.453469][T11462] Tainted: [L]=SOFTLOCKUP [ 271.453476][T11462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.453483][T11462] Call Trace: [ 271.453488][T11462] [ 271.453493][T11462] dump_stack_lvl+0x100/0x190 [ 271.453512][T11462] should_fail_ex.cold+0x5/0xa [ 271.453526][T11462] should_failslab+0xc2/0x120 [ 271.453553][T11462] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 271.453568][T11462] ? __alloc_skb+0x140/0x710 [ 271.453581][T11462] __alloc_skb+0x140/0x710 [ 271.453590][T11462] ? __alloc_skb+0x5b7/0x710 [ 271.453600][T11462] ? __pfx___alloc_skb+0x10/0x10 [ 271.453615][T11462] _sctp_make_chunk+0x51/0x270 [ 271.453630][T11462] sctp_make_datafrag_empty+0x14e/0x230 [ 271.453645][T11462] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 271.453664][T11462] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 271.453681][T11462] ? sctp_datamsg_from_user+0x8e/0x1360 [ 271.453696][T11462] sctp_datamsg_from_user+0x5ea/0x1360 [ 271.453709][T11462] ? sctp_prsctp_prune+0x10/0x7f0 [ 271.453725][T11462] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 271.453740][T11462] ? sctp_transport_route+0x340/0x360 [ 271.453754][T11462] ? sctp_transport_put+0x57/0x180 [ 271.453767][T11462] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 271.453785][T11462] ? find_held_lock+0x2b/0x80 [ 271.453796][T11462] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 271.453812][T11462] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 271.453830][T11462] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 271.453847][T11462] sctp_sendmsg+0x1144/0x22e0 [ 271.453860][T11462] ? __pfx_sctp_sendmsg+0x10/0x10 [ 271.453882][T11462] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 271.453903][T11462] ? aa_sock_msg_perm+0x11e/0x200 [ 271.453922][T11462] ? __pfx_sctp_sendmsg+0x10/0x10 [ 271.453940][T11462] inet_sendmsg+0x11c/0x140 [ 271.453955][T11462] __sys_sendto+0x453/0x4e0 [ 271.453973][T11462] ? __pfx_inet_sendmsg+0x10/0x10 [ 271.453988][T11462] ? __pfx___sys_sendto+0x10/0x10 [ 271.454015][T11462] ? fput+0x7c/0x100 [ 271.454028][T11462] ? ksys_write+0x1ac/0x250 [ 271.454040][T11462] __ia32_sys_sendto+0xdd/0x1b0 [ 271.454057][T11462] ? __do_fast_syscall_32+0xb3/0x8b0 [ 271.454072][T11462] ? lockdep_hardirqs_on+0x7d/0x110 [ 271.454085][T11462] __do_fast_syscall_32+0x13a/0x8b0 [ 271.454098][T11462] ? lockdep_hardirqs_on+0x7d/0x110 [ 271.454111][T11462] do_fast_syscall_32+0x32/0x70 [ 271.454125][T11462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.454140][T11462] RIP: 0023:0xf6fdefec [ 271.454153][T11462] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 271.454161][T11462] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 271.454173][T11462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 271.454180][T11462] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080000380 [ 271.454186][T11462] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 271.454193][T11462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.454200][T11462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.454214][T11462] [ 271.504563][T11464] fuse: Bad value for 'user_id' [ 271.504575][T11464] fuse: Bad value for 'user_id' [ 271.559132][T11457] batadv_slave_1: left promiscuous mode [ 271.814959][ T5452] veth0_vlan: left promiscuous mode [ 271.821822][ T5888] veth0_vlan: entered promiscuous mode [ 271.909757][ T76] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 272.072139][ T76] usb 7-1: Using ep0 maxpacket: 8 [ 272.100443][ T76] usb 7-1: unable to get BOS descriptor or descriptor too short [ 272.100531][ T76] usb 7-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 272.114810][ T76] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 272.114872][ T76] usb 7-1: can't read configurations, error -71 [ 