last executing test programs:

13m23.884896771s ago: executing program 3 (id=2977):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0xfffffe14)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [{0x20, '*'}], 0xa, "6cfb1c8e0ed4bdba6fb1f7de0909039a31bf4c6810437da28983703b13d0c1652b20b56ebcbfd05bcd5907dc7b1ba531b42b2878af008ca2b2929a66ed2da267c29a29b32a8be92b882dbeda4ba7e750428b9e22736bb5a27d91c0421f551fb0e10e9c506cef8b0740b3b3d1efbde5e8775c09f7f0c497d9d70197af2903bd26d089c4ff3caf9b6948fb463b7565c3d81c493a2f9f2c3ce66bb1fefe1700594e26aeed09e48b6a622bd67399f5eebec6bb4d7cba691782db7c16c39b82c60a4f20c6bb344f9449ad614abaa63891a188a5e43cd87d4b50a54ef87f120130e4f5171ff80f093b7a28f293d45fc5a16a1a77"}, 0xfe)
creat(&(0x7f00000006c0)='./file0\x00', 0x167)
dup3(r1, r4, 0x6700000000000000)
close_range(r0, 0xffffffffffffffff, 0x0)

13m23.757040626s ago: executing program 3 (id=2978):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ef)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000068000100020000000600000000000000000000000c00020001"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_getnexthop={0x18, 0x6a, 0x7d9504e1c39794d, 0x70bd2a, 0x25dfdbfb}, 0x18}}, 0x24044000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'sit0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0)
write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/ep1in-bulk\x00', 0x2, 0x24)
close(r0)
write$binfmt_script(r8, 0x0, 0x0)

13m23.679051074s ago: executing program 3 (id=2979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xf}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x101000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8a, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r5, r3}, 0xc)

13m23.407827082s ago: executing program 3 (id=2980):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x4200200, &(0x7f0000000240)="9b583f0c0d961fdc2f7b3248b3c06588bc1fe33476d35e0b4cacbb83eb105ea520b59e743c8dfd748647659a0b4b600e53745ac12439a6835a8ccdf19cee08caa59a18a35266723585224fad863c91eab7dc56d264fdf1", 0x57, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)="1e7f225900ae946514ad9f84aa12cad75be0dde09cbce71744d5672343cbd61b9fb46ddecd2a37fbedb4b27462438f32c53a")
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x202402, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x58}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mknod(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x4, 0x6)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$nl_xfrm(0x10, 0x3, 0x6)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e1c, @multicast2}, 0x6d)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x2210088, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
rename(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000680)=r3, 0x4)

13m22.435437771s ago: executing program 3 (id=2983):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xfe, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

13m21.609305649s ago: executing program 3 (id=2987):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000140)=0x40)
mkdir(&(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = mq_open(&(0x7f0000000080)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f00000000c0)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)
mq_timedreceive(r1, &(0x7f0000000280)=""/215, 0xd7, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020)

13m21.427315627s ago: executing program 32 (id=2987):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000140)=0x40)
mkdir(&(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = mq_open(&(0x7f0000000080)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f00000000c0)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)
mq_timedreceive(r1, &(0x7f0000000280)=""/215, 0xd7, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020)

9m48.848791579s ago: executing program 0 (id=3622):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x2b, 0xb1, [@local, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @local, @local]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x0, [0x441, 0x0, 0x6, 0x2, 0x3c5, 0x3]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0xc, [{@remote, 0x5df6}, {@multicast2, 0xa}, {@multicast2, 0x3}, {@remote, 0x101}]}]}}}], 0x84}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r9 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r8, 0x1, 0x0, 0x0)
syz_usb_ep_write(r8, 0x81, 0x40, &(0x7f0000000240)="900100"/64)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

9m46.105729981s ago: executing program 0 (id=3629):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x2f, 0xb1, [@local, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @local, @local]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x0, [0x441, 0x0, 0x6, 0x2, 0x3c5, 0x3]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0xc, [{@remote, 0x5df6}, {@multicast2, 0xa}, {@multicast2, 0x3}, {@remote, 0x101}]}]}}}], 0x88}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r8 = socket(0x8, 0x5, 0x5)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

9m43.504282628s ago: executing program 0 (id=3634):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb20b7d48ee17b9cf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x8001)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,')
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$apparmor_exec(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='stack :'], 0xe4)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xd4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x10010, r5, 0xd74f2000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x48050)

9m42.923990278s ago: executing program 0 (id=3636):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40004)
mount(0x0, 0x0, &(0x7f0000000380)='cifs\x00', 0xa2000, &(0x7f0000000800)='sour\xe9ce=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r0=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000030, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000880)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0xffffffffffffffd8)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
read$FUSE(0xffffffffffffffff, &(0x7f0000002e80)={0x2020}, 0x3d3)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="010005020b0000002cbd7000ffdbdf2507000900580100007055f74561b733033cacfce51fb33deda04ec140d8dfa2076bca474437150018d9e80000000000020013008000000028bd700005710000"], 0x58}}, 0x48840)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x50, 0xffffffffffffffff, 0x8bf29000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setrlimit(0x2, &(0x7f0000000280)={0x52, 0x4})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000007c0)={{&(0x7f00000d8000/0x2000)=nil, 0x2000}, 0x1})
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000000, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/diskstats\x00', 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x400001, &(0x7f0000000680)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000006c0)=[&(0x7f0000000700)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000740)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
read$FUSE(r4, &(0x7f0000000e40)={0x2020}, 0x2020)

9m42.817922877s ago: executing program 0 (id=3637):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/firmware_config/ignore_sysfs_fallback\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x1b, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0xc004)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000400)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2d}, 0x48, 0xffffffffffffffff)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000480)={&(0x7f00000004c0)=""/112, 0x70})
r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000580))
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000600), 0x2, 0x40402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000640)={&(0x7f0000000680)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1})
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x100010, r4, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000700)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000780)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000007c0)={0x0, 0x81})
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff)
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xfffff001)
ioctl$GIO_FONT(r7, 0x4b60, &(0x7f0000000840)=""/13)
mount(0x0, &(0x7f0000000880)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

9m42.112073926s ago: executing program 0 (id=3642):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x2f, 0xb1, [@local, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @local, @local]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x0, [0x441, 0x0, 0x6, 0x2, 0x3c5, 0x3]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0xc, [{@remote, 0x5df6}, {@multicast2, 0xa}, {@multicast2, 0x3}, {@remote, 0x101}]}]}}}], 0x88}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r8 = socket(0x8, 0x5, 0x5)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

9m25.060087795s ago: executing program 33 (id=3642):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x2f, 0xb1, [@local, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @local, @local]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x0, [0x441, 0x0, 0x6, 0x2, 0x3c5, 0x3]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0xc, [{@remote, 0x5df6}, {@multicast2, 0xa}, {@multicast2, 0x3}, {@remote, 0x101}]}]}}}], 0x88}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r8 = socket(0x8, 0x5, 0x5)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

8m17.491489252s ago: executing program 1 (id=4012):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x28, 0x1, 0xf7, 0x7fff}]}, 0x8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xbe7, &(0x7f0000000c80)={0x0, 0x989680})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r8=>0x0, 0x29, 0x6, 0x9, 0x7, 0x30, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00', 0x20, 0x40, 0x5613, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', <r9=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040), 0xc, &(0x7f0000000b80)={&(0x7f0000000640)={0x51c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r7}, {0x1d4, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x7, 0xfc, 0x3}, {0xb76b, 0x5f, 0x7c, 0x6}, {0x6, 0x8, 0x7, 0x2}, {0x5, 0xb, 0x80, 0x5}, {0xc, 0xfe, 0xf}, {0xb, 0x7, 0xb, 0x7ff}, {0x3, 0x0, 0x9, 0x5}, {0x8, 0x4, 0x1, 0x5}, {0xb, 0xc, 0x3, 0xc}, {0xc, 0x8, 0x51, 0x400}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd, 0x2, 0x3, 0x7}, {0x3e46, 0x7, 0x0, 0xef}, {0x7, 0x6, 0x4, 0x91}, {0xdc1, 0x7, 0xa9, 0x5}, {0x540f, 0x6, 0x27, 0x3}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf1}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x47, 0x2d, 0x3e8}, {0x7, 0x3, 0x7, 0x7}, {0x6, 0x3, 0x10, 0x43}, {0x2, 0x10, 0x2, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc5d3}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x140f, 0x1, 0xc, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000441}, 0x4008084)

8m17.024440355s ago: executing program 1 (id=4016):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$ttynull(0xffffff9c, &(0x7f00000002c0), 0x20800, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000300))
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@local, @loopback, 0x1, 0x1, [@broadcast]}, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sr(0xffffff9c, &(0x7f0000000340), 0x900, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r3}, 0xc)

8m16.95004606s ago: executing program 1 (id=4017):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40))
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xc, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000002640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000002700)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 8)

8m16.812548448s ago: executing program 1 (id=4020):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x14, &(0x7f00000003c0)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x9}, 0x94)

8m16.711231695s ago: executing program 1 (id=4022):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x24020400)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r3, 0x409, 0x7)
fcntl$addseals(r3, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
timer_gettime(r2, &(0x7f00000003c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040000}, 0x10)
readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

8m15.371240163s ago: executing program 1 (id=4027):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
unshare(0x24020400)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r3, 0x409, 0x7)
fcntl$addseals(r3, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
timer_gettime(r2, &(0x7f00000003c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040000}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

8m9.306849377s ago: executing program 2 (id=4037):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x1b}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffe}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 8)

8m8.950880498s ago: executing program 2 (id=4039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040025}, 0x20000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001c40)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd09, &(0x7f0000000300))
write(r0, &(0x7f0000000140)='auto', 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000008c0), 0x80d01, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001b80)={0xa0a00, 0xa0000})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'macvlan0\x00', 0x400})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, &(0x7f0000000840))
mkdir(&(0x7f00000004c0)='./cgroup/../file0\x00', 0x155)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0x2, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x7, 0x0, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d00)=ANY=[], 0x50}}, 0x8050)
recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/231, 0xe7}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/106, 0x6a}], 0x1, &(0x7f0000000940)=""/66, 0x42}, 0x1ff}, {{&(0x7f00000009c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/103, 0x67}], 0x2}, 0x3}], 0x3, 0x40002100, 0x0)
stat(&(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

8m7.747136023s ago: executing program 2 (id=4041):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f0000000400)={@id={0x40000, 0x0, @c}})

8m7.025483495s ago: executing program 2 (id=4042):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0xc}]}, 0x88}, 0x1, 0x0, 0x0, 0xb20b7d48ee17b9cf}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x8001)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,')
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$apparmor_exec(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='stack :'], 0xe4)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xd4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x10010, r5, 0xd74f2000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x48050)

8m6.315442963s ago: executing program 2 (id=4044):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f00000001c0))
socket$inet6_sctp(0xa, 0x5, 0x84)
preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0xc6, 0x427)
set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x10, 0x4a003)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0)
write(r2, &(0x7f0000000480)='\x00', 0x1)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000340))
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x11080})
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@hyper})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000009000000b704000000000000850000001500000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x1, 0x5, 0x0)
close(r5)
r6 = epoll_create1(0x80000)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x20000008})
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000004c0)={0xe000200c})
close(0x3)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)

8m5.705394623s ago: executing program 2 (id=4046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
unlink(&(0x7f0000000280)='./file0\x00')
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)
r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp\x00')
ioprio_get$pid(0x2, r2)
pread64(r7, &(0x7f00000004c0)=""/15, 0xfffffe9c, 0x3c)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="18d7330a", @ANYRES16=r6, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r5], 0x34}}, 0x4008800)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0)
r8 = syz_io_uring_setup(0xf01, &(0x7f0000000540)={0x0, 0x2a2c, 0x2, 0x0, 0x40055}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0))
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r9 = openat$md_new_array(0xffffff9c, &(0x7f00000007c0), 0x1, 0x0)
write$md_new_array(r9, &(0x7f0000000800)={'md', @num=0x0}, 0x3)
r10 = syz_open_dev$ublk_chdev(&(0x7f0000000900), 0x0, 0x40000)
syz_ublk_setup_queues(r10, 0x0, &(0x7f0000000940)={0x0, 0x26a1, 0x8000, 0x0, 0x3a, 0x0, r8}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2f5, 0x8, 0x3, 0x214, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe60d, 0x800, 0x3, 0x71, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1101, 0x20, 0x0, 0xac, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd9, 0x4, 0x2, 0xb3, 0x0, r8}}], 0x4, &(0x7f0000000c40)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xbc06}, 0x0, 0x0, '\x00', {0x0, 0xddb, 0x0, &(0x7f0000001840)=@buf_512="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"}}, &(0x7f0000002840))
r11 = openat$md_sysfs(0xffffff9c, &(0x7f0000002880)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @array='sync_min\x00'}, 0x1, 0x0)
write$md_sysfs(r11, &(0x7f00000028c0)=@str='raid1', 0x5)
openat$md_sysfs(0xffffff9c, &(0x7f0000002900)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)

7m58.595172366s ago: executing program 34 (id=4027):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
unshare(0x24020400)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r3, 0x409, 0x7)
fcntl$addseals(r3, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
timer_gettime(r2, &(0x7f00000003c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040000}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

7m49.050294887s ago: executing program 35 (id=4046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
unlink(&(0x7f0000000280)='./file0\x00')
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)
r7 = syz_open_procfs(0x0, &(0x7f0000000400)='net/igmp\x00')
ioprio_get$pid(0x2, r2)
pread64(r7, &(0x7f00000004c0)=""/15, 0xfffffe9c, 0x3c)
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="18d7330a", @ANYRES16=r6, @ANYBLOB="01100000000000000000217663053c919a6f08dbb2e4022d1e7933a0bdd541f50001000100000008000100000400000c00040000200000000000006b071367c9fe97687d9f3dde2783db0755f37a09ff1b869f1fe33a3a4e1a27617fe1fd483f0817365838021dce15a726da735fedb5b5ac9b05dc06e766e1b3f1325c09e033e12f2ab292d63e81dd0b94ac351969e4d4b9e8bbcdd3e10ad6c1668096b42bf834a9365b9f5f8e858520699ab99cac44dbb316fed85df21ee5a60d8401a39e6d3c766ec9d12abc37ad1d1a962b43695fd901296831f43553b04e22a9a8df6b66c3e79d874ca199b269525e6e8a00000000000000000000cb253bbe20ef9c119883971aa947ee3b2b6d329b54594b7d89da633cd536f0027fb8b13ac19675890921f34d0b18494827af9ead8075c91f29e4ec47e2d6965406d78c24103455911643924cbf090821fbdf38ffafc29b366fc804fde742f1e291abed9949341d13", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r1, @ANYRESHEX=r5], 0x34}}, 0x4008800)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0)
r8 = syz_io_uring_setup(0xf01, &(0x7f0000000540)={0x0, 0x2a2c, 0x2, 0x0, 0x40055}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0))
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r9 = openat$md_new_array(0xffffff9c, &(0x7f00000007c0), 0x1, 0x0)
write$md_new_array(r9, &(0x7f0000000800)={'md', @num=0x0}, 0x3)
r10 = syz_open_dev$ublk_chdev(&(0x7f0000000900), 0x0, 0x40000)
syz_ublk_setup_queues(r10, 0x0, &(0x7f0000000940)={0x0, 0x26a1, 0x8000, 0x0, 0x3a, 0x0, r8}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd2f5, 0x8, 0x3, 0x214, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe60d, 0x800, 0x3, 0x71, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1101, 0x20, 0x0, 0xac, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd9, 0x4, 0x2, 0xb3, 0x0, r8}}], 0x4, &(0x7f0000000c40)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xbc06}, 0x0, 0x0, '\x00', {0x0, 0xddb, 0x0, &(0x7f0000001840)=@buf_512="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"}}, &(0x7f0000002840))
r11 = openat$md_sysfs(0xffffff9c, &(0x7f0000002880)={'/sys/block/md', @named={'_syz', 0x0, '1'}, '/md/', @array='sync_min\x00'}, 0x1, 0x0)
write$md_sysfs(r11, &(0x7f00000028c0)=@str='raid1', 0x5)
openat$md_sysfs(0xffffff9c, &(0x7f0000002900)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0)

1m55.556500265s ago: executing program 5 (id=4729):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
listen(0xffffffffffffffff, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x81f, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x36)
fallocate(r1, 0x0, 0x0, 0x1000f4)
sendfile(r1, r1, 0x0, 0x800000a1e)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)

1m55.384584818s ago: executing program 5 (id=4731):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000005c0)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000600)={0xa0000001})
epoll_pwait(r0, &(0x7f0000000680)=[{}, {}], 0x2, 0xfe, 0x0, 0x0)

1m48.031963952s ago: executing program 5 (id=4737):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000180)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="d9", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000007000000ac14fca900000000"], 0x10, 0x40048d5}, 0x8050)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x2ec, 0xffffffff, 0xb8, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x8000}}}, {{@ip={@multicast2, @local, 0x0, 0xff, 'ip6gretap0\x00', 'lo\x00', {0xff}, {0xff}, 0x33, 0x2, 0x20}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x4, 0x1, 0x1, 0x3, 0x3]}, {0xffffffffffffffff, [0x1, 0x5, 0x2], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x80000000, 0x9c, 0x2b, 0x4, 0x5, 0xa, 0x0, 0x3ff]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x348)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x300}) (async)
r4 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x280000200000)