272.455887][T11498] x_tables: ip6_tables: set.3 match: invalid size 48 (kernel) != (user) 32 [ 273.516533][T11512] trusted_key: encrypted_key: insufficient parameters specified [ 273.518797][T11512] batadv_slave_1: entered promiscuous mode [ 273.551832][T11512] ipvlan2: entered promiscuous mode [ 273.555409][T11512] team0: Device ipvlan2 failed to register rx_handler [ 273.695984][T11511] batadv_slave_1: left promiscuous mode [ 273.813031][T11519] fuse: Bad value for 'user_id' [ 273.813094][T11519] fuse: Bad value for 'user_id' [ 274.203807][T11494] Set syz0 is full, maxelem 65536 reached [ 274.260887][T11529] nvmet: failed to open file ./file0: (-2) [ 274.264296][T11529] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 274.321447][ T37] nvmet: Created nvm controller 77 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e33b4063-8317-40ca-b5da-ec097a7a95a7. [ 274.327607][T11529] nvme nvme76: creating 4 I/O queues. [ 274.332422][T11529] nvme nvme76: new ctrl: "testsubsys" [ 274.499337][ T76] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 274.650786][ T76] usb 12-1: Using ep0 maxpacket: 8 [ 274.661569][ T76] usb 12-1: unable to get BOS descriptor or descriptor too short [ 274.661648][ T76] usb 12-1: New USB device found, idVendor=293c, idProduct=5702, bcdDevice=58.6c [ 274.662491][ T76] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 274.662512][ T76] usb 12-1: can't read configurations, error -71 [ 274.884347][T11548] trusted_key: encrypted_key: insufficient parameters specified [ 274.884977][T11548] batadv_slave_1: entered promiscuous mode [ 274.896074][T11548] ipvlan2: entered promiscuous mode [ 274.897957][T11548] team0: Device ipvlan2 failed to register rx_handler [ 274.965524][T11547] batadv_slave_1: left promiscuous mode [ 275.264612][T11556] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 275.271003][T11556] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 275.277877][T11556] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.289047][T11556] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.303836][T11561] [ 275.304765][T11561] ====================================================== [ 275.307319][T11561] WARNING: possible circular locking dependency detected [ 275.309542][T11561] syzkaller #0 Tainted: G L [ 275.311501][T11561] ------------------------------------------------------ [ 275.313975][T11561] syz.7.1585/11561 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.316526][T11561] ffff88802b122a80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 275.320216][T11561] [ 275.320216][T11561] but task is already holding lock: [ 275.322963][T11561] ffff88804ae9c8a0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 275.326928][T11561] [ 275.326928][T11561] which lock already depends on the new lock. [ 275.326928][T11561] [ 275.331678][T11561] [ 275.331678][T11561] the existing dependency chain (in reverse order) is: [ 275.335394][T11561] [ 275.335394][T11561] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 275.339045][T11561] lock_acquire+0x1d1/0x380 [ 275.341308][T11561] __mutex_lock+0x1a4/0x1bc0 [ 275.343354][T11561] ima_file_truncate+0xe6/0x190 [ 275.345595][T11561] security_file_truncate+0x11e/0x1e0 [ 275.348200][T11561] path_openat+0x1d7e/0x2440 [ 275.350489][T11561] do_file_open+0x20e/0x430 [ 275.352641][T11561] do_sys_openat2+0x10f/0x1e0 [ 275.355023][T11561] __ia32_compat_sys_openat+0x12d/0x210 [ 275.357613][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.359471][T11561] do_fast_syscall_32+0x32/0x70 [ 275.361138][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.363192][T11561] [ 275.363192][T11561] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 275.365382][T11561] lock_acquire+0x1d1/0x380 [ 275.367070][T11561] mnt_want_write+0x6f/0x420 [ 275.368868][T11561] lookup_open+0x150/0x1990 [ 275.370399][T11561] path_openat+0xa2c/0x2440 [ 275.371931][T11561] do_file_open+0x20e/0x430 [ 275.373463][T11561] file_open_name+0x1c3/0x3e0 [ 275.375201][T11561] filp_open+0x2e/0x50 [ 275.376649][T11561] nvmet_file_ns_enable+0x95/0x420 [ 275.378357][T11561] nvmet_ns_enable+0x35f/0x5d0 [ 275.379943][T11561] nvmet_ns_enable_store+0x11e/0x160 [ 275.381684][T11561] configfs_write_iter+0x302/0x4e0 [ 275.383394][T11561] vfs_write+0x6af/0x1050 [ 275.384857][T11561] ksys_write+0x12a/0x250 [ 275.386408][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.388293][T11561] do_fast_syscall_32+0x32/0x70 [ 275.389997][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.392182][T11561] [ 275.392182][T11561] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 275.394672][T11561] lock_acquire+0x1d1/0x380 [ 275.396441][T11561] __mutex_lock+0x1a4/0x1bc0 [ 275.398158][T11561] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 275.400139][T11561] configfs_write_iter+0x302/0x4e0 [ 275.401897][T11561] vfs_write+0x6af/0x1050 [ 275.403455][T11561] ksys_write+0x12a/0x250 [ 275.404992][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.406861][T11561] do_fast_syscall_32+0x32/0x70 [ 275.408614][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.410772][T11561] [ 275.410772][T11561] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 275.413110][T11561] lock_acquire+0x1d1/0x380 [ 275.414842][T11561] down_read+0x99/0x4c0 [ 275.416357][T11561] configfs_write_iter+0x218/0x4e0 [ 275.418141][T11561] vfs_write+0x6af/0x1050 [ 275.419689][T11561] ksys_write+0x12a/0x250 [ 275.421240][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.423027][T11561] do_fast_syscall_32+0x32/0x70 [ 275.424760][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.426904][T11561] [ 275.426904][T11561] -> #0 (&buffer->mutex){+.+.}-{4:4}: [ 275.429322][T11561] check_prev_add+0xeb/0xe60 [ 275.430951][T11561] __lock_acquire+0x1492/0x1ec0 [ 275.432703][T11561] lock_acquire+0x1d1/0x380 [ 275.434387][T11561] __mutex_lock+0x1a4/0x1bc0 [ 275.436025][T11561] configfs_read_iter+0x79/0x6f0 [ 275.437778][T11561] __kernel_read+0x397/0xad0 [ 275.439401][T11561] integrity_kernel_read+0x7e/0xb0 [ 275.441174][T11561] ima_calc_file_hash_tfm+0x25e/0x350 [ 275.443035][T11561] ima_calc_file_hash+0x1e3/0x380 [ 275.444820][T11561] ima_collect_measurement+0x94f/0xb30 [ 275.446832][T11561] process_measurement+0xdfe/0x2350 [ 275.448655][T11561] ima_file_check+0xcc/0x120 [ 275.450427][T11561] security_file_post_open+0xc4/0x210 [ 275.452504][T11561] path_openat+0x5cd/0x2440 [ 275.454261][T11561] do_file_open+0x20e/0x430 [ 275.456022][T11561] do_sys_openat2+0x10f/0x1e0 [ 275.457797][T11561] __ia32_compat_sys_openat+0x12d/0x210 [ 275.459728][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.461512][T11561] do_fast_syscall_32+0x32/0x70 [ 275.463183][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.465526][T11561] [ 275.465526][T11561] other info that might help us debug this: [ 275.465526][T11561] [ 275.468723][T11561] Chain exists of: [ 275.468723][T11561] &buffer->mutex --> sb_writers#5 --> &ima_iint_mutex_key[depth] [ 275.468723][T11561] [ 275.472921][T11561] Possible unsafe locking scenario: [ 275.472921][T11561] [ 275.475307][T11561] CPU0 CPU1 [ 275.477017][T11561] ---- ---- [ 275.478695][T11561] lock(&ima_iint_mutex_key[depth]); [ 275.480440][T11561] lock(sb_writers#5); [ 275.482792][T11561] lock(&ima_iint_mutex_key[depth]); [ 275.485575][T11561] lock(&buffer->mutex); [ 275.487054][T11561] [ 275.487054][T11561] *** DEADLOCK *** [ 275.487054][T11561] [ 275.489778][T11561] locks held by syz.7.1585/11561: 1, last CPU#3: [ 275.492136][T11561] #0: ffff88804ae9c8a0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 275.496501][T11561] [ 