1m47.452579559s ago: executing program 5 (id=4739):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0xc}}], 0xc}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r8 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r7, 0x1, 0x0, 0x0)
syz_usb_ep_write(r7, 0x81, 0x40, &(0x7f0000000240)="900100"/64)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1m45.721468441s ago: executing program 5 (id=4743):
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0xffff, @empty}})
r0 = openat$nsim_dev_bool(0xffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/fail_reload\x00'}, 0x78c82, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x4e5, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000007640))
r2 = openat$snapshot(0xffffff9c, &(0x7f0000007680), 0x182, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000007780)={'syztnl2\x00', &(0x7f00000076c0)={'syztnl0\x00', <r3=>0x0, 0x20, 0x8000, 0x800, 0x1, {{0x21, 0x4, 0x3, 0x14, 0x84, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @rr={0x7, 0x13, 0xe3, [@local, @multicast2, @remote, @empty]}, @ssrr={0x89, 0x23, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @multicast2]}, @ssrr={0x89, 0xf, 0xcc, [@private=0xa010100, @multicast1, @private=0xa010100]}, @generic={0x88, 0x8, "902cb2a4b0ca"}, @rr={0x7, 0x1b, 0x2e, [@remote, @broadcast, @multicast1, @private=0xa010100, @multicast1, @broadcast]}, @ra={0x94, 0x4}]}}}}})
statx(0xffffffffffffffff, &(0x7f00000077c0)='./file0\x00', 0x800, 0x400, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007900)={{{@in6=@empty, @in6=@mcast1, 0x4e22, 0x7, 0x4e24, 0x1, 0x2, 0x20, 0xa0, 0x29, r3, r4}, {0xbf2, 0x8, 0x2, 0x6, 0xfffffffffffffffd, 0x13, 0xfffffffffffffff9, 0x80000001}, {0xca4, 0x3a73, 0x7, 0x4}, 0x36, 0x6e6bc0, 0x2, 0x0, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d6, 0xff}, 0xa, @in6=@mcast1, 0x3504, 0x4, 0x1, 0x5, 0xcb0, 0x1000, 0x6}}, 0xe4)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000007a00)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000007a40)=@arena={0x21, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, r5, 0x0, 0x2, 0x1}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000007ac0)={<r7=>0x1, <r8=>0xffffffffffffffff, 0x400}, &(0x7f0000007b00)=0xc)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000007b40)={'TPROXY\x00'}, &(0x7f0000007b80)=0x1e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007bc0)={'gretap0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000007c00))
syz_usb_connect(0x7, 0x7d3, &(0x7f0000007c40)={{0x12, 0x1, 0x201, 0xb7, 0x38, 0x49, 0x20, 0x12d1, 0xf543, 0x2ba4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c1, 0x3, 0x4, 0x7, 0x10, 0xb6, "", [{{0x9, 0x4, 0x76, 0x9, 0xc, 0xff, 0x4, 0x33, 0x29, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9913df88"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x49, 0xcc23, 0x5, 0xb}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@country_functional={0xe, 0x24, 0x7, 0x8, 0xb133, [0x800, 0xfff9, 0xee, 0x5]}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x8000, [0x1, 0x7]}]}, @hid_hid={0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x7e8}}], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x3, 0x40, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x81}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xab, 0x10, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x1, 0x5, 0x6, [@generic={0xd9, 0x6, "14cbdb7d6d4a395e36afd2fd1a4f8eb6ff3a15102cfefb025b375d64868202924a47ad02f7a2d6dac5fcbf2cdc5c6e77d9db844af7986df736b9873d3d102c42d9d2c25a179330a9e0e796dfa95b729d0f806c8f881c195c7a9fd8aff9207dba6d00c2e5d8d5adc52514e087a0021e95eed9675c9837c2f0bbdb1d18a8c328491bc54e25cb7263731caaecf2a9f72c288467adae13996ed38efe372b1a7ad4f1c0d1929789c8d964197a7931efe0fd7969d744ddb6d8ead28d35e6ce4a665ef5a6fe4f8f0cc28ce08d41a9779c10fd587b461efc0054f0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x2}, @generic={0xab, 0xe, "24509d566597bedce24a108daf708405e2896c10440806a8f7e8cad52ab8c5d191c0cfc6cc3d26106545fccba7f8164c3972b76de69e0b72e5a1e3f3bdb5a58a3c1fd9e07fa36ab48d1228ad4b765883e3cc0deb0f5f7c12cc9a6fd8366ed3ada1459d6c530409478e7ad968f58e1fb57f8f1f2c2f680963c2b5718504072682c1e53bf069ebf1da7297e61ed3834f3b4e4e927a8b3266ab738f424092959a50168194ce2d4afb21fc"}]}}, {{0x9, 0x5, 0x9, 0x13, 0x40, 0x0, 0x2, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x40, 0x4, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x6, 0x4, 0x0, [@generic={0x91, 0x30, "fd1b91402e2ce3ecfbedaaea582c3a02279e61fbfb4c94b1e6506f9378580f34c8eb6fb3fa69e7f053eb1d51f3657787566e68967fde80c5ba1024afa7adb5e86a4f0f7e5aa62915c33c46b2fc6b92d97da20ce42cdf8e91851347602b48a6f2bd9f4b6f083acbbdd949a12ee5eebc616b41ae8e786b5e69fab3ff7b4d2328ea486f0f35f93328904b65f005b7a97b"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x43, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xbae}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0xa, 0xe, 0x400, 0x3, 0xcc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfd}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x2, 0xc, [@generic={0x87, 0x24, "ff555bc1cbd548c09433ac8f3f547a941784029e11e09966fe77cefc53a9446f4a0b3d45d48e50bb4076788119aa2a86ea7b7a206da1cc0656d36f2adc3b4bc052f82df87092a7ff76d3d106f4f7347f6fb20b00c200239c5ed8654ac07523d7b76e62b2dd57fd99926a497421b244d8b8dddcbf86e2ad02f8e7844b3de901c462117ec0ce"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x4, 0xf7, 0x5, [@generic={0x8c, 0x31, "070eb96470bed14a3e9e191f013459238020c81892bd1867c2e5b31acef286fe74a92483a4ac2032430516eebd5da6d9de49b64df06c76c3e84593c65ca620ee889e0a497295bf20940f7ca748d81e5948d2281762ec5130308f02a643217b6010b0355d8ebd74952f14abd946a1e69a0aba8c5ae6bbc24468ee99ff8a83bf2ab2d023f20b3f6a969fef"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xb}]}}]}}, {{0x9, 0x4, 0x13, 0x42, 0x7, 0xc, 0xc0, 0xf8, 0x46, [@generic={0x45, 0xd, "db113c31c1feb3e1f2a99998cf84dce8e7a4e6b67e978f3dce6fe8ba82b41f303c64dfd68b813b5bfbea512119aa74407d130dc6aad8f472e36eadcdd2a4f81111c09b"}], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x0, 0x5, 0x7, [@generic={0x7, 0x25, "01ae25c2ca"}, @generic={0x42, 0x7317d99db7105370, "c5493f90c46d2244c8ebabe2b429d3ea8ceb2e21d37db7393d00f3205e08df14546b2b226b0a176441b68b9cc33abf706c6eecd2d287585fcccc9bd50733698b"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xff, 0x0, 0xf9}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x9, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0x10, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x7, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x67, 0x3}}, {{0x9, 0x5, 0x859903f2c3f581e8, 0x8, 0x40, 0x7, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}, @generic={0x17, 0x5, "b484c6a0c845c3ff7b231df7872e008261a652a920"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x8, 0xf7, 0x9}}]}}, {{0x9, 0x4, 0xab, 0x8, 0x9, 0x53, 0x57, 0x1, 0xfd, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x3b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x401, 0x1, 0x0, 0x4, 0x5, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x2, 0x4, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x6, 0x1, 0x5}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x6, 0x6, [0x4, 0x7, 0x6, 0x3, 0x0, 0x2], 0xb}]}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x9, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2e, 0x4}, @generic={0x30, 0x4, "29abbeb2e3c744e314e2ecce663876ab92496f90fa8eb81f0ca1d4b2dc464a6fb29ff0043c94745048d7a6d81b95"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x5, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1}, @generic={0xba, 0x2, "5a2b54231f44a6761a2b99c4dc0f6bc1ea671b1a0c472676a27e437c0145cb9f74fff4c0bab6881b12de69b59778cd9b09d103c5032f4d54e882fd6d6ea07d14eb344e7972e1e98b46f2015b03cfc2e675994b9287144343722321d649b458367d38621fd75b26c0da27657d483c085fcffef17dfcc55e84f2c2a2247ce7235f1b4a5a750f4109dbfc6130f08c55625d94b177c4eeb2282486b6c5078d5e71cca550537de7c394b038d70654f6ef054dd67310e77f28378e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x2, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x9, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}]}}, {{0x9, 0x5, 0x83, 0x4, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8, 0x9, 0xf6, [@generic={0x5, 0x31, "9a86cb"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x1, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb1, 0xfff0}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x2, 0x5, 0x7, [@generic={0xdc, 0x4, "dc7eda8a4038afc2cc5981232b5898f412392340c5376429ee03fb6aace5e821fa87f318c2fecc9410d0f1eff6cc53c1af39f5f3924deb9893520c1a2de04f912b90048525fee33cc9920fce8d309eb6a7e07ea91296bb2de0bc71c79309250e913e174f093db4e497791d7ab9f95ddbf1bae555a0b5858437d150554bacd4f7e31014d14bbb98462a7920f92b94d54aa105551fc084e0e7eb02b1a41ccccb2ba9a4d79024e7706b0da9da660c165885ede60fc195177817f43f1672e35f9dc536e721fae22fb2199d45dd909630747de054192880951eeb85ab"}]}}]}}]}}]}}, &(0x7f0000008800)={0xa, &(0x7f0000008440)={0xa, 0x6, 0x201, 0x6, 0xfe, 0xaa, 0x10, 0xc5}, 0xc, &(0x7f0000008480)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0xc, 0x9, 0x8}]}, 0x9, [{0x4, &(0x7f00000084c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x47, &(0x7f0000008500)=@string={0x47, 0x3, "83ae5c8c73c7e7e87287a30a7658482f4f2ce5fd89cbad1d2c04f650c93a651d0139b17f1d9d11c357850a199d432d2c259f6496fb49068f7e05ecd22967f4e5cadde1ac0f"}}, {0x4, &(0x7f0000008580)=@lang_id={0x4, 0x3, 0x2478}}, {0xc8, &(0x7f00000085c0)=@string={0xc8, 0x3, "c3b0f7adcb6844bd8c2e05048d68da6bfa4c8be15a17a1b34c20e4d4997bad028642ae51ebb0ca10c1f15bc3150a0d34a563dfb47f04e75988b6992a16acf31757eed00e9d2a06eee9d923f65fba3dfc34460eafb513c5042617e3af30d1239a643700ebd44cf1791ef01c61981e44a052a26ac45986393195be36ede991d26833ef3e60dd9e84f84c216338461dd7b16d0b75ae08f65f381e20db573d0508419fdbc634c708806e47a60ba4dfc7b9bc5d1e59cc490a13cb20981cb07c88f586910eec8cc717"}}, {0x4, &(0x7f00000086c0)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000008700)=@lang_id={0x4, 0x3, 0x300a}}, {0x3a, &(0x7f0000008740)=@string={0x3a, 0x3, "23d9ccc9d63921be728bfd2a4d5520bc5f547efeba6c7a0bc8c11e76a2cf8ba99c86abc60d18379edcc8f89d1707c4f47bcf70c1bb197f4b"}}, {0x4, &(0x7f0000008780)=@lang_id={0x4, 0x3, 0xbbe2864852b64a89}}, {0x4, &(0x7f00000087c0)=@lang_id={0x4, 0x3, 0x439}}]})
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000008880)='cdg', 0x3)
write(r0, &(0x7f00000088c0)="cb92158c4ee1652321b324b35f3e01a6d0da87c2fc79e803371d466fc70905204f55754b3b4ec627f624a2eb4dcad02ab3534c7e", 0x34)
r11 = syz_open_dev$dri(&(0x7f0000008900), 0x8000, 0x8000)
ioctl$DRM_IOCTL_GET_UNIQUE(r11, 0xc0086401, &(0x7f0000008a00)={0xa0, &(0x7f0000008940)=""/160})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000009740)=<r12=>0x0)
sendmmsg(r10, &(0x7f000000a480)=[{{&(0x7f0000008a40)=@ieee802154={0x24, @short={0x2, 0x7ffc, 0xaaa1}}, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008ac0)="b3623a541ad9a1b6175879fea3c84a46156283d4d8895faf0ac398f1980b7f4fd8d85469ebbc9b0f49cb22599165c50e4d21bcd3decc8d17d8e670af6dc4f45729ef8d79823a32f028685535e65e8a42124da7fc040e3d676483da51c44a3534c8ebcc98ab27d91a", 0x68}, {&(0x7f0000008b40)="6845593422cc2d57b8ab4dec0f836d26ebc78aedb0b54f1fb1abf9dbb349a815ab8c2a44deccd07f13a421ec5e40974e70224b42d8cd83e4a1b58f80e73d948a7e70c7e22cc1c34b4b735572e08b49a1012d966567db434586c0e7467d2d3995fbd0c0f69375a412485ee57c88f6443d9ef2a81b3cf5c628143679b0931defcdf8399f96c222d7b173442b89c33d11efd23205fda513f1560b1b4151f8dac6b8644c", 0xa2}], 0x2, &(0x7f0000008c40)=[{0x78, 0x10a, 0x7, "fbe4c3fc4e8377ab20b9c2c11a32173db2d65176aa044825fab8a132d973c1b7d79807995b24466c41972a1bd1955877c136e335cd74c67096981d6201ebac8586af012f689e0d33e6c4ac809732edf592c6dd8b61fe46b50317e8d8a5ba1abe433255d559ee46a5f920"}], 0x78}}, {{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f0000008cc0)="6a50391daba90f09ce1e6b1773e6", 0xe}, {&(0x7f0000008d00)="8c4d5cb5ee7b527c4620bc598a3b088feb882a1037549cf4a55dce0fcc0a873cd2ef3b0e046adc2c6b0b5d397b707cc8265e5f47c8b46386497ca9520de6c806032343a5d2f35bb0a4a9771a481a0cd18b7f58cb3cf01a7987523720816da5b2c97221a3cddf6846787d4a4cd918b25d2b20f82df3cab5dda4d6ec6b044b27458dab16f124d6ce6c24c82f7497bf15a823fb17988cf5f2b784bd62c8b2113f68b5420dab97db9873c6872772b61b853a2782e8a826636fd85217fe5c3316bcd9782aa79d80d700", 0xc7}, {&(0x7f0000008e00)="be18194425842a774c757e009007be4d0c2fa1f686e72bd15dda3ad79b1eefd384e8ef863d17d4971be3a70f0378d7ec1bfb4791f2bdd8142d75d5999c8351589e079b4ed240adead89ec83c224f80555e23bd0e155a5436bd5ed92220349fcc37e9c7c9acf0822c235eda31c194d8b9f76c", 0x72}, {&(0x7f0000008e80)="6890b14b0ffc18d4143142575c9cb6fc73932d682171a3736e55c695d65adf697cf4d7c23199c0d4bc2e17d21f5e15f8242291544d64912bb4b9cef02bd822bab38ac2866008360f3c9d8b1c6a983ee122154da1aa66c9e817cb0a45b76adbfcb49bcb16538e521d06eefe6ef5e5a2df38a254d8d0cd6f8d0cb8f211eaafc80b586c2c7f8ebb17ba7af49369f737facf2126046b5b7e", 0x96}, {&(0x7f0000008f40)="7a626aa46e833f0a4726c6cfed29204aca7f683e46dea95c39a17b61225fd153c021adf7a9a65dd51f6df23f2a14519aa3f3beb153bf5229a10de1a23b462f35a0b35a89b421d58141dd5376abfb22e7fc01ec9011b3a0", 0x57}, {&(0x7f0000008fc0)="98bca58e26371d7872f203860ddf45578611a5802be223bc27a2efca53e7a2ad5cf51f06e6f28049b53dd8a77d88c0efe3569dc420b98f111f2011636f55051ee7f98535b47a1afd269f29e652ca135e9f59b840bd97bf17076b9c55ebe012ea094e146bbd58b846de2a516044e44658f3749dc2798dc043248dd276ad8833f4975343a8cca558261eef628b54a9aac3f7a5b036b6068a023eea0262253778645a735870f45e50e1fe6d425f3f5ccc3cf590324dbe4e20aad60264842c63055fbf53c4dfe1a5082c481a5086475e9f464d133dbbd298dbe79464132fe18557", 0xdf}, {&(0x7f00000090c0)="a399eca3b2a250f2c81098cb5448aa62793c0bdfa75fcb73ce", 0x19}, {&(0x7f0000009100)="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", 0xff}, {&(0x7f0000009200)="a429b3a394854212033af60ee4ee26bf5d40fb9786cd609c47776c30f4d36d2af6dc3165946e37b9980a08d616bd4f69a0654272439df68df00c2e870b2939dd715f78bdf129eaa5a80573612c2908c70f39a7b5a710a2fa7e478fcf04f5a2237e225043dd88cbb944ea7476b51b2c7d4962fbb65bf852785a738ea8195f29ed53190c4ddc0139514d7c225dd694c6f606172937c9c0e072772ae2db91f8bf47efaa66c8927ff8e2ca6e625725c3d6da58c99bf473ab87dbe6ca6cf89d289a02", 0xc0}, {&(0x7f00000092c0)="67c065d8c9979df7f008c9ae9de2841ed3a825cd7cf334b88be96cbcc66ff7f772863ff5c26584b911d869adaa1dc75139d0528ec9d6d4a6515500b20c49ee4225bd65c23589dce62cf4fffbc650d67671f2b52f191467bf2371e94de512221fdc3c8ef9a8b797fdb48e931aba3e339704fe6f56cb1dac3ae95b6dc5658244ff2e16f53f4680b91dc7525f72e43fea9b839d9889b61876df196125b75a998675aa96db19d38805de299bb2895cf61263fe59e9292c1bbc2b13572c7c67ab6a0bf4b92a370be78e5517d4152f4c1f", 0xce}], 0xa, &(0x7f0000009440)=[{0xb0, 0x118, 0x8, "99d73dd9d8ad164fa652a09f1dbb3c080c50d11cd9d1dfd13344392c1dfa9355e3437089c3630b9f3afd29742e869408b5c34f565b757b4478ebcbc81b782802fa954fa1fc7be6fb6070ab2c4863e1f7820f5c6d436a3b3f6adf69891368be0654a33da9a4ccbce0e491bc024fff776ef356efb8a7d20fcc350068819f6ee222aaf1dafb4a1b915af3c8f8eba1050134b80306ace0051bd674c7bc9d410b31d5c1"}, {0x1c, 0x104, 0x3ff, "435b37b3a313104d11d9ce6c51"}, {0x18, 0x101, 0x4, "dfab8cf00f84c40787"}, {0x104, 0x115, 0xd, "35d3fd08dc7f382878f76c90a2c237239341d0a7951dcdeddd4e91afb82817161561400ef3a0ab97a0c5bf70cdc88f163b533391113d8d484e7f4e7bd32c5ddf7556954140395f584f2e59e79215c946a9fa54599a43f650999e68dc3cbd7e2ee217899d1cdaad14039f508fadc3f867d5c2608f117e402c315f0f826ff311de3c01a4ec8f528c5d4ba1db662635a9a2c2052c5feec087a24816e83080b2874cdd2ee49c514d503d5a165591716aacc42609312f3c5067407e9a00c9c70fc5127eb264a76774f82b2b8a45a2a26a9f9086a0264aeb28f827facdb11e5132fdb69c20c1ea198d4979d96078d3829bb5b499465082e9"}, {0x100, 0x10d, 0x8, "af32f6ae546df837ba715a8a729f2ff848aac46617c31ab2cf2c7666c35cc06e710deeae950d1762cc1cf344d1f638e135de68c1b3f3338b471b3d5e4826e63f6f2f9c79ebebabc302f3e45a684e5c313c0910081e9d374cc257a8178314add2f4590126d1c046ae014552c9a0e7244bd345b72db8ea3cbc82aa88c7701a509d1f715e0d8de3b317186a0b37bd98bf99637edb1e5f29985fdc2e677aad45f769eedbee2227f344a3cb12d2da4b3c20ed8475515d6b315a03148cb172ca0db5e29890ef24aa583f4bfc8f1f967bafc37035beabfac8895ff7078899ceafdde1d57ff90fb38e09f27c9c64a4727eda31168e729e6f"}], 0x2e8}}, {{&(0x7f0000009780)=@nfc={0x27, r12, 0x1, 0x4}, 0x80, &(0x7f0000009cc0)=[{&(0x7f0000009800)="8f8d76a4c0054805714898dcb02ebcffc2ec6c0b393245fcf2f144cb06df2d4056aac4a53385658be1ca01271a77241c09d516f6c43436245e00", 0x3a}, {&(0x7f0000009840)="fe6cdbd2c99951670f0619e59ed55fc4bac439ba454cd1653629a9bbef8e348b4fd70282c8ff3b613486c5215996d45d4869f89539a966d972a5f01fcb70fc6597b8860ae9f69e0fb9131d5f9988f1af0a884f0dc20f3e12e83047bd6ae9953d697bae1709ba4ecf9bffef7945df6e06b3dd411f8e051cb85af07e3628996b7d5b9ea2066fc0a1ac3763978a1b15bd42a964fff4e586839784266fa24f9194c4b34cd5f330617df3bd573bc10eb2c6dab6be2279b58f14f8be4f4b220fcc4c99785f2a93109165316f0cc5ff284ecddcc605c0ddfa2d062a602b93f19941bfd77e", 0xe1}, {&(0x7f0000009940)="f4e922a75af42f157f3bbea4665800c3f15f793e79d5e87452b7868c9b5d5e15c9c9c629bae28b91563741b13b88de7a02c2e2fc2b761ddc0051a48b3b2187967bb4bddf53e5bfb6d3525a507e94a8f9", 0x50}, {&(0x7f00000099c0)="19caf539b954e5deef9aa7b21f7b78199575ec90dcca8e73f04af221d5661a32a720c132ba96e54b4858220b63bb950497140e0108", 0x35}, {&(0x7f0000009a00)="da8f331b963b548e9387c8b8d9b50261188e7b4e5b702c248e17687e61ea3fb1d688925b3ac50823208855c2c1227af1ecaa241145ec4e755e86a64d62e6f35ca7968d9811131ee6f3451ac36c1b11c6528c29892f2e9727a4e7e3faa3615ac8dbb90fdbd95680c624dc69d44e5e2056557694b59dbecfac003a14ba9ce316de237bf05eb5820b789545cab5909effdb28366ea3e213c315975a5e944e806e96e6ed665e29677c866d475296e133087201d076186cf1a682e74430e86675dc01d3483ae3730386eef02550d7b0fb9e583a7dbfea52bd60dcbb7f55d703ba7b005514b7b08735713c4dcc", 0xea}, {&(0x7f0000009b00)="620a70715c25c5ea6eb88242ae39a6d190f5aa050c92dc51af8dfa3ac1bdcaf19637a43ab192b5e39576b6c3194ce91270895faa8287108705d6059733078749d2e6a5498f0e9d45316317dc33a5b55c4a1429fc74f931d4542a615d8fce64b84b7b30c62245a5a1cb61ee81f33493094b8a187a30cd4818344b4f8295651a223ccdd7247a5c154a9af82dfe8774f4ef64", 0x91}, {&(0x7f0000009bc0)="b976899a2442673026a9b60a2d77da917051e38f1600ff35ed808bc44364da91e758e7587127bbd4e7a580a31acc080f4517fa6ebacdadf57a0d51bf2f00e5380790531299f7d1e213d72282a834b480b3238bd85d252d49e5546556ebba43bf927e82dcb2379e559167ca29ba41089bb272cc7a50fc9bf730582ba1c8a4bbacfa3ba0c7ac50b4adb8cb16a7223581e626942857056d6c4e1f81749d44f18823cf5a8b708dca9080b953053ef84e79fa5134a68c001f6c7b83c4e351d846d7f03bb0e30360630b389e66604b42955c821e7f5ded6959c2766c91d667d13656c0f93edbe0f65af5754aab0d490bada3a6f57e28b94458d967ea13c70462eea3", 0xff}], 0x7, &(0x7f0000009d00)=[{0x1c, 0x103, 0xab35, "23cabc76e999a1edd7730c9dfd"}, {0x100, 0x117, 0x5, "444fb1eca7d609b766ba708716f099cca2b7e148e2fde3a8c21e21f150ef81f18a5f4e5bb0df85555bcdbd2e12e246f80cf6ce73069886582f7011d80ee4d5bb72139ae50456c7e2792d3560959fc8cef9b425b54b985027f501109c34f6d669e24ac6395ea93ba58b2213a7916e2f38f8dea0328b842408c9210a072bdef45e929ef6316f3c9d2b06e2b9ad49d06a860fd69056c0baf8a38db202bcdcfd3d6c3915cd55465b48b83416009a52bce2a5b9714537f041ed9b6914fbd00d7a6493833336826d9f75710852af227157ad1d0fc234be7ed36b57252e06062d8f49ef0d6e715c9aeb0837326e541bc83e6b9a4c5b09a6"}, {0x48, 0x10f, 0xa, "2c58192e5041b6c4ab2e589b7ee778e3ba3831ee84e7340388bc62401b6108d20385b0d507221e346c8b491c7f79ff533ebfcd43850fd156585354"}, {0x90, 0x101, 0x4, "54a0ef0fe30aa9f39f5f28693058c9d1158ed2bd5a9cb69e35c8d017a05f6d0dfb7f5602a4cce4ef9c86695e8f74ad1c7625418940124bcf0022dabf38a4bcecade365510b3e43e6044d1d297f5cbe84649660806fc01777a1ba1102c29356007e7c0cd899359d91406f1eea16f4b36fb6c847a3708f5e8587ec5a25c2d3c2fd3d"}, {0xf4, 0x322, 0x3, "2dd662c773b6cc4d66a85ad492074cfcc472d152c234e0c2f872e252587b2b49a339b3bb54e916881671fc6443086963c164c193a3fd8e6fee4a8092a4a2884e10c993862dc6e5d4957a655cbccd153ba70574cfd666735434bef9b50fbf4962d2d3c3366aa815d551a9da8dcc41edf5374f92c24ad62b9ce436d2e34b4dec03285a5ae04736322097133a592c7e6b89fd5497e617c6b3c0627e8ffe4c6ed8f32f2b324b4c66eeb4ea426a4a880787824c091a4306ba61186715cdc5bbc73a0d7e51decc09a4e40cf98af3e5fa35284f68753c2dec526229b895679cb373e3427b7f64ca9f195990"}, {0x7c, 0x88, 0x6, "feb713707e2d8cf5cc046931cbd97952a9361711648a2e7bf90f26f01bc2f80467b9882eae70da18aa17b19044b936d94026981d7c99f60e737da4145dd102157eeaab96d6b1f12b6ccd71bd6dfde6f49a44004273ff7841f9a203fc4fa65dd2fe520401323dfac3806c8a4c16"}, {0x94, 0x0, 0x7, "a313157d4d2be4af2ddc6ab6963c685258fe799e6d8ce425f38abe1a64057cde9bfa7e12a4e96aeba13d15187825b707cb17c3168ebe86ea05269b6cc89cbbe381b2fb8a968b586d2f7e710b1aa974c3bc99c39ddd51fea002b6f2e4842d79e1e86a6eb4caab45b771f13ef572d53dd5cba081b8b790c50506aa05fd04f2c297c591e6f3b517"}], 0x3f8}}, {{0x0, 0x0, &(0x7f000000a140)=[{&(0x7f000000a100)="fda8ce3dbf8deb58d2778927386e2192d2a823e979a2af69ba3d091c6056f7544091c048b3e08f6fa75fdbd96fa521ca8af041c6", 0x34}], 0x1, &(0x7f000000a180)=[{0x80, 0x10f, 0x7ff, "4c65c53bc54885ed2f879d6a44d158aa73ee68bfa4eca520b0eb9c6f0b606b0c3fda1e19533fe47d7cc09a7108d14e98e655981373d749db781a6739054b84661d69f56c91a996cf1d62e93153cd1e53d94ebd428208d04d48e7872ebba8d4f3c65e2e9f209af2f9347f286bdbfe4dba31"}, {0xe4, 0x0, 0x9, "fd01df1cd17adc36c1bbd4f95e2b3165e91921effb1d9d4965048ad2894e33c401c9102112afb4ccb5bca0ced39f1152387428926c511024cc0023408d1a9dedc2ccb1c4554026c3dd55cca947db59b6685022b29311a80916f3e054c393417c75dcf3ea1039b73e5e77a4c8bb5bfb2d609b394c8a4b3c99dac598f6c851159c92732cb4a9d62e784a9a07cca5f9bb92b9ca9e12d788127d0e723c24ee5b2e3fb0dbc3fee59f40f2d1f16fc51f725a22b3806fea998739ea45096e01dc81e379239fb64129b1916c49a4b7917fb5b940005782e47a"}, {0xa8, 0x119, 0x2, "4d95c7297e0f7e461c2e00ef05b742e32b87712fa84c34c001319c6f4050cc32d12d6c0e3b477eb1d9b321a730137b03303fbf708aa3748ef1b40fe7b8a88c089b1c7f568941531c17e8d3916ff87cd8f1df66ce8c00aeaa32de59a50bb975dd276bb199df9a3868d33b5bbeaa2b934038598a686da7d6f3224e74e12416775acac182fa96754faa6ba7f345dff5c64a3460fa0a6cccf9a326f329"}, {0x64, 0x3a, 0x1, "ebbe5191555dfccefb1b9a9666ee4c6e68156bffb2b7f21014a5c6b7736d509616fed6e0e9c64b27ca50d18284e7e85f42f05c8c2e79e180c95176f41130334d67c95aed694ada4c270443ad90f8080449b890d3cd"}, {0x48, 0x111, 0x7fff, "cdade206dcaa208106916620d3f2fde606c11aa50fb6a3df5236e7dc3be82753d9557080ecbd1067a4d9febba6229c16c54c8b6b82a82de33d35"}, {0x18, 0x84, 0xfffffff3, "753aeeea9daa6390105e99"}], 0x2d0}}], 0x4, 0x1)
openat$panthor(0xffffff9c, &(0x7f000000a500), 0x2, 0x0)
r13 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r13, 0x84, 0x82, &(0x7f000000a540)={r7, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f000000a6c0)={'syztnl1\x00', &(0x7f000000a640)={'ip6gre0\x00', <r14=>r9, 0x4, 0x2, 0x8, 0xfffffffc, 0x60, @mcast2, @empty, 0x1, 0x1, 0x7, 0x2}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a780)={0x11, 0xb, &(0x7f000000a580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7be, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}], &(0x7f000000a600)='syzkaller\x00', 0x2ffc, 0x0, 0x0, 0x41000, 0x32, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000a700)={0x3, 0x5}, 0x8, 0x10, &(0x7f000000a740)={0x4, 0x2, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

1m42.902826091s ago: executing program 5 (id=4748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl(0xffffffffffffffff, 0x4048aecb, &(0x7f00000001c0)="0200")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206050600000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400030000000500050002"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800b0001006e756d67656e00001c00028008000340325e000240000000060900020073797a3200000000140000001100010000000000000000000a00000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000)

1m26.171957873s ago: executing program 36 (id=4748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl(0xffffffffffffffff, 0x4048aecb, &(0x7f00000001c0)="0200")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206050600000000000000000200000005000100070000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400030000000500050002"], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800b0001006e756d67656e00001c00028008000340325e000240000000060900020073797a3200000000140000001100010000000000000000000a00000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000)

9.412204437s ago: executing program 7 (id=5067):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040025}, 0x20000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001c40)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d706174683000"/94)
write(r0, &(0x7f0000000140)='auto', 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000008c0), 0x80d01, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001b80)={0xa0a00, 0xa0000})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'macvlan0\x00', 0x400})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, &(0x7f0000000840))
mkdir(&(0x7f00000004c0)='./cgroup/../file0\x00', 0x155)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0x2, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x7, 0x0, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d00)=ANY=[], 0x50}}, 0x8050)
recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000000700)}, 0x4}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/106, 0x6a}], 0x1, &(0x7f0000000940)=""/66, 0x42}, 0x1ff}, {{&(0x7f00000009c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/103, 0x67}], 0x2}, 0x3}], 0x3, 0x40002100, 0x0)
stat(&(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

8.610118427s ago: executing program 7 (id=5073):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (fail_nth: 7)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

7.73721036s ago: executing program 8 (id=5074):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r1=>0x0)
sendmsg$AUDIT_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbff, {0x15, 0x1, 0x1, r1, 0x7, 0x6, 0x7f, 0x4, 0x0, 0xc83}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x88}, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @empty, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f00000007c0)={0xd4, 0x0, 0x3})
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.422404884s ago: executing program 8 (id=5078):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x670, 0x5, 0x42c, 0x164, 0x2f4, 0xfeffffff, 0x0, 0x164, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x1, 0xa7b, 'kmp\x00', "3c5e69989c4fddddc310d2aecb2b7800bc6d05ad2624d23793f73b2b23fd0c23df00fd8780dad203746483c3b206a0e9100effe4644f70c4af7a01c952cc54a384f00f9eeecc070bca4fdebc14faecc7e8ed8d5f6d3496f8029c33538fe7865d2c44b44f94219b25d64fec46ba77d39e74a917e37b59fa608974d955788accad", 0x69, 0x1, {0x9}}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x6, @multicast2, @empty, @gre_key=0x8, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x7}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'wg0\x00', {0x3}}}}, {{@ip={@remote, @empty, 0x0, 0xffffff00, 'lo\x00', 'ip6gretap0\x00', {}, {0xff}, 0xff, 0x2, 0x5a}, 0x0, 0xa4, 0xd8, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x9, 0xffffffff, 0x9, 0x4, 0x8}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x45}, @dev={0xac, 0x14, 0x14, 0x1a}, @port=0x4e22, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0x0, 'wlan0\x00', 'macsec0\x00', {}, {0xff}, 0x5c, 0x3, 0x48}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1f, @empty, @multicast2, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x488)

5.298673191s ago: executing program 8 (id=5079):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='100', 0x3)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x22, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd})
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='/dev/ram0,65536\n\x00', 0x11)
close(r4)
r5 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2)
ioctl$MEMERASE(r5, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000})
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
ioctl(0xffffffffffffffff, 0x8914, 0x0)
close(0x3)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl(r9, 0x40186f40, &(0x7f0000000880)="000000000100"/24)
nanosleep(&(0x7f00000008c0)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0)

5.298376907s ago: executing program 7 (id=5080):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x11, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @lsrr={0x83, 0x7, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x1f, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4.540284467s ago: executing program 6 (id=5081):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040025}, 0x20000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001c40)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d706174683000"/94)
write(r0, &(0x7f0000000140)='auto', 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000008c0), 0x80d01, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001b80)={0xa0a00, 0xa0000})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'macvlan0\x00', 0x400})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, &(0x7f0000000840))
mkdir(&(0x7f00000004c0)='./cgroup/../file0\x00', 0x155)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0x2, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x7, 0x0, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d00)=ANY=[], 0x50}}, 0x8050)
recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/106, 0x6a}], 0x1, &(0x7f0000000940)=""/66, 0x42}, 0x1ff}, {{&(0x7f00000009c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/103, 0x67}], 0x2}, 0x3}], 0x3, 0x40002100, 0x0)
stat(&(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

4.278000657s ago: executing program 8 (id=5082):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
unshare(0x24020400)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fcntl$addseals(r2, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0xfeffff, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="449414ee", @ANYRES16=r8, @ANYBLOB="00082bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000c044}, 0x10)
readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

4.277103716s ago: executing program 7 (id=5083):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
unshare(0x2c020400)
syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0xc0981)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x882)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7fff, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x2002c094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
syz_clone(0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f00000003c0)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002000000106307012040000102030109026f0003010300050904010000010100000a240100000a0002010209040100000102000009040101010102000008240201010206070724010606021009050109080002fc0a072501000e060009040200000102000009040201010102000009058209400001bf0807250108050600f675b0eab9e689a2854af9eba451b9032ed7b70f07d0fbd29790bb652577d88039b21b47ad26ac48ccb44e263fb9fc85b3314d6509ed6d2779d6db3f77ffb977fac433c28ced61f23e9f2e6f9a34f67019e6277385b3ddfd49c5ea88c7839e8b7c318f4b0518d5fb489dfbf56a652d177e072657a951ff"], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x1ff, @private0, 0x2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x9, @private1}]}, &(0x7f0000000240)=0xc)
ioprio_set$pid(0x2, 0x0, 0x2000)

3.746072526s ago: executing program 6 (id=5084):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000240)={0x0, 0xfffffdbf, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x31}}, 0x0)
r2 = openat$dma_heap(0xffffff9c, &(0x7f0000000080), 0x300, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r3})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x6, 0x0)
close(r7)
write(r5, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
getsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000140))

3.695389733s ago: executing program 4 (id=5085):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00')
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)
read$usbfs(r0, &(0x7f0000002380)=""/59, 0x3b)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4)
sendto$inet(r2, &(0x7f0000000240), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={r0, 0x0, 0x8c, 0xa4, &(0x7f0000002500)="34cb77eb852998b09592245afe3ce6e862460656d7a96c3d6e10d145115c6754cac50c11816fae3fd1a313878845b52f1efee7d1e675190418f9d9e0fa9a99dc7a46500c530c524c1de0545b8ffe432c9ce762569dd2082d6f5874fb79b09ab8313cf90a6d03f2b717ff1688c2c742984a1ee014f3bc219c3fff6ddfbca94c81f14d4630c407ae63038a1723", &(0x7f00000025c0)=""/164, 0x9, 0x0, 0xab, 0x8, &(0x7f0000002680)="40d47caf699b208ba3982888944f38f6ec348350896c0e747605e9be4dfae53581b9ce42576aa393f3362b71357928c6de9dc4ff09a3b02150428f5d6ea0493f606c3f1efd8c5319eaff22af4d6f0509c0fbb55ed26a470ae23e69a3a740d5d16a99c5dea17829325e81ff109adaf17e4656ed1d5ea78e70bacc92d97235de58388e26274371bfcd7b713fdbabecf162d31655334e900292166a92e009b01a77f405d667e8b0d83e62bb04", &(0x7f0000002740)="e49a7b0d78eaad16", 0x1, 0x0, 0x3}, 0x4c)
socket(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000240)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x5)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002800)='.\x00', 0x0, 0x0)
fremovexattr(r5, &(0x7f0000002840)=@known='system.posix_acl_default\x00')
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f00000023c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002480), 0x2, 0x5}}, 0x20)

3.092652721s ago: executing program 8 (id=5086):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
unshare(0x24020400)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fcntl$addseals(r2, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0), 0x4)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

2.903483446s ago: executing program 6 (id=5087):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000f00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '1\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x824, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@flakey={0x0, 0x2408, 0x0, 0x90, 'flakey\x00', {{@ram_num={'1:', 0x1}, 0x20, '4096'}, 0x20, 0x1, 0x20, 0x0, ' 2 random_write_corrupt 1000000000'}}]})

2.83189049s ago: executing program 6 (id=5088):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7)
r2 = syz_open_dev$dvb_dvr(&(0x7f0000000200), 0x0, 0x13f)
close(r2) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000006c0)="76389e89f0f4b500000000000000eb810074c8893043", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x4, @pix_mp={0xfffffff9, 0xe, 0x80c0801, 0x6, 0x4, [{0xf62, 0x80000001}, {0xbc05, 0x7}, {0x4, 0x7fff}, {0x2, 0x1}, {0x9, 0x8}, {}, {0x80005, 0x100}, {0x1, 0x10000235}], 0x1, 0x3, 0x4, 0x0, 0x6}})

2.678885524s ago: executing program 6 (id=5089):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2f, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})

2.284565895s ago: executing program 7 (id=5090):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1000c, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x8d, 0x0, 0x8}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0x2, 0x5, 0x0)
fsync(r3)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000340)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40080, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102)
writev(r5, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x63)
r6 = socket(0x11, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
sendmmsg(r6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='nfsd\x00', 0x1114023, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r8, &(0x7f0000000640)='-:-', 0x3)
syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380c65000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060008e0000002e000000100000000c00000d22bb3901ef534c8513cd135caa3d0bbe25cfde2c3e33b23bdbafa56d332bf53dabf1c6e810bf63657ec20010e467da0001adf1cdbb222280a0fd4dae8339dc6b0e545633b9f8e7ebeddabc3813cd2e8f7c0a6da624d780e9e12e8a6c5e5337f33e3f5ce1c460b8600c7e32418a4b87444c020f41366cc62b979"], 0x0)

2.267683756s ago: executing program 4 (id=5091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x5c, 0x41, 0x1, 0x700, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00003c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0)

2.137037753s ago: executing program 4 (id=5092):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040025}, 0x20000040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001c40)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d706174683000"/94)
write(r0, &(0x7f0000000140)='auto', 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000008c0), 0x80d01, 0x0)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000001b80)={0xa0a00, 0xa0000})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'macvlan0\x00', 0x400})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, &(0x7f0000000840))
mkdir(&(0x7f00000004c0)='./cgroup/../file0\x00', 0x155)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x1, 0x2, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x7, 0x0, 0x7fffffff}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000001d00)=ANY=[], 0x50}}, 0x8050)
recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000200)=@caif=@dgm, 0x80, &(0x7f0000000700)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/106, 0x6a}], 0x1, &(0x7f0000000940)=""/66, 0x42}, 0x1ff}, {{&(0x7f00000009c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/103, 0x67}], 0x2}, 0x3}], 0x3, 0x40002100, 0x0)
stat(&(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

1.926203755s ago: executing program 8 (id=5093):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x2f, 0xb1, [@local, @local, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @local, @local]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0x0, [0x441, 0x0, 0x6, 0x2, 0x3c5, 0x3]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0xc, [{@remote, 0x5df6}, {@multicast2, 0xa}, {@multicast2, 0x3}, {@remote, 0x101}]}]}}}], 0x88}}, {{&(0x7f0000003500)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001140)}}], 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0x0, 0x16, 0x2, 0x0})
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x40)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x3, 0x0, '\x00', @zc_export}, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000440)={{0x2, 0x4e24, @local}, {0x6, @broadcast}, 0x2a, {0x2, 0x7f9, @remote}, 'bond0\x00'})
r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r9 = socket(0x8, 0x5, 0x5)
syz_usb_ep_read(r8, 0x1, 0x0, 0x0)
syz_usb_ep_write(r8, 0x81, 0x0, &(0x7f0000000240))
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000280)=0x1a9d81eaa3301f14)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.271192431s ago: executing program 6 (id=5094):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000040)='100', 0x3)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, r3, 0x1, 0x0, 0x400000d4})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000200)={0x3, r2, 0x1, 0x9, 0xfffffffc, 0x4, 0x5, 0x8001, 0xd})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r5, &(0x7f0000000340)='/dev/ram0,65536\nM', 0x11)
close(r5)
r6 = syz_open_dev$mtd(&(0x7f0000000380), 0x1, 0x2)
ioctl$MEMERASE(r6, 0x40084d02, &(0x7f00000003c0)={0x0, 0x400000})
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x16}]}, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000300000000000000faffffff189e000006824cd7a0f9c22408164edd0095e6c01e1e76de40ce6d170044f7a5987a83e7cb89558d8ecef19c568739e503dda0a90d6de31ab8d0d78d17105f17b942ba56002cb68263ee9fb38dc6def54a0d1919d5e5fb8a3a53cf83409e490a20e6abc66d4e30510f644030d146665978671f7fd58be14379e77529af13c6547408a10d79493d6cb9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
ioctl(0xffffffffffffffff, 0x8914, 0x0)
close(0x3)
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl(r10, 0x40186f40, &(0x7f0000000880)="000000000100"/24)
nanosleep(&(0x7f00000008c0)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ubi/ubi0/dev\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a3000000000090002"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

1.146467208s ago: executing program 4 (id=5095):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)='size=4G%')
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "1000", "0f14ef58f6c2d981bf2e1f82dfb4bae38148c14f75df05867f1b35b64f001746ae4050c6f6983dfca99698e9e6dc12804ec59d102635dae22ca251cac21898231fafe6b18fe41b30f25a10832643e76d110b7f4a07ce43218eea653b1c7d5161aa70e3dde959f4b97b39cd97a78393050f6accf36d8b46eb37b1747e8a05eb0ec4852391b9455d77c68318792d9baec174376c719f3a73bdf47cce91889189ca812645ad585d0fb947b38ec93bfd8594ab7d3188aac93816acfb8bd63bab79f5bbb2436d5ebeb66872860150d9ac79bbe7859ef76fb5f0f957d0bceced7066124a496ab6d189bc261a12b983549e2d9334baa32fc07c85c635959405d60a6e83"}}, 0x110)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095", @ANYRES64=<r2=>r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x16, 0x14, &(0x7f0000000100)=ANY=[@ANYRES16=r2], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = userfaultfd(0x801)
r4 = getpid()
process_vm_readv(r4, &(0x7f0000000700)=[{&(0x7f0000000840)=""/54, 0x36}, {&(0x7f0000000ac0)=""/152, 0x98}], 0x2, &(0x7f0000000b80), 0x0, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000c40)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000c80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000cc0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
unshare(0x28000600)
r5 = getpid()
syz_pidfd_open(r5, 0x0)
mmap(&(0x7f0000569000/0x1000)=nil, 0x1000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0xefcd1000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt(r6, 0x0, 0x48f, &(0x7f0000000380)="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", 0x112)
socket$nl_generic(0x10, 0x3, 0x10)

535.233682ms ago: executing program 7 (id=5096):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
unshare(0x24020400)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fcntl$addseals(r2, 0x409, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(r1, 0x4, &(0x7f0000000400)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30)
r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000440)='asymmetric\x00', &(0x7f00000004c0)=@keyring)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0)
io_setup(0x400, &(0x7f0000000080)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000740)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x8, r0, 0x0, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/1/root/var/run/gssproxy.sock\x00', 0x1d5)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="449414ee", @ANYRES16=r8, @ANYBLOB="00082bbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000c044}, 0x10)
readv(r6, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x3}, {0x7, 0xfffffffd, 0x1}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x0, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6})

535.025577ms ago: executing program 4 (id=5097):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
setrlimit(0x4, &(0x7f0000000000)={0xd511, 0x9})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})

0s ago: executing program 4 (id=5098):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000002dc0)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000002f80)=""/180, 0xb4}], 0x1, &(0x7f0000002e00)=""/197, 0xc5}}, {{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000001ac0)=""/174, 0xae}, {&(0x7f0000001b80)=""/4092, 0xffc}, {&(0x7f0000002b80)=""/94, 0x5e}, {&(0x7f0000002c00)=""/213, 0xd5}], 0x6, &(0x7f0000002d40)=""/78, 0x4e}}], 0x2, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
memfd_create(&(0x7f0000000340)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
r4 = add_key$user(&(0x7f0000000400), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000440)="9f5ef65f667827fd", 0x8, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xa6)
read$watch_queue(r1, &(0x7f0000000500)=""/1, 0x1)
keyctl$revoke(0x3, r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'veth1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000680)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r8 = open(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
fsopen(&(0x7f0000000700)='nfs4\x00', 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000780)=0x200000000)
dup2(r6, r9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003100)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000900)=ANY=[@ANYBLOB="33abc0fffcffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7ea8964d302000008005015f4bf436cba4fca63afbf0000"], &(0x7f0000000980)='syzkaller\x00', 0x4, 0x6d, &(0x7f0000002f00)=""/109, 0x40f00, 0x2, '\x00', 0x0, 0x1a, r5, 0x8, &(0x7f0000003040)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x21433, 0xffffffffffffffff, 0x3, &(0x7f0000003080)=[r8], &(0x7f00000030c0)=[{0x2, 0x3, 0x0, 0x1}, {0x5, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x6, 0xa}], 0x10, 0x81}, 0x94)
write(r1, &(0x7f00000007c0)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x800000, 0x69, {}, {0x3, 0x1, 0x2, 0x9, 0x0, 0x0, "dfea44c1"}, 0x7, 0x3, {&(0x7f00000031c0)=[{0x4, 0x10000, {0x7ff}, 0xfffffff9}, {0x10000, 0xa, {0x2}, 0xd18}]}, 0x5, 0x0, r3})
clock_gettime(0x5, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