275.496501][T11561] stack backtrace: [ 275.499314][T11561] CPU: 3 UID: 0 PID: 11561 Comm: syz.7.1585 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.503928][T11561] Tainted: [L]=SOFTLOCKUP [ 275.505641][T11561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.509554][T11561] Call Trace: [ 275.510962][T11561] [ 275.512225][T11561] dump_stack_lvl+0x100/0x190 [ 275.514399][T11561] print_circular_bug.cold+0x178/0x1be [ 275.516749][T11561] check_noncircular+0x146/0x160 [ 275.518850][T11561] check_prev_add+0xeb/0xe60 [ 275.520878][T11561] __lock_acquire+0x1492/0x1ec0 [ 275.522853][T11561] ? is_bpf_text_address+0x8a/0x1a0 [ 275.524950][T11561] lock_acquire+0x1d1/0x380 [ 275.527010][T11561] ? configfs_read_iter+0x79/0x6f0 [ 275.529084][T11561] ? __pfx___might_resched+0x10/0x10 [ 275.531236][T11561] ? arch_stack_walk+0xa6/0xf0 [ 275.533261][T11561] __mutex_lock+0x1a4/0x1bc0 [ 275.535354][T11561] ? configfs_read_iter+0x79/0x6f0 [ 275.537512][T11561] ? configfs_read_iter+0x79/0x6f0 [ 275.539640][T11561] ? stack_trace_save+0x8e/0xc0 [ 275.541647][T11561] ? __pfx___mutex_lock+0x10/0x10 [ 275.543722][T11561] ? stack_depot_save_flags+0x27/0x9f0 [ 275.545943][T11561] ? __lock_acquire+0x4c5/0x1ec0 [ 275.548017][T11561] ? __kasan_kmalloc+0xaa/0xb0 [ 275.549980][T11561] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 275.552251][T11561] ? ima_calc_file_hash_tfm+0x236/0x350 [ 275.554608][T11561] ? ima_calc_file_hash+0x1e3/0x380 [ 275.556754][T11561] ? ima_collect_measurement+0x94f/0xb30 [ 275.559297][T11561] ? process_measurement+0xdfe/0x2350 [ 275.561225][T11561] ? ima_file_check+0xcc/0x120 [ 275.562894][T11561] ? security_file_post_open+0xc4/0x210 [ 275.564787][T11561] ? configfs_read_iter+0x79/0x6f0 [ 275.566413][T11561] configfs_read_iter+0x79/0x6f0 [ 275.568019][T11561] __kernel_read+0x397/0xad0 [ 275.569488][T11561] ? __pfx___kernel_read+0x10/0x10 [ 275.571111][T11561] integrity_kernel_read+0x7e/0xb0 [ 275.572740][T11561] ? __pfx_integrity_kernel_read+0x10/0x10 [ 275.574773][T11561] ? ima_calc_file_hash_tfm+0x236/0x350 [ 275.576642][T11561] ima_calc_file_hash_tfm+0x25e/0x350 [ 275.578509][T11561] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 275.580398][T11561] ? stack_trace_consume_entry+0x170/0x170 [ 275.582266][T11561] ? look_up_lock_class+0x64/0x120 [ 275.583915][T11561] ? ima_alloc_tfm+0x21a/0x2e0 [ 275.585465][T11561] ima_calc_file_hash+0x1e3/0x380 [ 275.587113][T11561] ima_collect_measurement+0x94f/0xb30 [ 275.588835][T11561] ? __pfx_ima_collect_measurement+0x10/0x10 [ 275.590706][T11561] ? process_measurement+0x5ab/0x2350 [ 275.592393][T11561] ? is_bad_inode+0xd/0x40 [ 275.593807][T11561] ? xattr_resolve_name+0x27d/0x3f0 [ 275.595463][T11561] ? vfs_getxattr_alloc+0xec/0x350 [ 275.597088][T11561] ? ima_get_hash_algo+0x241/0x400 [ 275.598704][T11561] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 275.600424][T11561] ? process_measurement+0xdfe/0x2350 [ 275.602130][T11561] process_measurement+0xdfe/0x2350 [ 275.603789][T11561] ? __pfx_process_measurement+0x10/0x10 [ 275.605726][T11561] ? lock_acquire+0x1d1/0x380 [ 275.607330][T11561] ? __configfs_open_file+0x6ca/0x9c0 [ 275.609089][T11561] ima_file_check+0xcc/0x120 [ 275.610604][T11561] ? __pfx_ima_file_check+0x10/0x10 [ 275.612418][T11561] security_file_post_open+0xc4/0x210 [ 275.614210][T11561] path_openat+0x5cd/0x2440 [ 275.615959][T11561] ? __pfx_path_openat+0x10/0x10 [ 275.617983][T11561] do_file_open+0x20e/0x430 [ 275.619731][T11561] ? __pfx_do_file_open+0x10/0x10 [ 275.621519][T11561] ? _raw_spin_unlock+0x28/0x50 [ 275.623224][T11561] ? alloc_fd+0x471/0x7a0 [ 275.624621][T11561] do_sys_openat2+0x10f/0x1e0 [ 275.626186][T11561] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.627980][T11561] __ia32_compat_sys_openat+0x12d/0x210 [ 