="sysfs" ino=410539 res=0 errno=-22
[ 1328.003346][   T42] audit: type=1800 audit(1793512660.869:2811): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=410540 res=0 errno=-22
[ 1328.004064][T23064] cdc_wdm 9-1:1.0: skipping garbage
[ 1328.004080][T23064] cdc_wdm 9-1:1.0: skipping garbage
[ 1328.057499][T23064] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1328.057520][T23064] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1328.087251][   T42] audit: type=1800 audit(1793512660.952:2812): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=410561 res=0 errno=-22
[ 1328.113292][   T42] audit: type=1800 audit(1793512660.971:2813): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=410562 res=0 errno=-22
[ 1328.119420][   T42] audit: type=1800 audit(1793512660.980:2814): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=410541 res=0 errno=-22
[ 1328.119799][T23064] usb 9-1: USB disconnect, device number 49
[ 1328.262400][T23126] FAULT_INJECTION: forcing a failure.
[ 1328.262400][T23126] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.262434][T23126] CPU: 2 UID: 0 PID: 23126 Comm: syz.8.4769 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1328.262459][T23126] Tainted: [L]=SOFTLOCKUP
[ 1328.262465][T23126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1328.262476][T23126] Call Trace:
[ 1328.262482][T23126]  <TASK>
[ 1328.262490][T23126]  dump_stack_lvl+0x100/0x190
[ 1328.262534][T23126]  should_fail_ex.cold+0x5/0xa
[ 1328.262559][T23126]  should_failslab+0xc2/0x120
[ 1328.262584][T23126]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1328.262603][T23126]  ? bpf_prog_alloc_no_stats+0x15f/0x690
[ 1328.262627][T23126]  bpf_prog_alloc_no_stats+0x15f/0x690
[ 1328.262649][T23126]  bpf_prog_alloc+0x3b/0x200
[ 1328.262665][T23126]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1328.262685][T23126]  bpf_prog_load+0x513/0x2ba0
[ 1328.262716][T23126]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1328.262760][T23126]  __sys_bpf+0x146f/0x4b60
[ 1328.262790][T23126]  ? __pfx___sys_bpf+0x10/0x10
[ 1328.262812][T23126]  ? lock_acquire+0x1d1/0x380
[ 1328.262843][T23126]  ? get_pid_task+0x2a/0x250
[ 1328.262864][T23126]  ? find_held_lock+0x2b/0x80
[ 1328.262884][T23126]  ? get_pid_task+0xfc/0x250
[ 1328.262902][T23126]  ? get_pid_task+0xfc/0x250
[ 1328.262927][T23126]  ? proc_fail_nth_write+0x9f/0x220
[ 1328.262953][T23126]  ? find_held_lock+0x2b/0x80
[ 1328.262976][T23126]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1328.262996][T23126]  ? find_held_lock+0x2b/0x80
[ 1328.263016][T23126]  ? ksys_write+0x190/0x250
[ 1328.263035][T23126]  ? ksys_write+0x190/0x250
[ 1328.263068][T23126]  ? lock_acquire+0x1d1/0x380
[ 1328.263091][T23126]  ? __might_fault+0xc5/0x140
[ 1328.263108][T23126]  ? find_held_lock+0x2b/0x80
[ 1328.263132][T23126]  ? __ia32_sys_bpf+0xcc/0x170
[ 1328.263157][T23126]  __ia32_sys_bpf+0xcc/0x170
[ 1328.263182][T23126]  ? __might_fault+0x111/0x140
[ 1328.263200][T23126]  __do_fast_syscall_32+0x14b/0x8c0
[ 1328.263220][T23126]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1328.263248][T23126]  do_fast_syscall_32+0x32/0x70
[ 1328.263265][T23126]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1328.263286][T23126] RIP: 0023:0xf7f47fbc
[ 1328.263302][T23126] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1328.263317][T23126] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1328.263334][T23126] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440
[ 1328.263343][T23126] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[ 1328.263353][T23126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1328.263362][T23126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1328.263371][T23126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1328.263393][T23126]  </TASK>
[ 1328.288948][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1328.288986][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1328.755374][T23064] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1328.963350][T23064] usb 9-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1328.965316][T23064] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1328.965345][T23064] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.965360][T23064] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1328.965397][T23064] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1329.002427][T23064] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1329.002459][T23064] usb 9-1: Product: syz
[ 1329.002472][T23064] usb 9-1: Manufacturer: syz
[ 1329.026123][   T42] audit: type=1800 audit(1793512661.802:2815): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410655 res=0 errno=-22
[ 1329.027422][T23064] cdc_wdm 9-1:1.0: skipping garbage
[ 1329.027440][T23064] cdc_wdm 9-1:1.0: skipping garbage
[ 1329.084789][T23064] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1329.084809][T23064] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1329.147706][T23134] nfs: Unknown parameter 'noa¶~ÁhÍQ6Š#Õc'
[ 1329.238038][T23132] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4846'.
[ 1329.291187][T23137] nvme_fabrics: no handler found for transport fc+traddr=nn-0x3333333333333333:pn-+x4444444444444444.
[ 1329.888820][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.888958][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.889547][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.889568][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.889792][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.889809][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.890037][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.890054][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.890291][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.890309][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.890540][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.890558][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.890774][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.890789][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.890993][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.891005][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.891214][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.891226][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.891435][    C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1329.891448][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1329.891892][ T5744] usb 9-1: USB disconnect, device number 50
[ 1329.891987][    C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1330.630109][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4850'.
[ 1330.630169][T23146] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4850'.
[ 1331.438890][T23172] fuse: Bad value for 'fd'
[ 1331.708600][   T42] kauditd_printk_skb: 12 callbacks suppressed
[ 1331.708620][   T42] audit: type=1800 audit(1793512664.296:2828): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410801 res=0 errno=-22
[ 1331.732239][   T42] audit: type=1800 audit(1793512664.324:2829): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410816 res=0 errno=-22
[ 1331.743794][   T42] audit: type=1800 audit(1793512664.333:2830): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410831 res=0 errno=-22
[ 1331.755053][   T42] audit: type=1800 audit(1793512664.333:2831): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410846 res=0 errno=-22
[ 1331.983389][   T42] audit: type=1800 audit(1793512664.545:2832): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1332.637786][   T42] audit: type=1800 audit(1793512665.146:2833): pid=23198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4863" name="hibernate_compression_threads" dev="sysfs" ino=608 res=0 errno=-22
[ 1332.701622][   T42] audit: type=1800 audit(1793512665.210:2834): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410894 res=0 errno=-22
[ 1332.757579][ T5884] net_ratelimit: 30 callbacks suppressed
[ 1332.757593][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1332.757607][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1332.757618][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1332.757630][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1332.925367][T23209] FAULT_INJECTION: forcing a failure.
[ 1332.925367][T23209] name failslab, interval 1, probability 0, space 0, times 0
[ 1332.925388][T23209] CPU: 0 UID: 0 PID: 23209 Comm: syz.7.4866 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1332.925404][T23209] Tainted: [L]=SOFTLOCKUP
[ 1332.925407][T23209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1332.925414][T23209] Call Trace:
[ 1332.925418][T23209]  <TASK>
[ 1332.925423][T23209]  dump_stack_lvl+0x100/0x190
[ 1332.925443][T23209]  should_fail_ex.cold+0x5/0xa
[ 1332.925459][T23209]  should_failslab+0xc2/0x120
[ 1332.925477][T23209]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[ 1332.925491][T23209]  ? start_dirop+0x79/0xb0
[ 1332.925505][T23209]  ? alloc_inode+0x68/0x250
[ 1332.925518][T23209]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1332.925533][T23209]  alloc_inode+0x68/0x250
[ 1332.925546][T23209]  new_inode+0x22/0x1c0
[ 1332.925559][T23209]  __debugfs_create_file+0xfb/0x500
[ 1332.925575][T23209]  debugfs_create_file_full+0x41/0x60
[ 1332.925591][T23209]  ref_tracker_dir_debugfs+0x19e/0x2e0
[ 1332.925606][T23209]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1332.925632][T23209]  ? lockdep_init_map_type+0x5c/0x250
[ 1332.925646][T23209]  ? __pfx_bond_setup+0x10/0x10
[ 1332.925657][T23209]  alloc_netdev_mqs+0x314/0x1540
[ 1332.925675][T23209]  rtnl_create_link+0xc13/0xf80
[ 1332.925692][T23209]  rtnl_newlink+0x15bc/0x2620
[ 1332.925713][T23209]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1332.925729][T23209]  ? rcu_is_watching+0x13/0xc0
[ 1332.925744][T23209]  ? kasan_quarantine_put+0x104/0x240
[ 1332.925761][T23209]  ? kfree_skbmem+0x19a/0x210
[ 1332.925785][T23209]  ? __dev_queue_xmit+0xa5e/0x4a50
[ 1332.925798][T23209]  ? lock_acquire+0x1d1/0x380
[ 1332.925815][T23209]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[ 1332.925831][T23209]  ? find_held_lock+0x2b/0x80
[ 1332.925845][T23209]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1332.925862][T23209]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1332.925879][T23209]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1332.925894][T23209]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1332.925911][T23209]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1332.925935][T23209]  netlink_rcv_skb+0x159/0x420
[ 1332.925949][T23209]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1332.925966][T23209]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1332.925979][T23209]  ? __asan_memcpy+0x3c/0x60
[ 1332.925997][T23209]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1332.926012][T23209]  netlink_unicast+0x668/0x950
[ 1332.926028][T23209]  ? __pfx_netlink_unicast+0x10/0x10
[ 1332.926046][T23209]  netlink_sendmsg+0x9ac/0x10c0
[ 1332.926062][T23209]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1332.926079][T23209]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1332.926096][T23209]  ? ____sys_sendmsg+0xa99/0xc30
[ 1332.926111][T23209]  ____sys_sendmsg+0xa99/0xc30
[ 1332.926126][T23209]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1332.926141][T23209]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1332.926164][T23209]  ___sys_sendmsg+0x190/0x1e0
[ 1332.926182][T23209]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1332.926206][T23209]  ? __rcu_read_unlock+0x26a/0x5a0
[ 1332.926227][T23209]  __sys_sendmsg+0x160/0x210
[ 1332.926241][T23209]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1332.926266][T23209]  __do_fast_syscall_32+0x14b/0x8c0
[ 1332.926279][T23209]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1332.926298][T23209]  do_fast_syscall_32+0x32/0x70
[ 1332.926310][T23209]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1332.926324][T23209] RIP: 0023:0xf73cefbc
[ 1332.926334][T23209] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1332.926345][T23209] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1332.926356][T23209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[ 1332.926363][T23209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1332.926384][T23209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1332.926390][T23209] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1332.926410][T23209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1332.926425][T23209]  </TASK>
[ 1332.926741][T23209] debugfs: out of free dentries, can not create file 'netdev@ffff888072368720'
[ 1333.096532][T23209] bond2: entered allmulticast mode
[ 1333.099788][T23209] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1333.113538][T23209] bond2 (unregistering): Released all slaves
[ 1333.254097][   T42] audit: type=1800 audit(1793512665.718:2835): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411162 res=0 errno=-22
[ 1333.267622][   T42] audit: type=1800 audit(1793512665.737:2836): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411177 res=0 errno=-22
[ 1333.310522][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1333.310616][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1333.310637][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1333.310656][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1333.861934][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1333.861967][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1334.313333][   T42] audit: type=1800 audit(1793512666.698:2837): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1334.432163][T23239] FAULT_INJECTION: forcing a failure.
[ 1334.432163][T23239] name failslab, interval 1, probability 0, space 0, times 0
[ 1334.432195][T23239] CPU: 0 UID: 0 PID: 23239 Comm: syz.4.4875 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1334.432220][T23239] Tainted: [L]=SOFTLOCKUP
[ 1334.432227][T23239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1334.432238][T23239] Call Trace:
[ 1334.432245][T23239]  <TASK>
[ 1334.432252][T23239]  dump_stack_lvl+0x100/0x190
[ 1334.432282][T23239]  should_fail_ex.cold+0x5/0xa
[ 1334.432306][T23239]  should_failslab+0xc2/0x120
[ 1334.432351][T23239]  __kmalloc_noprof+0xfc/0x840
[ 1334.432374][T23239]  ? kasan_quarantine_put+0x104/0x240
[ 1334.432396][T23239]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1334.432435][T23239]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1334.432466][T23239]  genl_family_rcv_msg_doit+0xc7/0x300
[ 1334.432493][T23239]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1334.432518][T23239]  ? genl_get_cmd+0x3e7/0x760
[ 1334.432548][T23239]  ? bpf_lsm_capable+0x9/0x10
[ 1334.432573][T23239]  ? security_capable+0x80/0x260
[ 1334.432595][T23239]  ? ns_capable+0xcd/0xf0
[ 1334.432623][T23239]  genl_rcv_msg+0x560/0x800
[ 1334.432650][T23239]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1334.432674][T23239]  ? __lock_acquire+0x5c0/0x1f40
[ 1334.432702][T23239]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[ 1334.432734][T23239]  netlink_rcv_skb+0x159/0x420
[ 1334.432757][T23239]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1334.432782][T23239]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1334.432815][T23239]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1334.432840][T23239]  genl_rcv+0x28/0x40
[ 1334.432862][T23239]  netlink_unicast+0x668/0x950
[ 1334.432888][T23239]  ? __pfx_netlink_unicast+0x10/0x10
[ 1334.432917][T23239]  netlink_sendmsg+0x9ac/0x10c0
[ 1334.432942][T23239]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1334.432970][T23239]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1334.432998][T23239]  ? ____sys_sendmsg+0xa99/0xc30
[ 1334.433023][T23239]  ____sys_sendmsg+0xa99/0xc30
[ 1334.433047][T23239]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1334.433073][T23239]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1334.433112][T23239]  ___sys_sendmsg+0x190/0x1e0
[ 1334.433141][T23239]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1334.433179][T23239]  ? find_held_lock+0x2b/0x80
[ 1334.433245][T23239]  __sys_sendmsg+0x160/0x210
[ 1334.433271][T23239]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1334.433306][T23239]  __do_fast_syscall_32+0x14b/0x8c0
[ 1334.433326][T23239]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1334.433357][T23239]  do_fast_syscall_32+0x32/0x70
[ 1334.433377][T23239]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1334.433401][T23239] RIP: 0023:0xf73fefbc
[ 1334.433423][T23239] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1334.433439][T23239] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1334.433459][T23239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000ac0
[ 1334.433470][T23239] RDX: 00000000040040c4 RSI: 0000000000000000 RDI: 0000000000000000
[ 1334.433481][T23239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1334.433492][T23239] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1334.433503][T23239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1334.433528][T23239]  </TASK>
[ 1334.736048][T23247] FAULT_INJECTION: forcing a failure.
[ 1334.736048][T23247] name failslab, interval 1, probability 0, space 0, times 0
[ 1334.736080][T23247] CPU: 0 UID: 0 PID: 23247 Comm: syz.6.4878 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1334.736104][T23247] Tainted: [L]=SOFTLOCKUP
[ 1334.736126][T23247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1334.736138][T23247] Call Trace:
[ 1334.736145][T23247]  <TASK>
[ 1334.736152][T23247]  dump_stack_lvl+0x100/0x190
[ 1334.736181][T23247]  should_fail_ex.cold+0x5/0xa
[ 1334.736205][T23247]  should_failslab+0xc2/0x120
[ 1334.736230][T23247]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1334.736250][T23247]  ? bpf_prog_alloc_no_stats+0x15f/0x690
[ 1334.736275][T23247]  bpf_prog_alloc_no_stats+0x15f/0x690
[ 1334.736296][T23247]  bpf_prog_alloc+0x3b/0x200
[ 1334.736311][T23247]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1334.736331][T23247]  bpf_prog_load+0x513/0x2ba0
[ 1334.736363][T23247]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1334.736405][T23247]  __sys_bpf+0x146f/0x4b60
[ 1334.736442][T23247]  ? __pfx___sys_bpf+0x10/0x10
[ 1334.736465][T23247]  ? lock_acquire+0x1d1/0x380
[ 1334.736492][T23247]  ? get_pid_task+0x2a/0x250
[ 1334.736512][T23247]  ? find_held_lock+0x2b/0x80
[ 1334.736533][T23247]  ? get_pid_task+0xfc/0x250
[ 1334.736553][T23247]  ? get_pid_task+0xfc/0x250
[ 1334.736578][T23247]  ? proc_fail_nth_write+0x9f/0x220
[ 1334.736604][T23247]  ? find_held_lock+0x2b/0x80
[ 1334.736633][T23247]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1334.736655][T23247]  ? find_held_lock+0x2b/0x80
[ 1334.736677][T23247]  ? ksys_write+0x190/0x250
[ 1334.736698][T23247]  ? ksys_write+0x190/0x250
[ 1334.736753][T23247]  ? lock_acquire+0x1d1/0x380
[ 1334.736780][T23247]  ? __might_fault+0xc5/0x140
[ 1334.736799][T23247]  ? find_held_lock+0x2b/0x80
[ 1334.736826][T23247]  ? __ia32_sys_bpf+0xcc/0x170
[ 1334.736852][T23247]  __ia32_sys_bpf+0xcc/0x170
[ 1334.736879][T23247]  ? __might_fault+0x111/0x140
[ 1334.736898][T23247]  __do_fast_syscall_32+0x14b/0x8c0
[ 1334.736917][T23247]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1334.736948][T23247]  do_fast_syscall_32+0x32/0x70
[ 1334.736968][T23247]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1334.736992][T23247] RIP: 0023:0xf7f45fbc
[ 1334.737008][T23247] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1334.737026][T23247] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1334.737044][T23247] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0
[ 1334.737057][T23247] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[ 1334.737068][T23247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1334.737078][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1334.737089][T23247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1334.737113][T23247]  </TASK>
[ 1334.963957][T23254] 9pnet_fd: p9_fd_create_tcp (23254): problem connecting socket to 127.0.0.1
[ 1335.054720][T23256] nbd: illegal input index -1
[ 1335.308472][T23267] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4885'.
[ 1335.308499][T23267] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4885'.
[ 1335.308513][T23267] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4885'.
[ 1335.617385][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4886'.
[ 1335.739994][T23274] FAULT_INJECTION: forcing a failure.
[ 1335.739994][T23274] name failslab, interval 1, probability 0, space 0, times 0
[ 1335.740016][T23274] CPU: 0 UID: 0 PID: 23274 Comm: syz.8.4888 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1335.740031][T23274] Tainted: [L]=SOFTLOCKUP
[ 1335.740036][T23274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1335.740043][T23274] Call Trace:
[ 1335.740047][T23274]  <TASK>
[ 1335.740052][T23274]  dump_stack_lvl+0x100/0x190
[ 1335.740071][T23274]  should_fail_ex.cold+0x5/0xa
[ 1335.740087][T23274]  should_failslab+0xc2/0x120
[ 1335.740105][T23274]  __kmalloc_noprof+0xfc/0x840
[ 1335.740121][T23274]  ? __vb2_queue_alloc+0x23e/0x1160
[ 1335.740141][T23274]  __vb2_queue_alloc+0x23e/0x1160
[ 1335.740166][T23274]  vb2_core_reqbufs+0x899/0xf30
[ 1335.740180][T23274]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 1335.740192][T23274]  ? rcu_is_watching+0x13/0xc0
[ 1335.740209][T23274]  ? __mutex_lock+0x267/0x1c10
[ 1335.740220][T23274]  ? __video_do_ioctl+0x50f/0xdf0
[ 1335.740239][T23274]  vb2_ioctl_reqbufs+0x291/0x450
[ 1335.740256][T23274]  ? __pfx_vb2_ioctl_reqbufs+0x10/0x10
[ 1335.740277][T23274]  vidioc_reqbufs+0x86/0x100
[ 1335.740291][T23274]  v4l_reqbufs+0x175/0x1d0
[ 1335.740305][T23274]  __video_do_ioctl+0xb2a/0xdf0
[ 1335.740321][T23274]  ? __might_fault+0xc5/0x140
[ 1335.740332][T23274]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1335.740352][T23274]  video_usercopy+0x3d3/0x14c0
[ 1335.740369][T23274]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1335.740385][T23274]  ? __pfx_video_usercopy+0x10/0x10
[ 1335.740405][T23274]  ? __fget_files+0x215/0x3d0
[ 1335.740420][T23274]  ? hook_file_ioctl_common+0x140/0x440
[ 1335.740457][T23274]  v4l2_ioctl+0x1bd/0x250
[ 1335.740476][T23274]  v4l2_compat_ioctl32+0x20f/0x2d0
[ 1335.740490][T23274]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[ 1335.740504][T23274]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1335.740520][T23274]  __do_fast_syscall_32+0x14b/0x8c0
[ 1335.740535][T23274]  do_fast_syscall_32+0x32/0x70
[ 1335.740547][T23274]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1335.740562][T23274] RIP: 0023:0xf7f47fbc
[ 1335.740572][T23274] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1335.740583][T23274] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1335.740594][T23274] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608
[ 1335.740601][T23274] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1335.740607][T23274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1335.740614][T23274] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1335.740620][T23274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1335.740634][T23274]  </TASK>
[ 1337.345212][   T42] kauditd_printk_skb: 7 callbacks suppressed
[ 1337.345225][   T42] audit: type=1800 audit(1793512669.496:2845): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1337.903914][T23331] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1338.300748][ T5884] net_ratelimit: 30 callbacks suppressed
[ 1338.300763][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1338.300776][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1338.300787][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1338.300798][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1338.852500][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1338.852589][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1338.852609][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1338.852627][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1339.105489][   T42] audit: type=1800 audit(1793512671.131:2846): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411406 res=0 errno=-22
[ 1339.110924][   T42] audit: type=1800 audit(1793512671.131:2847): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411421 res=0 errno=-22
[ 1339.268141][   T42] audit: type=1800 audit(1793512671.279:2848): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1339.451447][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1339.451467][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1339.456832][T23362] FAULT_INJECTION: forcing a failure.
[ 1339.456832][T23362] name failslab, interval 1, probability 0, space 0, times 0
[ 1339.456855][T23362] CPU: 2 UID: 0 PID: 23362 Comm: syz.8.4917 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1339.456870][T23362] Tainted: [L]=SOFTLOCKUP
[ 1339.456874][T23362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1339.456882][T23362] Call Trace:
[ 1339.456897][T23362]  <TASK>
[ 1339.456904][T23362]  dump_stack_lvl+0x100/0x190
[ 1339.456924][T23362]  should_fail_ex.cold+0x5/0xa
[ 1339.456940][T23362]  should_failslab+0xc2/0x120
[ 1339.456957][T23362]  __kmalloc_noprof+0xfc/0x840
[ 1339.456971][T23362]  ? u32_dump+0x706/0x11a0
[ 1339.456992][T23362]  u32_dump+0x706/0x11a0
[ 1339.457012][T23362]  ? skb_put+0x138/0x180
[ 1339.457027][T23362]  ? __pfx_u32_dump+0x10/0x10
[ 1339.457044][T23362]  ? __nla_reserve+0x9c/0xc0
[ 1339.457059][T23362]  ? __asan_memcpy+0x3c/0x60
[ 1339.457073][T23362]  ? __pfx_u32_dump+0x10/0x10
[ 1339.457091][T23362]  tcf_fill_node+0x6ab/0xa60
[ 1339.457112][T23362]  ? __pfx_tcf_fill_node+0x10/0x10
[ 1339.457130][T23362]  ? __alloc_skb+0x4e9/0x710
[ 1339.457141][T23362]  ? __alloc_skb+0x5b7/0x710
[ 1339.457152][T23362]  ? __pfx___alloc_skb+0x10/0x10
[ 1339.457166][T23362]  tfilter_notify_prep+0x140/0x230
[ 1339.457210][T23362]  tfilter_notify+0x1cd/0x2d0
[ 1339.457225][T23362]  tc_new_tfilter+0x16c8/0x24e0
[ 1339.457246][T23362]  ? kasan_quarantine_put+0x104/0x240
[ 1339.457260][T23362]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1339.457279][T23362]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1339.457291][T23362]  ? kfree_skbmem+0x19a/0x210
[ 1339.457308][T23362]  ? skb_release_data+0x69d/0x860
[ 1339.457323][T23362]  ? __lock_acquire+0x5c0/0x1f40
[ 1339.457347][T23362]  ? lock_acquire+0x1d1/0x380
[ 1339.457363][T23362]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[ 1339.457379][T23362]  ? find_held_lock+0x2b/0x80
[ 1339.457394][T23362]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1339.457410][T23362]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1339.457423][T23362]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1339.457440][T23362]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1339.457462][T23362]  netlink_rcv_skb+0x159/0x420
[ 1339.457476][T23362]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1339.457492][T23362]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1339.457505][T23362]  ? __asan_memcpy+0x3c/0x60
[ 1339.457522][T23362]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1339.457537][T23362]  netlink_unicast+0x668/0x950
[ 1339.457553][T23362]  ? __pfx_netlink_unicast+0x10/0x10
[ 1339.457571][T23362]  netlink_sendmsg+0x9ac/0x10c0
[ 1339.457587][T23362]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1339.457604][T23362]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1339.457621][T23362]  ? ____sys_sendmsg+0xa99/0xc30
[ 1339.457636][T23362]  ____sys_sendmsg+0xa99/0xc30
[ 1339.457651][T23362]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1339.457666][T23362]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1339.457688][T23362]  ___sys_sendmsg+0x190/0x1e0
[ 1339.457706][T23362]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1339.457734][T23362]  ? find_held_lock+0x2b/0x80
[ 1339.457757][T23362]  __sys_sendmsg+0x160/0x210
[ 1339.457771][T23362]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1339.457792][T23362]  __do_fast_syscall_32+0x14b/0x8c0
[ 1339.457803][T23362]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1339.457822][T23362]  do_fast_syscall_32+0x32/0x70
[ 1339.457834][T23362]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1339.457848][T23362] RIP: 0023:0xf7f47fbc
[ 1339.457858][T23362] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1339.457869][T23362] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1339.457880][T23362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780
[ 1339.457887][T23362] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000
[ 1339.457893][T23362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1339.457900][T23362] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1339.457906][T23362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1339.457920][T23362]  </TASK>
[ 1340.247661][T23380] FAULT_INJECTION: forcing a failure.
[ 1340.247661][T23380] name failslab, interval 1, probability 0, space 0, times 0
[ 1340.247686][T23380] CPU: 2 UID: 0 PID: 23380 Comm: syz.7.4922 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1340.247714][T23380] Tainted: [L]=SOFTLOCKUP
[ 1340.247720][T23380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1340.247726][T23380] Call Trace:
[ 1340.247731][T23380]  <TASK>
[ 1340.247735][T23380]  dump_stack_lvl+0x100/0x190
[ 1340.247760][T23380]  should_fail_ex.cold+0x5/0xa
[ 1340.247778][T23380]  should_failslab+0xc2/0x120
[ 1340.247796][T23380]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1340.247809][T23380]  ? fuse_init_fs_context+0x43/0x1e0
[ 1340.247830][T23380]  fuse_init_fs_context+0x43/0x1e0
[ 1340.247849][T23380]  alloc_fs_context+0x607/0xf40
[ 1340.247864][T23380]  __ia32_sys_fsopen+0x16d/0x2d0
[ 1340.247878][T23380]  __do_fast_syscall_32+0x14b/0x8c0
[ 1340.247893][T23380]  do_fast_syscall_32+0x32/0x70
[ 1340.247906][T23380]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1340.247920][T23380] RIP: 0023:0xf73cefbc
[ 1340.247929][T23380] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1340.247940][T23380] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae
[ 1340.247951][T23380] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000
[ 1340.247958][T23380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1340.247965][T23380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1340.247971][T23380] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1340.247977][T23380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1340.247992][T23380]  </TASK>
[ 1340.895510][T23390] x_tables: ip_tables: ah match: only valid for protocol 51
[ 1341.146258][   T42] audit: type=1800 audit(1793512673.006:2849): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1341.178123][T23394] syz.4.4927 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1341.294244][T23400] FAULT_INJECTION: forcing a failure.
[ 1341.294244][T23400] name failslab, interval 1, probability 0, space 0, times 0
[ 1341.294276][T23400] CPU: 0 UID: 0 PID: 23400 Comm: syz.6.4928 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1341.294299][T23400] Tainted: [L]=SOFTLOCKUP
[ 1341.294305][T23400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1341.294315][T23400] Call Trace:
[ 1341.294321][T23400]  <TASK>
[ 1341.294328][T23400]  dump_stack_lvl+0x100/0x190
[ 1341.294358][T23400]  should_fail_ex.cold+0x5/0xa
[ 1341.294386][T23400]  should_failslab+0xc2/0x120
[ 1341.294411][T23400]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1341.294433][T23400]  ? __send_signal_locked+0x1d1/0x1420
[ 1341.294459][T23400]  __send_signal_locked+0x1d1/0x1420
[ 1341.294487][T23400]  do_notify_parent+0xf15/0x10c0
[ 1341.294513][T23400]  ? __pfx_do_notify_parent+0x10/0x10
[ 1341.294539][T23400]  ? do_raw_spin_lock+0x128/0x260
[ 1341.294561][T23400]  ? __wake_up+0x3f/0x60
[ 1341.294585][T23400]  ? release_task+0xc27/0x1ca0
[ 1341.294609][T23400]  release_task+0x14ea/0x1ca0
[ 1341.294634][T23400]  ? __pfx_release_task+0x10/0x10
[ 1341.294652][T23400]  ? do_raw_spin_lock+0x128/0x260
[ 1341.294676][T23400]  ? find_held_lock+0x2b/0x80
[ 1341.294699][T23400]  ? __wake_up+0x3f/0x60
[ 1341.294719][T23400]  ? __wake_up+0x3f/0x60
[ 1341.294744][T23400]  ? rcu_is_watching+0x13/0xc0
[ 1341.294768][T23400]  do_exit+0x1300/0x2a00
[ 1341.294789][T23400]  ? __pfx_do_exit+0x10/0x10
[ 1341.294807][T23400]  ? do_raw_spin_lock+0x128/0x260
[ 1341.294846][T23400]  ? find_held_lock+0x2b/0x80
[ 1341.294866][T23400]  ? get_signal+0x7db/0x21d0
[ 1341.294892][T23400]  do_group_exit+0xd5/0x2a0
[ 1341.294912][T23400]  get_signal+0x1ebd/0x21d0
[ 1341.294945][T23400]  ? __pfx_get_signal+0x10/0x10
[ 1341.294973][T23400]  ? do_futex+0x190/0x440
[ 1341.295002][T23400]  arch_do_signal_or_restart+0x91/0x7a0
[ 1341.295028][T23400]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1341.295065][T23400]  exit_to_user_mode_loop+0x139/0x700
[ 1341.295085][T23400]  ? rcu_is_watching+0x13/0xc0
[ 1341.295107][T23400]  __do_fast_syscall_32+0x5b0/0x8c0
[ 1341.295132][T23400]  do_fast_syscall_32+0x32/0x70
[ 1341.295154][T23400]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1341.295175][T23400] RIP: 0023:0xf7f45fbc
[ 1341.295189][T23400] Code: Unable to access opcode bytes at 0xf7f45f92.
[ 1341.295196][T23400] RSP: 002b:00000000f53f65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0
[ 1341.295218][T23400] RAX: fffffffffffffe00 RBX: 00000000f7404f88 RCX: 0000000000000080
[ 1341.295228][T23400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7404f8c
[ 1341.295239][T23400] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[ 1341.295248][T23400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1341.295258][T23400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1341.295283][T23400]  </TASK>
[ 1341.409130][   T42] audit: type=1800 audit(1793512673.256:2850): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411514 res=0 errno=-22
[ 1341.412423][   T42] audit: type=1800 audit(1793512673.256:2851): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411529 res=0 errno=-22
[ 1341.416089][   T42] audit: type=1800 audit(1793512673.256:2852): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411544 res=0 errno=-22
[ 1341.430410][   T42] audit: type=1800 audit(1793512673.284:2853): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411559 res=0 errno=-22
[ 1341.470769][T23414] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4932'.
[ 1341.572590][T23423] FAULT_INJECTION: forcing a failure.
[ 1341.572590][T23423] name failslab, interval 1, probability 0, space 0, times 0
[ 1341.572612][T23423] CPU: 0 UID: 0 PID: 23423 Comm: syz.6.4935 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1341.572628][T23423] Tainted: [L]=SOFTLOCKUP
[ 1341.572632][T23423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1341.572638][T23423] Call Trace:
[ 1341.572643][T23423]  <TASK>
[ 1341.572647][T23423]  dump_stack_lvl+0x100/0x190
[ 1341.572666][T23423]  should_fail_ex.cold+0x5/0xa
[ 1341.572682][T23423]  should_failslab+0xc2/0x120
[ 1341.572699][T23423]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1341.572713][T23423]  ? d_instantiate+0x8a/0xb0
[ 1341.572723][T23423]  ? alloc_empty_file+0x5b/0x1c0
[ 1341.572736][T23423]  alloc_empty_file+0x5b/0x1c0
[ 1341.572747][T23423]  alloc_file_pseudo+0x17e/0x290
[ 1341.572759][T23423]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1341.572771][T23423]  ? _raw_spin_unlock+0x28/0x50
[ 1341.572787][T23423]  ? alloc_fd+0x471/0x7a0
[ 1341.572805][T23423]  __anon_inode_getfile+0xe8/0x280
[ 1341.572826][T23423]  anon_inode_getfd+0x68/0xc0
[ 1341.572840][T23423]  map_create+0x19e1/0x3150
[ 1341.572861][T23423]  ? __pfx_map_create+0x10/0x10
[ 1341.572876][T23423]  ? lock_acquire+0x1d1/0x380
[ 1341.572894][T23423]  ? __might_fault+0xc5/0x140
[ 1341.572905][T23423]  ? __might_fault+0xc5/0x140
[ 1341.572921][T23423]  __sys_bpf+0x14cb/0x4b60
[ 1341.572941][T23423]  ? __pfx___sys_bpf+0x10/0x10
[ 1341.572956][T23423]  ? __pfx_futex_hash+0x10/0x10
[ 1341.572968][T23423]  ? __pfx_get_futex_key+0x10/0x10
[ 1341.572981][T23423]  ? get_pid_task+0xfc/0x250
[ 1341.572994][T23423]  ? get_pid_task+0xfc/0x250
[ 1341.573011][T23423]  ? find_held_lock+0x2b/0x80
[ 1341.573028][T23423]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1341.573043][T23423]  ? find_held_lock+0x2b/0x80
[ 1341.573056][T23423]  ? ksys_write+0x190/0x250
[ 1341.573070][T23423]  ? ksys_write+0x190/0x250
[ 1341.573093][T23423]  ? lock_acquire+0x1d1/0x380
[ 1341.573110][T23423]  ? __might_fault+0xc5/0x140
[ 1341.573121][T23423]  ? find_held_lock+0x2b/0x80
[ 1341.573137][T23423]  ? __ia32_sys_bpf+0xcc/0x170
[ 1341.573152][T23423]  __ia32_sys_bpf+0xcc/0x170
[ 1341.573169][T23423]  ? __might_fault+0x111/0x140
[ 1341.573203][T23423]  __do_fast_syscall_32+0x14b/0x8c0
[ 1341.573217][T23423]  do_fast_syscall_32+0x32/0x70
[ 1341.573229][T23423]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1341.573256][T23423] RIP: 0023:0xf7f45fbc
[ 1341.573267][T23423] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1341.573277][T23423] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[ 1341.573288][T23423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080
[ 1341.573296][T23423] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[ 1341.573302][T23423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1341.573308][T23423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1341.573314][T23423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1341.573329][T23423]  </TASK>
[ 1341.576650][T23424] 0x000000000000-0x000000010000 : ""
[ 1341.578380][   T42] audit: type=1800 audit(1793512673.413:2854): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411582 res=0 errno=-22
[ 1341.582797][T23424] ftl_cs: FTL header not found.
[ 1341.762654][T23429] FAULT_INJECTION: forcing a failure.
[ 1341.762654][T23429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1341.762686][T23429] CPU: 0 UID: 0 PID: 23429 Comm: syz.6.4937 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1341.762703][T23429] Tainted: [L]=SOFTLOCKUP
[ 1341.762708][T23429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1341.762715][T23429] Call Trace:
[ 1341.762720][T23429]  <TASK>
[ 1341.762725][T23429]  dump_stack_lvl+0x100/0x190
[ 1341.762745][T23429]  should_fail_ex.cold+0x5/0xa
[ 1341.762761][T23429]  _copy_from_user+0x2e/0xd0
[ 1341.762778][T23429]  video_usercopy+0x9e0/0x14c0
[ 1341.762795][T23429]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1341.762812][T23429]  ? __pfx_video_usercopy+0x10/0x10
[ 1341.762831][T23429]  ? __fget_files+0x215/0x3d0
[ 1341.762846][T23429]  ? hook_file_ioctl_common+0x140/0x440
[ 1341.762866][T23429]  v4l2_ioctl+0x1bd/0x250
[ 1341.762883][T23429]  v4l2_compat_ioctl32+0x20f/0x2d0
[ 1341.762897][T23429]  ? __pfx_v4l2_compat_ioctl32+0x10/0x10
[ 1341.762910][T23429]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1341.762926][T23429]  __do_fast_syscall_32+0x14b/0x8c0
[ 1341.762938][T23429]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1341.762957][T23429]  do_fast_syscall_32+0x32/0x70
[ 1341.762968][T23429]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1341.762983][T23429] RIP: 0023:0xf7f45fbc
[ 1341.762992][T23429] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1341.763003][T23429] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1341.763014][T23429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0285628
[ 1341.763021][T23429] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000
[ 1341.763028][T23429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1341.763034][T23429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1341.763041][T23429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1341.763054][T23429]  </TASK>
[ 1341.799905][   T57] usb 12-1: new high-speed USB device number 31 using dummy_hcd
[ 1341.959279][   T57] usb 12-1: Using ep0 maxpacket: 16
[ 1341.959860][   T57] usb 12-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[ 1341.961439][   T57] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1341.961455][   T57] usb 12-1: config 0 interface 0 has no altsetting 0
[ 1341.963308][   T57] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1341.963320][   T57] usb 12-1: Product: syz
[ 1341.963327][   T57] usb 12-1: Manufacturer: syz
[ 1341.963335][   T57] usb 12-1: SerialNumber: syz
[ 1341.964897][   T57] usb 12-1: config 0 descriptor??
[ 1342.250573][T23443] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4941'.
[ 1342.265628][T23443] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4941'.
[ 1342.391615][    C2] imon 12-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1342.413596][   T57] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input122
[ 1342.452918][   T57] imon:send_packet: packet tx failed (-71)
[ 1342.479182][   T57] imon 12-1:0.0: panel buttons/knobs setup failed
[ 1342.609352][   T57] rc_core: IR keymap rc-imon-pad not found
[ 1342.609374][   T57] Registered IR keymap rc-empty
[ 1342.609439][   T57] imon 12-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1342.609455][   T57] imon 12-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1342.609769][   T57] imon:send_packet: packet tx failed (-71)
[ 1342.632391][   T57] imon 12-1:0.0: remote input dev register failed
[ 1342.632489][   T57] imon 12-1:0.0: imon_init_intf0: rc device setup failed
[ 1342.644080][T23452] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1342.749315][   T57] imon 12-1:0.0: unable to initialize intf0, err 0
[ 1342.762688][   T57] usb 12-1: USB disconnect, device number 31
[ 1342.790109][   T42] kauditd_printk_skb: 13 callbacks suppressed
[ 1342.790122][   T42] audit: type=1800 audit(1793512674.531:2868): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=411804 res=0 errno=-19
[ 1343.080892][   T42] audit: type=1800 audit(1793512674.798:2869): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30673 res=0 errno=-22
[ 1343.144460][   T57] usb 12-1: new full-speed USB device number 32 using dummy_hcd
[ 1343.210256][   T42] audit: type=1800 audit(1793512674.918:2870): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34934 res=0 errno=-22
[ 1343.229634][   T42] audit: type=1800 audit(1793512674.937:2871): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34957 res=0 errno=-22
[ 1343.301898][   T57] usb 12-1: device descriptor read/64, error -71
[ 1343.475298][T18545] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[ 1343.583125][   T57] usb 12-1: new full-speed USB device number 33 using dummy_hcd
[ 1343.637299][   T42] audit: type=1800 audit(1793512675.306:2872): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1343.658618][T18545] usb 13-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[ 1343.663679][T18545] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1343.663695][T18545] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1343.663714][T18545] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.666904][   T42] audit: type=1800 audit(1793512675.343:2873): pid=22741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412029 res=0 errno=-22
[ 1343.669346][T18545] idmouse 13-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[ 1343.676117][   T42] audit: type=1800 audit(1793512675.353:2874): pid=22741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=412058 res=0 errno=-22
[ 1343.676148][   T42] audit: type=1800 audit(1793512675.353:2875): pid=22741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=412036 res=0 errno=-22
[ 1343.696082][   T42] audit: type=1800 audit(1793512675.353:2876): pid=22741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=412037 res=0 errno=-22
[ 1343.696138][   T42] audit: type=1800 audit(1793512675.362:2877): pid=22741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=412038 res=0 errno=-22
[ 1343.779811][   T57] usb 12-1: device descriptor read/64, error -71
[ 1343.892979][T23483] FAULT_INJECTION: forcing a failure.
[ 1343.892979][T23483] name failslab, interval 1, probability 0, space 0, times 0
[ 1343.893035][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.6.4955 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1343.893051][T23483] Tainted: [L]=SOFTLOCKUP
[ 1343.893055][T23483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1343.893062][T23483] Call Trace:
[ 1343.893067][T23483]  <TASK>
[ 1343.893071][T23483]  dump_stack_lvl+0x100/0x190
[ 1343.893091][T23483]  should_fail_ex.cold+0x5/0xa
[ 1343.893107][T23483]  should_failslab+0xc2/0x120
[ 1343.893124][T23483]  __kmalloc_noprof+0xfc/0x840
[ 1343.893137][T23483]  ? rcu_is_watching+0x13/0xc0
[ 1343.893152][T23483]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1343.893205][T23483]  tomoyo_realpath_from_path+0xb6/0x690
[ 1343.893227][T23483]  tomoyo_path_number_perm+0x23c/0x580
[ 1343.893242][T23483]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1343.893259][T23483]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1343.893275][T23483]  ? get_pid_task+0x106/0x250
[ 1343.893291][T23483]  ? __lock_acquire+0x5c0/0x1f40
[ 1343.893315][T23483]  ? __fget_files+0x34/0x3d0
[ 1343.893332][T23483]  ? find_held_lock+0x2b/0x80
[ 1343.893345][T23483]  ? __fget_files+0x215/0x3d0
[ 1343.893360][T23483]  ? hook_file_ioctl_common+0x140/0x440
[ 1343.893376][T23483]  ? __fget_files+0x215/0x3d0
[ 1343.893393][T23483]  ? __fget_files+0x21f/0x3d0
[ 1343.893411][T23483]  security_file_ioctl_compat+0xd3/0x230
[ 1343.893428][T23483]  __ia32_compat_sys_ioctl+0xc2/0x360
[ 1343.893443][T23483]  __do_fast_syscall_32+0x14b/0x8c0
[ 1343.893456][T23483]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1343.893474][T23483]  do_fast_syscall_32+0x32/0x70
[ 1343.893486][T23483]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1343.893500][T23483] RIP: 0023:0xf7f45fbc
[ 1343.893510][T23483] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1343.893520][T23483] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1343.893531][T23483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b
[ 1343.893550][T23483] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[ 1343.893557][T23483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1343.893564][T23483] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1343.893570][T23483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1343.893585][T23483]  </TASK>
[ 1343.894861][T23483] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1343.910038][   T57] usb usb12-port1: attempt power cycle
[ 1344.017828][T23486] random: crng reseeded on system resumption
[ 1344.027313][ T5884] net_ratelimit: 30 callbacks suppressed
[ 1344.027326][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1344.027339][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1344.027351][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1344.027362][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1344.298740][   T57] usb 12-1: new full-speed USB device number 34 using dummy_hcd
[ 1344.335521][   T57] usb 12-1: device descriptor read/8, error -71
[ 1344.579782][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1344.579858][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1344.579872][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1344.579930][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1344.607734][   T57] usb 12-1: new full-speed USB device number 35 using dummy_hcd
[ 1344.635749][   T57] usb 12-1: device descriptor read/8, error -71
[ 1344.763914][   T57] usb usb12-port1: unable to enumerate USB device
[ 1345.048390][T13280] usb 13-1: USB disconnect, device number 2
[ 1345.056447][T13280] idmouse 13-1:1.0: disconnected
[ 1345.133043][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1345.133095][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1345.134252][T23521] loop2: detected capacity change from 0 to 7