275.629949][T11561] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 275.632131][T11561] __do_fast_syscall_32+0x13a/0x8b0 [ 275.633938][T11561] do_fast_syscall_32+0x32/0x70 [ 275.635892][T11561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.638594][T11561] RIP: 0023:0xf6fdefec [ 275.640294][T11561] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 275.642935][T11561] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 275.646163][T11561] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 275.648948][T11561] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.651970][T11561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 275.654694][T11561] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 275.657384][T11561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.660703][T11561] [ 275.683509][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 275.683591][ T43] audit: type=1800 audit(1787941471.085:1681): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1585" name="attr_allow_any_host" dev="configfs" ino=41372 res=0 errno=0 [ 275.789421][ T42] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 276.063126][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.072387][ T8635] tipc: Resetting bearer [ 276.084729][ T8635] tipc: Disabling bearer [ 276.095638][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.175135][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.222750][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.343160][ T13] bond0 (unregistering): Released all slaves [ 276.405423][ T13] tipc: Disabling bearer [ 276.405585][ T13] tipc: Left network mode [ 276.445581][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 276.534336][ T13] hsr_slave_0: left promiscuous mode [ 276.536225][ T13] hsr_slave_1: left promiscuous mode [ 276.539684][ T13] veth1_macvtap: left promiscuous mode [ 276.540737][ T13] veth0_macvtap: left promiscuous mode [ 276.540772][ T13] veth1_vlan: left promiscuous mode [ 276.540797][ T13] veth0_vlan: left promiscuous mode [ 276.619023][ T37] smbdirect: ib_dev[syz2] removed [ 276.636507][ T5452] 8021q: adding VLAN 0 to HW filter on device eth15 [ 276.636828][ T5888] infiniband syz2: ib_query_port failed (-19) [ 276.760642][ T5452] 8021q: adding VLAN 0 to HW filter on device eth16 [ 276.870935][ T5452] 8021q: adding VLAN 0 to HW filter on device eth17 [ 276.963251][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.002824][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.043205][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.073523][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.137261][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.184022][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.223219][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.245021][ T5452] 8021q: adding VLAN 0 to HW filter on device eth18 [ 277.264714][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.331681][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.343284][ T5452] 8021q: adding VLAN 0 to HW filter on device eth19 [ 277.382742][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.439219][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.444211][ T5452] 8021q: adding VLAN 0 to HW filter on device eth20 [ 277.469541][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.534674][ T13] bridge_slave_1: left allmulticast mode [ 277.534723][ T13] bridge_slave_1: left promiscuous mode [ 277.534828][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.540372][ T13] bridge_slave_0: left allmulticast mode [ 277.540391][ T13] bridge_slave_0: left promiscuous mode [ 277.540493][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.548993][ T13] bridge_slave_1: left allmulticast mode [ 277.549607][ T13] bridge_slave_1: left promiscuous