[ 1345.135465][T23521] Dev loop2: unable to read RDB block 7
[ 1345.135484][T23521]  loop2: unable to read partition table
[ 1345.135573][T23521] loop2: partition table beyond EOD, truncated
[ 1345.136757][T23521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[ 1345.641577][T23517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1345.685690][T13280] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1345.849292][T13280] usb 9-1: Using ep0 maxpacket: 32
[ 1345.854256][T13280] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1345.854307][T13280] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[ 1345.860902][T13280] usb 9-1: string descriptor 0 read error: -22
[ 1345.861013][T13280] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1345.878429][T13280] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[ 1345.878467][T13280] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1345.883261][T23532] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1345.892648][T13280] dvb-usb: bulk message failed: -22 (2/0)
[ 1345.924400][T13280] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1345.928746][T13280] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[ 1345.928788][T13280] usb 9-1: media controller created
[ 1345.951810][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951830][T13280] dw2102: i2c transfer failed.
[ 1345.951846][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951858][T13280] dw2102: i2c transfer failed.
[ 1345.951868][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951880][T13280] dw2102: i2c transfer failed.
[ 1345.951891][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951901][T13280] dw2102: i2c transfer failed.
[ 1345.951911][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951923][T13280] dw2102: i2c transfer failed.
[ 1345.951932][T13280] dvb-usb: bulk message failed: -22 (6/0)
[ 1345.951943][T13280] dw2102: i2c transfer failed.
[ 1345.951950][T13280] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1346.006352][T13280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1346.072015][T13280] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.072028][T13280] dw2102: command 0x0e transfer failed.
[ 1346.072032][T13280] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.072040][T13280] dw2102: command 0x0e transfer failed.
[ 1346.574797][T13280] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.574813][T13280] dw2102: command 0x0e transfer failed.
[ 1346.574818][T13280] dvb-usb: bulk message failed: -22 (3/0)
[ 1346.574826][T13280] dw2102: command 0x0e transfer failed.
[ 1346.574830][T13280] dvb-usb: bulk message failed: -22 (1/0)
[ 1346.574837][T13280] dw2102: command 0x51 transfer failed.
[ 1346.622129][T23561] dvb-usb: bulk message failed: -22 (6/0)
[ 1346.622144][T23561] dw2102: i2c transfer failed.
[ 1346.716369][T13280] DVB: Unable to find symbol ds3000_attach()
[ 1346.716381][T13280] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[ 1347.004148][T13280] rc_core: IR keymap rc-su3000 not found
[ 1347.004162][T13280] Registered IR keymap rc-empty
[ 1347.004749][T13280] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0
[ 1347.048556][T13280] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input124
[ 1347.051857][T13280] dvb-usb: schedule remote query interval to 150 msecs.
[ 1347.051872][T13280] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1347.051880][T13280] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[ 1347.139845][T23566] block nbd8: shutting down sockets
[ 1347.224063][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1347.224077][ T5988] dw2102: i2c transfer failed.
[ 1347.232946][T23556] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1347.237498][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4979'.
[ 1347.404756][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1347.404776][ T5988] dw2102: i2c transfer failed.
[ 1347.405064][T13280] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[ 1347.545884][T13280] usb 13-1: device descriptor read/64, error -71
[ 1347.578045][T12754] dvb-usb: bulk message failed: -22 (1/0)
[ 1347.578060][T12754] dw2102: i2c transfer failed.
[ 1347.751198][T23064] dvb-usb: bulk message failed: -22 (1/0)
[ 1347.751219][T23064] dw2102: i2c transfer failed.
[ 1347.773038][ T5988] usb 12-1: new high-speed USB device number 36 using dummy_hcd
[ 1347.805440][T13280] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[ 1347.924443][T23064] dvb-usb: bulk message failed: -22 (1/0)
[ 1347.924466][T23064] dw2102: i2c transfer failed.
[ 1347.937088][ T5988] usb 12-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1347.939917][ T5988] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1347.939956][ T5988] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1347.939972][ T5988] usb 12-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1347.940002][ T5988] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.946150][T13280] usb 13-1: device descriptor read/64, error -71
[ 1348.066859][T13280] usb usb13-port1: attempt power cycle
[ 1348.098616][T23064] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.098636][T23064] dw2102: i2c transfer failed.
[ 1348.183462][ T5988] cxacru 12-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1348.183651][ T5988] cxacru 12-1:1.0: probe with driver cxacru failed with error -22
[ 1348.271179][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.271195][ T5988] dw2102: i2c transfer failed.
[ 1348.433316][T13280] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[ 1348.444138][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.444158][ T5988] dw2102: i2c transfer failed.
[ 1348.459257][T13280] usb 13-1: device descriptor read/8, error -71
[ 1348.617506][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.617528][ T5988] dw2102: i2c transfer failed.
[ 1348.790555][T13280] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[ 1348.811804][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.811825][ T5988] dw2102: i2c transfer failed.
[ 1348.974575][T13280] usb 13-1: device descriptor read/8, error -71
[ 1348.981115][ T5988] dvb-usb: bulk message failed: -22 (1/0)
[ 1348.981134][ T5988] dw2102: i2c transfer failed.
[ 1349.123098][ T5744] usb 9-1: USB disconnect, device number 51
[ 1349.191246][T13280] usb usb13-port1: unable to enumerate USB device
[ 1349.214868][ T5744] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[ 1349.324928][   T42] kauditd_printk_skb: 44 callbacks suppressed
[ 1349.324941][   T42] audit: type=1800 audit(1793512680.572:2922): pid=23590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4984" name="state" dev="sysfs" ino=576 res=0 errno=-22
[ 1349.364998][T18545] usb 11-1: new high-speed USB device number 37 using dummy_hcd
[ 1349.422324][   T57] usb 12-1: USB disconnect, device number 36
[ 1349.492749][   T42] audit: type=1800 audit(1793512680.719:2923): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412594 res=0 errno=-22
[ 1349.549611][T18545] usb 11-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1349.550471][T18545] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1349.550495][T18545] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1349.550506][T18545] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1349.550576][T18545] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.554665][   T42] audit: type=1800 audit(1793512680.784:2924): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412613 res=0 errno=-22
[ 1349.558798][   T42] audit: type=1800 audit(1793512680.784:2925): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=412642 res=0 errno=-22
[ 1349.591006][   T42] audit: type=1800 audit(1793512680.812:2926): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=412620 res=0 errno=-22
[ 1349.597923][T12740] net_ratelimit: 30 callbacks suppressed
[ 1349.597935][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1349.597948][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1349.597960][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1349.597970][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1349.599531][   T42] audit: type=1800 audit(1793512680.821:2927): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=412621 res=0 errno=-22
[ 1349.600371][   T42] audit: type=1800 audit(1793512680.821:2928): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=412622 res=0 errno=-22
[ 1349.643956][   T42] audit: type=1800 audit(1793512680.858:2929): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=412662 res=0 errno=-22
[ 1349.777949][T18545] cxacru 11-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1349.778127][T18545] cxacru 11-1:1.0: probe with driver cxacru failed with error -22
[ 1350.155074][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1350.155095][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1350.155106][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1350.155117][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1350.251219][T23598] ima: policy update failed
[ 1350.251369][   T42] audit: type=1802 audit(1793512681.421:2930): pid=23598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4986" res=0 errno=-22
[ 1350.294320][   T42] audit: type=1800 audit(1793512681.458:2931): pid=23595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4985" name="/" dev="fuse" ino=6 res=0 errno=-4
[ 1350.437357][ T5988] usb 11-1: USB disconnect, device number 37
[ 1350.706946][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1350.706974][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1351.677465][T23628] netlink: 'syz.6.4997': attribute type 2 has an invalid length.
[ 1351.695703][T23630] netlink: 'syz.6.4997': attribute type 2 has an invalid length.
[ 1352.000615][ T5988] usb 12-1: new high-speed USB device number 37 using dummy_hcd
[ 1352.460894][ T5988] usb 12-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1352.657947][ T5988] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1352.657978][ T5988] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1352.657992][ T5988] usb 12-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1352.658023][ T5988] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.547032][T23645] cxacru 12-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1353.731123][T23654] ima: policy update failed
[ 1354.151459][   T57] usb 12-1: USB disconnect, device number 37
[ 1354.355110][ T5988] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1354.520306][ T5988] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1354.521438][ T5988] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1354.521465][ T5988] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1354.521485][ T5988] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1354.523454][ T5988] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1354.523475][ T5988] usb 9-1: Product: syz
[ 1354.523488][ T5988] usb 9-1: Manufacturer: syz
[ 1354.523502][ T5988] usb 9-1: SerialNumber: syz
[ 1354.565334][ T5988] usb 9-1: config 0 descriptor??
[ 1354.586606][ T5988] usb 9-1: selecting invalid altsetting 0
[ 1354.647730][T23668] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5007'.
[ 1354.650705][T23668] FAULT_INJECTION: forcing a failure.
[ 1354.650705][T23668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.650727][T23668] CPU: 2 UID: 0 PID: 23668 Comm: syz.8.5007 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1354.650757][T23668] Tainted: [L]=SOFTLOCKUP
[ 1354.650762][T23668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1354.650769][T23668] Call Trace:
[ 1354.650773][T23668]  <TASK>
[ 1354.650778][T23668]  dump_stack_lvl+0x100/0x190
[ 1354.650798][T23668]  should_fail_ex.cold+0x5/0xa
[ 1354.650814][T23668]  _copy_to_user+0x32/0xd0
[ 1354.650831][T23668]  simple_read_from_buffer+0xcb/0x170
[ 1354.650849][T23668]  proc_fail_nth_read+0x1af/0x230
[ 1354.650867][T23668]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1354.650885][T23668]  ? rw_verify_area+0xce/0x6d0
[ 1354.650897][T23668]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1354.650914][T23668]  vfs_read+0x1e4/0xb40
[ 1354.650929][T23668]  ? lock_acquire+0x1d1/0x380
[ 1354.650946][T23668]  ? __fget_files+0x34/0x3d0
[ 1354.650961][T23668]  ? __pfx_vfs_read+0x10/0x10
[ 1354.650974][T23668]  ? find_held_lock+0x2b/0x80
[ 1354.650988][T23668]  ? __fget_files+0x215/0x3d0
[ 1354.651006][T23668]  ? __fget_files+0x21f/0x3d0
[ 1354.651026][T23668]  ksys_read+0x12a/0x250
[ 1354.651040][T23668]  ? __pfx_ksys_read+0x10/0x10
[ 1354.651058][T23668]  do_int80_emulation+0x166/0x650
[ 1354.651072][T23668]  asm_int80_emulation+0x1a/0x20
[ 1354.651083][T23668] RIP: 0023:0xf71377ab
[ 1354.651093][T23668] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1354.651104][T23668] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1354.651115][T23668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0
[ 1354.651123][T23668] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 1354.651129][T23668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1354.651135][T23668] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1354.651142][T23668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1354.651156][T23668]  </TASK>
[ 1354.767909][   T42] kauditd_printk_skb: 16 callbacks suppressed
[ 1354.767923][   T42] audit: type=1800 audit(1793512685.596:2947): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=413011 res=0 errno=-22
[ 1354.768344][   T42] audit: type=1800 audit(1793512685.596:2948): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=413012 res=0 errno=-22
[ 1354.768760][   T42] audit: type=1800 audit(1793512685.596:2949): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=412991 res=0 errno=-22
[ 1354.769220][   T42] audit: type=1800 audit(1793512685.596:2950): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=413013 res=0 errno=-22
[ 1354.775359][   T42] audit: type=1800 audit(1793512685.596:2951): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413034 res=0 errno=-22
[ 1354.776818][   T42] audit: type=1800 audit(1793512685.596:2952): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413053 res=0 errno=-22
[ 1354.826197][   T42] audit: type=1800 audit(1793512685.643:2953): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413080 res=0 errno=-22
[ 1354.826228][   T42] audit: type=1800 audit(1793512685.652:2954): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413093 res=0 errno=-22
[ 1354.826249][   T42] audit: type=1800 audit(1793512685.652:2955): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413106 res=0 errno=-22
[ 1354.834554][   T42] audit: type=1800 audit(1793512685.652:2956): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=413066 res=0 errno=-22
[ 1354.876342][   T57] usb 9-1: USB disconnect, device number 52
[ 1354.937341][T22784] udevd[22784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1355.034350][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5009'.
[ 1355.470728][T12740] net_ratelimit: 30 callbacks suppressed
[ 1355.470742][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1355.470807][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1355.470820][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1355.470831][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1355.886514][T23693] FAULT_INJECTION: forcing a failure.
[ 1355.886514][T23693] name failslab, interval 1, probability 0, space 0, times 0
[ 1355.886537][T23693] CPU: 0 UID: 0 PID: 23693 Comm: syz.6.5016 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1355.886553][T23693] Tainted: [L]=SOFTLOCKUP
[ 1355.886557][T23693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1355.886578][T23693] Call Trace:
[ 1355.886582][T23693]  <TASK>
[ 1355.886587][T23693]  dump_stack_lvl+0x100/0x190
[ 1355.886608][T23693]  should_fail_ex.cold+0x5/0xa
[ 1355.886624][T23693]  should_failslab+0xc2/0x120
[ 1355.886642][T23693]  __kmalloc_noprof+0xfc/0x840
[ 1355.886656][T23693]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1355.886677][T23693]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1355.886698][T23693]  genl_family_rcv_msg_doit+0xc7/0x300
[ 1355.886715][T23693]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1355.886730][T23693]  ? genl_get_cmd+0x3e7/0x760
[ 1355.886749][T23693]  ? __radix_tree_lookup+0x217/0x2b0
[ 1355.886770][T23693]  genl_rcv_msg+0x560/0x800
[ 1355.886787][T23693]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1355.886802][T23693]  ? __lock_acquire+0x5c0/0x1f40
[ 1355.886820][T23693]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 1355.886842][T23693]  netlink_rcv_skb+0x159/0x420
[ 1355.886856][T23693]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1355.886872][T23693]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1355.886892][T23693]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1355.886907][T23693]  genl_rcv+0x28/0x40
[ 1355.886921][T23693]  netlink_unicast+0x668/0x950
[ 1355.886936][T23693]  ? __pfx_netlink_unicast+0x10/0x10
[ 1355.886954][T23693]  netlink_sendmsg+0x9ac/0x10c0
[ 1355.886971][T23693]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1355.886988][T23693]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1355.887006][T23693]  ? __sys_sendto+0x492/0x4e0
[ 1355.887016][T23693]  __sys_sendto+0x492/0x4e0
[ 1355.887027][T23693]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1355.887041][T23693]  ? __pfx___sys_sendto+0x10/0x10
[ 1355.887057][T23693]  ? lock_acquire+0x1d1/0x380
[ 1355.887083][T23693]  __ia32_compat_sys_socketcall+0x59a/0x770
[ 1355.887096][T23693]  ? __fget_files+0x21f/0x3d0
[ 1355.887112][T23693]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[ 1355.887137][T23693]  ? fput+0x7c/0x100
[ 1355.887161][T23693]  do_int80_emulation+0x166/0x650
[ 1355.887175][T23693]  asm_int80_emulation+0x1a/0x20
[ 1355.887186][T23693] RIP: 0023:0xf71377ab
[ 1355.887196][T23693] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1355.887206][T23693] RSP: 002b:00000000f53f534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066
[ 1355.887218][T23693] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53f53f4
[ 1355.887225][T23693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1355.887231][T23693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1355.887237][T23693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1355.887243][T23693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1355.887258][T23693]  </TASK>
[ 1356.033336][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1356.033356][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1356.033368][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1356.033379][ T5884] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1356.590078][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1356.590138][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1357.061697][   T57] usb 11-1: new high-speed USB device number 38 using dummy_hcd
[ 1357.261866][   T57] usb 11-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1357.270611][   T57] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1357.270688][   T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1357.270703][   T57] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1357.270725][   T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1357.546956][T23708] cxacru 11-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1357.971394][ T5988] usb 11-1: USB disconnect, device number 38
[ 1358.434495][T23676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1358.547044][T23722] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5024'.
[ 1359.614293][T23742] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5031'.
[ 1359.707576][T23744] all (unregistering): Released all slaves
[ 1360.850983][T23743] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 1361.046704][T12740] net_ratelimit: 30 callbacks suppressed
[ 1361.046725][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1361.046746][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1361.046765][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1361.046781][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1361.774025][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1361.774047][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1361.774058][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1361.774069][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1362.064979][ T5988] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[ 1362.228432][ T5988] usb 13-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1362.229343][ T5988] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1362.229368][ T5988] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1362.229382][ T5988] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1362.229401][ T5988] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1362.236648][   T42] kauditd_printk_skb: 18 callbacks suppressed
[ 1362.236660][   T42] audit: type=1800 audit(1793512692.496:2974): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414360 res=0 errno=-22
[ 1362.289152][   T42] audit: type=1800 audit(1793512692.543:2975): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=414389 res=0 errno=-22
[ 1362.300659][   T42] audit: type=1800 audit(1793512692.552:2976): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=414367 res=0 errno=-22
[ 1362.312035][   T42] audit: type=1800 audit(1793512692.561:2977): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=414368 res=0 errno=-22
[ 1362.323172][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01
[ 1362.323189][T12740] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a
[ 1362.323348][   T42] audit: type=1800 audit(1793512692.570:2978): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=414369 res=0 errno=-22
[ 1362.355790][   T42] audit: type=1800 audit(1793512692.607:2979): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414409 res=0 errno=-22
[ 1362.455760][ T5988] cxacru 13-1:1.0: invalid response length to cm 0x90: 0
[ 1362.463577][T23783] cxacru 13-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1362.649019][   T42] audit: type=1800 audit(1793512692.866:2980): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1362.746227][T23788] FAULT_INJECTION: forcing a failure.
[ 1362.746227][T23788] name failslab, interval 1, probability 0, space 0, times 0
[ 1362.746261][T23788] CPU: 0 UID: 0 PID: 23788 Comm: syz.7.5044 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1362.746286][T23788] Tainted: [L]=SOFTLOCKUP
[ 1362.746295][T23788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1362.746304][T23788] Call Trace:
[ 1362.746313][T23788]  <TASK>
[ 1362.746320][T23788]  dump_stack_lvl+0x100/0x190
[ 1362.746370][T23788]  should_fail_ex.cold+0x5/0xa
[ 1362.746393][T23788]  ? __netlink_lookup+0x692/0x950
[ 1362.746417][T23788]  should_failslab+0xc2/0x120
[ 1362.746443][T23788]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1362.746469][T23788]  ? netlink_deliver_tap+0x103/0xb50
[ 1362.746491][T23788]  ? skb_clone+0x187/0x3f0
[ 1362.746518][T23788]  skb_clone+0x187/0x3f0
[ 1362.746542][T23788]  netlink_deliver_tap+0x82f/0xb50
[ 1362.746569][T23788]  netlink_unicast+0x708/0x950
[ 1362.746597][T23788]  ? __pfx_netlink_unicast+0x10/0x10
[ 1362.746624][T23788]  netlink_sendmsg+0x9ac/0x10c0
[ 1362.746653][T23788]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1362.746682][T23788]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1362.746710][T23788]  ? ____sys_sendmsg+0xa99/0xc30
[ 1362.746735][T23788]  ____sys_sendmsg+0xa99/0xc30
[ 1362.746759][T23788]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1362.746786][T23788]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1362.746824][T23788]  ___sys_sendmsg+0x190/0x1e0
[ 1362.746854][T23788]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1362.746895][T23788]  ? find_held_lock+0x2b/0x80
[ 1362.746935][T23788]  __sys_sendmsg+0x160/0x210
[ 1362.746958][T23788]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1362.746995][T23788]  __do_fast_syscall_32+0x14b/0x8c0
[ 1362.747014][T23788]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1362.747044][T23788]  do_fast_syscall_32+0x32/0x70
[ 1362.747065][T23788]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1362.747089][T23788] RIP: 0023:0xf73cefbc
[ 1362.747106][T23788] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1362.747123][T23788] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1362.747144][T23788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[ 1362.747156][T23788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1362.747166][T23788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1362.747177][T23788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1362.747188][T23788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1362.747211][T23788]  </TASK>
[ 1362.906704][T23792] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5046'.
[ 1362.952915][T23794] bridge_slave_0: left allmulticast mode
[ 1362.952932][T23794] bridge_slave_0: left promiscuous mode
[ 1362.953058][T23794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1362.956142][T23794] bridge_slave_1: left allmulticast mode
[ 1362.956156][T23794] bridge_slave_1: left promiscuous mode
[ 1362.956281][T23794] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1362.983183][T23794] team0: Port device team_slave_0 removed
[ 1362.989498][T23794] team0: Port device team_slave_1 removed
[ 1363.001723][   T42] audit: type=1800 audit(1793512693.198:2981): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=414527 res=0 errno=-22
[ 1363.010018][   T42] audit: type=1800 audit(1793512693.198:2982): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=414531 res=0 errno=-22
[ 1363.036453][T23794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5045'.
[ 1363.057880][T23794] FAULT_INJECTION: forcing a failure.
[ 1363.057880][T23794] name failslab, interval 1, probability 0, space 0, times 0
[ 1363.057912][T23794] CPU: 0 UID: 0 PID: 23794 Comm: syz.4.5045 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1363.057937][T23794] Tainted: [L]=SOFTLOCKUP
[ 1363.057944][T23794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1363.057956][T23794] Call Trace:
[ 1363.057962][T23794]  <TASK>
[ 1363.057969][T23794]  dump_stack_lvl+0x100/0x190
[ 1363.057999][T23794]  should_fail_ex.cold+0x5/0xa
[ 1363.058024][T23794]  should_failslab+0xc2/0x120
[ 1363.058049][T23794]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1363.058069][T23794]  ? tc_new_tfilter+0xf83/0x24e0
[ 1363.058093][T23794]  tc_new_tfilter+0xf83/0x24e0
[ 1363.058123][T23794]  ? kasan_quarantine_put+0x104/0x240
[ 1363.058146][T23794]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1363.058175][T23794]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1363.058194][T23794]  ? kfree_skbmem+0x19a/0x210
[ 1363.058220][T23794]  ? skb_release_data+0x69d/0x860
[ 1363.058245][T23794]  ? __lock_acquire+0x5c0/0x1f40
[ 1363.058283][T23794]  ? lock_acquire+0x1d1/0x380
[ 1363.058309][T23794]  ? rtnetlink_rcv_msg+0x1f6/0xe90
[ 1363.058333][T23794]  ? find_held_lock+0x2b/0x80
[ 1363.058355][T23794]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1363.058380][T23794]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1363.058402][T23794]  rtnetlink_rcv_msg+0x95e/0xe90
[ 1363.058427][T23794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1363.058462][T23794]  netlink_rcv_skb+0x159/0x420
[ 1363.058483][T23794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1363.058509][T23794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1363.058529][T23794]  ? __asan_memcpy+0x3c/0x60
[ 1363.058558][T23794]  ? netlink_deliver_tap+0x1ae/0xb50
[ 1363.058583][T23794]  netlink_unicast+0x668/0x950
[ 1363.058607][T23794]  ? __pfx_netlink_unicast+0x10/0x10
[ 1363.058636][T23794]  netlink_sendmsg+0x9ac/0x10c0
[ 1363.058662][T23794]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1363.058713][T23794]  ? apparmor_socket_sendmsg+0x165/0x280
[ 1363.058758][T23794]  ? ____sys_sendmsg+0xa99/0xc30
[ 1363.058799][T23794]  ____sys_sendmsg+0xa99/0xc30
[ 1363.058843][T23794]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1363.058884][T23794]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1363.058950][T23794]  ___sys_sendmsg+0x190/0x1e0
[ 1363.058992][T23794]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1363.059072][T23794]  ? find_held_lock+0x2b/0x80
[ 1363.059140][T23794]  __sys_sendmsg+0x160/0x210
[ 1363.059177][T23794]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1363.059234][T23794]  __do_fast_syscall_32+0x14b/0x8c0
[ 1363.059269][T23794]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1363.059321][T23794]  do_fast_syscall_32+0x32/0x70
[ 1363.059354][T23794]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1363.059394][T23794] RIP: 0023:0xf73fefbc
[ 1363.059417][T23794] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1363.059440][T23794] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[ 1363.059470][T23794] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001d80
[ 1363.059489][T23794] RDX: 0000000020040054 RSI: 0000000000000000 RDI: 0000000000000000
[ 1363.059505][T23794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1363.059524][T23794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1363.059540][T23794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1363.059584][T23794]  </TASK>
[ 1363.066741][T18545] usb 13-1: USB disconnect, device number 7
[ 1363.168552][ T5988] usb 12-1: new high-speed USB device number 38 using dummy_hcd
[ 1363.352422][ T5988] usb 12-1: Using ep0 maxpacket: 8
[ 1363.353049][ T5988] usb 12-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1363.354341][ T5988] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1363.354380][ T5988] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.357943][ T5988] usb 12-1: config 0 descriptor??
[ 1363.662377][T23808] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5049'.
[ 1363.664055][T18545] bond_slave_0: entered promiscuous mode
[ 1363.664184][T18545] bond_slave_1: entered promiscuous mode
[ 1363.692883][ T5988] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1363.799005][T23812] batman_adv: batadv0: Interface deactivated: syz_tun
[ 1363.836073][T23812] batman_adv: batadv0: Removing interface: syz_tun
[ 1363.843368][T23812] batman_adv: batadv0: Interface deactivated: dummy0
[ 1363.843382][T23812] batman_adv: batadv0: Removing interface: dummy0
[ 1363.847995][T23812] bridge_slave_0: left allmulticast mode
[ 1363.848009][T23812] bridge_slave_0: left promiscuous mode
[ 1363.848262][T23812] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1363.867249][T23812] bridge_slave_1: left allmulticast mode
[ 1363.867265][T23812] bridge_slave_1: left promiscuous mode
[ 1363.867452][T23812] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1363.988043][T23812] bond0: (slave bond_slave_0): Releasing backup interface
[ 1363.989197][T23812] bond_slave_0: left promiscuous mode
[ 1364.005559][T23812] bond0: (slave bond_slave_1): Releasing backup interface
[ 1364.008586][T23812] bond_slave_1: left promiscuous mode
[ 1364.025574][T23812] team0: Port device team_slave_0 removed
[ 1364.038914][T23812] team0: Port device team_slave_1 removed
[ 1364.039442][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1364.039453][T23812] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1364.161436][ T5744] usb 12-1: USB disconnect, device number 38
[ 1364.167515][T23812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5050'.
[ 1364.409928][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5053'.
[ 1364.601789][T23833] 9p: p9: multiple sources not supported
[ 1364.606094][T23833] FAULT_INJECTION: forcing a failure.
[ 1364.606094][T23833] name failslab, interval 1, probability 0, space 0, times 0
[ 1364.606124][T23833] CPU: 0 UID: 0 PID: 23833 Comm: syz.4.5054 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1364.606156][T23833] Tainted: [L]=SOFTLOCKUP
[ 1364.606164][T23833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1364.606173][T23833] Call Trace:
[ 1364.606180][T23833]  <TASK>
[ 1364.606188][T23833]  dump_stack_lvl+0x100/0x190
[ 1364.606218][T23833]  should_fail_ex.cold+0x5/0xa
[ 1364.606244][T23833]  should_failslab+0xc2/0x120
[ 1364.606271][T23833]  __kmalloc_noprof+0xfc/0x840
[ 1364.606292][T23833]  ? rcu_is_watching+0x13/0xc0
[ 1364.606316][T23833]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1364.606348][T23833]  tomoyo_realpath_from_path+0xb6/0x690
[ 1364.606383][T23833]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1364.606407][T23833]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1364.606448][T23833]  ? do_fast_syscall_32+0x32/0x70
[ 1364.606475][T23833]  ? hook_file_open+0x245/0x8e0
[ 1364.606515][T23833]  ? lock_acquire+0x1d1/0x380
[ 1364.606545][T23833]  ? lockref_get_not_dead+0x6a/0x80
[ 1364.606572][T23833]  tomoyo_file_open+0x6b/0x90
[ 1364.606595][T23833]  security_file_open+0xb5/0x1e0
[ 1364.606623][T23833]  do_dentry_open+0x552/0x1470
[ 1364.606652][T23833]  vfs_open_consume+0xcc/0x460
[ 1364.606673][T23833]  path_openat+0x1547/0x23f0
[ 1364.606704][T23833]  ? __pfx_path_openat+0x10/0x10
[ 1364.606737][T23833]  do_file_open+0x20e/0x430
[ 1364.606764][T23833]  ? __pfx_do_file_open+0x10/0x10
[ 1364.606807][T23833]  ? _raw_spin_unlock+0x28/0x50
[ 1364.606829][T23833]  ? alloc_fd+0x471/0x7a0
[ 1364.606862][T23833]  do_sys_openat2+0x163/0x1d0
[ 1364.606880][T23833]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1364.606901][T23833]  ? __do_sys_capset+0xfb/0x450
[ 1364.606932][T23833]  __ia32_compat_sys_openat+0x12d/0x210
[ 1364.606953][T23833]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 1364.606982][T23833]  __do_fast_syscall_32+0x14b/0x8c0
[ 1364.607005][T23833]  do_fast_syscall_32+0x32/0x70
[ 1364.607025][T23833]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1364.607047][T23833] RIP: 0023:0xf73fefbc
[ 1364.607062][T23833] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1364.607079][T23833] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[ 1364.607096][T23833] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000780
[ 1364.607108][T23833] RDX: 0000000000000000 RSI: 00000000000000a2 RDI: 0000000000000000
[ 1364.607118][T23833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1364.607130][T23833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1364.607145][T23833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1364.607169][T23833]  </TASK>
[ 1364.608216][T23833] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1364.781654][T23843] block2mtd: error: cannot open device /dev/ram0
[ 1365.364870][T23856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1365.375269][T23856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1365.408906][ T5744] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1365.517037][T18545] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[ 1365.544789][T23860] FAULT_INJECTION: forcing a failure.
[ 1365.544789][T23860] name failslab, interval 1, probability 0, space 0, times 0
[ 1365.544937][T23860] CPU: 2 UID: 0 PID: 23860 Comm: syz.6.5061 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1365.544954][T23860] Tainted: [L]=SOFTLOCKUP
[ 1365.544958][T23860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1365.544965][T23860] Call Trace:
[ 1365.544980][T23860]  <TASK>
[ 1365.544986][T23860]  dump_stack_lvl+0x100/0x190
[ 1365.545005][T23860]  should_fail_ex.cold+0x5/0xa
[ 1365.545033][T23860]  should_failslab+0xc2/0x120
[ 1365.545051][T23860]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[ 1365.545088][T23860]  ? key_alloc+0x423/0x1310
[ 1365.545107][T23860]  kmemdup_noprof+0x29/0x60
[ 1365.545125][T23860]  key_alloc+0x423/0x1310
[ 1365.545144][T23860]  ? __kmalloc_noprof+0x350/0x840
[ 1365.545158][T23860]  ? __pfx_key_alloc+0x10/0x10
[ 1365.545178][T23860]  keyring_alloc+0x44/0xc0
[ 1365.545197][T23860]  lookup_user_key+0xecc/0x13e0
[ 1365.545214][T23860]  ? __pfx_lookup_user_key+0x10/0x10
[ 1365.545231][T23860]  ? __might_fault+0xc5/0x140
[ 1365.545244][T23860]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1365.545262][T23860]  ? _copy_from_user+0x59/0xd0
[ 1365.545278][T23860]  ? memdup_user+0x82/0xe0
[ 1365.545290][T23860]  __do_sys_add_key+0x2a6/0x460
[ 1365.545303][T23860]  ? __pfx___do_sys_add_key+0x10/0x10
[ 1365.545320][T23860]  __do_fast_syscall_32+0x14b/0x8c0
[ 1365.545331][T23860]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1365.545350][T23860]  do_fast_syscall_32+0x32/0x70
[ 1365.545362][T23860]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1365.545376][T23860] RIP: 0023:0xf7f45fbc
[ 1365.545386][T23860] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1365.545396][T23860] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 000000000000011e
[ 1365.545407][T23860] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000400
[ 1365.545414][T23860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffe
[ 1365.545420][T23860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1365.545427][T23860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1365.545433][T23860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1365.545453][T23860]  </TASK>
[ 1365.630889][ T5744] usb 9-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[ 1365.663193][ T5744] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1365.663323][ T5744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.689541][ T5876] usb 12-1: new high-speed USB device number 39 using dummy_hcd
[ 1365.714629][T18545] usb 13-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1365.722216][ T5744] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[ 1365.722644][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81
[ 1365.722773][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[ 1365.748145][T18545] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1365.748263][T18545] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1365.748325][T18545] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1365.748442][T18545] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.863515][ T5876] usb 12-1: Using ep0 maxpacket: 32
[ 1365.874228][ T5876] usb 12-1: unable to get BOS descriptor or descriptor too short
[ 1365.874343][ T5876] usb 12-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[ 1365.915298][ T5876] usb 12-1: string descriptor 0 read error: -22
[ 1365.915678][ T5876] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.119533][ T5876] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[ 1366.119554][ T5876] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1366.119563][ T5876] dvb-usb: bulk message failed: -22 (2/0)
[ 1366.123246][T23862] cxacru 13-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1366.140555][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1366.144462][ T5876] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[ 1366.147738][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[ 1366.147777][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[ 1366.156920][ T5876] usb 12-1: media controller created
[ 1366.156936][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.156943][ T5876] dw2102: i2c transfer failed.
[ 1366.156950][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.157005][ T5876] dw2102: i2c transfer failed.
[ 1366.157013][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.157020][ T5876] dw2102: i2c transfer failed.
[ 1366.157025][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.157032][ T5876] dw2102: i2c transfer failed.
[ 1366.157037][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.157043][ T5876] dw2102: i2c transfer failed.
[ 1366.157049][ T5876] dvb-usb: bulk message failed: -22 (6/0)
[ 1366.157055][ T5876] dw2102: i2c transfer failed.
[ 1366.157080][ T5876] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1366.158831][ T5744] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1366.213146][T23856] dvb-usb: bulk message failed: -22 (5/0)
[ 1366.213159][T23856] dw2102: i2c transfer failed.
[ 1366.217927][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1366.256531][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[ 1366.256661][ T5744] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[ 1366.304549][ T5744] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1366.446672][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[ 1366.446695][ T5876] dw2102: command 0x0e transfer failed.
[ 1366.492328][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[ 1366.492341][ T5876] dw2102: command 0x0e transfer failed.
[ 1366.625496][T23868] FAULT_INJECTION: forcing a failure.
[ 1366.625496][T23868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1366.625590][T23868] CPU: 2 UID: 0 PID: 23868 Comm: syz.6.5063 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1366.625615][T23868] Tainted: [L]=SOFTLOCKUP
[ 1366.625621][T23868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1366.625632][T23868] Call Trace:
[ 1366.625639][T23868]  <TASK>
[ 1366.625646][T23868]  dump_stack_lvl+0x100/0x190
[ 1366.625675][T23868]  should_fail_ex.cold+0x5/0xa
[ 1366.625718][T23868]  _copy_from_user+0x2e/0xd0
[ 1366.625745][T23868]  kstrtouint_from_user+0xd6/0x1d0
[ 1366.625765][T23868]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1366.625789][T23868]  ? lock_acquire+0x1d1/0x380
[ 1366.625821][T23868]  proc_fail_nth_write+0x83/0x220
[ 1366.625848][T23868]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1366.625878][T23868]  vfs_write+0x2aa/0x1050
[ 1366.625902][T23868]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1366.625925][T23868]  ? lock_acquire+0x1d1/0x380
[ 1366.625949][T23868]  ? __fget_files+0x34/0x3d0
[ 1366.625972][T23868]  ? __pfx_vfs_write+0x10/0x10
[ 1366.625991][T23868]  ? find_held_lock+0x2b/0x80
[ 1366.626013][T23868]  ? __fget_files+0x215/0x3d0
[ 1366.626039][T23868]  ? __fget_files+0x21f/0x3d0
[ 1366.626069][T23868]  ksys_write+0x12a/0x250
[ 1366.626090][T23868]  ? __pfx_ksys_write+0x10/0x10
[ 1366.626118][T23868]  do_int80_emulation+0x166/0x650
[ 1366.626140][T23868]  asm_int80_emulation+0x1a/0x20
[ 1366.626157][T23868] RIP: 0023:0xf71377ab
[ 1366.626171][T23868] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 1366.626187][T23868] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1366.626205][T23868] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f65d0
[ 1366.626216][T23868] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1366.626227][T23868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1366.626237][T23868] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1366.626247][T23868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1366.626270][T23868]  </TASK>
[ 1366.691289][T23064] usb 13-1: USB disconnect, device number 8
[ 1366.758537][T23870] fuse: Unknown parameter '0x0000000000000003'
[ 1366.826695][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[ 1366.826709][ T5876] dw2102: command 0x0e transfer failed.
[ 1366.826714][ T5876] dvb-usb: bulk message failed: -22 (3/0)
[ 1366.826721][ T5876] dw2102: command 0x0e transfer failed.
[ 1366.826724][ T5876] dvb-usb: bulk message failed: -22 (1/0)
[ 1366.826731][ T5876] dw2102: command 0x51 transfer failed.
[ 1367.024921][ T5876] DVB: Unable to find symbol ds3000_attach()
[ 1367.024932][ T5876] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[ 1367.124122][ T5876] rc_core: IR keymap rc-su3000 not found
[ 1367.124135][ T5876] Registered IR keymap rc-empty
[ 1367.125048][ T5876] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0
[ 1367.140376][ T5876] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input125
[ 1367.166150][ T5876] dvb-usb: schedule remote query interval to 150 msecs.
[ 1367.166232][ T5876] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1367.166244][ T5876] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[ 1367.184557][ T5876] usb 12-1: USB disconnect, device number 39
[ 1367.329137][ T5876] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[ 1367.876338][T23890] fuse: Unknown parameter '0x0000000000000003'
[ 1368.002361][   T42] kauditd_printk_skb: 94 callbacks suppressed
[ 1368.002374][   T42] audit: type=1800 audit(1793512697.817:3076): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5072" name="block2mtd" dev="sysfs" ino=62760 res=0 errno=-13
[ 1368.021426][T23893] block2mtd: illegal erase size
[ 1368.218167][T23893] ubi0: attaching mtd1
[ 1368.226474][T23893] ubi0: scanning is finished
[ 1368.226491][T23893] ubi0: empty MTD device detected
[ 1368.296207][   T42] audit: type=1800 audit(1793512698.094:3077): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22364 res=0 errno=-22
[ 1368.397546][T23895] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5072'.
[ 1368.512578][   T42] audit: type=1800 audit(1793512698.288:3078): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415465 res=0 errno=-22
[ 1368.610431][T23893] ubi0: attached mtd1 (name "block2mtd: /dev/ram0", size 4 MiB)
[ 1368.610448][T23893] ubi0: PEB size: 65536 bytes (64 KiB), LEB size: 65408 bytes
[ 1368.610458][T23893] ubi0: min./max. I/O unit sizes: 1/4096, sub-page size 1
[ 1368.610467][T23893] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1368.610477][T23893] ubi0: good PEBs: 64, bad PEBs: 0, corrupted PEBs: 0
[ 1368.610485][T23893] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[ 1368.610494][T23893] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1802679211
[ 1368.610506][T23893] ubi0: available PEBs: 60, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1368.612006][T23900] ubi0: background thread "ubi_bgt0d" started, PID 23900
[ 1368.898908][T23901] FAULT_INJECTION: forcing a failure.
[ 1368.898908][T23901] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1368.898961][T23901] CPU: 2 UID: 0 PID: 23901 Comm: syz.7.5073 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1368.898988][T23901] Tainted: [L]=SOFTLOCKUP
[ 1368.898996][T23901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1368.899007][T23901] Call Trace:
[ 1368.899014][T23901]  <TASK>
[ 1368.899022][T23901]  dump_stack_lvl+0x100/0x190
[ 1368.899053][T23901]  should_fail_ex.cold+0x5/0xa
[ 1368.899076][T23901]  ? prepare_alloc_pages+0x16d/0x5b0
[ 1368.899112][T23901]  should_fail_alloc_page+0xeb/0x140
[ 1368.899141][T23901]  prepare_alloc_pages+0x1f0/0x5b0
[ 1368.899174][T23901]  __alloc_frozen_pages_noprof+0x1ee/0x3190
[ 1368.899205][T23901]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1368.899228][T23901]  ? process_measurement+0x10d0/0x2350
[ 1368.899259][T23901]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1368.899293][T23901]  ? __lock_acquire+0x5c0/0x1f40
[ 1368.899335][T23901]  ? lock_acquire+0x1d1/0x380
[ 1368.899363][T23901]  ? page_table_check_set+0x1aa/0x630
[ 1368.899392][T23901]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1368.899415][T23901]  ? policy_nodemask+0xed/0x4f0
[ 1368.899446][T23901]  alloc_pages_mpol+0x201/0x560
[ 1368.899476][T23901]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1368.899505][T23901]  ? __page_table_check_ptes_set+0x1d5/0x530
[ 1368.899539][T23901]  folio_alloc_mpol_noprof+0x36/0x260
[ 1368.899562][T23901]  vma_alloc_folio_noprof+0xed/0x1d0
[ 1368.899582][T23901]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1368.899604][T23901]  ? rcu_read_unlock+0x2d/0xb0
[ 1368.899628][T23901]  do_anonymous_page+0xac9/0x2050
[ 1368.899665][T23901]  ? __pfx_do_anonymous_page+0x10/0x10
[ 1368.899693][T23901]  ? rcu_read_unlock+0x2d/0xb0
[ 1368.899710][T23901]  ? rcu_read_unlock+0x2d/0xb0
[ 1368.899734][T23901]  __handle_mm_fault+0x1ff3/0x2f60
[ 1368.899768][T23901]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1368.899796][T23901]  ? pte_offset_map_lock+0x174/0x320
[ 1368.899820][T23901]  ? find_held_lock+0x2b/0x80
[ 1368.899843][T23901]  ? find_held_lock+0x2b/0x80