mode [ 277.549678][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.553165][ T13] bridge_slave_0: left allmulticast mode [ 277.553178][ T13] bridge_slave_0: left promiscuous mode [ 277.553242][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.616240][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.622443][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.625993][ T13] bond0 (unregistering): Released all slaves [ 277.655170][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.659130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.663072][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 277.666348][ T13] bond0 (unregistering): Released all slaves [ 277.707362][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.711927][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.715537][ T13] bond0 (unregistering): Released all slaves [ 277.718453][ T5452] 8021q: adding VLAN 0 to HW filter on device eth21 [ 277.770256][ T13] tipc: Disabling bearer [ 277.770388][ T13] tipc: Left network mode [ 277.788147][ T13] tipc: Left network mode [ 277.808159][ T5452] 8021q: adding VLAN 0 to HW filter on device eth22 [ 277.907108][ T5452] 8021q: adding VLAN 0 to HW filter on device eth24 [ 278.003439][ T5452] 8021q: adding VLAN 0 to HW filter on device eth23 [ 278.101639][ T5452] 8021q: adding VLAN 0 to HW filter on device eth25 [ 278.164853][ T13] hsr_slave_0: left promiscuous mode [ 278.166901][ T13] hsr_slave_1: left promiscuous mode [ 278.167496][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.167511][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.172167][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.172183][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.182049][ T13] hsr_slave_0: left promiscuous mode [ 278.183963][ T13] hsr_slave_1: left promiscuous mode [ 278.184417][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.184433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.186200][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.186213][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.195774][ T13] hsr_slave_0: left promiscuous mode [ 278.197811][ T13] hsr_slave_1: left promiscuous mode [ 278.198064][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.198074][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.200390][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.200400][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.208349][ T13] veth1_macvtap: left promiscuous mode [ 278.208369][ T13] veth0_macvtap: left promiscuous mode [ 278.208402][ T13] veth1_vlan: left promiscuous mode [ 278.208437][ T13] veth0_vlan: left promiscuous mode [ 278.217341][ T13] veth1_macvtap: left promiscuous mode [ 278.219201][ T13] veth0_macvtap: left promiscuous mode [ 278.219313][ T13] veth1_vlan: left promiscuous mode [ 278.219373][ T13] veth0_vlan: left promiscuous mode [ 278.226669][ T13] veth1_macvtap: left promiscuous mode [ 278.226773][ T13] veth0_macvtap: left promiscuous mode [ 278.226992][ T13] veth1_vlan: left promiscuous mode [ 278.227112][ T13] veth0_vlan: left promiscuous mode [ 278.437275][ T13] team0 (unregistering): Port device team_slave_1 removed [ 278.442972][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.524857][ T13] team0 (unregistering): Port device team_slave_1 removed [ 278.528360][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.552993][ T5452] 8021q: adding VLAN 0 to HW filter on device eth26 [ 278.684472][ T5452] 8021q: adding VLAN 0 to HW filter on device eth28 [ 278.807985][ T5452] 8021q: adding VLAN 0 to HW filter on device eth27 [ 278.947184][ T5452] 8021q: adding VLAN 0 to HW filter on device eth29 [ 279.047214][ T13] IPVS: stop unused estimator thread 0... [ 279.049353][ T13] IPVS: stop unused estimator thread 0...