[ 1368.899864][T23901]  ? follow_page_pte+0x536/0x1050
[ 1368.899903][T23901]  handle_mm_fault+0x363/0xa20
[ 1368.899938][T23901]  __get_user_pages+0x8a9/0x2c20
[ 1368.899971][T23901]  ? __pfx___get_user_pages+0x10/0x10
[ 1368.900003][T23901]  faultin_page_range+0x1f1/0x9e0
[ 1368.900027][T23901]  ? lock_acquire+0x1d1/0x380
[ 1368.900058][T23901]  madvise_do_behavior+0x354/0x510
[ 1368.900086][T23901]  ? __pfx_madvise_do_behavior+0x10/0x10
[ 1368.900118][T23901]  ? down_read+0x136/0x4c0
[ 1368.900146][T23901]  do_madvise+0x238/0x290
[ 1368.900173][T23901]  ? __pfx_do_madvise+0x10/0x10
[ 1368.900214][T23901]  ? __might_fault+0xc5/0x140
[ 1368.900230][T23901]  ? __might_fault+0xc5/0x140
[ 1368.900252][T23901]  __ia32_sys_madvise+0xa7/0x110
[ 1368.900281][T23901]  __do_fast_syscall_32+0x14b/0x8c0
[ 1368.900301][T23901]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1368.900331][T23901]  do_fast_syscall_32+0x32/0x70
[ 1368.900351][T23901]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1368.900373][T23901] RIP: 0023:0xf73cefbc
[ 1368.900389][T23901] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1368.900406][T23901] RSP: 002b:00000000f519350c EFLAGS: 00000292 ORIG_RAX: 00000000000000db
[ 1368.900423][T23901] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000
[ 1368.900434][T23901] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000
[ 1368.900444][T23901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1368.900455][T23901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1368.900464][T23901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1368.900488][T23901]  </TASK>
[ 1369.095226][T23064] usb 9-1: USB disconnect, device number 53
[ 1369.105891][T23064] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1369.122065][T23064] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1369.122356][T23064] keyspan 9-1:1.0: device disconnected
[ 1369.635929][T23906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5075'.
[ 1370.740076][   T42] audit: type=1800 audit(1793512700.348:3079): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415620 res=0 errno=-22
[ 1370.985093][T23064] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1371.439064][T23064] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1371.440057][T23064] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.440084][T23064] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1371.440099][T23064] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1371.440119][T23064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.443507][   T42] audit: type=1800 audit(1793512701.004:3080): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415637 res=0 errno=-22
[ 1371.443585][   T42] audit: type=1800 audit(1793512701.004:3081): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=415666 res=0 errno=-22
[ 1371.444592][   T42] audit: type=1800 audit(1793512701.004:3082): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=415644 res=0 errno=-22
[ 1371.445093][   T42] audit: type=1800 audit(1793512701.004:3083): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=415645 res=0 errno=-22
[ 1371.448479][   T42] audit: type=1800 audit(1793512701.004:3084): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=415646 res=0 errno=-22
[ 1371.516902][   T42] audit: type=1800 audit(1793512701.068:3085): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=415686 res=0 errno=-22
[ 1371.675443][T23926] block2mtd: error: cannot open device /dev/ram0
[ 1371.694536][T23927] cxacru 9-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1371.716635][T23926] ubi: mtd1 is already attached to ubi0
[ 1371.942894][T23931] warn_alloc: 1 callbacks suppressed
[ 1371.943477][T23931] syz.7.5080: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1371.943516][T23931] CPU: 2 UID: 0 PID: 23931 Comm: syz.7.5080 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1371.943531][T23931] Tainted: [L]=SOFTLOCKUP
[ 1371.943536][T23931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1371.943543][T23931] Call Trace:
[ 1371.943547][T23931]  <TASK>
[ 1371.943552][T23931]  dump_stack_lvl+0x100/0x190
[ 1371.943571][T23931]  warn_alloc.cold+0x9e/0xb2
[ 1371.943585][T23931]  ? __pfx_warn_alloc+0x10/0x10
[ 1371.943615][T23931]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1371.943628][T23931]  ? __pfx_get_page_from_freelist+0x10/0x10
[ 1371.943646][T23931]  __alloc_frozen_pages_noprof+0x17ab/0x3190
[ 1371.943665][T23931]  ? kernel_text_address+0x90/0x100
[ 1371.943683][T23931]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1371.943700][T23931]  ? stack_trace_save+0x8e/0xc0
[ 1371.943724][T23931]  ? do_raw_write_lock+0x11e/0x260
[ 1371.943741][T23931]  ? kasan_save_track+0x14/0x30
[ 1371.943756][T23931]  ? __kasan_kmalloc+0xaa/0xb0
[ 1371.943769][T23931]  ? __kmalloc_noprof+0x32f/0x840
[ 1371.943782][T23931]  ? comedi_isadma_alloc+0xc6/0x620
[ 1371.943793][T23931]  ? pcl816_attach+0x909/0xb30
[ 1371.943815][T23931]  alloc_pages_node_noprof+0x93/0x200
[ 1371.943828][T23931]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[ 1371.943846][T23931]  alloc_pages_exact_nid_noprof+0x32/0xe0
[ 1371.943860][T23931]  __dma_direct_alloc_pages.isra.0+0x34e/0x510
[ 1371.943876][T23931]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[ 1371.943896][T23931]  dma_direct_alloc+0x3d1/0x8a0
[ 1371.943913][T23931]  dma_alloc_attrs+0x1b9/0x3e0
[ 1371.943929][T23931]  ? __pfx_dma_alloc_attrs+0x10/0x10
[ 1371.943943][T23931]  ? __kmalloc_noprof+0x350/0x840
[ 1371.943956][T23931]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1371.943972][T23931]  ? dma_direct_supported+0xca/0x220
[ 1371.943991][T23931]  comedi_isadma_alloc+0x331/0x620
[ 1371.944004][T23931]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[ 1371.944016][T23931]  ? request_threaded_irq+0x27b/0x3e0
[ 1371.944037][T23931]  pcl816_attach+0x909/0xb30
[ 1371.944054][T23931]  comedi_device_attach+0x40e/0x6b0
[ 1371.944073][T23931]  do_devconfig_ioctl+0x1b3/0x6d0
[ 1371.944090][T23931]  ? comedi_unlocked_ioctl+0x180/0x3310
[ 1371.944104][T23931]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1371.944129][T23931]  ? tomoyo_path_number_perm+0x46d/0x580
[ 1371.944145][T23931]  ? kasan_save_stack+0x3f/0x50
[ 1371.944159][T23931]  ? kasan_save_stack+0x30/0x50
[ 1371.944172][T23931]  ? kasan_save_track+0x14/0x30
[ 1371.944186][T23931]  ? kasan_save_free_info+0x3b/0x70
[ 1371.944200][T23931]  comedi_unlocked_ioctl+0x860/0x3310
[ 1371.944217][T23931]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1371.944241][T23931]  ? kasan_quarantine_put+0x104/0x240
[ 1371.944255][T23931]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1371.944273][T23931]  ? find_held_lock+0x2b/0x80
[ 1371.944288][T23931]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1371.944303][T23931]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1371.944321][T23931]  ? tomoyo_path_number_perm+0x188/0x580
[ 1371.944340][T23931]  comedi_compat_ioctl+0x438/0xe20
[ 1371.944354][T23931]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1371.944367][T23931]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1371.944380][T23931]  ? do_vfs_ioctl+0x226/0x13e0
[ 1371.944395][T23931]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1371.944411][T23931]  ? __fget_files+0x34/0x3d0
[ 1371.944427][T23931]  ? find_held_lock+0x2b/0x80
[ 1371.944440][T23931]  ? __fget_files+0x215/0x3d0
[ 1371.944455][T23931]  ? hook_file_ioctl_common+0x140/0x440
[ 1371.944475][T23931]  ? __fget_files+0x21f/0x3d0
[ 1371.944493][T23931]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1371.944506][T23931]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 1371.944522][T23931]  __do_fast_syscall_32+0x14b/0x8c0
[ 1371.944533][T23931]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1371.944552][T23931]  do_fast_syscall_32+0x32/0x70
[ 1371.944564][T23931]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1371.944579][T23931] RIP: 0023:0xf73cefbc
[ 1371.944589][T23931] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1371.944600][T23931] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 1371.944611][T23931] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400
[ 1371.944618][T23931] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000
[ 1371.944624][T23931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1371.944631][T23931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1371.944637][T23931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1371.944652][T23931]  </TASK>
[ 1372.033721][T23931] Mem-Info:
[ 1372.033733][T23931] active_anon:770 inactive_anon:2154 isolated_anon:16
[ 1372.033733][T23931]  active_file:6887 inactive_file:9531 isolated_file:0
[ 1372.033733][T23931]  unevictable:1001 dirty:186 writeback:0
[ 1372.033733][T23931]  slab_reclaimable:8204 slab_unreclaimable:73635
[ 1372.033733][T23931]  mapped:23148 shmem:1011 pagetables:1989
[ 1372.033733][T23931]  sec_pagetables:373 bounce:0
[ 1372.033733][T23931]  kernel_misc_reclaimable:0
[ 1372.033733][T23931]  free:23143 free_pcp:8 free_cma:0
[ 1372.033776][T23931] Node 0 active_anon:12kB inactive_anon:104kB active_file:900kB inactive_file:708kB unevictable:108kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:4kB writeback:0kB shmem:112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1720kB sec_pagetables:1236kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1372.033818][T23931] Node 0 DMA free:2640kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB
[ 1372.034035][T23931] lowmem_reserve[]: 0 256 256 256 256
[ 1372.034058][T23931] Node 0 DMA: 102*4kB (UM) 19*8kB (UM) 8*16kB (UM) 11*32kB (UM) 11*64kB (UM) 3*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2640kB
[ 1372.034135][T23931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1372.034144][T23931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1372.034153][T23931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1372.034212][T23931] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1372.034223][T23931] 18249 total pagecache pages
[ 1372.034227][T23931] 807 pages in swap cache
[ 1372.034231][T23931] Free swap  = 77680kB
[ 1372.034235][T23931] Total swap = 124996kB
[ 1372.034240][T23931] 524155 pages RAM
[ 1372.034244][T23931] 0 pages HighMem/MovableOnly
[ 1372.034248][T23931] 217486 pages reserved
[ 1372.034252][T23931] 0 pages cma reserved
[ 1372.467653][ T5876] usb 9-1: USB disconnect, device number 54
[ 1373.344074][T23064] usb 12-1: new high-speed USB device number 40 using dummy_hcd
[ 1373.420661][   T42] kauditd_printk_skb: 101 callbacks suppressed
[ 1373.420675][   T42] audit: type=1326 audit(1793512702.833:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.506279][T23064] usb 12-1: Using ep0 maxpacket: 16
[ 1373.508270][   T42] audit: type=1326 audit(1793512702.907:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.508493][   T42] audit: type=1326 audit(1793512702.907:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.509899][T23064] usb 12-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40
[ 1373.510437][   T42] audit: type=1326 audit(1793512702.907:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.511018][   T42] audit: type=1326 audit(1793512702.907:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.512766][   T42] audit: type=1326 audit(1793512702.907:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.513105][   T42] audit: type=1326 audit(1793512702.907:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.513752][T23064] usb 12-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1373.513766][T23064] usb 12-1: config 1 has no interface number 0
[ 1373.513820][T23064] usb 12-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1373.514201][   T42] audit: type=1326 audit(1793512702.907:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.514789][   T42] audit: type=1326 audit(1793512702.907:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.515998][   T42] audit: type=1326 audit(1793512702.907:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23938 comm="syz.7.5083" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000
[ 1373.520345][T23064] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.520359][T23064] usb 12-1: Product: syz
[ 1373.520366][T23064] usb 12-1: Manufacturer: syz
[ 1373.520374][T23064] usb 12-1: SerialNumber: syz
[ 1374.117915][T23957] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2084.0), cmd(9)
[ 1374.555741][T23064] usb 12-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1374.703813][T23064] usb 12-1: USB disconnect, device number 40
[ 1374.913707][T22745] udevd[22745]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1375.824521][ T5876] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[ 1376.052366][ T5876] usb 13-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1376.110161][ T5876] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1376.110677][ T5876] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1376.110693][ T5876] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1376.110718][ T5876] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1376.307007][T23984] block2mtd: illegal erase size
[ 1376.373218][T23984] ubi: mtd1 is already attached to ubi0
[ 1376.445838][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5094'.
[ 1376.548398][T23992] cxacru 13-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1376.983728][ T5876] usb 13-1: USB disconnect, device number 9
[ 1377.165441][T24001] 
[ 1377.166531][T24001] ======================================================
[ 1377.169405][T24001] WARNING: possible circular locking dependency detected
[ 1377.172325][T24001] syzkaller #0 Tainted: G             L      
[ 1377.174842][T24001] ------------------------------------------------------
[ 1377.177666][T24001] syz.4.5098/24001 is trying to acquire lock:
[ 1377.180291][T24001] ffffffff91173fe0 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210
[ 1377.184020][T24001] 
[ 1377.184020][T24001] but task is already holding lock:
[ 1377.187098][T24001] ffff8880234b6758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[ 1377.190647][T24001] 
[ 1377.190647][T24001] which lock already depends on the new lock.
[ 1377.190647][T24001] 
[ 1377.194782][T24001] 
[ 1377.194782][T24001] the existing dependency chain (in reverse order) is:
[ 1377.198298][T24001] 
[ 1377.198298][T24001] -> #4 (&p->lock){+.+.}-{4:4}:
[ 1377.201267][T24001]        lock_acquire+0x1d1/0x380
[ 1377.203356][T24001]        __mutex_lock+0x19f/0x1c10
[ 1377.205544][T24001]        seq_read_iter+0xe1/0x1270
[ 1377.207733][T24001]        kernfs_fop_read_iter+0x46c/0x610
[ 1377.210179][T24001]        __kernel_read+0x397/0xad0
[ 1377.212310][T24001]        integrity_kernel_read+0x7e/0xb0
[ 1377.214709][T24001]        ima_calc_file_hash_tfm+0x25e/0x350
[ 1377.217214][T24001]        ima_calc_file_hash+0x1e3/0x380
[ 1377.219033][T24001]        ima_collect_measurement+0x952/0xb30
[ 1377.221585][T24001]        process_measurement+0xdfe/0x2350
[ 1377.223993][T24001]        ima_file_check+0xc8/0x120
[ 1377.226200][T24001]        security_file_post_open+0xc4/0x210
[ 1377.228628][T24001]        path_openat+0x5d0/0x23f0
[ 1377.230803][T24001]        do_file_open+0x20e/0x430
[ 1377.232960][T24001]        do_sys_openat2+0x163/0x1d0
[ 1377.235220][T24001]        __x64_sys_openat+0x12d/0x210
[ 1377.237544][T24001]        do_syscall_64+0x121/0x770
[ 1377.239735][T24001]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.241913][T24001] 
[ 1377.241913][T24001] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}:
[ 1377.245513][T24001]        lock_acquire+0x1d1/0x380
[ 1377.247250][T24001]        __mutex_lock+0x19f/0x1c10
[ 1377.249381][T24001]        process_measurement+0x5ab/0x2350
[ 1377.251792][T24001]        ima_file_check+0xc8/0x120
[ 1377.253730][T24001]        security_file_post_open+0xc4/0x210
[ 1377.255956][T24001]        path_openat+0x5d0/0x23f0
[ 1377.258126][T24001]        do_file_open+0x20e/0x430
[ 1377.260088][T24001]        file_open_name+0x1c3/0x3e0
[ 1377.261749][T24001]        filp_open+0x2e/0x50
[ 1377.263220][T24001]        kernel_read_file_from_path_initns+0xec/0x240
[ 1377.265952][T24001]        _request_firmware+0x6f1/0x1410
[ 1377.268295][T24001]        request_firmware+0x35/0x50
[ 1377.270539][T24001]        reg_reload_regdb+0x87/0x540
[ 1377.272785][T24001]        genl_family_rcv_msg_doit+0x214/0x300
[ 1377.275247][T24001]        genl_rcv_msg+0x560/0x800
[ 1377.277319][T24001]        netlink_rcv_skb+0x159/0x420
[ 1377.279406][T24001]        genl_rcv+0x28/0x40
[ 1377.281353][T24001]        netlink_unicast+0x668/0x950
[ 1377.283598][T24001]        netlink_sendmsg+0x9ac/0x10c0
[ 1377.285887][T24001]        ____sys_sendmsg+0xa99/0xc30
[ 1377.288139][T24001]        ___sys_sendmsg+0x190/0x1e0
[ 1377.290371][T24001]        __sys_sendmsg+0x160/0x210
[ 1377.292138][T24001]        __do_fast_syscall_32+0x14b/0x8c0
[ 1377.293937][T24001]        do_fast_syscall_32+0x32/0x70
[ 1377.295683][T24001]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1377.298552][T24001] 
[ 1377.298552][T24001] -> #2 (cb_lock){++++}-{4:4}:
[ 1377.300907][T24001]        lock_acquire+0x1d1/0x380
[ 1377.303074][T24001]        down_read+0x94/0x4c0
[ 1377.305126][T24001]        genl_release+0x7e/0x1d0
[ 1377.307220][T24001]        netlink_release+0x104e/0x1fc0
[ 1377.309466][T24001]        __sock_release+0xb3/0x260
[ 1377.311594][T24001]        sock_close+0x1c/0x30
[ 1377.313594][T24001]        __fput+0x3fb/0xb50
[ 1377.315545][T24001]        fput_close_sync+0x118/0x250
[ 1377.317820][T24001]        filp_close_sync+0x75/0xa0
[ 1377.319991][T24001]        __x64_sys_close+0x81/0x110
[ 1377.322227][T24001]        do_syscall_64+0x121/0x770
[ 1377.324053][T24001]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1377.326756][T24001] 
[ 1377.326756][T24001] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}:
[ 1377.330289][T24001]        lock_acquire+0x1d1/0x380
[ 1377.332358][T24001]        down_write+0x86/0x1f0
[ 1377.334373][T24001]        __sock_release+0x86/0x260
[ 1377.336521][T24001]        sock_close+0x1c/0x30
[ 1377.338572][T24001]        __fput+0x3fb/0xb50
[ 1377.340525][T24001]        __fput_sync+0xd7/0x100
[ 1377.342624][T24001]        nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600
[ 1377.345349][T24001]        nvme_tcp_configure_admin_queue+0x26/0x530
[ 1377.348066][T24001]        nvme_tcp_setup_ctrl+0xa4/0xa20
[ 1377.350443][T24001]        nvme_tcp_create_ctrl+0xacf/0x1080
[ 1377.352710][T24001]        nvmf_dev_write+0x4ee/0xb60
[ 1377.354424][T24001]        vfs_write+0x2aa/0x1050
[ 1377.356473][T24001]        ksys_write+0x12a/0x250
[ 1377.358576][T24001]        __do_fast_syscall_32+0x14b/0x8c0
[ 1377.360993][T24001]        do_fast_syscall_32+0x32/0x70
[ 1377.362732][T24001]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1377.364888][T24001] 
[ 1377.364888][T24001] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}:
[ 1377.367271][T24001]        check_prev_add+0xeb/0xe60
[ 1377.368884][T24001]        __lock_acquire+0x1528/0x1f40
[ 1377.370584][T24001]        lock_acquire+0x1d1/0x380
[ 1377.372178][T24001]        __mutex_lock+0x19f/0x1c10
[ 1377.373793][T24001]        nvmf_dev_show+0x26/0x210
[ 1377.375384][T24001]        seq_read_iter+0x32f/0x1270
[ 1377.377039][T24001]        seq_read+0x344/0x4d0
[ 1377.378527][T24001]        vfs_read+0x1e4/0xb40
[ 1377.380011][T24001]        ksys_read+0x12a/0x250
[ 1377.381528][T24001]        __do_fast_syscall_32+0x14b/0x8c0
[ 1377.383315][T24001]        do_fast_syscall_32+0x32/0x70
[ 1377.385020][T24001]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1377.387147][T24001] 
[ 1377.387147][T24001] other info that might help us debug this:
[ 1377.387147][T24001] 
[ 1377.390286][T24001] Chain exists of:
[ 1377.390286][T24001]   nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock
[ 1377.390286][T24001] 
[ 1377.394351][T24001]  Possible unsafe locking scenario:
[ 1377.394351][T24001] 
[ 1377.396677][T24001]        CPU0                    CPU1
[ 1377.398365][T24001]        ----                    ----
[ 1377.400039][T24001]   lock(&p->lock);
[ 1377.401261][T24001]                                lock(&ima_iint_mutex_key[depth]);
[ 1377.403715][T24001]                                lock(&p->lock);
[ 1377.405700][T24001]   lock(nvmf_dev_mutex);
[ 1377.407064][T24001] 
[ 1377.407064][T24001]  *** DEADLOCK ***
[ 1377.407064][T24001] 
[ 1377.409569][T24001] locks held by syz.4.5098/24001: 1, last CPU#0:
[ 1377.411542][T24001]  #0: ffff8880234b6758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270
[ 1377.414316][T24001] 
[ 1377.414316][T24001] stack backtrace:
[ 1377.416176][T24001] CPU: 0 UID: 0 PID: 24001 Comm: syz.4.5098 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1377.419568][T24001] Tainted: [L]=SOFTLOCKUP
[ 1377.420928][T24001] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1377.424060][T24001] Call Trace:
[ 1377.425130][T24001]  <TASK>
[ 1377.426083][T24001]  dump_stack_lvl+0x100/0x190
[ 1377.427570][T24001]  print_circular_bug.cold+0x178/0x1be
[ 1377.429286][T24001]  check_noncircular+0x146/0x160
[ 1377.430843][T24001]  check_prev_add+0xeb/0xe60
[ 1377.432301][T24001]  __lock_acquire+0x1528/0x1f40
[ 1377.433842][T24001]  ? seq_read+0x344/0x4d0
[ 1377.435201][T24001]  ? vfs_read+0x1e4/0xb40
[ 1377.436571][T24001]  lock_acquire+0x1d1/0x380
[ 1377.438012][T24001]  ? nvmf_dev_show+0x26/0x210
[ 1377.439457][T24001]  ? __pfx___might_resched+0x10/0x10
[ 1377.441078][T24001]  __mutex_lock+0x19f/0x1c10
[ 1377.442546][T24001]  ? nvmf_dev_show+0x26/0x210
[ 1377.444019][T24001]  ? nvmf_dev_show+0x26/0x210
[ 1377.445493][T24001]  ? __pfx___mutex_lock+0x10/0x10
[ 1377.447068][T24001]  ? __kasan_kmalloc+0xaa/0xb0
[ 1377.448586][T24001]  ? __kvmalloc_node_noprof+0x377/0x9b0
[ 1377.450314][T24001]  ? aa_file_perm+0x791/0x14d0
[ 1377.451816][T24001]  ? nvmf_dev_show+0x26/0x210
[ 1377.453315][T24001]  nvmf_dev_show+0x26/0x210
[ 1377.454767][T24001]  seq_read_iter+0x32f/0x1270
[ 1377.456262][T24001]  ? __pfx_try_to_wake_up+0x10/0x10
[ 1377.457924][T24001]  seq_read+0x344/0x4d0
[ 1377.459252][T24001]  ? __pfx_seq_read+0x10/0x10
[ 1377.460749][T24001]  ? apparmor_file_permission+0x1f9/0x4d0
[ 1377.462560][T24001]  ? bpf_lsm_file_permission+0x9/0x10
[ 1377.464268][T24001]  ? security_file_permission+0x76/0x210
[ 1377.465992][T24001]  ? rw_verify_area+0xce/0x6d0
[ 1377.467506][T24001]  ? __pfx_seq_read+0x10/0x10
[ 1377.468993][T24001]  vfs_read+0x1e4/0xb40
[ 1377.470329][T24001]  ? lock_acquire+0x1d1/0x380
[ 1377.471819][T24001]  ? __fget_files+0x34/0x3d0
[ 1377.473288][T24001]  ? __pfx_vfs_read+0x10/0x10
[ 1377.474788][T24001]  ? find_held_lock+0x2b/0x80
[ 1377.476273][T24001]  ? __fget_files+0x215/0x3d0
[ 1377.477773][T24001]  ? __fget_files+0x215/0x3d0
[ 1377.479263][T24001]  ? __fget_files+0x21f/0x3d0
[ 1377.480746][T24001]  ksys_read+0x12a/0x250
[ 1377.482041][T24001]  ? __pfx_ksys_read+0x10/0x10
[ 1377.483509][T24001]  __do_fast_syscall_32+0x14b/0x8c0
[ 1377.485112][T24001]  do_fast_syscall_32+0x32/0x70
[ 1377.486561][T24001]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1377.488443][T24001] RIP: 0023:0xf73fefbc
[ 1377.489679][T24001] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 1377.495478][T24001] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000003
[ 1377.498016][T24001] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500
[ 1377.500374][T24001] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1377.502740][T24001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1377.505102][T24001] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 1377.507527][T24001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1377.509929][T24001]  </TASK>
[ 1377.551881][T24006] nvme nvme0: failed to connect socket: -101
[ 1377.775714][T24009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns